This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft File: p4wD9FkI30xFw_B9KkssQCRdUTI.mft (raw, json) Hash identifier: nhJOEdblwexzQrw9tNucMtYJFBovl/+l8bh72SUc8ww= Subject key identifier: E6:6A:36:54:5F:C5:91:90:46:A6:34:1A:3F:1F:EC:D4:DE:A0:C7:EB Authority key identifier: A7:8C:03:F4:59:08:DF:4C:45:C3:F0:7D:2A:4B:2C:40:24:5D:51:32 Certificate issuer: /CN=a78c03f45908df4c45c3f07d2a4b2c40245d5132 Certificate serial: 019B32D6B7A28BC4BC87F3C069393146E7B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p4wD9FkI30xFw_B9KkssQCRdUTI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft Manifest number: 1786 Signing time: Thu 18 Dec 2025 19:01:31 +0000 Manifest this update: Thu 18 Dec 2025 19:01:31 +0000 Manifest next update: Fri 19 Dec 2025 19:01:31 +0000 Files and hashes: 1: p4wD9FkI30xFw_B9KkssQCRdUTI.crl (hash: VsianFZqn76iBsTFP/NWyLkRSUI2qCTKufv5QVXY2wU=) 2: zPOGOjbboaQbMeAXK6bmSX50QU0.roa (hash: OFCJwWf3DDsRtbtAfKkoaMdc4vMktJu9Jl985uyVWSg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft rsync://rpki.ripe.net/repository/DEFAULT/p4wD9FkI30xFw_B9KkssQCRdUTI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:b7:a2:8b:c4:bc:87:f3:c0:69:39:31:46:e7:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a78c03f45908df4c45c3f07d2a4b2c40245d5132 Validity Not Before: Dec 18 19:01:31 2025 GMT Not After : Dec 19 19:01:31 2025 GMT Subject: CN=e66a36545fc5919046a6341a3f1fecd4dea0c7eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9a:ea:6b:57:56:95:b3:eb:cc:55:2f:9d:eb: 18:62:a4:fd:9e:52:f9:70:c5:8a:ec:bc:0e:d6:4b: 9f:de:f5:b1:d3:83:53:aa:8e:d4:bd:60:14:db:c3: 0f:b6:a0:94:6c:ae:14:d7:d3:45:b8:33:1b:07:ae: 5d:89:fb:a6:13:d9:41:1a:72:dc:77:8a:0c:37:b2: f9:47:9d:1d:b0:8b:35:e6:99:29:0d:e6:dd:c6:47: 7e:80:ad:ec:3c:5a:c5:6e:1e:c8:c9:b9:a3:ea:30: f6:57:cc:14:20:c4:b4:f9:e4:f7:5f:0a:a3:03:1c: 36:5f:e0:58:26:f9:85:9c:4f:51:91:0e:f0:3d:64: fd:fb:27:68:d2:e4:6f:9a:65:23:13:6f:b3:a2:b3: 58:cd:c1:26:56:25:e5:38:57:05:e0:a8:00:ec:74: 3f:f3:f6:58:87:4d:76:94:68:75:45:0d:f3:59:c0: b1:d1:a9:e5:33:2c:4d:d4:a6:8f:c2:94:13:16:2a: bd:cf:03:e9:80:48:44:6a:ac:af:a3:60:fe:49:32: f6:a2:7e:13:42:6c:63:5a:c4:03:0e:61:b3:ea:c4: 3b:80:78:cf:34:3b:31:4c:8d:5f:15:aa:77:4b:ea: 01:25:63:cd:91:ce:a1:f2:6a:e9:97:94:bb:ec:46: 4f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:6A:36:54:5F:C5:91:90:46:A6:34:1A:3F:1F:EC:D4:DE:A0:C7:EB X509v3 Authority Key Identifier: keyid:A7:8C:03:F4:59:08:DF:4C:45:C3:F0:7D:2A:4B:2C:40:24:5D:51:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p4wD9FkI30xFw_B9KkssQCRdUTI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:8a:d9:65:42:6a:b9:c7:19:44:c8:b9:78:18:d7:8e:bb:bc: 09:0c:d1:31:fb:51:cb:79:11:ce:d4:d5:b7:8d:37:4b:22:a5: d8:f2:9f:d1:1f:db:d3:a7:cf:d2:67:4d:fd:7e:57:c8:60:3d: a6:af:ba:91:9d:b9:99:fe:ba:6e:31:a0:2f:e4:22:8a:2b:01: 28:27:78:b2:fd:92:59:b4:3b:e1:8d:16:e4:fc:57:b2:eb:b5: 70:10:97:6a:ce:03:59:00:ca:88:ac:46:94:bf:b0:65:9a:0b: da:f3:50:5b:e3:8d:31:ff:f2:6d:44:12:d0:3d:24:39:54:8e: 46:ec:1e:5e:a8:04:a3:60:7f:ad:e3:ee:bc:93:30:2f:a9:7f: c3:93:90:a1:32:e5:2f:3b:cb:ee:aa:54:f6:8e:80:39:5a:d2: df:dd:71:60:56:00:b4:6c:48:e7:dc:b2:bb:fd:ae:fc:9e:b6: 42:38:1d:d2:85:e9:7a:6e:22:37:9d:16:d7:c6:93:55:72:3c: cc:f8:d7:e1:60:80:b7:46:ed:ce:32:21:a7:0c:73:7c:a6:18: 28:0a:f2:24:d5:46:12:78:74:a0:4d:66:9b:18:8a:ec:36:a4: 39:ca:21:93:39:7a:16:77:fc:30:78:33:72:6f:78:a0:f6:39: 41:e1:40:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1reii8S8h/PAaTkxRue1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3OGMwM2Y0NTkwOGRmNGM0NWMzZjA3ZDJhNGIyYzQwMjQ1 ZDUxMzIwHhcNMjUxMjE4MTkwMTMxWhcNMjUxMjE5MTkwMTMxWjAzMTEwLwYDVQQD EyhlNjZhMzY1NDVmYzU5MTkwNDZhNjM0MWEzZjFmZWNkNGRlYTBjN2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5rqa1dWlbPrzFUvnesYYqT9nlL5 cMWK7LwO1kuf3vWx04NTqo7UvWAU28MPtqCUbK4U19NFuDMbB65difumE9lBGnLc d4oMN7L5R50dsIs15pkpDebdxkd+gK3sPFrFbh7Iybmj6jD2V8wUIMS0+eT3Xwqj Axw2X+BYJvmFnE9RkQ7wPWT9+ydo0uRvmmUjE2+zorNYzcEmViXlOFcF4KgA7HQ/ 8/ZYh012lGh1RQ3zWcCx0anlMyxN1KaPwpQTFiq9zwPpgEhEaqyvo2D+STL2on4T QmxjWsQDDmGz6sQ7gHjPNDsxTI1fFap3S+oBJWPNkc6h8mrpl5S77EZPtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOZqNlRfxZGQRqY0Gj8f7NTeoMfrMB8GA1UdIwQY MBaAFKeMA/RZCN9MRcPwfSpLLEAkXVEyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDR3RDlGa0kzMHhGd19COUtrc3NRQ1JkVVRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9lNWM2OTctY2M5My00ZDcxLWI5NDAt OWJhODViZTNiZjA5LzEvcDR3RDlGa0kzMHhGd19COUtrc3NRQ1JkVVRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9lNWM2OTctY2M5My00ZDcxLWI5NDAtOWJhODViZTNiZjA5 LzEvcDR3RDlGa0kzMHhGd19COUtrc3NRQ1JkVVRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACorZZUJq uccZRMi5eBjXjru8CQzRMftRy3kRztTVt403SyKl2PKf0R/b06fP0mdN/X5XyGA9 pq+6kZ25mf66bjGgL+QiiisBKCd4sv2SWbQ74Y0W5PxXsuu1cBCXas4DWQDKiKxG lL+wZZoL2vNQW+ONMf/ybUQS0D0kOVSORuweXqgEo2B/rePuvJMwL6l/w5OQoTLl LzvL7qpU9o6AOVrS391xYFYAtGxI59yyu/2u/J62Qjgd0oXpem4iN50W18aTVXI8 zPjX4WCAt0btzjIhpwxzfKYYKAryJNVGEnh0oE1mmxiK7DakOcohkzl6Fnf8MHgz cm94oPY5QeFAJQ== -----END CERTIFICATE-----Generated at Fri Dec 19 04:54:21 2025 by rpki-client