This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft File: pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft (raw, json) Hash identifier: 5E2CCtXvx+CCY8ygZRSMievfKpl2l75uEG/LfJe+swI= Subject key identifier: 83:72:EE:F1:82:CB:E7:3E:FF:60:F0:37:80:2F:48:9C:86:92:1B:59 Authority key identifier: A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62 Certificate issuer: /CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62 Certificate serial: 019B2F67778A0FCD54B36E9BC0C3FE053A1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft Manifest number: 178F Signing time: Thu 18 Dec 2025 03:01:08 +0000 Manifest this update: Thu 18 Dec 2025 03:01:08 +0000 Manifest next update: Fri 19 Dec 2025 03:01:08 +0000 Files and hashes: 1: Clf1O67BMO2Rhs6Zi3d5eqYtS78.roa (hash: gEsGT+BkcxrPL5LEXQ9nd6Eso8OhYDY6ncvwiqyMT9o=) 2: pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl (hash: DKvyxBLjLcLUhxuwKa12zkmOZS6KuW9P+xE1ACrzvxk=) 3: yedVX2Bb1fw9QHeEL7aMz-eiDBc.roa (hash: nTi5nmxACtrhi4lwIaboxq43TOZLUrk6W1f8QXWcQkQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:77:8a:0f:cd:54:b3:6e:9b:c0:c3:fe:05:3a:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62 Validity Not Before: Dec 18 03:01:08 2025 GMT Not After : Dec 19 03:01:08 2025 GMT Subject: CN=8372eef182cbe73eff60f037802f489c86921b59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:27:9a:de:1a:39:29:c0:5e:a2:53:95:fe:4f: f8:b4:59:3b:3c:2c:84:0b:72:af:ae:75:65:9c:2c: bc:8c:83:d2:29:96:0c:d6:11:76:4c:da:a6:97:7f: 5b:f8:bb:e4:de:be:93:c2:ea:ad:93:3d:bc:df:bb: 44:86:38:58:1a:3c:fa:fc:e0:f4:43:27:50:79:ad: e0:41:62:c0:36:19:fd:14:7e:77:00:b5:16:f6:b5: 92:79:72:de:71:dd:d1:f4:5c:82:51:d7:f3:61:2d: e4:20:e6:1e:95:c6:80:14:1e:5f:bc:37:b0:8a:29: 4b:13:0c:38:14:a9:df:1c:be:1c:f7:92:cb:7a:61: 2f:fa:0b:e5:82:86:63:83:53:a9:f8:0d:0d:e4:f4: 34:b6:7e:51:26:f9:0c:ea:dd:0d:3c:57:f6:7d:64: f6:b8:bd:49:36:fe:aa:4b:06:c7:ac:e7:f2:06:44: 35:8d:ef:ce:a0:9f:41:69:0c:f1:74:f9:88:60:62: 9f:33:64:b0:59:41:af:3f:53:30:49:fd:a1:10:12: c9:c3:c7:96:5f:7e:fc:16:ee:b2:9d:35:1f:31:04: c2:f8:8e:77:49:7d:2c:5b:4a:04:22:22:94:fb:ce: ce:82:fe:12:dc:8f:87:38:a0:0b:58:60:50:d0:19: 17:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:72:EE:F1:82:CB:E7:3E:FF:60:F0:37:80:2F:48:9C:86:92:1B:59 X509v3 Authority Key Identifier: keyid:A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:21:82:a3:ae:dc:ad:b9:e2:81:11:51:37:68:3a:cd:ba:30: d3:00:21:cd:9c:54:c1:d5:d4:d3:d9:97:18:b8:4e:bd:2e:37: 34:42:f2:4e:a4:6e:12:01:71:93:93:35:66:45:fc:c5:81:b7: 9d:78:33:c4:95:10:7a:10:22:73:23:c5:b9:51:61:54:20:17: 09:23:9c:d3:08:57:e9:cd:2f:04:db:ae:80:d3:35:8a:5a:49: 77:f9:27:10:86:ea:03:ff:c6:7c:89:09:d1:de:c2:34:27:e2: 31:d6:e1:6d:97:e0:6e:31:aa:45:62:b3:bb:61:68:98:17:7f: 5d:f1:de:a3:8c:73:b5:1a:a2:24:42:b4:1c:9a:9c:d3:0c:dc: 41:cf:40:4e:fa:06:f0:58:51:7e:0b:93:f3:7a:2b:5c:88:35: 4a:1c:e0:ce:b3:c6:71:f3:3a:f5:74:0d:30:ac:5a:ed:86:47: 4a:2e:2a:d2:8a:cf:20:ea:bd:c7:2d:e7:2f:c0:77:cd:3c:bf: ea:95:56:89:3d:44:f2:ca:8e:b9:0f:e5:a8:da:5d:55:31:ca: b8:56:e1:18:3f:a9:90:70:72:2f:63:35:49:1a:a4:79:35:b1: 4c:a9:57:3f:75:c8:fc:80:1f:42:06:76:13:1c:5a:76:f6:d6: c1:1e:37:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ3eKD81Us26bwMP+BToeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3MWEyYTJkYjRkNzQxOGU5YmY0ZjkzYzhjMDQ2YTAxNjE2 NjNjNjIwHhcNMjUxMjE4MDMwMTA4WhcNMjUxMjE5MDMwMTA4WjAzMTEwLwYDVQQD Eyg4MzcyZWVmMTgyY2JlNzNlZmY2MGYwMzc4MDJmNDg5Yzg2OTIxYjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Cea3ho5KcBeolOV/k/4tFk7PCyE C3KvrnVlnCy8jIPSKZYM1hF2TNqml39b+Lvk3r6Twuqtkz2837tEhjhYGjz6/OD0 QydQea3gQWLANhn9FH53ALUW9rWSeXLecd3R9FyCUdfzYS3kIOYelcaAFB5fvDew iilLEww4FKnfHL4c95LLemEv+gvlgoZjg1Op+A0N5PQ0tn5RJvkM6t0NPFf2fWT2 uL1JNv6qSwbHrOfyBkQ1je/OoJ9BaQzxdPmIYGKfM2SwWUGvP1MwSf2hEBLJw8eW X378Fu6ynTUfMQTC+I53SX0sW0oEIiKU+87Ogv4S3I+HOKALWGBQ0BkXcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFINy7vGCy+c+/2DwN4AvSJyGkhtZMB8GA1UdIwQY MBaAFKcaKi2010GOm/T5PIwEagFhZjxiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHhvcUxiVFhRWTZiOVBrOGpBUnFBV0ZtUEdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9iN2FiZGYtM2JlMS00NjQyLTlmM2Ut ZjFmMGI5NTk4ZjMyLzEvcHhvcUxiVFhRWTZiOVBrOGpBUnFBV0ZtUEdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9iN2FiZGYtM2JlMS00NjQyLTlmM2UtZjFmMGI5NTk4ZjMy LzEvcHhvcUxiVFhRWTZiOVBrOGpBUnFBV0ZtUEdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAiGCo67c rbnigRFRN2g6zbow0wAhzZxUwdXU09mXGLhOvS43NELyTqRuEgFxk5M1ZkX8xYG3 nXgzxJUQehAicyPFuVFhVCAXCSOc0whX6c0vBNuugNM1ilpJd/knEIbqA//GfIkJ 0d7CNCfiMdbhbZfgbjGqRWKzu2FomBd/XfHeo4xztRqiJEK0HJqc0wzcQc9ATvoG 8FhRfguT83orXIg1ShzgzrPGcfM69XQNMKxa7YZHSi4q0orPIOq9xy3nL8B3zTy/ 6pVWiT1E8sqOuQ/lqNpdVTHKuFbhGD+pkHByL2M1SRqkeTWxTKlXP3XI/IAfQgZ2 ExxadvbWwR43xg== -----END CERTIFICATE-----Generated at Thu Dec 18 09:57:40 2025 by rpki-client