This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/270d55-8fec-4d35-8282-d3fc91a2dc89/1/p75X8mosEHsadWuDFxXr0HqH-5M.mft File: p75X8mosEHsadWuDFxXr0HqH-5M.mft (raw, json) Hash identifier: bGK8u/c3nlLB1dNLchTuthvYUy5WsMK+DSzdjoXLVGs= Subject key identifier: 29:78:E3:D8:36:07:01:F3:D9:49:32:17:AD:E1:8B:40:CE:D9:63:84 Authority key identifier: A7:BE:57:F2:6A:2C:10:7B:1A:75:6B:83:17:15:EB:D0:7A:87:FB:93 Certificate issuer: /CN=a7be57f26a2c107b1a756b831715ebd07a87fb93 Certificate serial: 019B5A51CD8F176797F8875B722BEB107E04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p75X8mosEHsadWuDFxXr0HqH-5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/270d55-8fec-4d35-8282-d3fc91a2dc89/1/p75X8mosEHsadWuDFxXr0HqH-5M.mft Manifest number: 011C Signing time: Fri 26 Dec 2025 11:01:09 +0000 Manifest this update: Fri 26 Dec 2025 11:01:09 +0000 Manifest next update: Sat 27 Dec 2025 11:01:09 +0000 Files and hashes: 1: JiAa07vPm_-Pb33la8lIiEVcVsk.roa (hash: LTCDMolpBsWj5ww+QHR47bnfnmdoJo1c8oI26KgxQVA=) 2: p75X8mosEHsadWuDFxXr0HqH-5M.crl (hash: RvgQz9o7xiMCGfu1m8klOc2U836NpDErN3TFrmmyRaU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/270d55-8fec-4d35-8282-d3fc91a2dc89/1/p75X8mosEHsadWuDFxXr0HqH-5M.crl rsync://rpki.ripe.net/repository/DEFAULT/12/270d55-8fec-4d35-8282-d3fc91a2dc89/1/p75X8mosEHsadWuDFxXr0HqH-5M.mft rsync://rpki.ripe.net/repository/DEFAULT/p75X8mosEHsadWuDFxXr0HqH-5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:cd:8f:17:67:97:f8:87:5b:72:2b:eb:10:7e:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7be57f26a2c107b1a756b831715ebd07a87fb93 Validity Not Before: Dec 26 11:01:09 2025 GMT Not After : Dec 27 11:01:09 2025 GMT Subject: CN=2978e3d8360701f3d9493217ade18b40ced96384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8b:25:be:ad:33:f6:0b:04:12:ab:11:21:5b: 4b:de:bf:dd:97:d7:98:10:8c:c8:08:95:b7:92:49: f8:ea:0d:01:0b:03:8a:a0:dd:63:84:91:11:9e:30: 06:af:09:07:58:f0:e7:d9:0a:43:38:99:50:25:69: bd:66:17:b6:eb:12:dc:e8:8d:9d:ab:a2:08:15:2c: 3f:80:ad:e1:3b:09:c2:e2:2e:e3:01:e6:27:91:7b: b0:3d:65:e6:a9:d9:a6:85:1f:b4:57:19:5e:6c:7c: 66:dd:77:bf:14:47:1f:33:4e:91:af:ee:40:b9:7f: 75:ec:6a:a4:d5:2c:0b:17:72:83:b2:15:7a:62:b6: 1b:13:8a:04:b1:36:ed:bf:28:29:36:a5:0f:59:3f: 55:e6:08:7f:86:ee:9f:ff:c9:0e:08:cb:8c:de:70: ec:dd:bc:00:04:70:20:96:a4:c6:1e:d1:e0:c4:31: c0:3f:ec:85:36:12:a8:2d:a4:03:b5:8d:29:c8:09: 6f:5a:82:a5:7b:4b:93:99:78:87:07:6f:f7:9e:2f: a1:cd:6f:fc:e1:48:13:81:4b:46:30:13:0a:9a:ef: 36:d5:bf:07:b9:11:03:8f:a8:33:b1:82:36:a2:af: 79:1a:bd:91:76:9b:44:6c:eb:c8:43:9b:d5:d2:fc: ba:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:78:E3:D8:36:07:01:F3:D9:49:32:17:AD:E1:8B:40:CE:D9:63:84 X509v3 Authority Key Identifier: keyid:A7:BE:57:F2:6A:2C:10:7B:1A:75:6B:83:17:15:EB:D0:7A:87:FB:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p75X8mosEHsadWuDFxXr0HqH-5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/270d55-8fec-4d35-8282-d3fc91a2dc89/1/p75X8mosEHsadWuDFxXr0HqH-5M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/270d55-8fec-4d35-8282-d3fc91a2dc89/1/p75X8mosEHsadWuDFxXr0HqH-5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:18:74:ef:ef:21:2e:0c:bd:9f:37:80:cb:ff:e4:c7:e5:27: a5:aa:b0:bb:88:7d:fc:8f:68:19:ca:cc:d3:6c:41:06:20:f0: 63:03:d3:44:76:52:7e:35:f2:7d:3e:c2:a6:66:20:24:b2:06: 83:f6:18:8c:b1:0a:84:d2:2c:51:d6:ba:a3:37:db:05:05:d8: db:68:20:2b:12:d1:52:af:98:c8:c8:3e:99:8f:35:3d:3d:cf: 58:8f:c7:7a:3b:ec:f1:ea:9e:fa:5d:29:4b:c1:96:5f:ea:9e: 51:42:f7:aa:b4:85:fa:72:1d:75:21:9e:10:7a:d4:95:23:54: 1f:92:08:62:ff:7a:3f:37:e9:55:99:93:e2:ae:41:82:ff:a0: 64:bd:51:83:ca:f2:ed:c2:d0:d5:98:1c:02:a0:84:87:d4:54: 30:31:61:96:d8:04:57:1e:b1:4c:d9:8d:60:d3:bc:f9:3f:e7: c7:46:c8:7e:0c:1c:b6:25:1c:39:37:bd:cb:4c:a2:cb:92:60: 52:58:0b:c8:5d:20:e7:77:7c:7d:5b:42:b7:b1:d4:aa:7c:bc: f9:77:e9:0c:2f:58:5e:bb:08:91:cd:de:df:5c:c7:a7:0e:7d: de:e3:ab:74:11:d7:2d:08:0f:e1:48:35:a3:7f:f3:50:9a:20: cc:29:e2:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUc2PF2eX+IdbcivrEH4EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3YmU1N2YyNmEyYzEwN2IxYTc1NmI4MzE3MTVlYmQwN2E4 N2ZiOTMwHhcNMjUxMjI2MTEwMTA5WhcNMjUxMjI3MTEwMTA5WjAzMTEwLwYDVQQD EygyOTc4ZTNkODM2MDcwMWYzZDk0OTMyMTdhZGUxOGI0MGNlZDk2Mzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroslvq0z9gsEEqsRIVtL3r/dl9eY EIzICJW3kkn46g0BCwOKoN1jhJERnjAGrwkHWPDn2QpDOJlQJWm9Zhe26xLc6I2d q6IIFSw/gK3hOwnC4i7jAeYnkXuwPWXmqdmmhR+0VxlebHxm3Xe/FEcfM06Rr+5A uX917Gqk1SwLF3KDshV6YrYbE4oEsTbtvygpNqUPWT9V5gh/hu6f/8kOCMuM3nDs 3bwABHAglqTGHtHgxDHAP+yFNhKoLaQDtY0pyAlvWoKle0uTmXiHB2/3ni+hzW/8 4UgTgUtGMBMKmu821b8HuREDj6gzsYI2oq95Gr2RdptEbOvIQ5vV0vy6NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCl449g2BwHz2UkyF63hi0DO2WOEMB8GA1UdIwQY MBaAFKe+V/JqLBB7GnVrgxcV69B6h/uTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDc1WDhtb3NFSHNhZFd1REZ4WHIwSHFILTVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yNzBkNTUtOGZlYy00ZDM1LTgyODIt ZDNmYzkxYTJkYzg5LzEvcDc1WDhtb3NFSHNhZFd1REZ4WHIwSHFILTVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8yNzBkNTUtOGZlYy00ZDM1LTgyODItZDNmYzkxYTJkYzg5 LzEvcDc1WDhtb3NFSHNhZFd1REZ4WHIwSHFILTVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABhh07+8h Lgy9nzeAy//kx+Unpaqwu4h9/I9oGcrM02xBBiDwYwPTRHZSfjXyfT7CpmYgJLIG g/YYjLEKhNIsUda6ozfbBQXY22ggKxLRUq+YyMg+mY81PT3PWI/Hejvs8eqe+l0p S8GWX+qeUUL3qrSF+nIddSGeEHrUlSNUH5IIYv96PzfpVZmT4q5Bgv+gZL1Rg8ry 7cLQ1ZgcAqCEh9RUMDFhltgEVx6xTNmNYNO8+T/nx0bIfgwctiUcOTe9y0yiy5Jg UlgLyF0g53d8fVtCt7HUqny8+XfpDC9YXrsIkc3e31zHpw593uOrdBHXLQgP4Ug1 o3/zUJogzCniVw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:29 2025 by rpki-client