This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.mft File: pxn9xw058Tw3hNMlrith8PPJn0g.mft (raw, json) Hash identifier: jOoOu4F0Xx0kPExkTTyY7HIuOYwAe/cc00w75opxMnI= Subject key identifier: 21:15:40:CD:89:7E:4F:90:FB:C4:98:FF:E8:8B:20:1A:67:EB:0B:27 Authority key identifier: A7:19:FD:C7:0D:39:F1:3C:37:84:D3:25:AE:2B:61:F0:F3:C9:9F:48 Certificate issuer: /CN=a719fdc70d39f13c3784d325ae2b61f0f3c99f48 Certificate serial: 019B378EDBD597F0566FE23D89B1FA5B91E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxn9xw058Tw3hNMlrith8PPJn0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 17:01:07 +0000 Manifest this update: Fri 19 Dec 2025 17:01:07 +0000 Manifest next update: Sat 20 Dec 2025 17:01:07 +0000 Files and hashes: 1: ldBjKa6qQD6NaVa0xAumkdWo3gI.roa (hash: 2YMpg6Ripbk87w4Re6g4mOYhXFU2yNWWD+lkjoRwRkM=) 2: pxn9xw058Tw3hNMlrith8PPJn0g.crl (hash: oWdlmQO5tjidVNoTBmcX8r6hNA/KKQKFgMpxa8BzYac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.crl rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.mft rsync://rpki.ripe.net/repository/DEFAULT/pxn9xw058Tw3hNMlrith8PPJn0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8e:db:d5:97:f0:56:6f:e2:3d:89:b1:fa:5b:91:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a719fdc70d39f13c3784d325ae2b61f0f3c99f48 Validity Not Before: Dec 19 17:01:07 2025 GMT Not After : Dec 20 17:01:07 2025 GMT Subject: CN=211540cd897e4f90fbc498ffe88b201a67eb0b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:85:ea:40:27:2c:31:80:1a:85:f6:9b:18:f5: 03:2a:90:c9:fe:c9:38:12:01:cb:f2:16:7c:78:ed: db:2a:7e:a6:c0:e9:46:7d:b8:ba:bf:42:08:4b:74: 8f:8e:f9:6f:c6:0f:31:9e:4a:06:4d:d1:ab:0c:0d: fc:47:56:3a:69:ee:27:2f:73:c1:2f:3b:59:79:93: b3:4d:0e:9d:3c:4d:36:fc:42:7f:4a:0e:93:ad:f9: f5:88:37:8f:b7:64:22:35:5d:93:35:1e:c0:83:e1: c7:f5:ef:36:05:cd:44:a7:d6:5c:96:a7:43:80:9d: 5a:3e:b1:db:79:98:81:35:82:bd:e9:af:99:e0:c8: 20:6c:b0:f3:58:8c:d2:67:68:65:ff:74:4a:21:23: 27:f4:8a:23:0b:83:ea:dc:82:a6:bf:40:69:92:e8: 2e:42:37:6c:bb:d3:3a:36:b6:d0:f1:cd:f8:e8:b9: d2:f0:c3:52:0b:0e:c0:47:d8:a4:74:b5:b1:c6:ca: bb:55:5f:88:12:97:9b:e5:c1:89:9c:05:51:c6:f7: a8:77:d3:1f:4a:f7:d3:b5:e1:73:17:c9:6b:6e:42: 3a:9c:19:18:e9:be:fb:8b:3c:76:bf:b9:ae:22:59: f6:a9:96:7a:62:ec:5c:ae:d7:4b:68:37:4e:9b:56: 6d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:15:40:CD:89:7E:4F:90:FB:C4:98:FF:E8:8B:20:1A:67:EB:0B:27 X509v3 Authority Key Identifier: keyid:A7:19:FD:C7:0D:39:F1:3C:37:84:D3:25:AE:2B:61:F0:F3:C9:9F:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxn9xw058Tw3hNMlrith8PPJn0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:25:53:dc:90:c0:5f:82:3b:8d:23:9f:a7:8d:a8:24:6c:b8: a7:84:91:74:2e:13:8f:46:4c:4a:35:ed:eb:f6:32:d2:a8:55: 56:f0:84:cd:b3:02:21:c4:f3:a3:92:03:30:84:3e:1b:b3:a2: b6:73:18:86:42:ca:3e:6a:1f:b2:72:1e:83:64:23:7d:79:21: 91:cc:b1:c8:03:da:0a:c0:08:7b:af:a8:13:ae:ac:62:47:ce: e8:79:61:a4:79:f3:d7:72:66:55:39:9c:f2:0a:89:4f:6b:5c: 97:17:88:a0:1a:de:75:50:d8:49:10:45:6b:74:49:3e:ea:2b: a9:92:18:89:f8:92:ac:f8:ad:71:8b:a0:6d:ee:67:ac:fa:f9: 5f:b6:e3:71:49:96:c6:bd:8c:54:1a:17:76:10:ee:9e:ce:8e: 83:20:0a:8c:bf:21:48:5b:50:47:68:a3:2a:69:1f:57:20:28: af:4f:18:27:c1:4d:df:f7:d2:9b:9d:73:6e:34:53:b9:7d:54: 1f:be:cd:87:6b:df:39:94:02:c5:13:f9:fc:9a:03:f8:0e:c4: 35:e9:cf:6f:1b:74:ba:37:e9:82:08:93:38:00:ec:65:ca:ad: b4:4b:2e:e2:de:95:23:a1:f4:f9:92:c2:aa:95:b3:1f:27:ca: af:71:8d:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jtvVl/BWb+I9ibH6W5HkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3MTlmZGM3MGQzOWYxM2MzNzg0ZDMyNWFlMmI2MWYwZjNj OTlmNDgwHhcNMjUxMjE5MTcwMTA3WhcNMjUxMjIwMTcwMTA3WjAzMTEwLwYDVQQD EygyMTE1NDBjZDg5N2U0ZjkwZmJjNDk4ZmZlODhiMjAxYTY3ZWIwYjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIXqQCcsMYAahfabGPUDKpDJ/sk4 EgHL8hZ8eO3bKn6mwOlGfbi6v0IIS3SPjvlvxg8xnkoGTdGrDA38R1Y6ae4nL3PB LztZeZOzTQ6dPE02/EJ/Sg6Trfn1iDePt2QiNV2TNR7Ag+HH9e82Bc1Ep9ZclqdD gJ1aPrHbeZiBNYK96a+Z4MggbLDzWIzSZ2hl/3RKISMn9IojC4Pq3IKmv0Bpkugu Qjdsu9M6NrbQ8c346LnS8MNSCw7AR9ikdLWxxsq7VV+IEpeb5cGJnAVRxveod9Mf SvfTteFzF8lrbkI6nBkY6b77izx2v7muIln2qZZ6YuxcrtdLaDdOm1ZtnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCEVQM2Jfk+Q+8SY/+iLIBpn6wsnMB8GA1UdIwQY MBaAFKcZ/ccNOfE8N4TTJa4rYfDzyZ9IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHhuOXh3MDU4VHczaE5NbHJpdGg4UFBKbjBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9kNzJiZjMtMWNhOS00MDIzLWFjZjUt ZDVhNDIzNDQyZDM1LzEvcHhuOXh3MDU4VHczaE5NbHJpdGg4UFBKbjBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9kNzJiZjMtMWNhOS00MDIzLWFjZjUtZDVhNDIzNDQyZDM1 LzEvcHhuOXh3MDU4VHczaE5NbHJpdGg4UFBKbjBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiiVT3JDA X4I7jSOfp42oJGy4p4SRdC4Tj0ZMSjXt6/Yy0qhVVvCEzbMCIcTzo5IDMIQ+G7Oi tnMYhkLKPmofsnIeg2QjfXkhkcyxyAPaCsAIe6+oE66sYkfO6HlhpHnz13JmVTmc 8gqJT2tclxeIoBredVDYSRBFa3RJPuorqZIYifiSrPitcYugbe5nrPr5X7bjcUmW xr2MVBoXdhDuns6OgyAKjL8hSFtQR2ijKmkfVyAor08YJ8FN3/fSm51zbjRTuX1U H77Nh2vfOZQCxRP5/JoD+A7ENenPbxt0ujfpggiTOADsZcqttEsu4t6VI6H0+ZLC qpWzHyfKr3GNmg== -----END CERTIFICATE-----Generated at Fri Dec 19 22:07:42 2025 by rpki-client