This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft File: p9ha3isNTsHKCSqOJwPBkgDHLzI.mft (raw, json) Hash identifier: 2ixzmVUK3tWXzYbVHwITh9skodDzxWoErsSJMrSsHoo= Subject key identifier: 78:4A:46:0C:36:D3:E1:9A:BF:12:71:0A:5C:09:4E:30:67:04:A6:C1 Authority key identifier: A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32 Certificate issuer: /CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32 Certificate serial: 019B5A8891F402D1E30B46A4AC1D34FF8159 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft Manifest number: 100D Signing time: Fri 26 Dec 2025 12:00:58 +0000 Manifest this update: Fri 26 Dec 2025 12:00:58 +0000 Manifest next update: Sat 27 Dec 2025 12:00:58 +0000 Files and hashes: 1: 6riQFYOnevsA9sVsHrkvtdsLBq4.roa (hash: 5uUkQdH5SvzA028+fnhXMEwCfe7fiY4uQ2BW/w0zxVk=) 2: V78L3J5oIjHVBChvXIOgu9Ohs78.roa (hash: CdwTBRVREg2srUT+l5SA7LltUlSHpLsaVjkjqAH9C7o=) 3: p9ha3isNTsHKCSqOJwPBkgDHLzI.crl (hash: 3lasOMhvz3nYZr3sbwpyrrVeikItZMPkH3BFIaOsetY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:91:f4:02:d1:e3:0b:46:a4:ac:1d:34:ff:81:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32 Validity Not Before: Dec 26 12:00:58 2025 GMT Not After : Dec 27 12:00:58 2025 GMT Subject: CN=784a460c36d3e19abf12710a5c094e306704a6c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c4:4c:04:af:e1:82:76:83:e0:16:03:92:d3: e4:e5:14:8f:75:f5:e8:6e:a9:12:dc:82:d2:f7:af: 4a:77:a9:30:5d:76:b1:3d:47:d8:fe:d0:5a:8f:cb: bf:60:a3:08:96:ae:63:9b:fd:4d:6d:18:3a:73:c1: 7f:02:e7:f8:2c:3d:49:b8:3a:1d:a4:c8:ef:6d:b4: f3:64:93:20:be:74:29:dc:29:18:26:68:ea:19:b4: 63:e6:a9:78:7f:12:cf:76:b4:fa:63:69:92:38:56: 8a:4d:13:9a:0e:a6:00:af:8f:e5:3b:2f:3f:fd:fa: b8:1f:17:53:be:40:7f:27:69:e6:6b:bb:aa:ac:01: 2a:c8:9e:46:8b:f1:b3:6d:e7:cd:b2:03:00:bc:e9: 28:e3:2e:09:8b:ee:4c:34:3b:7a:eb:af:e8:6d:03: eb:e7:d9:85:7e:46:2e:9f:1c:f3:9b:9c:1f:ae:cc: fd:22:5a:cf:49:73:d2:e2:2f:38:e6:40:42:32:26: 79:13:c6:5a:7e:1d:de:8c:26:1c:11:4d:cb:60:c9: 50:91:fe:80:d9:1c:a4:cf:44:1c:b4:54:a3:4d:34: 61:cf:e2:1c:4b:64:2f:7f:f5:1f:df:41:f4:d2:66: 18:e4:fb:b7:f6:61:42:51:89:27:b5:42:38:76:17: 19:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:4A:46:0C:36:D3:E1:9A:BF:12:71:0A:5C:09:4E:30:67:04:A6:C1 X509v3 Authority Key Identifier: keyid:A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:e6:9a:eb:3c:07:11:5f:12:48:19:02:80:de:4a:27:ca:cd: 1a:aa:85:cd:21:10:8a:d3:ae:34:b2:b0:c6:43:a3:79:94:23: 89:3e:6c:9d:0f:17:fc:34:59:7c:d5:9a:79:5f:59:ff:d6:51: 6c:b0:4d:cf:a0:b1:a2:ab:52:19:d0:d0:2f:d4:01:29:00:4a: 85:89:4b:48:a1:ad:8a:d7:4f:74:1e:f2:b2:4e:49:71:c6:44: 5e:6d:1c:aa:34:c5:30:78:96:74:4f:fc:9c:2a:4c:08:73:f8: 01:3f:46:86:88:e5:d7:ed:35:27:22:0f:84:98:95:e2:96:61: 45:6e:41:4e:05:0e:ae:38:eb:8d:8e:f7:ee:53:85:94:d2:1b: c1:55:e1:2f:0c:08:a7:63:d5:10:c8:11:31:15:d2:a4:2c:6e: 75:c2:11:4d:05:5b:81:ea:13:12:ba:76:e4:91:62:d9:68:65: 90:b8:b0:da:c4:cb:6d:f7:2b:e2:48:46:c0:4e:4d:6b:27:99: 1f:f3:06:4a:40:9a:ac:7e:3f:50:1c:c5:da:08:26:e3:9f:da: f1:45:0c:f6:2e:3c:c5:87:13:16:f9:ce:37:a4:a8:21:73:dd: c3:ed:e7:52:20:d1:0d:a5:0d:17:95:d7:12:f8:10:46:5c:66: 97:23:84:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiJH0AtHjC0akrB00/4FZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZDg1YWRlMmIwZDRlYzFjYTA5MmE4ZTI3MDNjMTkyMDBj NzJmMzIwHhcNMjUxMjI2MTIwMDU4WhcNMjUxMjI3MTIwMDU4WjAzMTEwLwYDVQQD Eyg3ODRhNDYwYzM2ZDNlMTlhYmYxMjcxMGE1YzA5NGUzMDY3MDRhNmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsRMBK/hgnaD4BYDktPk5RSPdfXo bqkS3ILS969Kd6kwXXaxPUfY/tBaj8u/YKMIlq5jm/1NbRg6c8F/Auf4LD1JuDod pMjvbbTzZJMgvnQp3CkYJmjqGbRj5ql4fxLPdrT6Y2mSOFaKTROaDqYAr4/lOy8/ /fq4HxdTvkB/J2nma7uqrAEqyJ5Gi/GzbefNsgMAvOko4y4Ji+5MNDt666/obQPr 59mFfkYunxzzm5wfrsz9IlrPSXPS4i845kBCMiZ5E8Zafh3ejCYcEU3LYMlQkf6A 2Rykz0QctFSjTTRhz+IcS2Qvf/Uf30H00mYY5Pu39mFCUYkntUI4dhcZGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHhKRgw20+GavxJxClwJTjBnBKbBMB8GA1UdIwQY MBaAFKfYWt4rDU7BygkqjicDwZIAxy8yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDloYTNpc05Uc0hLQ1NxT0p3UEJrZ0RITHpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS80MDMxNDItZGNmYy00ZmI1LWFlMWYt MDRiMGJmNjBiOWI3LzEvcDloYTNpc05Uc0hLQ1NxT0p3UEJrZ0RITHpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS80MDMxNDItZGNmYy00ZmI1LWFlMWYtMDRiMGJmNjBiOWI3 LzEvcDloYTNpc05Uc0hLQ1NxT0p3UEJrZ0RITHpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq+aa6zwH EV8SSBkCgN5KJ8rNGqqFzSEQitOuNLKwxkOjeZQjiT5snQ8X/DRZfNWaeV9Z/9ZR bLBNz6CxoqtSGdDQL9QBKQBKhYlLSKGtitdPdB7ysk5JccZEXm0cqjTFMHiWdE/8 nCpMCHP4AT9Ghojl1+01JyIPhJiV4pZhRW5BTgUOrjjrjY737lOFlNIbwVXhLwwI p2PVEMgRMRXSpCxudcIRTQVbgeoTErp25JFi2WhlkLiw2sTLbfcr4khGwE5NayeZ H/MGSkCarH4/UBzF2ggm45/a8UUM9i48xYcTFvnON6SoIXPdw+3nUiDRDaUNF5XX EvgQRlxmlyOE2g== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:15 2025 by rpki-client