This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft File: pH9wjDSl5x2vPS5UuZq3Twae-As.mft (raw, json) Hash identifier: SC1bjJhry166QnlzXTbKeZMabo0MQF7EyjLnz76jGVc= Subject key identifier: 09:A5:C1:DB:80:63:31:3D:9C:CE:89:C9:81:01:B5:75:D3:6A:AF:D8 Authority key identifier: A4:7F:70:8C:34:A5:E7:1D:AF:3D:2E:54:B9:9A:B7:4F:06:9E:F8:0B Certificate issuer: /CN=a47f708c34a5e71daf3d2e54b99ab74f069ef80b Certificate serial: 019AF1D1D61C11D9C9F514EB3C6E5E204D2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pH9wjDSl5x2vPS5UuZq3Twae-As.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft Manifest number: 0CFB Signing time: Sat 06 Dec 2025 04:00:52 +0000 Manifest this update: Sat 06 Dec 2025 04:00:52 +0000 Manifest next update: Sun 07 Dec 2025 04:00:52 +0000 Files and hashes: 1: 6y2PxXoNf17k752-h-Vh6181ybg.roa (hash: /D4LWQIJRMeiTsLLzqJFb6QygqeaBkt1FMx26cAAcmk=) 2: Uxq2zaQ3C0F2KaVo_-rxCUMMpzU.roa (hash: VbEHRBQ6CnI3V57/ypd9YP2tAsM8cgW+F1+a7XG3s5Q=) 3: pH9wjDSl5x2vPS5UuZq3Twae-As.crl (hash: Z1SzehqKR9u84q+hIYyrSyR3j5pHuv3zarip/Xj3p6o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft rsync://rpki.ripe.net/repository/DEFAULT/pH9wjDSl5x2vPS5UuZq3Twae-As.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:d6:1c:11:d9:c9:f5:14:eb:3c:6e:5e:20:4d:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a47f708c34a5e71daf3d2e54b99ab74f069ef80b Validity Not Before: Dec 6 04:00:52 2025 GMT Not After : Dec 7 04:00:52 2025 GMT Subject: CN=09a5c1db8063313d9cce89c98101b575d36aafd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:dd:15:ec:2b:1c:1d:6e:8c:2e:57:16:39:79: 4f:13:b8:b6:03:f3:de:39:e8:50:19:45:7b:a1:65: 57:c3:da:11:27:7d:44:4e:3a:b7:0c:cb:a9:d0:f8: 67:6f:00:67:42:1a:45:dd:13:81:18:c9:80:4f:65: 63:05:9c:9e:f8:67:6a:1e:62:bf:23:e2:8e:df:0c: a0:93:b7:38:b0:75:7e:95:1f:b3:7b:9d:dc:81:69: ae:85:fc:c1:1b:f3:74:5d:98:85:62:6a:54:90:dd: 23:20:15:9c:47:65:e8:22:e9:5b:65:2f:e1:6c:9b: 2d:d7:de:04:32:48:8b:4e:ea:c5:bf:31:cb:57:73: b9:58:2c:55:58:8e:ec:58:fe:67:a5:ce:cf:af:36: c6:a3:0e:d9:d8:db:4e:eb:4a:9e:80:b7:ea:86:d7: 3a:c5:28:64:9c:39:64:4c:d4:ef:03:04:47:5c:e6: ae:f9:d3:20:a6:25:3e:13:bf:99:9b:c7:ac:3e:9e: 9f:f0:70:03:ff:88:30:51:52:95:29:fb:2e:3f:27: 12:93:94:91:63:79:97:e7:c4:50:a1:4d:bf:70:4f: 51:ea:2b:29:09:ee:d6:06:6e:d4:fc:b6:9c:52:46: af:e6:a0:57:e7:23:02:33:79:2f:a8:31:1d:c3:32: f1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A5:C1:DB:80:63:31:3D:9C:CE:89:C9:81:01:B5:75:D3:6A:AF:D8 X509v3 Authority Key Identifier: keyid:A4:7F:70:8C:34:A5:E7:1D:AF:3D:2E:54:B9:9A:B7:4F:06:9E:F8:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pH9wjDSl5x2vPS5UuZq3Twae-As.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:5a:fb:27:42:48:f5:25:8b:7e:b5:1a:ac:9d:e3:7c:8e:1f: fd:16:6c:99:1f:11:af:52:31:6e:c9:32:9e:2b:1f:b7:fb:fb: f3:9e:82:be:db:78:45:fd:6d:9f:fb:5f:d5:9e:ef:e1:41:20: ab:ae:b1:0d:11:d9:e1:c3:d3:0e:ce:b5:af:af:37:30:ef:19: 76:27:c6:8e:3f:7e:14:e2:6d:e4:5d:47:fe:ae:f4:74:6f:be: ce:36:c9:7f:57:7f:31:3c:1a:25:b9:0a:ba:c1:f3:71:c6:13: 02:53:93:6f:8c:22:27:64:85:60:59:44:bb:37:97:49:9e:8d: d3:65:d0:7f:02:fa:70:66:93:1e:6e:7c:17:04:9c:f6:bb:c8: 5a:a1:d7:0e:08:a3:a9:62:64:c2:4a:86:7d:e9:32:95:11:32: 35:6d:87:b1:a1:21:d4:75:c2:06:25:31:3d:80:57:35:f6:5f: b3:72:d4:51:8c:ad:8d:57:04:8e:97:f7:e4:6e:b2:d1:8c:1e: 74:63:d1:ea:a8:8a:9a:be:9b:d6:21:c0:7b:a5:f3:89:3a:13: d9:fc:3a:21:61:b4:0d:71:f9:5a:8d:07:2e:03:a2:d5:49:7b: 28:0f:03:60:ad:9f:57:4b:5d:fb:03:bf:86:92:15:bc:91:b0: aa:82:74:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0dYcEdnJ9RTrPG5eIE0rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0N2Y3MDhjMzRhNWU3MWRhZjNkMmU1NGI5OWFiNzRmMDY5 ZWY4MGIwHhcNMjUxMjA2MDQwMDUyWhcNMjUxMjA3MDQwMDUyWjAzMTEwLwYDVQQD EygwOWE1YzFkYjgwNjMzMTNkOWNjZTg5Yzk4MTAxYjU3NWQzNmFhZmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqN0V7CscHW6MLlcWOXlPE7i2A/Pe OehQGUV7oWVXw9oRJ31ETjq3DMup0PhnbwBnQhpF3ROBGMmAT2VjBZye+GdqHmK/ I+KO3wygk7c4sHV+lR+ze53cgWmuhfzBG/N0XZiFYmpUkN0jIBWcR2XoIulbZS/h bJst194EMkiLTurFvzHLV3O5WCxVWI7sWP5npc7PrzbGow7Z2NtO60qegLfqhtc6 xShknDlkTNTvAwRHXOau+dMgpiU+E7+Zm8esPp6f8HAD/4gwUVKVKfsuPycSk5SR Y3mX58RQoU2/cE9R6ispCe7WBm7U/LacUkav5qBX5yMCM3kvqDEdwzLxZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAmlwduAYzE9nM6JyYEBtXXTaq/YMB8GA1UdIwQY MBaAFKR/cIw0pecdrz0uVLmat08GnvgLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEg5d2pEU2w1eDJ2UFM1VXVacTNUd2FlLUFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8wMTlhMWUtYmU5OC00MTRjLThjMmMt NmIyN2ZmMjI1N2M2LzEvcEg5d2pEU2w1eDJ2UFM1VXVacTNUd2FlLUFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8wMTlhMWUtYmU5OC00MTRjLThjMmMtNmIyN2ZmMjI1N2M2 LzEvcEg5d2pEU2w1eDJ2UFM1VXVacTNUd2FlLUFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHVr7J0JI 9SWLfrUarJ3jfI4f/RZsmR8Rr1Ixbskynisft/v7856Cvtt4Rf1tn/tf1Z7v4UEg q66xDRHZ4cPTDs61r683MO8ZdifGjj9+FOJt5F1H/q70dG++zjbJf1d/MTwaJbkK usHzccYTAlOTb4wiJ2SFYFlEuzeXSZ6N02XQfwL6cGaTHm58FwSc9rvIWqHXDgij qWJkwkqGfekylREyNW2HsaEh1HXCBiUxPYBXNfZfs3LUUYytjVcEjpf35G6y0Ywe dGPR6qiKmr6b1iHAe6XziToT2fw6IWG0DXH5Wo0HLgOi1Ul7KA8DYK2fV0td+wO/ hpIVvJGwqoJ0RQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:33:30 2025 by rpki-client