This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.mft File: px4O7lkN4v2N7Epn6HvIlv_IsrU.mft (raw, json) Hash identifier: bWkkUH+beZlTaFzOt3rSi2gYHhkeAm7vGYe4+h+aEjg= Subject key identifier: AB:F0:DB:98:55:8A:93:2D:A7:6D:80:3F:79:DB:B2:1C:88:FE:27:81 Authority key identifier: A7:1E:0E:EE:59:0D:E2:FD:8D:EC:4A:67:E8:7B:C8:96:FF:C8:B2:B5 Certificate issuer: /CN=a71e0eee590de2fd8dec4a67e87bc896ffc8b2b5 Certificate serial: 019AF209416BA5191CA49D7A9F92CCCDA4A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/px4O7lkN4v2N7Epn6HvIlv_IsrU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 05:01:24 +0000 Manifest this update: Sat 06 Dec 2025 05:01:24 +0000 Manifest next update: Sun 07 Dec 2025 05:01:24 +0000 Files and hashes: 1: gACG_CZ-Iug99I2lwvBj2F9-h5o.roa (hash: nmlBka4iP6DO0ZjdL5pCRw7PZdQRFau0PkO/pT9dD0g=) 2: px4O7lkN4v2N7Epn6HvIlv_IsrU.crl (hash: M40vNsZxG/tAp1XtPOAOec7tioxI4WzmgNoFjAu/F08=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.mft rsync://rpki.ripe.net/repository/DEFAULT/px4O7lkN4v2N7Epn6HvIlv_IsrU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:41:6b:a5:19:1c:a4:9d:7a:9f:92:cc:cd:a4:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71e0eee590de2fd8dec4a67e87bc896ffc8b2b5 Validity Not Before: Dec 6 05:01:24 2025 GMT Not After : Dec 7 05:01:24 2025 GMT Subject: CN=abf0db98558a932da76d803f79dbb21c88fe2781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e0:03:06:aa:ca:f2:7f:c4:86:f1:a9:a4:63: 6f:4c:34:92:7a:6c:bb:c9:6f:c9:be:72:89:4c:72: ff:ce:f9:d9:61:b1:2d:f0:29:2b:c0:26:21:0e:9c: ed:ce:5e:93:e3:1b:db:b8:f8:7a:99:d9:48:6d:e6: 6f:54:60:1a:58:c4:ab:b4:71:6e:7b:a1:d4:6b:26: b2:e0:7c:fe:68:d8:1b:ac:d8:fb:9d:0c:0c:1e:20: 53:0f:e3:07:ad:7b:0b:3a:2d:99:40:cb:f8:54:54: 46:2c:6d:68:4a:04:8e:42:df:56:f9:f3:ab:59:25: af:43:d2:46:c9:34:06:df:5a:e2:8f:a9:b2:19:1b: c9:35:7a:8f:21:26:93:86:39:08:8e:66:52:f0:ae: 2d:d1:47:af:23:91:ad:75:3a:e3:83:9b:a8:8e:4d: 64:78:0d:67:a7:20:4c:5e:4b:97:47:5e:64:ea:2f: 4e:ad:d6:97:a3:5a:bd:e7:97:97:70:66:b1:75:00: 18:47:f7:b1:71:cf:d0:15:1c:9b:25:be:c9:17:18: 7d:7a:58:58:7f:9c:28:2a:01:b0:c3:d7:1d:63:53: f4:e0:32:d2:a8:8d:34:f8:5c:6f:e1:c7:96:08:fa: cc:74:59:db:09:e3:84:12:e2:aa:15:b8:0c:e7:5d: d4:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:F0:DB:98:55:8A:93:2D:A7:6D:80:3F:79:DB:B2:1C:88:FE:27:81 X509v3 Authority Key Identifier: keyid:A7:1E:0E:EE:59:0D:E2:FD:8D:EC:4A:67:E8:7B:C8:96:FF:C8:B2:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/px4O7lkN4v2N7Epn6HvIlv_IsrU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:9d:10:22:05:20:12:fe:bd:29:79:8e:8f:d3:2d:67:06:13: 8f:ff:81:fc:fb:f1:31:fd:f6:8e:fd:33:33:dd:42:f3:96:22: 8b:cb:c0:aa:a5:bd:a7:e7:28:fe:74:0e:0c:b7:f5:db:ef:cd: 9e:f3:7a:d7:f2:eb:b3:84:4c:21:d8:6c:17:26:bb:af:3d:5b: b1:ee:ca:02:c6:e2:b2:67:d5:06:e6:4b:8c:b7:d0:93:df:8e: 16:31:17:fe:cc:b2:02:48:46:04:39:01:da:fe:17:4a:0a:4f: fe:3e:3f:2f:ff:e4:65:e7:1b:79:ee:b7:a3:fd:8b:87:7c:6a: 11:c4:b0:24:33:71:5a:80:e6:a3:72:fc:81:7e:6a:9d:48:b8: 4e:f3:56:84:e5:22:fb:bf:50:a0:d7:6a:30:4a:78:46:75:74: b9:73:4b:97:62:28:62:ef:81:41:2f:6a:c0:94:2a:86:c9:43: 40:ce:e4:94:30:77:23:be:da:e8:87:ea:0e:94:a9:4f:31:e6: 92:23:12:e7:2f:e8:4c:f5:22:5b:c0:a1:f4:bd:b1:4f:08:b8: e7:78:ed:30:28:f3:83:c8:35:29:b3:ae:d9:d4:25:38:f1:4b: a1:8c:19:0c:21:89:39:b7:92:fc:29:86:c1:b5:78:13:15:b3: 02:90:4e:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCUFrpRkcpJ16n5LMzaSoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3MWUwZWVlNTkwZGUyZmQ4ZGVjNGE2N2U4N2JjODk2ZmZj OGIyYjUwHhcNMjUxMjA2MDUwMTI0WhcNMjUxMjA3MDUwMTI0WjAzMTEwLwYDVQQD EyhhYmYwZGI5ODU1OGE5MzJkYTc2ZDgwM2Y3OWRiYjIxYzg4ZmUyNzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOADBqrK8n/EhvGppGNvTDSSemy7 yW/JvnKJTHL/zvnZYbEt8CkrwCYhDpztzl6T4xvbuPh6mdlIbeZvVGAaWMSrtHFu e6HUayay4Hz+aNgbrNj7nQwMHiBTD+MHrXsLOi2ZQMv4VFRGLG1oSgSOQt9W+fOr WSWvQ9JGyTQG31rij6myGRvJNXqPISaThjkIjmZS8K4t0UevI5GtdTrjg5uojk1k eA1npyBMXkuXR15k6i9OrdaXo1q955eXcGaxdQAYR/excc/QFRybJb7JFxh9elhY f5woKgGww9cdY1P04DLSqI00+Fxv4ceWCPrMdFnbCeOEEuKqFbgM513UQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKvw25hVipMtp22AP3nbshyI/ieBMB8GA1UdIwQY MBaAFKceDu5ZDeL9jexKZ+h7yJb/yLK1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHg0Tzdsa040djJON0VwbjZIdklsdl9Jc3JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9jNTFmZDYtM2QwOC00MjA1LWI3NDct YjgwNTMwYTVlMDQyLzEvcHg0Tzdsa040djJON0VwbjZIdklsdl9Jc3JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9jNTFmZDYtM2QwOC00MjA1LWI3NDctYjgwNTMwYTVlMDQy LzEvcHg0Tzdsa040djJON0VwbjZIdklsdl9Jc3JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHp0QIgUg Ev69KXmOj9MtZwYTj/+B/PvxMf32jv0zM91C85Yii8vAqqW9p+co/nQODLf12+/N nvN61/Lrs4RMIdhsFya7rz1bse7KAsbismfVBuZLjLfQk9+OFjEX/syyAkhGBDkB 2v4XSgpP/j4/L//kZecbee63o/2Lh3xqEcSwJDNxWoDmo3L8gX5qnUi4TvNWhOUi +79QoNdqMEp4RnV0uXNLl2IoYu+BQS9qwJQqhslDQM7klDB3I77a6IfqDpSpTzHm kiMS5y/oTPUiW8Ch9L2xTwi453jtMCjzg8g1KbOu2dQlOPFLoYwZDCGJObeS/CmG wbV4ExWzApBOiA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:33:30 2025 by rpki-client