This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.mft File: p03gktwuTXKqfmqWDSGtTnl1izw.mft (raw, json) Hash identifier: rLLsn3GjcR70JQ6DhXO1P4eMALHac3snItTJxytb2c4= Subject key identifier: 76:88:2A:DD:2E:88:36:47:60:66:10:BF:7C:5A:6E:24:73:B2:BA:13 Authority key identifier: A7:4D:E0:92:DC:2E:4D:72:AA:7E:6A:96:0D:21:AD:4E:79:75:8B:3C Certificate issuer: /CN=a74de092dc2e4d72aa7e6a960d21ad4e79758b3c Certificate serial: 019AF3521FCD5D93BC0C54BBC35448206CBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p03gktwuTXKqfmqWDSGtTnl1izw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 11:00:36 +0000 Manifest this update: Sat 06 Dec 2025 11:00:36 +0000 Manifest next update: Sun 07 Dec 2025 11:00:36 +0000 Files and hashes: 1: h56nNbes2ivx0npJDLsxR_z62Zo.roa (hash: wxs3EMyvsXJWyJHCo0ZYi2lqFjVWRDaFII6/r1MtHp4=) 2: p03gktwuTXKqfmqWDSGtTnl1izw.crl (hash: Oh4mZg7LZx1vxFMYZ5CQHBRhTfCmCaQUPiWoDD8r9bc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.mft rsync://rpki.ripe.net/repository/DEFAULT/p03gktwuTXKqfmqWDSGtTnl1izw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:1f:cd:5d:93:bc:0c:54:bb:c3:54:48:20:6c:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a74de092dc2e4d72aa7e6a960d21ad4e79758b3c Validity Not Before: Dec 6 11:00:36 2025 GMT Not After : Dec 7 11:00:36 2025 GMT Subject: CN=76882add2e883647606610bf7c5a6e2473b2ba13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2c:4e:46:b9:f2:0e:97:12:81:f2:46:e8:d5: 24:29:6a:b9:57:50:1f:e3:3b:e0:fc:54:62:3a:50: 92:7c:17:b4:fe:1c:c1:88:3a:c2:ed:5d:05:e2:ed: 9e:13:0b:83:e8:08:82:8d:1e:8c:a6:41:f3:2a:84: 96:95:54:54:a4:a1:8e:81:15:5e:b7:2c:86:07:c6: 4d:72:f8:7e:a0:25:57:d6:0c:9b:37:1a:c4:18:13: 69:20:3a:0b:3a:9c:84:2f:48:71:b9:6f:fe:3c:98: 1c:68:53:7d:ad:93:71:0e:ef:00:a5:bf:3e:ef:66: 7c:55:9b:d1:af:91:f2:cc:ee:0e:24:e1:bd:6f:db: 4c:1a:1c:4b:11:06:cf:2e:d2:e0:ab:e2:39:3f:ae: 30:cb:a7:db:4b:c8:5f:68:48:c0:0e:a1:e9:a4:84: 2d:93:84:e8:22:2a:c6:50:a6:a5:25:e5:5d:44:f5: 53:dd:dc:ef:65:77:93:e5:32:66:ad:35:96:c1:94: 50:73:de:21:bc:6f:cc:61:f6:a1:2d:15:64:69:04: 45:de:eb:01:bc:cf:0c:a1:a9:20:fe:c1:8f:80:f9: c8:56:46:37:15:7a:b5:33:58:eb:19:8b:bf:42:d8: 73:45:e4:c5:47:0b:d0:a7:a5:89:73:c1:6a:c6:68: 7d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:88:2A:DD:2E:88:36:47:60:66:10:BF:7C:5A:6E:24:73:B2:BA:13 X509v3 Authority Key Identifier: keyid:A7:4D:E0:92:DC:2E:4D:72:AA:7E:6A:96:0D:21:AD:4E:79:75:8B:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p03gktwuTXKqfmqWDSGtTnl1izw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:e7:4a:36:a8:0a:13:62:15:9b:31:b1:76:be:e9:62:08:ee: bb:ad:16:0f:3c:35:2a:f6:57:a9:d3:0d:af:a6:f1:42:da:ff: 4d:d6:9c:ae:d4:55:dd:47:ca:6b:c6:b1:f9:8d:34:de:e6:36: 97:02:c3:45:9a:69:9b:8e:de:7c:99:e9:4b:ba:cb:93:5f:6d: e4:f4:c7:a1:42:92:bd:1b:49:dc:51:50:d9:21:80:6b:ee:a5: 8e:93:b2:7e:16:e3:0f:45:59:5c:59:a2:27:17:72:79:65:88: c8:85:ab:31:d3:be:a1:1c:ac:c4:fe:76:16:7e:73:56:fd:35: ac:e3:97:7f:35:e5:50:f4:f6:73:f6:9a:1c:99:85:b8:4d:e3: c2:38:57:12:78:04:54:9d:ad:53:37:55:61:74:4f:81:57:2a: 63:c5:92:cf:a4:5f:d0:c8:48:f7:a0:52:0a:d3:ef:69:7d:1d: 09:3a:4e:0e:0e:89:09:f3:61:1a:e4:82:f2:84:5f:9e:a2:a2: 92:0d:93:a8:40:c2:b3:be:9f:a3:d3:94:25:40:64:f7:82:24: 1e:37:05:00:7b:e6:1f:de:91:ab:b4:d1:a2:13:e3:79:0f:e6: f0:b4:d3:24:99:7c:7d:24:9a:39:b2:e9:a7:33:47:ef:e9:3c: 1e:b3:36:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUh/NXZO8DFS7w1RIIGy+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NGRlMDkyZGMyZTRkNzJhYTdlNmE5NjBkMjFhZDRlNzk3 NThiM2MwHhcNMjUxMjA2MTEwMDM2WhcNMjUxMjA3MTEwMDM2WjAzMTEwLwYDVQQD Eyg3Njg4MmFkZDJlODgzNjQ3NjA2NjEwYmY3YzVhNmUyNDczYjJiYTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyxORrnyDpcSgfJG6NUkKWq5V1Af 4zvg/FRiOlCSfBe0/hzBiDrC7V0F4u2eEwuD6AiCjR6MpkHzKoSWlVRUpKGOgRVe tyyGB8ZNcvh+oCVX1gybNxrEGBNpIDoLOpyEL0hxuW/+PJgcaFN9rZNxDu8Apb8+ 72Z8VZvRr5HyzO4OJOG9b9tMGhxLEQbPLtLgq+I5P64wy6fbS8hfaEjADqHppIQt k4ToIirGUKalJeVdRPVT3dzvZXeT5TJmrTWWwZRQc94hvG/MYfahLRVkaQRF3usB vM8Moakg/sGPgPnIVkY3FXq1M1jrGYu/QthzReTFRwvQp6WJc8Fqxmh9DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHaIKt0uiDZHYGYQv3xabiRzsroTMB8GA1UdIwQY MBaAFKdN4JLcLk1yqn5qlg0hrU55dYs8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDAzZ2t0d3VUWEtxZm1xV0RTR3RUbmwxaXp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi80Njk5NzQtMTE4NC00ODI0LTkxODEt ZjRhMjc1ZDZiNTg0LzEvcDAzZ2t0d3VUWEtxZm1xV0RTR3RUbmwxaXp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi80Njk5NzQtMTE4NC00ODI0LTkxODEtZjRhMjc1ZDZiNTg0 LzEvcDAzZ2t0d3VUWEtxZm1xV0RTR3RUbmwxaXp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoudKNqgK E2IVmzGxdr7pYgjuu60WDzw1KvZXqdMNr6bxQtr/TdacrtRV3UfKa8ax+Y003uY2 lwLDRZppm47efJnpS7rLk19t5PTHoUKSvRtJ3FFQ2SGAa+6ljpOyfhbjD0VZXFmi JxdyeWWIyIWrMdO+oRysxP52Fn5zVv01rOOXfzXlUPT2c/aaHJmFuE3jwjhXEngE VJ2tUzdVYXRPgVcqY8WSz6Rf0MhI96BSCtPvaX0dCTpODg6JCfNhGuSC8oRfnqKi kg2TqEDCs76fo9OUJUBk94IkHjcFAHvmH96Rq7TRohPjeQ/m8LTTJJl8fSSaObLp pzNH7+k8HrM24A== -----END CERTIFICATE-----Generated at Sat Dec 6 17:29:32 2025 by rpki-client