This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.mft File: p72rJYCrs79ii11PidSXzZ2SpOM.mft (raw, json) Hash identifier: BdrRUnWutYVfD4i2ewEnqjMOTgibOTre882ZqtWYgOw= Subject key identifier: 43:2A:B6:B4:2D:10:9D:99:15:5B:B7:C4:4C:E8:12:3E:D4:04:C5:7B Authority key identifier: A7:BD:AB:25:80:AB:B3:BF:62:8B:5D:4F:89:D4:97:CD:9D:92:A4:E3 Certificate issuer: /CN=a7bdab2580abb3bf628b5d4f89d497cd9d92a4e3 Certificate serial: 019B2E1D7F210C393CFD7B7E3205929D14E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p72rJYCrs79ii11PidSXzZ2SpOM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.mft Manifest number: 1780 Signing time: Wed 17 Dec 2025 21:00:43 +0000 Manifest this update: Wed 17 Dec 2025 21:00:43 +0000 Manifest next update: Thu 18 Dec 2025 21:00:43 +0000 Files and hashes: 1: GdFZWMri9TOgFT_NeIYkh_SHlw0.roa (hash: NbWz1qM9hdBHH2+QMgdXpTZoVY8ecNxlY44TCKHTwLo=) 2: p72rJYCrs79ii11PidSXzZ2SpOM.crl (hash: TVtWAI8FJGT43/N20fG4WCj6pLXJAbUWGl0tHFAd5Sg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.mft rsync://rpki.ripe.net/repository/DEFAULT/p72rJYCrs79ii11PidSXzZ2SpOM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 21:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:1d:7f:21:0c:39:3c:fd:7b:7e:32:05:92:9d:14:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7bdab2580abb3bf628b5d4f89d497cd9d92a4e3 Validity Not Before: Dec 17 21:00:43 2025 GMT Not After : Dec 18 21:00:43 2025 GMT Subject: CN=432ab6b42d109d99155bb7c44ce8123ed404c57b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7f:d7:22:4f:0d:44:df:40:bf:cf:cd:6f:da: 8c:0d:94:b8:e9:58:ee:78:04:de:35:11:dd:5b:f5: 74:11:fc:01:95:28:14:0b:c1:1e:2c:b8:ba:d7:13: 3a:c6:8a:d2:c5:c9:78:d5:15:a1:c6:6d:e7:2c:d3: 29:a8:2e:b5:12:d1:b5:3c:fb:c1:da:4e:8b:ac:46: b0:df:2d:e4:78:26:14:47:03:64:06:46:0b:49:26: 68:ae:ec:4f:e7:f4:88:ff:b1:56:7d:fa:1a:a6:f7: a0:40:b8:e8:23:df:b6:e9:b3:3f:18:c9:45:9a:70: 9e:91:ea:ae:d0:e3:6c:f7:12:57:c8:59:1a:7b:de: 2d:d5:9d:64:1e:b4:09:f7:82:80:22:0f:78:8a:6d: 96:36:f4:31:ce:f1:39:c9:c6:29:72:bb:e4:31:8c: f1:ef:75:d0:62:29:89:39:ea:ff:13:10:ea:5b:6e: 29:02:33:fe:ea:72:81:4c:6d:3d:bd:ca:b0:da:cc: 6b:24:f1:81:77:48:29:5e:81:54:01:ba:45:32:08: 77:a3:93:84:40:2d:1b:63:c8:5a:78:62:ec:4a:7a: 86:8e:2c:f3:89:d2:a1:68:c3:77:b9:e4:ea:11:53: 36:cf:95:6f:56:59:0b:15:37:b1:78:8e:4e:70:41: 80:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:2A:B6:B4:2D:10:9D:99:15:5B:B7:C4:4C:E8:12:3E:D4:04:C5:7B X509v3 Authority Key Identifier: keyid:A7:BD:AB:25:80:AB:B3:BF:62:8B:5D:4F:89:D4:97:CD:9D:92:A4:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p72rJYCrs79ii11PidSXzZ2SpOM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:c3:2d:bc:86:02:8b:ec:44:0f:be:fe:47:11:f5:29:29:4f: 4e:c4:ff:4e:c1:3c:95:6b:07:2e:26:35:1a:f0:93:79:6f:f8: f4:bb:53:61:06:3f:6c:1c:09:14:79:5b:39:00:1d:a1:e4:b1: 85:a5:b5:cd:8a:38:df:f4:23:82:81:f2:26:82:68:17:de:56: a9:0e:e4:03:41:ca:e9:7c:ee:34:31:18:21:30:b4:b8:de:60: 3c:6f:0a:c6:b2:e5:a6:bb:5f:36:14:12:69:e8:22:12:e6:d1: 1f:89:ed:25:2c:ed:88:c6:4d:a3:e0:76:ac:5b:40:40:35:68: 78:fd:e3:c0:6f:54:12:f5:8b:95:f6:60:8b:85:d9:e7:62:21: db:7c:c0:a1:b9:3c:d6:6d:be:52:bc:b7:66:df:ab:1d:30:df: 66:ba:1c:bb:54:83:95:52:1c:b3:fc:d5:66:d0:63:06:39:b4: f3:ae:13:87:b9:b6:17:5d:2b:6b:eb:98:a7:d6:d1:76:b7:53: 6f:0d:b2:55:8e:c2:42:2d:b4:ba:73:e3:7a:86:35:1d:80:10: 9c:94:97:3c:cf:e6:b8:40:17:4c:0a:5f:fd:ee:88:09:3e:f8: 33:7a:b8:e2:e7:c7:a6:54:2c:8f:d1:7b:25:a9:97:c5:d2:a1: 9e:8e:23:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuHX8hDDk8/Xt+MgWSnRTiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3YmRhYjI1ODBhYmIzYmY2MjhiNWQ0Zjg5ZDQ5N2NkOWQ5 MmE0ZTMwHhcNMjUxMjE3MjEwMDQzWhcNMjUxMjE4MjEwMDQzWjAzMTEwLwYDVQQD Eyg0MzJhYjZiNDJkMTA5ZDk5MTU1YmI3YzQ0Y2U4MTIzZWQ0MDRjNTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3/XIk8NRN9Av8/Nb9qMDZS46Vju eATeNRHdW/V0EfwBlSgUC8EeLLi61xM6xorSxcl41RWhxm3nLNMpqC61EtG1PPvB 2k6LrEaw3y3keCYURwNkBkYLSSZoruxP5/SI/7FWffoapvegQLjoI9+26bM/GMlF mnCekequ0ONs9xJXyFkae94t1Z1kHrQJ94KAIg94im2WNvQxzvE5ycYpcrvkMYzx 73XQYimJOer/ExDqW24pAjP+6nKBTG09vcqw2sxrJPGBd0gpXoFUAbpFMgh3o5OE QC0bY8haeGLsSnqGjizzidKhaMN3ueTqEVM2z5VvVlkLFTexeI5OcEGAOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEMqtrQtEJ2ZFVu3xEzoEj7UBMV7MB8GA1UdIwQY MBaAFKe9qyWAq7O/YotdT4nUl82dkqTjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDcyckpZQ3JzNzlpaTExUGlkU1h6WjJTcE9NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi84ZjFiNDYtYTRiMS00ZmYyLWJiZWMt MWQ3MDlhNWM2MTZiLzEvcDcyckpZQ3JzNzlpaTExUGlkU1h6WjJTcE9NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi84ZjFiNDYtYTRiMS00ZmYyLWJiZWMtMWQ3MDlhNWM2MTZi LzEvcDcyckpZQ3JzNzlpaTExUGlkU1h6WjJTcE9NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALMMtvIYC i+xED77+RxH1KSlPTsT/TsE8lWsHLiY1GvCTeW/49LtTYQY/bBwJFHlbOQAdoeSx haW1zYo43/QjgoHyJoJoF95WqQ7kA0HK6XzuNDEYITC0uN5gPG8KxrLlprtfNhQS aegiEubRH4ntJSztiMZNo+B2rFtAQDVoeP3jwG9UEvWLlfZgi4XZ52Ih23zAobk8 1m2+Ury3Zt+rHTDfZrocu1SDlVIcs/zVZtBjBjm0864Th7m2F10ra+uYp9bRdrdT bw2yVY7CQi20unPjeoY1HYAQnJSXPM/muEAXTApf/e6ICT74M3q44ufHplQsj9F7 JamXxdKhno4jog== -----END CERTIFICATE-----Generated at Thu Dec 18 07:09:53 2025 by rpki-client