This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft File: p1f4f4bpOyXvTAQzZku-ctqY-_4.mft (raw, json) Hash identifier: baQz/Z4v/v+0TeKc4rdsb+DNrLQIb9tnmfCLxBhhGvY= Subject key identifier: 04:1F:D9:FB:37:3A:D5:DB:9C:7C:04:6A:03:2A:0E:CD:EC:84:E8:4D Authority key identifier: A7:57:F8:7F:86:E9:3B:25:EF:4C:04:33:66:4B:BE:72:DA:98:FB:FE Certificate issuer: /CN=a757f87f86e93b25ef4c0433664bbe72da98fbfe Certificate serial: 019AF50A969B9FF3078796E65179EC009682 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1f4f4bpOyXvTAQzZku-ctqY-_4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft Manifest number: 057A Signing time: Sat 06 Dec 2025 19:01:43 +0000 Manifest this update: Sat 06 Dec 2025 19:01:43 +0000 Manifest next update: Sun 07 Dec 2025 19:01:43 +0000 Files and hashes: 1: IZ6vDZjMHwfmvRBOdfcy5i9E3QM.roa (hash: uS025afpY/Jz9tEZKMABnGMw3AujzF5/XTw1sc/dgNo=) 2: p1f4f4bpOyXvTAQzZku-ctqY-_4.crl (hash: YPA41Lvv/I3/cGj2PqmI9ea8VoA4er5KjOXxI5gREdE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft rsync://rpki.ripe.net/repository/DEFAULT/p1f4f4bpOyXvTAQzZku-ctqY-_4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:96:9b:9f:f3:07:87:96:e6:51:79:ec:00:96:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a757f87f86e93b25ef4c0433664bbe72da98fbfe Validity Not Before: Dec 6 19:01:43 2025 GMT Not After : Dec 7 19:01:43 2025 GMT Subject: CN=041fd9fb373ad5db9c7c046a032a0ecdec84e84d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:55:b8:38:08:c4:b5:8c:30:f7:d7:c4:89:33: 62:d0:b9:11:b4:94:60:83:a1:ce:f4:d0:41:7b:7c: 16:cb:48:ac:33:71:5d:dd:59:09:11:91:b1:2a:16: 4f:41:7a:59:15:a3:e0:98:e6:f7:97:74:20:e3:f0: db:4d:94:bd:5d:07:19:f2:d0:b7:37:36:3b:f3:2a: 47:25:65:b4:45:8a:e8:9a:bf:06:50:c7:79:6c:b0: 0d:a0:7c:1d:ba:83:9b:6a:36:a9:40:d7:d7:d1:52: fd:24:2c:a6:8f:7e:ef:59:ea:c3:81:e5:b6:79:64: 87:31:14:71:e4:06:7a:1d:17:7b:19:aa:bc:3b:2e: 90:9c:38:e0:3d:10:db:31:e9:f3:85:c5:4b:66:d1: b5:60:22:26:1f:23:77:06:ff:28:6a:5b:22:15:46: f3:44:56:a0:b8:5b:ab:b9:7f:72:6e:26:d5:83:e6: 53:64:5c:a8:18:f5:85:77:de:12:9a:63:a9:cd:d4: df:52:f3:d2:6d:e4:0e:2a:53:ff:9f:fc:6a:37:d3: 51:76:39:23:69:ea:48:5d:65:c1:ba:38:5b:0b:c0: 3a:00:c4:05:f9:07:ff:95:c7:41:89:ab:94:7c:c2: 9c:ce:d3:09:53:74:4a:93:e3:07:65:75:3b:8f:50: 17:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:1F:D9:FB:37:3A:D5:DB:9C:7C:04:6A:03:2A:0E:CD:EC:84:E8:4D X509v3 Authority Key Identifier: keyid:A7:57:F8:7F:86:E9:3B:25:EF:4C:04:33:66:4B:BE:72:DA:98:FB:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1f4f4bpOyXvTAQzZku-ctqY-_4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:54:61:1c:08:26:85:d0:88:92:28:f6:39:0a:ea:28:11:37: 48:19:90:93:bd:ee:33:cb:99:b3:b5:c5:a9:37:bb:4e:77:fe: 80:ff:88:64:85:22:bf:76:dd:7c:01:29:bb:2a:c4:bb:60:e7: 9a:e0:e9:47:36:af:8b:a3:04:2b:a1:8e:37:cf:f1:96:64:a2: 54:a7:cc:d0:b1:45:3a:8a:d3:da:f7:36:e3:1f:f9:0b:9a:2b: fe:56:b9:bc:bf:d1:5c:02:a1:17:40:ce:80:9f:8f:c0:b0:cc: 08:59:7e:ab:1a:55:30:bf:b6:de:01:dd:da:52:34:0c:2c:c8: 5c:bc:2e:4a:13:a9:ea:c2:6b:94:9a:41:94:87:f7:bf:76:10: 4d:6f:dc:54:85:e5:05:3c:46:3a:a0:9c:00:3c:d5:1a:fa:e5: 36:4a:b0:36:d8:d7:9f:35:06:45:95:a8:da:cf:3d:7f:5a:b2: 1c:b4:10:ad:39:94:00:fd:82:b6:89:8f:3d:b0:4b:49:5c:30: 5e:8b:46:e7:3b:7a:53:f5:75:f6:1d:a8:3c:61:96:87:72:ef: 9d:4e:c9:63:e4:cd:0c:8e:bd:37:de:34:a9:5a:41:e5:d7:83: dd:9e:16:20:1c:fe:33:1f:24:0c:f6:ca:fe:0c:aa:bc:6a:25: 2c:bf:48:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cpabn/MHh5bmUXnsAJaCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NTdmODdmODZlOTNiMjVlZjRjMDQzMzY2NGJiZTcyZGE5 OGZiZmUwHhcNMjUxMjA2MTkwMTQzWhcNMjUxMjA3MTkwMTQzWjAzMTEwLwYDVQQD EygwNDFmZDlmYjM3M2FkNWRiOWM3YzA0NmEwMzJhMGVjZGVjODRlODRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlW4OAjEtYww99fEiTNi0LkRtJRg g6HO9NBBe3wWy0isM3Fd3VkJEZGxKhZPQXpZFaPgmOb3l3Qg4/DbTZS9XQcZ8tC3 NzY78ypHJWW0RYromr8GUMd5bLANoHwduoObajapQNfX0VL9JCymj37vWerDgeW2 eWSHMRRx5AZ6HRd7Gaq8Oy6QnDjgPRDbMenzhcVLZtG1YCImHyN3Bv8oalsiFUbz RFaguFuruX9ybibVg+ZTZFyoGPWFd94SmmOpzdTfUvPSbeQOKlP/n/xqN9NRdjkj aepIXWXBujhbC8A6AMQF+Qf/lcdBiauUfMKcztMJU3RKk+MHZXU7j1AX9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQf2fs3OtXbnHwEagMqDs3shOhNMB8GA1UdIwQY MBaAFKdX+H+G6Tsl70wEM2ZLvnLamPv+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDFmNGY0YnBPeVh2VEFRelprdS1jdHFZLV80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy84NmU0MGMtMTU2My00MGVhLThmNGUt YTE3ODMzMjUzM2UwLzEvcDFmNGY0YnBPeVh2VEFRelprdS1jdHFZLV80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy84NmU0MGMtMTU2My00MGVhLThmNGUtYTE3ODMzMjUzM2Uw LzEvcDFmNGY0YnBPeVh2VEFRelprdS1jdHFZLV80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFVRhHAgm hdCIkij2OQrqKBE3SBmQk73uM8uZs7XFqTe7Tnf+gP+IZIUiv3bdfAEpuyrEu2Dn muDpRzavi6MEK6GON8/xlmSiVKfM0LFFOorT2vc24x/5C5or/la5vL/RXAKhF0DO gJ+PwLDMCFl+qxpVML+23gHd2lI0DCzIXLwuShOp6sJrlJpBlIf3v3YQTW/cVIXl BTxGOqCcADzVGvrlNkqwNtjXnzUGRZWo2s89f1qyHLQQrTmUAP2CtomPPbBLSVww XotG5zt6U/V19h2oPGGWh3LvnU7JY+TNDI69N940qVpB5deD3Z4WIBz+Mx8kDPbK /gyqvGolLL9IyQ== -----END CERTIFICATE-----Generated at Sun Dec 7 05:17:25 2025 by rpki-client