This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft File: pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft (raw, json) Hash identifier: wp4ulYv8JwMakuE/9ootf5/xtSA84ks7RMxxQti4f24= Subject key identifier: D3:CE:72:71:CB:F1:9F:CA:02:31:82:21:AC:0D:3D:8E:95:5F:29:C2 Authority key identifier: A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9 Certificate issuer: /CN=a57f291818d8719738268d844994a2e10824d4c9 Certificate serial: 019AF98BB94A26AE6AF924D77D94F7BACCEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft Manifest number: 1766 Signing time: Sun 07 Dec 2025 16:01:14 +0000 Manifest this update: Sun 07 Dec 2025 16:01:14 +0000 Manifest next update: Mon 08 Dec 2025 16:01:14 +0000 Files and hashes: 1: 5e1NxuIhpqcGoJaPew5Kl5__8Lc.roa (hash: SNl+Y4M8n9I3K17PdDkj5othPOFaJvzjGzvPP4WmJSg=) 2: 7ybz4qgk4RPqp8xdPC6X_E4gtbM.roa (hash: ogGugsf7sS6PtDmol4WlYpBYEAXHnn37bVsSaSAg3P8=) 3: pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl (hash: +nK1CI/+nEQSMo/y4dPcotYTkEzRWFPBmOO7ak0uIMk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:8b:b9:4a:26:ae:6a:f9:24:d7:7d:94:f7:ba:cc:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a57f291818d8719738268d844994a2e10824d4c9 Validity Not Before: Dec 7 16:01:14 2025 GMT Not After : Dec 8 16:01:14 2025 GMT Subject: CN=d3ce7271cbf19fca02318221ac0d3d8e955f29c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:79:3d:8c:40:6e:bc:82:e2:7e:6f:51:47:ea: 10:88:f5:e8:6b:0c:3b:e9:70:59:6c:e2:ca:1b:bb: c3:cd:3b:61:b0:13:a0:26:0a:f0:a8:80:e8:7a:e8: cb:5b:ea:22:25:a0:b5:cd:cb:0b:65:2f:87:ca:74: 36:5a:06:5a:79:fd:2a:10:b1:0e:ee:13:dd:1e:b5: c9:be:e4:07:87:5f:45:5d:77:5c:6c:f4:b9:85:ff: c0:1c:7a:be:13:d5:22:b2:08:9a:1e:15:f5:6c:8a: 69:cd:07:e8:82:34:b3:4f:41:61:74:c5:b6:f5:65: d2:c5:83:4f:1d:93:21:13:07:a8:4e:ee:b8:16:eb: 2f:fa:15:b4:74:52:50:0f:73:99:67:fc:4f:b0:e0: 7e:e9:f1:5e:ae:fb:17:cc:2a:82:9d:30:94:92:7d: a3:fd:2f:23:dc:64:60:87:9e:a2:b4:14:d0:06:9f: 34:eb:bf:2b:8a:60:82:57:8c:f4:69:8f:13:38:73: 20:7b:30:e3:02:f4:15:f3:14:46:bf:33:7b:45:0d: 34:1e:dc:c0:3c:89:51:03:4e:8e:79:19:60:03:18: 5a:40:b7:ea:14:fa:cc:3e:3e:64:4e:58:70:68:7f: 6b:5b:44:ef:ef:8a:3a:f1:83:46:e2:cc:1e:01:68: 7a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:CE:72:71:CB:F1:9F:CA:02:31:82:21:AC:0D:3D:8E:95:5F:29:C2 X509v3 Authority Key Identifier: keyid:A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:fd:45:f8:45:2d:46:c1:d0:f2:4f:32:a4:6f:90:2d:e2:b2: 78:46:e8:56:5e:d8:0b:fa:42:40:25:a1:bc:a2:50:e6:5b:b0: 02:0d:57:53:44:10:94:9f:ff:21:1d:c4:b9:95:37:92:82:bd: 70:63:15:e8:9a:87:1d:88:71:4a:a4:3b:d7:d8:83:e2:65:83: 95:67:a9:3b:f8:df:b4:40:a8:9d:53:7b:f6:39:db:3f:43:b7: 75:fe:76:e2:17:5b:1b:3d:df:9a:7a:68:05:a1:35:04:77:2a: 3a:9e:d5:1a:5d:49:9f:5a:be:db:3e:35:90:4c:eb:1e:27:77: bd:b3:60:fd:c5:38:13:47:56:9f:e6:6e:e3:08:da:f2:ac:6f: fd:fb:25:81:35:87:07:4f:34:e6:1e:66:68:25:ed:96:88:05: b0:cd:d4:ce:e3:71:5d:ef:d4:2e:0a:bc:43:a7:be:6c:13:6f: 7b:cc:0f:21:b6:a5:04:f7:c7:17:e2:56:3e:38:1d:04:3f:21: 99:70:39:14:8f:25:c7:41:a4:26:41:31:02:b7:aa:72:25:f1: 9b:e1:09:cc:13:52:1d:fb:d4:50:26:99:6e:de:f1:22:7a:6c: d7:b9:32:4f:56:86:d9:1c:93:25:2d:d7:c6:a5:91:c7:f6:a0: b2:56:e3:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr5i7lKJq5q+STXfZT3uszuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1N2YyOTE4MThkODcxOTczODI2OGQ4NDQ5OTRhMmUxMDgy NGQ0YzkwHhcNMjUxMjA3MTYwMTE0WhcNMjUxMjA4MTYwMTE0WjAzMTEwLwYDVQQD EyhkM2NlNzI3MWNiZjE5ZmNhMDIzMTgyMjFhYzBkM2Q4ZTk1NWYyOWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3k9jEBuvILifm9RR+oQiPXoaww7 6XBZbOLKG7vDzTthsBOgJgrwqIDoeujLW+oiJaC1zcsLZS+HynQ2WgZaef0qELEO 7hPdHrXJvuQHh19FXXdcbPS5hf/AHHq+E9UisgiaHhX1bIppzQfogjSzT0FhdMW2 9WXSxYNPHZMhEweoTu64Fusv+hW0dFJQD3OZZ/xPsOB+6fFervsXzCqCnTCUkn2j /S8j3GRgh56itBTQBp80678rimCCV4z0aY8TOHMgezDjAvQV8xRGvzN7RQ00HtzA PIlRA06OeRlgAxhaQLfqFPrMPj5kTlhwaH9rW0Tv74o68YNG4sweAWh69QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNPOcnHL8Z/KAjGCIawNPY6VXynCMB8GA1UdIwQY MBaAFKV/KRgY2HGXOCaNhEmUouEIJNTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFg4cEdCalljWmM0Sm8yRVNaU2k0UWdrMU1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85NjNhODMtZDJkMS00NjRjLWJkYjAt YjFhOTc5M2VlMzI0LzEvcFg4cEdCalljWmM0Sm8yRVNaU2k0UWdrMU1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85NjNhODMtZDJkMS00NjRjLWJkYjAtYjFhOTc5M2VlMzI0 LzEvcFg4cEdCalljWmM0Sm8yRVNaU2k0UWdrMU1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQv1F+EUt RsHQ8k8ypG+QLeKyeEboVl7YC/pCQCWhvKJQ5luwAg1XU0QQlJ//IR3EuZU3koK9 cGMV6JqHHYhxSqQ719iD4mWDlWepO/jftEConVN79jnbP0O3df524hdbGz3fmnpo BaE1BHcqOp7VGl1Jn1q+2z41kEzrHid3vbNg/cU4E0dWn+Zu4wja8qxv/fslgTWH B0805h5maCXtlogFsM3UzuNxXe/ULgq8Q6e+bBNve8wPIbalBPfHF+JWPjgdBD8h mXA5FI8lx0GkJkExAreqciXxm+EJzBNSHfvUUCaZbt7xInps17kyT1aG2RyTJS3X xqWRx/agslbjOg== -----END CERTIFICATE-----Generated at Sun Dec 7 17:52:35 2025 by rpki-client