This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft File: p0j74dfTpqpHTeQ_qIXOLQkcUps.mft (raw, json) Hash identifier: 4tqCWc//+86morQJ7aQHq1anpXyF/u/pWt5PuluEAcM= Subject key identifier: 36:60:55:0B:1F:C7:CE:64:BA:47:8D:3E:E1:07:EB:29:E7:D8:F2:CA Authority key identifier: A7:48:FB:E1:D7:D3:A6:AA:47:4D:E4:3F:A8:85:CE:2D:09:1C:52:9B Certificate issuer: /CN=a748fbe1d7d3a6aa474de43fa885ce2d091c529b Certificate serial: 019AF5E6649DC42FB6146D48969B6C590D62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0j74dfTpqpHTeQ_qIXOLQkcUps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft Manifest number: 14B5 Signing time: Sat 06 Dec 2025 23:01:48 +0000 Manifest this update: Sat 06 Dec 2025 23:01:48 +0000 Manifest next update: Sun 07 Dec 2025 23:01:48 +0000 Files and hashes: 1: 7FOJ9WC3T7pHyWWCuyPjcheMLEQ.roa (hash: nKrGLaOlKefy6/k/jC1QdJsWJ/jAJ+vYp4Lo3APL+Ec=) 2: p0j74dfTpqpHTeQ_qIXOLQkcUps.crl (hash: pty/q62T6yAAs+j6eL9AFw0LplRy6FXBsUAdPTEjoH8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft rsync://rpki.ripe.net/repository/DEFAULT/p0j74dfTpqpHTeQ_qIXOLQkcUps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e6:64:9d:c4:2f:b6:14:6d:48:96:9b:6c:59:0d:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a748fbe1d7d3a6aa474de43fa885ce2d091c529b Validity Not Before: Dec 6 23:01:48 2025 GMT Not After : Dec 7 23:01:48 2025 GMT Subject: CN=3660550b1fc7ce64ba478d3ee107eb29e7d8f2ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d0:09:3e:da:31:5f:5e:b7:0d:b7:69:1c:c5: f1:fe:16:93:34:08:33:7e:2a:f1:1a:f3:76:6a:22: 21:00:b5:17:44:00:13:91:83:37:db:62:4d:94:18: de:da:67:65:4f:b1:17:a7:b2:9e:77:59:f8:70:80: e1:d2:fd:48:0c:15:b5:9a:9a:d5:e8:5c:21:d7:07: e5:37:06:a8:40:bb:a5:dc:6e:4d:72:61:18:46:82: c4:44:62:48:a9:2d:64:05:03:f9:5a:f9:82:2a:59: ae:75:43:6f:0d:b3:63:7f:7c:68:e1:fb:14:dd:67: f3:52:23:2a:fa:45:df:0c:33:c4:23:7d:e3:46:bc: 5e:2a:77:f8:df:7c:69:fd:6d:f4:79:d2:9b:3a:11: 41:48:0b:e0:c2:85:af:1e:1c:0b:8f:44:d9:49:0d: 59:3d:d8:2e:57:f0:c0:ac:bb:e4:12:b1:99:9c:87: 2a:93:11:0f:ec:d7:94:db:d0:19:64:8a:43:e3:fd: 09:c6:fe:18:bb:50:f5:26:5e:08:df:91:40:57:3b: fa:cd:dc:71:f7:a8:78:27:57:23:18:c6:0e:66:7e: f4:ea:a4:c7:4c:15:88:f3:a2:e2:be:fa:50:be:46: a7:83:0d:d4:f4:02:15:e5:01:48:cc:3c:f2:67:72: 25:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:60:55:0B:1F:C7:CE:64:BA:47:8D:3E:E1:07:EB:29:E7:D8:F2:CA X509v3 Authority Key Identifier: keyid:A7:48:FB:E1:D7:D3:A6:AA:47:4D:E4:3F:A8:85:CE:2D:09:1C:52:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0j74dfTpqpHTeQ_qIXOLQkcUps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:83:36:72:46:4e:70:73:0e:95:ff:2f:b0:26:af:c6:5c:49: 45:07:85:16:73:89:73:25:52:fa:10:75:7e:f3:20:f7:9c:de: e0:d1:b9:3f:09:bd:29:59:40:cb:6d:19:63:27:36:35:0a:85: 49:9c:95:cc:f2:36:2e:d6:75:69:b9:2e:81:bd:e4:68:7e:46: 31:78:cf:ed:a1:65:1a:c3:96:70:69:1d:5f:aa:e0:20:ef:e0: 0e:d1:19:80:5c:2e:dd:d9:f6:ce:a8:87:4e:04:90:2f:4b:db: 1f:eb:70:ae:a4:ca:cc:3b:99:b0:39:f2:a3:7b:de:e8:f7:dc: 01:29:21:18:5b:67:b1:b6:1a:c6:3a:91:af:2a:44:71:55:4e: f9:d5:88:fd:8c:cd:bd:b9:f9:03:c8:7a:72:7a:e8:b5:b7:cf: f1:13:67:e5:0b:4b:18:5b:e5:f0:a7:7f:76:b2:98:1d:43:60: 87:46:81:6b:f8:1b:d3:25:1d:01:92:e2:02:cd:5e:be:9d:e7: 7d:ac:cf:02:1e:a1:3a:d9:9f:a1:5f:c3:5e:33:6c:20:d9:15: 97:30:d5:06:c2:d3:9c:01:65:97:df:20:cd:65:b5:21:bf:df: 96:26:4a:04:9d:c3:f9:0c:35:ca:73:d1:89:d2:66:0f:4c:80: 80:1e:66:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15mSdxC+2FG1IlptsWQ1iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NDhmYmUxZDdkM2E2YWE0NzRkZTQzZmE4ODVjZTJkMDkx YzUyOWIwHhcNMjUxMjA2MjMwMTQ4WhcNMjUxMjA3MjMwMTQ4WjAzMTEwLwYDVQQD EygzNjYwNTUwYjFmYzdjZTY0YmE0NzhkM2VlMTA3ZWIyOWU3ZDhmMmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytAJPtoxX163DbdpHMXx/haTNAgz firxGvN2aiIhALUXRAATkYM322JNlBje2mdlT7EXp7Ked1n4cIDh0v1IDBW1mprV 6Fwh1wflNwaoQLul3G5NcmEYRoLERGJIqS1kBQP5WvmCKlmudUNvDbNjf3xo4fsU 3WfzUiMq+kXfDDPEI33jRrxeKnf433xp/W30edKbOhFBSAvgwoWvHhwLj0TZSQ1Z PdguV/DArLvkErGZnIcqkxEP7NeU29AZZIpD4/0Jxv4Yu1D1Jl4I35FAVzv6zdxx 96h4J1cjGMYOZn706qTHTBWI86LivvpQvkangw3U9AIV5QFIzDzyZ3IlKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDZgVQsfx85kukeNPuEH6ynn2PLKMB8GA1UdIwQY MBaAFKdI++HX06aqR03kP6iFzi0JHFKbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDBqNzRkZlRwcXBIVGVRX3FJWE9MUWtjVXBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9hNzIzZDgtZDhjYy00ZTYwLTg1YWIt NmM5YjVjOWJmYTc1LzEvcDBqNzRkZlRwcXBIVGVRX3FJWE9MUWtjVXBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9hNzIzZDgtZDhjYy00ZTYwLTg1YWItNmM5YjVjOWJmYTc1 LzEvcDBqNzRkZlRwcXBIVGVRX3FJWE9MUWtjVXBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF4M2ckZO cHMOlf8vsCavxlxJRQeFFnOJcyVS+hB1fvMg95ze4NG5Pwm9KVlAy20ZYyc2NQqF SZyVzPI2LtZ1abkugb3kaH5GMXjP7aFlGsOWcGkdX6rgIO/gDtEZgFwu3dn2zqiH TgSQL0vbH+twrqTKzDuZsDnyo3ve6PfcASkhGFtnsbYaxjqRrypEcVVO+dWI/YzN vbn5A8h6cnrotbfP8RNn5QtLGFvl8Kd/drKYHUNgh0aBa/gb0yUdAZLiAs1evp3n fazPAh6hOtmfoV/DXjNsINkVlzDVBsLTnAFll98gzWW1Ib/fliZKBJ3D+Qw1ynPR idJmD0yAgB5mmA== -----END CERTIFICATE-----Generated at Sun Dec 7 05:28:37 2025 by rpki-client