This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft File: p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft (raw, json) Hash identifier: mNK73WWTK4YAW590qLkUfoE8J+7OnFcPwI/OnL0My7E= Subject key identifier: 76:E7:59:6D:0E:0E:A4:FE:58:60:F3:3D:D3:DC:6E:32:25:89:34:38 Authority key identifier: A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3 Certificate issuer: /CN=a7d78de0234e6f99701592f536e45f5f5594eec3 Certificate serial: 019AF4D2A0DABDD07F822F2D767621980CDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft Manifest number: 176A Signing time: Sat 06 Dec 2025 18:00:35 +0000 Manifest this update: Sat 06 Dec 2025 18:00:35 +0000 Manifest next update: Sun 07 Dec 2025 18:00:35 +0000 Files and hashes: 1: 4kRsEvvYS9vLgzT9RvhH3Igjm9k.roa (hash: I03jyb6kvpeR9AlCu8KypQT8GWzh4/aSh4au4iyy8+I=) 2: DpBq14ju-sMiK3daEy8ixQQfVTk.roa (hash: i+DQu9MJOrZ5CdMAuj/sQPS/Zyr6reglqbrHWvbkyx4=) 3: DqUoj4sK_ahE1s2i6xM85mI1I6k.roa (hash: ghiG8Oanf8lruQ8GxgH5btsaEet/0QjBhkR1Sn2dFKg=) 4: Fnl-4WGHpZ5LXFARfr2ATzp8vLk.roa (hash: ux6nyEJd1cHyE1av/8nhZIQD47mVZkeQGG+DrMwKlok=) 5: QX-JX3Qu6B9dGH2bgHRHXCFQSGM.roa (hash: Libk/j+UTy/9cJUk+hwXMnFM9cOquglWjTlufdsoMkE=) 6: bDPZ2IR6ImcRHKaCKb1DFYZSPeU.roa (hash: C/oWZRw0Dl261ZToD4X2GP0Mb4nYzslAlII1IzygPX8=) 7: jG76lLUgQYaSZsB__7tXEnh7-_I.roa (hash: fSIH28hM1SyCenkx+Z6chI8MtQGu7VXq7U7d1upY0CQ=) 8: ma5oVolydUxkukW1x1dx0oRVMTk.roa (hash: vE8qPyFhzLzPBn/Dd5S1DZU12rMMyEbmBmsnKLuenBI=) 9: p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl (hash: RwWSs0qd0Ec13CY6SicWLwQ44aZE+BcYa+ZMczrcedM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:d2:a0:da:bd:d0:7f:82:2f:2d:76:76:21:98:0c:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d78de0234e6f99701592f536e45f5f5594eec3 Validity Not Before: Dec 6 18:00:35 2025 GMT Not After : Dec 7 18:00:35 2025 GMT Subject: CN=76e7596d0e0ea4fe5860f33dd3dc6e3225893438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d7:e2:ea:a4:c9:b1:c7:ed:b1:dd:21:3f:e7: 3f:19:ad:88:3d:6c:cd:03:3c:3c:10:e1:bc:78:f7: 79:9d:4c:94:23:64:60:fa:13:3d:32:4c:14:e9:39: d6:47:5a:1e:1b:3c:fa:9c:b9:3e:61:30:44:26:5c: 42:e5:f0:ad:7e:bd:ba:f8:b9:ff:55:ad:df:5a:7c: c0:25:17:52:55:0f:b2:62:33:fe:42:12:52:44:63: ca:08:17:96:ea:f9:6a:0e:50:b5:68:ff:d6:ec:a7: 2c:0a:18:1c:95:14:95:fa:d0:da:3e:2e:89:de:df: d6:f4:bf:e7:3e:b1:57:64:53:68:40:61:b3:5f:ba: 69:8b:7f:71:1f:6b:92:59:ea:c2:c9:e2:7a:08:2f: bf:7f:47:fb:e7:43:5c:b0:4a:05:e6:bc:4a:01:33: 50:e4:0d:e9:83:8a:9a:3c:e0:59:42:c4:0c:0d:b0: a5:88:ab:75:b6:eb:d3:0a:60:0f:9d:36:d5:f9:3c: c2:26:90:e2:a1:d7:e5:c2:cb:2b:bf:2b:00:5f:dd: ae:ae:c0:cb:f9:b1:83:5b:01:50:17:9d:37:4f:5a: b1:2f:cc:a5:83:ad:33:dc:c5:66:1d:8b:79:be:9f: 14:2a:ef:52:8e:bd:25:d0:59:97:c9:08:ac:34:5f: fb:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:E7:59:6D:0E:0E:A4:FE:58:60:F3:3D:D3:DC:6E:32:25:89:34:38 X509v3 Authority Key Identifier: keyid:A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:9a:69:de:fa:8a:10:c5:8d:0a:97:40:df:2c:91:27:1c:15: cb:55:46:7a:78:49:ad:04:c5:ef:eb:2e:d0:fa:d2:7c:65:15: 59:a5:e8:58:64:84:51:17:d7:09:17:80:94:34:1b:98:7a:1b: f5:eb:39:fc:84:07:b4:6e:51:d2:35:33:68:8c:69:d9:31:3b: 39:02:6a:a2:1a:1a:1b:f2:58:47:9d:f4:01:8e:68:b6:29:9a: 95:51:a6:77:74:12:99:ae:e5:a2:24:fb:cd:09:85:d5:a3:9a: f1:2e:71:05:48:4f:3d:fe:44:dd:b0:17:c6:88:b1:c2:60:64: 8b:c3:7b:4a:0f:61:76:f3:6b:70:5c:48:e8:c1:2d:28:73:cd: 98:b8:d4:05:47:7a:e4:fd:7f:da:54:fa:c4:cf:aa:ad:a5:c9: 3b:d0:c6:8b:1a:2d:d4:64:ea:07:30:57:8e:91:ff:3e:98:e0: c1:4c:15:27:77:25:67:9c:ca:29:c3:b3:11:64:5b:b8:2d:f9: e4:38:d9:2e:f1:64:e5:60:76:5d:a7:19:19:cd:47:18:7e:c0: 2e:ad:b9:6e:c0:5a:b9:ac:fb:5a:72:98:eb:65:67:d9:b2:79: 72:4f:3e:21:fa:f0:c6:90:8b:e9:eb:8b:00:0b:50:2b:58:e7: cc:ee:88:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr00qDavdB/gi8tdnYhmAzeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZDc4ZGUwMjM0ZTZmOTk3MDE1OTJmNTM2ZTQ1ZjVmNTU5 NGVlYzMwHhcNMjUxMjA2MTgwMDM1WhcNMjUxMjA3MTgwMDM1WjAzMTEwLwYDVQQD Eyg3NmU3NTk2ZDBlMGVhNGZlNTg2MGYzM2RkM2RjNmUzMjI1ODkzNDM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9fi6qTJscftsd0hP+c/Ga2IPWzN Azw8EOG8ePd5nUyUI2Rg+hM9MkwU6TnWR1oeGzz6nLk+YTBEJlxC5fCtfr26+Ln/ Va3fWnzAJRdSVQ+yYjP+QhJSRGPKCBeW6vlqDlC1aP/W7KcsChgclRSV+tDaPi6J 3t/W9L/nPrFXZFNoQGGzX7ppi39xH2uSWerCyeJ6CC+/f0f750NcsEoF5rxKATNQ 5A3pg4qaPOBZQsQMDbCliKt1tuvTCmAPnTbV+TzCJpDiodflwssrvysAX92ursDL +bGDWwFQF503T1qxL8ylg60z3MVmHYt5vp8UKu9Sjr0l0FmXyQisNF/7RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHbnWW0ODqT+WGDzPdPcbjIliTQ4MB8GA1UdIwQY MBaAFKfXjeAjTm+ZcBWS9TbkX19VlO7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8zMWFhYmEtYWM3ZS00ODlmLTg3N2Mt MjhkNWI2MDdhNDdmLzEvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8zMWFhYmEtYWM3ZS00ODlmLTg3N2MtMjhkNWI2MDdhNDdm LzEvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYppp3vqK EMWNCpdA3yyRJxwVy1VGenhJrQTF7+su0PrSfGUVWaXoWGSEURfXCReAlDQbmHob 9es5/IQHtG5R0jUzaIxp2TE7OQJqohoaG/JYR530AY5otimalVGmd3QSma7loiT7 zQmF1aOa8S5xBUhPPf5E3bAXxoixwmBki8N7Sg9hdvNrcFxI6MEtKHPNmLjUBUd6 5P1/2lT6xM+qraXJO9DGixot1GTqBzBXjpH/PpjgwUwVJ3clZ5zKKcOzEWRbuC35 5DjZLvFk5WB2XacZGc1HGH7ALq25bsBauaz7WnKY62Vn2bJ5ck8+IfrwxpCL6euL AAtQK1jnzO6Iyg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:23:34 2025 by rpki-client