This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft File: pxJZNzLf_jheZ26QVodyMGza63I.mft (raw, json) Hash identifier: nsxrAbvijr3LM9XvJWT/bg1AMKz/KeVveTCtVHWQdi8= Subject key identifier: 57:C3:D8:70:99:6B:91:FE:B3:9A:E7:A0:71:F0:92:23:49:F1:24:96 Authority key identifier: A7:12:59:37:32:DF:FE:38:5E:67:6E:90:56:87:72:30:6C:DA:EB:72 Certificate issuer: /CN=a712593732dffe385e676e90568772306cdaeb72 Certificate serial: 019B31C434D0CCD1C2756153037BA6D6EDE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxJZNzLf_jheZ26QVodyMGza63I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft Manifest number: 13D7 Signing time: Thu 18 Dec 2025 14:01:40 +0000 Manifest this update: Thu 18 Dec 2025 14:01:40 +0000 Manifest next update: Fri 19 Dec 2025 14:01:40 +0000 Files and hashes: 1: oMRtMf47yIPyY9ZdrVPhNi3G3eo.roa (hash: 4EnKsD8A0kDOzresfp2Oy03JKmata0Bf/rsbX3H3xdM=) 2: pxJZNzLf_jheZ26QVodyMGza63I.crl (hash: ShWssqRp4WdH6WUcevBoo813rO1EPi/gOO+w7MvXLF0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.crl rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft rsync://rpki.ripe.net/repository/DEFAULT/pxJZNzLf_jheZ26QVodyMGza63I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c4:34:d0:cc:d1:c2:75:61:53:03:7b:a6:d6:ed:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a712593732dffe385e676e90568772306cdaeb72 Validity Not Before: Dec 18 14:01:40 2025 GMT Not After : Dec 19 14:01:40 2025 GMT Subject: CN=57c3d870996b91feb39ae7a071f0922349f12496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c2:e4:b7:d9:27:46:8a:ef:cb:49:82:14:55: ab:c1:fd:58:c5:28:46:ff:ed:ac:eb:01:21:2a:d6: 6f:0c:11:73:5e:1f:bb:a3:df:c8:b6:d8:e1:a9:62: 52:bd:8a:3a:88:ec:41:7b:9f:03:ce:78:b3:66:8e: d9:3a:56:1c:8f:d3:15:af:10:fb:69:09:3a:be:5e: 4a:fb:2d:b9:a7:2d:36:3d:5c:38:f7:e4:3b:0e:f5: 9e:ab:37:c9:90:0b:3a:71:71:70:fb:f1:0d:2c:0b: 93:c5:c5:dc:dc:f7:00:e6:c2:3e:51:cf:cc:db:ea: 04:62:4b:9e:9b:78:73:e6:b4:9d:e0:85:93:d6:24: 56:12:fd:0f:15:73:8c:79:d0:e4:4c:a4:01:1f:d0: 11:70:4a:ff:ee:4d:f6:4e:47:d3:1a:c1:be:80:34: f2:f5:f3:d3:91:07:cc:0c:21:52:8f:0f:1b:4f:70: c3:33:94:13:d7:b5:a7:e0:1f:63:b5:e6:7a:28:bd: b1:08:f1:45:d2:c0:d8:49:d8:92:1f:a9:f1:9e:c8: ef:40:c5:cd:e7:9e:38:cb:43:85:2e:d1:50:e3:71: 00:28:3e:b7:86:07:eb:fc:9a:ca:46:7a:7b:c7:4c: 9e:6d:6f:ac:0d:93:ab:c0:1a:5c:4c:fb:74:f1:aa: 95:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C3:D8:70:99:6B:91:FE:B3:9A:E7:A0:71:F0:92:23:49:F1:24:96 X509v3 Authority Key Identifier: keyid:A7:12:59:37:32:DF:FE:38:5E:67:6E:90:56:87:72:30:6C:DA:EB:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxJZNzLf_jheZ26QVodyMGza63I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:6a:4c:4a:43:8c:27:2a:ed:d3:95:ae:d6:c6:70:8b:d3:79: 1c:a6:90:7f:b4:be:c9:e1:7f:42:30:68:f5:62:16:7c:ee:32: 36:55:4e:e5:c0:5c:24:d1:7f:e7:91:05:cd:a8:88:ca:88:b5: 4e:26:54:6e:61:ba:8c:a6:4b:f8:55:ca:cd:8d:4a:40:a4:da: 16:55:ab:74:6e:21:78:27:02:71:6c:b5:c1:d1:76:c6:81:53: 2f:11:19:2f:82:90:7e:b7:75:f3:12:ff:9c:fc:ea:d9:56:4a: 4e:2c:27:61:e1:3c:78:c7:e7:04:19:c2:fa:3b:9d:1e:0d:70: 5c:7c:c1:ae:19:da:bd:b4:6b:9d:31:af:bb:c9:76:e6:89:8b: 76:f1:d2:a2:bf:75:dc:14:7f:f2:7c:4f:85:d9:f4:e6:14:b3: 07:f7:3c:a8:46:05:01:e2:34:20:62:19:5c:0e:f5:23:2c:25: cd:b8:07:9f:ca:68:01:4e:65:5c:54:54:67:d6:88:5e:d8:62: 6d:be:bc:b9:b2:cd:cb:07:5a:f7:de:e4:b2:75:5e:30:5b:63: a5:fa:98:89:3d:cf:16:3b:e2:09:65:51:b4:ff:a9:2b:46:5b: 67:54:fe:15:94:02:41:0b:07:1b:b4:35:1d:32:36:f8:6f:7d: 28:2e:b4:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxxDTQzNHCdWFTA3um1u3mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3MTI1OTM3MzJkZmZlMzg1ZTY3NmU5MDU2ODc3MjMwNmNk YWViNzIwHhcNMjUxMjE4MTQwMTQwWhcNMjUxMjE5MTQwMTQwWjAzMTEwLwYDVQQD Eyg1N2MzZDg3MDk5NmI5MWZlYjM5YWU3YTA3MWYwOTIyMzQ5ZjEyNDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosLkt9knRorvy0mCFFWrwf1YxShG /+2s6wEhKtZvDBFzXh+7o9/IttjhqWJSvYo6iOxBe58DznizZo7ZOlYcj9MVrxD7 aQk6vl5K+y25py02PVw49+Q7DvWeqzfJkAs6cXFw+/ENLAuTxcXc3PcA5sI+Uc/M 2+oEYkuem3hz5rSd4IWT1iRWEv0PFXOMedDkTKQBH9ARcEr/7k32TkfTGsG+gDTy 9fPTkQfMDCFSjw8bT3DDM5QT17Wn4B9jteZ6KL2xCPFF0sDYSdiSH6nxnsjvQMXN 5544y0OFLtFQ43EAKD63hgfr/JrKRnp7x0yebW+sDZOrwBpcTPt08aqV5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFfD2HCZa5H+s5rnoHHwkiNJ8SSWMB8GA1UdIwQY MBaAFKcSWTcy3/44XmdukFaHcjBs2utyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHhKWk56TGZfamhlWjI2UVZvZHlNR3phNjNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMTE5YWItMmYwYS00NTFlLWIzZmEt OThkYjRkNWNkYjMzLzEvcHhKWk56TGZfamhlWjI2UVZvZHlNR3phNjNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8yMTE5YWItMmYwYS00NTFlLWIzZmEtOThkYjRkNWNkYjMz LzEvcHhKWk56TGZfamhlWjI2UVZvZHlNR3phNjNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgWpMSkOM Jyrt05Wu1sZwi9N5HKaQf7S+yeF/QjBo9WIWfO4yNlVO5cBcJNF/55EFzaiIyoi1 TiZUbmG6jKZL+FXKzY1KQKTaFlWrdG4heCcCcWy1wdF2xoFTLxEZL4KQfrd18xL/ nPzq2VZKTiwnYeE8eMfnBBnC+judHg1wXHzBrhnavbRrnTGvu8l25omLdvHSor91 3BR/8nxPhdn05hSzB/c8qEYFAeI0IGIZXA71IywlzbgHn8poAU5lXFRUZ9aIXthi bb68ubLNywda997ksnVeMFtjpfqYiT3PFjviCWVRtP+pK0ZbZ1T+FZQCQQsHG7Q1 HTI2+G99KC607g== -----END CERTIFICATE-----Generated at Thu Dec 18 20:31:18 2025 by rpki-client