This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.mft File: p72rJYCrs79ii11PidSXzZ2SpOM.mft (raw, json) Hash identifier: uL09jOamWTQacqSjZXYmN+9SONzsrvVnkH7Vuvtrml8= Subject key identifier: 4A:5F:BD:FD:21:6C:32:7F:61:BB:A0:92:B7:E1:89:26:74:FC:80:BB Authority key identifier: A7:BD:AB:25:80:AB:B3:BF:62:8B:5D:4F:89:D4:97:CD:9D:92:A4:E3 Certificate issuer: /CN=a7bdab2580abb3bf628b5d4f89d497cd9d92a4e3 Certificate serial: 019AF2400FA5D1CBB924BDDD961E7B641E13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p72rJYCrs79ii11PidSXzZ2SpOM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 06:01:15 +0000 Manifest this update: Sat 06 Dec 2025 06:01:15 +0000 Manifest next update: Sun 07 Dec 2025 06:01:15 +0000 Files and hashes: 1: GdFZWMri9TOgFT_NeIYkh_SHlw0.roa (hash: NbWz1qM9hdBHH2+QMgdXpTZoVY8ecNxlY44TCKHTwLo=) 2: p72rJYCrs79ii11PidSXzZ2SpOM.crl (hash: P4wJ9D3VY9zVm3yOBGaVE9XY1ZesQIsF327MBXvkJmI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.mft rsync://rpki.ripe.net/repository/DEFAULT/p72rJYCrs79ii11PidSXzZ2SpOM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:0f:a5:d1:cb:b9:24:bd:dd:96:1e:7b:64:1e:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7bdab2580abb3bf628b5d4f89d497cd9d92a4e3 Validity Not Before: Dec 6 06:01:15 2025 GMT Not After : Dec 7 06:01:15 2025 GMT Subject: CN=4a5fbdfd216c327f61bba092b7e1892674fc80bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bb:d2:66:01:8b:6c:1d:a5:f6:75:9e:cd:d8: 36:c3:08:b4:25:7a:f2:da:2d:c3:bb:72:f8:9b:f8: 73:38:d9:5d:41:4a:8e:70:5a:9d:8e:b8:03:24:73: 0e:56:bd:78:e1:8f:32:63:ed:9f:3b:f8:3e:c0:fd: d4:7c:1e:c3:8a:c5:23:fc:0f:8a:c0:f6:20:60:f2: f6:28:bc:de:73:d0:98:c1:02:be:73:ab:eb:6e:9d: 73:4f:be:3a:e5:6d:0f:f5:09:1e:ae:c3:46:3b:e3: ec:06:6d:f9:96:f3:31:42:d6:21:6c:f4:bd:7b:cd: 50:db:32:d5:b7:f4:ef:dc:8e:89:a5:9c:3c:36:2b: 9d:11:f8:a0:c3:38:ae:62:77:82:82:d0:32:d3:3f: a7:b4:03:c1:aa:b9:39:c5:ed:f8:4e:8e:be:34:dc: 2a:0f:84:07:e8:ec:01:f6:1a:fb:2c:ea:19:d2:91: 19:5f:5b:2b:58:ba:0e:1a:91:46:5b:d1:c2:31:5f: 60:48:0e:66:77:a0:93:d2:1e:23:14:86:73:0a:d2: 50:77:28:c7:0c:ee:9b:9c:c5:ee:f6:56:01:7a:07: b0:ab:96:33:c2:12:3e:4f:02:58:37:c6:2a:56:a5: e9:4b:fd:30:f8:8b:c3:38:0f:a3:e3:ae:21:92:c1: 48:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:5F:BD:FD:21:6C:32:7F:61:BB:A0:92:B7:E1:89:26:74:FC:80:BB X509v3 Authority Key Identifier: keyid:A7:BD:AB:25:80:AB:B3:BF:62:8B:5D:4F:89:D4:97:CD:9D:92:A4:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p72rJYCrs79ii11PidSXzZ2SpOM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:e0:31:f7:5d:24:a8:c4:e5:f2:c9:cb:71:bb:bb:ac:ac:86: 0f:03:8a:23:f7:dc:a5:c3:a2:d4:bd:05:2a:37:71:5f:77:a0: 1a:27:90:d3:b0:4a:ab:74:f6:35:b1:af:a8:a2:8b:eb:06:dc: da:2a:63:92:54:61:76:dd:33:1b:55:90:9d:2b:7c:19:d7:9e: 1d:f8:48:75:b3:4e:9b:cc:50:19:55:26:a4:e1:21:24:45:50: 54:cf:c1:98:41:23:8b:f7:1f:62:8c:25:25:9b:78:7f:36:f1: 88:a3:9c:bd:53:f0:09:de:93:25:57:89:cb:b1:c9:a5:39:ec: c0:8b:0e:aa:47:3f:d8:b2:0c:7e:f7:25:c9:0f:ae:81:93:ba: 40:08:f8:a0:4d:22:29:2a:c0:aa:f5:d2:b7:e1:87:df:d9:4f: fd:47:ca:f2:ce:ab:bd:00:a2:8f:c6:1d:31:cc:79:2d:57:c0: 17:cf:57:df:19:79:61:5f:97:82:da:3d:5e:1b:93:f8:ae:78: c0:63:a4:1b:a0:8b:ec:15:d9:70:b7:84:2a:83:45:91:c9:a8: e1:66:8c:95:50:df:99:5a:0d:2c:7e:7f:2a:9f:ce:ad:3f:f1: 97:fe:64:b5:b7:2d:13:67:98:f0:27:87:95:f8:80:aa:ff:27: 0c:5f:fe:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQA+l0cu5JL3dlh57ZB4TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3YmRhYjI1ODBhYmIzYmY2MjhiNWQ0Zjg5ZDQ5N2NkOWQ5 MmE0ZTMwHhcNMjUxMjA2MDYwMTE1WhcNMjUxMjA3MDYwMTE1WjAzMTEwLwYDVQQD Eyg0YTVmYmRmZDIxNmMzMjdmNjFiYmEwOTJiN2UxODkyNjc0ZmM4MGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7vSZgGLbB2l9nWezdg2wwi0JXry 2i3Du3L4m/hzONldQUqOcFqdjrgDJHMOVr144Y8yY+2fO/g+wP3UfB7DisUj/A+K wPYgYPL2KLzec9CYwQK+c6vrbp1zT7465W0P9QkersNGO+PsBm35lvMxQtYhbPS9 e81Q2zLVt/Tv3I6JpZw8NiudEfigwziuYneCgtAy0z+ntAPBqrk5xe34To6+NNwq D4QH6OwB9hr7LOoZ0pEZX1srWLoOGpFGW9HCMV9gSA5md6CT0h4jFIZzCtJQdyjH DO6bnMXu9lYBegewq5YzwhI+TwJYN8YqVqXpS/0w+IvDOA+j464hksFIIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEpfvf0hbDJ/YbugkrfhiSZ0/IC7MB8GA1UdIwQY MBaAFKe9qyWAq7O/YotdT4nUl82dkqTjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDcyckpZQ3JzNzlpaTExUGlkU1h6WjJTcE9NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi84ZjFiNDYtYTRiMS00ZmYyLWJiZWMt MWQ3MDlhNWM2MTZiLzEvcDcyckpZQ3JzNzlpaTExUGlkU1h6WjJTcE9NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi84ZjFiNDYtYTRiMS00ZmYyLWJiZWMtMWQ3MDlhNWM2MTZi LzEvcDcyckpZQ3JzNzlpaTExUGlkU1h6WjJTcE9NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIOAx910k qMTl8snLcbu7rKyGDwOKI/fcpcOi1L0FKjdxX3egGieQ07BKq3T2NbGvqKKL6wbc 2ipjklRhdt0zG1WQnSt8GdeeHfhIdbNOm8xQGVUmpOEhJEVQVM/BmEEji/cfYowl JZt4fzbxiKOcvVPwCd6TJVeJy7HJpTnswIsOqkc/2LIMfvclyQ+ugZO6QAj4oE0i KSrAqvXSt+GH39lP/UfK8s6rvQCij8YdMcx5LVfAF89X3xl5YV+Xgto9XhuT+K54 wGOkG6CL7BXZcLeEKoNFkcmo4WaMlVDfmVoNLH5/Kp/OrT/xl/5ktbctE2eY8CeH lfiAqv8nDF/+qg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:09:47 2025 by rpki-client