This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft File: p72yx7M0uUvNQziPIfggktts_Uw.mft (raw, json) Hash identifier: Ngsp9JNzwjuWpigy9tDhT1hzStn/Ev1s+YYU4ezY1Mo= Subject key identifier: CF:5E:E1:3A:19:68:1E:44:26:28:2F:08:86:14:AD:47:74:9F:55:BB Authority key identifier: A7:BD:B2:C7:B3:34:B9:4B:CD:43:38:8F:21:F8:20:92:DB:6C:FD:4C Certificate issuer: /CN=a7bdb2c7b334b94bcd43388f21f82092db6cfd4c Certificate serial: 019B26D23E2DA96F498CAB10BA3F0CE7C6A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft Manifest number: 177D Signing time: Tue 16 Dec 2025 11:01:11 +0000 Manifest this update: Tue 16 Dec 2025 11:01:11 +0000 Manifest next update: Wed 17 Dec 2025 11:01:11 +0000 Files and hashes: 1: Wh_K5Ot0PdOltJAZbDMBxaT8CJw.roa (hash: VIjWDHn3J2RwnBzOCzHWLW6nGxWdyzjrSq+KdnZiOMU=) 2: p72yx7M0uUvNQziPIfggktts_Uw.crl (hash: ZCPwk69GDnZ7sDCtp1V53+DFRN4fJsyTZ92r+2LfmCY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.crl rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 11:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:d2:3e:2d:a9:6f:49:8c:ab:10:ba:3f:0c:e7:c6:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7bdb2c7b334b94bcd43388f21f82092db6cfd4c Validity Not Before: Dec 16 11:01:11 2025 GMT Not After : Dec 17 11:01:11 2025 GMT Subject: CN=cf5ee13a19681e4426282f088614ad47749f55bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:51:79:69:54:bb:35:e0:b8:44:38:47:e0:1b: b4:43:1a:8e:dd:16:b1:29:31:22:f1:ad:23:21:c0: 81:49:25:cf:15:63:18:a7:cc:e8:ba:af:f8:40:cd: 3b:7c:f6:df:ca:5c:53:63:49:e4:18:1b:33:e5:34: 80:3d:42:a7:c0:f6:a6:65:5b:21:36:f9:ab:26:ff: 97:30:e2:93:24:2e:83:51:0f:3a:ce:a2:46:e8:bb: 8e:f0:1b:f8:13:ed:75:a2:56:52:b8:04:5c:fe:de: cd:d7:c2:bc:ab:c2:5f:72:30:53:c4:15:8c:34:27: d0:28:cc:45:85:7d:4c:54:69:9e:0d:44:eb:6e:4a: 09:36:25:78:f1:c1:bb:f9:57:96:b1:c6:7b:e1:74: 7c:d5:4b:c0:8d:23:aa:89:c9:39:a4:8b:62:f2:5d: c0:bb:ad:45:11:b4:49:9d:8d:15:ce:4a:77:50:7d: 21:ae:fe:21:a9:dd:2e:22:12:31:89:13:f3:56:93: 2e:02:7b:52:0e:35:a2:4d:21:84:2c:d1:38:dd:b8: b6:c9:90:2e:55:40:87:38:d8:ed:87:03:fc:7f:1f: 05:5e:df:61:82:d1:8e:5e:db:0b:9b:34:e4:69:1b: c2:fa:01:1e:01:05:ad:d8:ae:9b:cf:ac:99:62:b9: b7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:5E:E1:3A:19:68:1E:44:26:28:2F:08:86:14:AD:47:74:9F:55:BB X509v3 Authority Key Identifier: keyid:A7:BD:B2:C7:B3:34:B9:4B:CD:43:38:8F:21:F8:20:92:DB:6C:FD:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:5a:79:58:df:67:2a:d9:29:7d:b3:48:35:2b:08:75:c1:17: 85:70:d6:43:23:f9:fe:ae:75:c3:3d:0f:89:f0:1e:65:d8:2c: 58:3d:d4:6d:30:bb:a1:6d:fc:43:82:dd:63:06:50:ab:8c:e2: 18:9b:f2:7a:7c:04:52:5c:40:30:b7:85:69:53:2c:a0:aa:6e: d7:52:0c:1b:a8:21:53:cc:c7:2b:ea:b5:04:b8:0a:9d:17:1d: d7:54:d8:93:e3:77:9b:00:a1:a2:c0:18:ec:5d:4c:a8:08:99: b0:08:d7:f1:6c:fa:9b:b5:dd:13:8d:29:03:57:10:18:82:47: 6e:ad:d8:9f:66:cb:7c:70:80:5e:b2:c9:eb:94:d8:3f:91:e1: 54:97:51:ab:5f:93:da:47:ca:3c:29:61:50:51:37:0a:be:d6: 92:88:56:98:ca:1a:79:6a:fb:4c:c4:31:4b:de:6c:ea:85:4c: 04:12:51:dc:a4:b7:54:8b:c9:57:1f:ca:ec:5a:27:44:be:69: c4:61:56:cb:74:4a:f1:d3:cd:b2:03:ea:e2:8f:41:ec:a8:31: bc:32:f5:eb:fe:bb:b8:7a:4d:d7:1c:a1:43:02:de:6a:43:c9: 9e:4c:90:a3:26:09:99:70:75:60:56:93:fd:b5:35:d9:d7:b7: c5:6c:e3:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsm0j4tqW9JjKsQuj8M58aoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3YmRiMmM3YjMzNGI5NGJjZDQzMzg4ZjIxZjgyMDkyZGI2 Y2ZkNGMwHhcNMjUxMjE2MTEwMTExWhcNMjUxMjE3MTEwMTExWjAzMTEwLwYDVQQD EyhjZjVlZTEzYTE5NjgxZTQ0MjYyODJmMDg4NjE0YWQ0Nzc0OWY1NWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1F5aVS7NeC4RDhH4Bu0QxqO3Rax KTEi8a0jIcCBSSXPFWMYp8zouq/4QM07fPbfylxTY0nkGBsz5TSAPUKnwPamZVsh NvmrJv+XMOKTJC6DUQ86zqJG6LuO8Bv4E+11olZSuARc/t7N18K8q8JfcjBTxBWM NCfQKMxFhX1MVGmeDUTrbkoJNiV48cG7+VeWscZ74XR81UvAjSOqick5pIti8l3A u61FEbRJnY0Vzkp3UH0hrv4hqd0uIhIxiRPzVpMuAntSDjWiTSGELNE43bi2yZAu VUCHONjthwP8fx8FXt9hgtGOXtsLmzTkaRvC+gEeAQWt2K6bz6yZYrm3xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM9e4ToZaB5EJigvCIYUrUd0n1W7MB8GA1UdIwQY MBaAFKe9ssezNLlLzUM4jyH4IJLbbP1MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDcyeXg3TTB1VXZOUXppUElmZ2drdHRzX1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hMWVlOTYtMmVlZC00NTMzLThhZmQt YTk1OGJmNWFjYmVhLzEvcDcyeXg3TTB1VXZOUXppUElmZ2drdHRzX1V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9hMWVlOTYtMmVlZC00NTMzLThhZmQtYTk1OGJmNWFjYmVh LzEvcDcyeXg3TTB1VXZOUXppUElmZ2drdHRzX1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoVp5WN9n KtkpfbNINSsIdcEXhXDWQyP5/q51wz0PifAeZdgsWD3UbTC7oW38Q4LdYwZQq4zi GJvyenwEUlxAMLeFaVMsoKpu11IMG6ghU8zHK+q1BLgKnRcd11TYk+N3mwChosAY 7F1MqAiZsAjX8Wz6m7XdE40pA1cQGIJHbq3Yn2bLfHCAXrLJ65TYP5HhVJdRq1+T 2kfKPClhUFE3Cr7WkohWmMoaeWr7TMQxS95s6oVMBBJR3KS3VIvJVx/K7FonRL5p xGFWy3RK8dPNsgPq4o9B7KgxvDL16/67uHpN1xyhQwLeakPJnkyQoyYJmXB1YFaT /bU12de3xWzjZg== -----END CERTIFICATE-----Generated at Tue Dec 16 17:52:51 2025 by rpki-client