This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft File: p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft (raw, json) Hash identifier: igCVdDKPcMTAReczwHOYBc6V+JqO8yw61RFPnGmb/7I= Subject key identifier: 49:C4:82:EF:16:53:E3:83:3C:57:A7:AF:22:F6:3B:BE:65:05:05:E9 Authority key identifier: A7:77:20:C7:DC:1D:C3:ED:D1:D0:D4:7F:92:3B:CD:83:3F:06:AF:36 Certificate issuer: /CN=a77720c7dc1dc3edd1d0d47f923bcd833f06af36 Certificate serial: 019AF2E453026AE6C6F0B179C02720C1A8D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p3cgx9wdw-3R0NR_kjvNgz8GrzY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft Manifest number: 0768 Signing time: Sat 06 Dec 2025 09:00:41 +0000 Manifest this update: Sat 06 Dec 2025 09:00:41 +0000 Manifest next update: Sun 07 Dec 2025 09:00:41 +0000 Files and hashes: 1: hq-hZy5eF6T-32Mpp_MYYMTh_lo.roa (hash: svp2ZTIwxVMxeppEarQFFUCvZlDSIQbyXGekSzDFCRo=) 2: oe0ViHcJehxm3wVuZHtIwUX00hU.roa (hash: RwLw3XJajb9LZZAlaGbGSJVNCQJewc1VgXJkyuKlD8Q=) 3: p3cgx9wdw-3R0NR_kjvNgz8GrzY.crl (hash: p1bHneUZojHHbhD6IK5rrubIk3hZG8Bng97l50oG5dE=) 4: wsmN0GUZsWjC_T-MselV4vkxQWc.roa (hash: yTPdTeVo9RosDc+EbxC7mvYcTFyk5tLkcD8SHn8y0Zk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.crl rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft rsync://rpki.ripe.net/repository/DEFAULT/p3cgx9wdw-3R0NR_kjvNgz8GrzY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:53:02:6a:e6:c6:f0:b1:79:c0:27:20:c1:a8:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a77720c7dc1dc3edd1d0d47f923bcd833f06af36 Validity Not Before: Dec 6 09:00:41 2025 GMT Not After : Dec 7 09:00:41 2025 GMT Subject: CN=49c482ef1653e3833c57a7af22f63bbe650505e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:61:a9:c7:4f:4a:28:95:85:96:f3:69:1d:dd: d8:ce:18:25:96:ad:e6:24:e9:cf:04:98:a1:7a:d3: 9a:b5:c2:04:bc:a4:29:96:d8:24:95:2e:97:24:c4: 5e:b1:35:ca:fe:c0:43:4e:97:c1:f0:09:75:d1:2c: 21:1c:9e:4a:b3:65:21:e4:dd:02:eb:25:de:11:53: 07:5e:81:b4:89:5a:4a:bd:65:33:3f:44:36:4d:fd: 43:6f:f5:87:8e:04:ec:df:b4:95:e6:8c:e5:c4:e5: 71:64:0a:c8:43:32:4d:5a:a3:aa:17:4a:19:66:8b: fc:f0:53:34:38:57:5c:22:c0:48:d1:6e:fb:5c:22: 77:9d:5c:65:ce:7e:5f:47:14:ef:67:96:c8:f3:49: d5:5f:4d:06:b7:b3:0b:b3:b6:7c:34:24:59:87:de: 7e:65:e4:2d:23:46:ac:76:12:36:8a:d4:2f:c0:84: 12:0f:0b:33:9a:6b:96:b4:02:a8:8a:11:3b:0c:4c: 49:b3:0d:05:e9:26:96:74:17:99:a8:34:30:26:d8: b2:7a:9e:50:18:2c:3e:b4:89:3c:71:65:12:3e:8d: f9:21:eb:d0:54:e7:d1:07:cc:d2:7b:43:c4:40:7a: 44:69:8f:ec:ce:79:a4:ee:6e:ff:7b:b2:ed:f9:ef: 78:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:C4:82:EF:16:53:E3:83:3C:57:A7:AF:22:F6:3B:BE:65:05:05:E9 X509v3 Authority Key Identifier: keyid:A7:77:20:C7:DC:1D:C3:ED:D1:D0:D4:7F:92:3B:CD:83:3F:06:AF:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p3cgx9wdw-3R0NR_kjvNgz8GrzY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:d7:33:42:4d:58:a2:4f:78:24:a2:02:a0:47:33:94:18:33: 80:02:d9:fe:db:2e:a3:2b:0b:7f:13:71:b3:aa:5f:a5:4d:96: 06:e7:77:65:16:45:b0:1a:42:9c:28:e6:fe:a4:53:ca:08:30: 52:ff:28:61:3e:4e:77:63:59:9f:87:96:09:58:c3:b8:1e:22: ef:98:8f:a2:30:16:ca:84:f1:88:25:0b:2d:64:19:80:d1:6b: 78:1d:55:97:97:1e:6a:a9:e9:fd:ec:98:85:88:2b:68:27:fc: 7d:a4:59:d7:fa:3c:43:9e:ef:e0:80:2d:5c:97:40:85:df:58: 5b:44:d7:b7:d6:b9:16:74:eb:96:b5:0a:70:ff:26:27:7c:55: 6a:30:d0:d6:bf:4c:83:f6:36:78:3b:25:6a:88:ff:21:73:62: fe:a3:a9:fd:b3:21:02:12:3c:df:52:19:45:0b:9a:b1:e5:61: 78:a6:87:54:1d:b5:1c:23:c0:85:50:0f:af:02:91:d1:3c:15: 1e:24:ec:0d:3d:ba:93:ef:50:0d:f6:61:02:4e:8a:a4:36:1d: d4:85:20:ca:19:f7:c2:71:87:41:05:f3:e7:6e:ed:47:49:d2: a1:3e:98:2d:fe:c2:2c:ef:b8:c3:d7:03:3a:1c:d5:57:3b:c9: 6e:4f:24:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5FMCaubG8LF5wCcgwajXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NzcyMGM3ZGMxZGMzZWRkMWQwZDQ3ZjkyM2JjZDgzM2Yw NmFmMzYwHhcNMjUxMjA2MDkwMDQxWhcNMjUxMjA3MDkwMDQxWjAzMTEwLwYDVQQD Eyg0OWM0ODJlZjE2NTNlMzgzM2M1N2E3YWYyMmY2M2JiZTY1MDUwNWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2Gpx09KKJWFlvNpHd3Yzhgllq3m JOnPBJihetOatcIEvKQpltgklS6XJMResTXK/sBDTpfB8Al10SwhHJ5Ks2Uh5N0C 6yXeEVMHXoG0iVpKvWUzP0Q2Tf1Db/WHjgTs37SV5ozlxOVxZArIQzJNWqOqF0oZ Zov88FM0OFdcIsBI0W77XCJ3nVxlzn5fRxTvZ5bI80nVX00Gt7MLs7Z8NCRZh95+ ZeQtI0asdhI2itQvwIQSDwszmmuWtAKoihE7DExJsw0F6SaWdBeZqDQwJtiyep5Q GCw+tIk8cWUSPo35IevQVOfRB8zSe0PEQHpEaY/sznmk7m7/e7Lt+e94SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEnEgu8WU+ODPFenryL2O75lBQXpMB8GA1UdIwQY MBaAFKd3IMfcHcPt0dDUf5I7zYM/Bq82MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDNjZ3g5d2R3LTNSME5SX2tqdk5nejhHcnpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9iYTcyMTktYWQ3Yy00OGIwLTljOTYt MTcyMjhjZWYwMDQ5LzEvcDNjZ3g5d2R3LTNSME5SX2tqdk5nejhHcnpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9iYTcyMTktYWQ3Yy00OGIwLTljOTYtMTcyMjhjZWYwMDQ5 LzEvcDNjZ3g5d2R3LTNSME5SX2tqdk5nejhHcnpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAntczQk1Y ok94JKICoEczlBgzgALZ/tsuoysLfxNxs6pfpU2WBud3ZRZFsBpCnCjm/qRTyggw Uv8oYT5Od2NZn4eWCVjDuB4i75iPojAWyoTxiCULLWQZgNFreB1Vl5ceaqnp/eyY hYgraCf8faRZ1/o8Q57v4IAtXJdAhd9YW0TXt9a5FnTrlrUKcP8mJ3xVajDQ1r9M g/Y2eDslaoj/IXNi/qOp/bMhAhI831IZRQuaseVheKaHVB21HCPAhVAPrwKR0TwV HiTsDT26k+9QDfZhAk6KpDYd1IUgyhn3wnGHQQXz527tR0nSoT6YLf7CLO+4w9cD OhzVVzvJbk8kJw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:43:58 2025 by rpki-client