This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft File: p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft (raw, json) Hash identifier: DaPdvWKL+6KfBA1XxRjIpLxBTsVcIWT7+/ncESIQdKA= Subject key identifier: BB:A9:09:26:A4:DF:44:77:DD:97:9D:F8:9A:D2:4C:8E:48:F0:4D:37 Authority key identifier: A7:CA:9A:DA:44:52:4F:C5:36:FA:3E:CA:BF:75:8D:F2:64:07:C8:B1 Certificate issuer: /CN=a7ca9ada44524fc536fa3ecabf758df26407c8b1 Certificate serial: 019AF19B70751E22FC1B21A28C0B2493A291 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft Manifest number: 142F Signing time: Sat 06 Dec 2025 03:01:27 +0000 Manifest this update: Sat 06 Dec 2025 03:01:27 +0000 Manifest next update: Sun 07 Dec 2025 03:01:27 +0000 Files and hashes: 1: AGh_BXwDaFnqdr1rluMLMPMOrnM.roa (hash: L7VSHEAFfvwnZGbHuhPcAH6Mmh4M0FtFsSBsZ0VnfV0=) 2: p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl (hash: ReXNpAJdb04ZbMLvq5kqNSFvIcnaiqNEAc5DXKMsuFI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:70:75:1e:22:fc:1b:21:a2:8c:0b:24:93:a2:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7ca9ada44524fc536fa3ecabf758df26407c8b1 Validity Not Before: Dec 6 03:01:27 2025 GMT Not After : Dec 7 03:01:27 2025 GMT Subject: CN=bba90926a4df4477dd979df89ad24c8e48f04d37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5f:37:05:f7:8a:8b:be:48:ef:e9:37:5d:5c: f9:ee:8b:95:be:6e:0f:0f:98:68:7d:64:f8:cf:2e: 2c:e5:2d:77:5c:83:16:7a:d3:d9:f4:c2:db:06:0c: e2:e3:1a:c7:c2:0d:5c:d8:96:6c:23:f4:99:9e:4f: af:5b:3a:20:14:8d:64:54:2a:92:8c:e2:da:f8:d1: 9f:c1:85:62:61:60:dd:6d:b6:d8:10:e5:6f:e1:69: 68:58:36:f0:18:db:88:f0:fe:ee:8f:14:e3:09:3a: cf:46:b2:aa:63:95:50:b6:ff:a3:2f:5e:95:c8:71: 13:51:dd:66:88:5d:f4:c2:37:93:03:0b:cf:df:40: 2a:17:5e:35:33:88:e6:1d:fd:f4:5f:36:b2:c2:8f: 67:4d:58:29:e5:2f:60:0b:34:5d:90:80:d1:5d:52: 61:ae:98:fb:74:19:cb:8d:8d:fd:9e:25:5d:55:61: 68:46:13:32:02:d8:39:e7:df:57:48:8d:86:96:bf: 76:ab:59:61:ff:8c:a0:78:e5:e6:f7:41:71:39:f4: 4b:6e:c4:81:0c:6e:3a:fe:03:b3:29:13:3c:a6:85: 37:98:ad:df:a5:cf:e3:76:8b:0e:a4:2c:b1:35:5b: 9b:a4:02:2b:ff:55:30:1b:0f:9d:68:0f:12:35:06: e9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:A9:09:26:A4:DF:44:77:DD:97:9D:F8:9A:D2:4C:8E:48:F0:4D:37 X509v3 Authority Key Identifier: keyid:A7:CA:9A:DA:44:52:4F:C5:36:FA:3E:CA:BF:75:8D:F2:64:07:C8:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:58:79:5b:a1:48:9f:d9:77:e9:a7:f1:26:2c:e1:c4:cd:3a: 3b:1a:a8:ce:94:4f:3d:f3:97:99:3d:9c:69:a0:ec:7b:a0:b5: 50:75:83:59:5a:7b:57:51:55:a9:14:62:15:38:2b:48:ad:3f: a3:cd:70:cc:87:5a:30:6e:54:a5:32:16:c2:5e:ab:51:9d:24: c5:a1:6b:a5:bd:05:af:28:50:7a:ab:5e:eb:02:fc:df:cf:ad: ba:1d:27:7a:59:4c:cc:c5:0e:99:30:0f:85:00:38:7d:e0:a2: 22:9a:cb:70:ff:98:04:f3:72:9a:74:c1:2d:40:77:8c:8c:29: 8d:e3:b4:d1:62:b9:98:f6:4c:ea:77:ef:ad:10:1e:eb:c1:a6: ce:2d:68:56:66:1b:1a:4a:f0:7c:89:8f:17:b5:eb:d2:41:03: 48:60:94:f4:a5:83:ec:83:a7:4b:f8:84:e6:e9:8d:49:2a:67: dc:54:e7:14:18:da:85:a1:cd:0a:e3:59:24:b6:eb:6a:2c:60: 58:c3:b0:9f:4a:51:0d:81:c6:96:b2:ac:30:b8:ac:77:ae:63: 31:33:b2:2e:e2:72:dd:44:51:63:b6:6c:8d:59:ea:7c:66:9b: 01:61:63:70:63:31:4f:8e:96:bd:dc:87:37:19:c8:f6:c6:94: 80:00:96:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm3B1HiL8GyGijAskk6KRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3Y2E5YWRhNDQ1MjRmYzUzNmZhM2VjYWJmNzU4ZGYyNjQw N2M4YjEwHhcNMjUxMjA2MDMwMTI3WhcNMjUxMjA3MDMwMTI3WjAzMTEwLwYDVQQD EyhiYmE5MDkyNmE0ZGY0NDc3ZGQ5NzlkZjg5YWQyNGM4ZTQ4ZjA0ZDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtF83BfeKi75I7+k3XVz57ouVvm4P D5hofWT4zy4s5S13XIMWetPZ9MLbBgzi4xrHwg1c2JZsI/SZnk+vWzogFI1kVCqS jOLa+NGfwYViYWDdbbbYEOVv4WloWDbwGNuI8P7ujxTjCTrPRrKqY5VQtv+jL16V yHETUd1miF30wjeTAwvP30AqF141M4jmHf30Xzaywo9nTVgp5S9gCzRdkIDRXVJh rpj7dBnLjY39niVdVWFoRhMyAtg5599XSI2Glr92q1lh/4ygeOXm90FxOfRLbsSB DG46/gOzKRM8poU3mK3fpc/jdosOpCyxNVubpAIr/1UwGw+daA8SNQbphQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLupCSak30R33Zed+JrSTI5I8E03MB8GA1UdIwQY MBaAFKfKmtpEUk/FNvo+yr91jfJkB8ixMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDhxYTJrUlNUOFUyLWo3S3YzV044bVFIeUxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mN2VjNzAtMGRlZC00MmNhLTlkMDAt OWQ5ZTFiNmJlZWU5LzEvcDhxYTJrUlNUOFUyLWo3S3YzV044bVFIeUxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9mN2VjNzAtMGRlZC00MmNhLTlkMDAtOWQ5ZTFiNmJlZWU5 LzEvcDhxYTJrUlNUOFUyLWo3S3YzV044bVFIeUxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD1h5W6FI n9l36afxJizhxM06OxqozpRPPfOXmT2caaDse6C1UHWDWVp7V1FVqRRiFTgrSK0/ o81wzIdaMG5UpTIWwl6rUZ0kxaFrpb0FryhQeqte6wL838+tuh0nellMzMUOmTAP hQA4feCiIprLcP+YBPNymnTBLUB3jIwpjeO00WK5mPZM6nfvrRAe68Gmzi1oVmYb GkrwfImPF7Xr0kEDSGCU9KWD7IOnS/iE5umNSSpn3FTnFBjahaHNCuNZJLbraixg WMOwn0pRDYHGlrKsMLisd65jMTOyLuJy3URRY7ZsjVnqfGabAWFjcGMxT46WvdyH NxnI9saUgACWgA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:00:06 2025 by rpki-client