This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft File: p_lKuTUFS4bctdatutLf21ZLUkg.mft (raw, json) Hash identifier: +A8UomEbdH1xc/u48te2mHVd2MrsLk+bg7lUZeABxkU= Subject key identifier: D4:9D:49:D2:C4:67:E5:FD:50:5E:60:02:10:C5:0B:C1:97:1C:3D:BE Authority key identifier: A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48 Certificate issuer: /CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248 Certificate serial: 019B0F00EA3800471DDDE721AA845D93903B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft Manifest number: 1773 Signing time: Thu 11 Dec 2025 20:01:16 +0000 Manifest this update: Thu 11 Dec 2025 20:01:16 +0000 Manifest next update: Fri 12 Dec 2025 20:01:16 +0000 Files and hashes: 1: 64bxF7wA4GbyNp68j4QvJJrXvcY.roa (hash: /BZbUI4tcOvcN8G1/WOb5wicEcPAOnUGplNlfdXvoLw=) 2: 6i00LPl42nHb8qbMKvKVhPUPT4A.roa (hash: 2YZA57Jg0ln+zFDDEt7ePeu3FeU4ieQ7XTEhkxEpCwM=) 3: O0E_dnFN5zi96CvgLLN6eJoyMkM.roa (hash: Ns1LJilR3FhqXle0WRn94Ds/xQRz0HxzYlILaBi7ZCU=) 4: p_lKuTUFS4bctdatutLf21ZLUkg.crl (hash: ZJxqJeR6ezUfRf3tfH+qY8G+mnh4EM60J0gUlsfPbyI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:ea:38:00:47:1d:dd:e7:21:aa:84:5d:93:90:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248 Validity Not Before: Dec 11 20:01:16 2025 GMT Not After : Dec 12 20:01:16 2025 GMT Subject: CN=d49d49d2c467e5fd505e600210c50bc1971c3dbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:67:6f:f7:6a:5a:87:b7:1a:3e:8c:73:51:c1: 1e:6b:d5:d3:9b:cd:d5:a3:7b:7c:d3:7b:05:40:06: 75:ea:32:59:c8:59:3d:e8:a9:d3:6b:14:e2:15:93: 6e:ee:b7:8f:c2:0e:ae:c4:4d:eb:3c:ed:c3:eb:b0: 07:d2:6d:5b:cd:9f:8c:4e:1a:95:19:ec:a9:26:4c: c7:4f:9e:de:ac:b1:29:25:ed:89:de:73:6b:21:0e: ba:61:e9:c7:1f:42:f4:69:e9:72:0f:45:c0:92:e9: fe:29:23:aa:d0:c5:8e:70:85:04:18:8b:ed:bc:83: a5:10:b6:8f:4e:b1:8d:f5:e1:d5:17:70:bb:03:0d: b8:44:47:63:ff:b7:88:f4:6b:ea:0f:8c:89:1e:02: 4c:f6:dd:7f:a4:48:5b:c6:8c:ab:44:5b:b7:6a:5d: fb:43:da:0b:60:17:78:e3:b7:c5:e8:0f:0e:b1:f5: 18:ce:ca:06:e1:81:40:61:1f:80:81:95:93:f0:85: a3:eb:15:a7:4f:aa:6f:dc:e6:31:9d:47:c3:a2:c4: 44:a7:06:86:a4:68:dd:1d:3d:95:81:89:fb:cc:7b: 37:14:63:4c:dd:d7:6f:e4:36:38:b7:78:19:82:93: 25:6c:96:a3:6f:8f:c1:61:18:23:65:4f:78:32:cb: f7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:9D:49:D2:C4:67:E5:FD:50:5E:60:02:10:C5:0B:C1:97:1C:3D:BE X509v3 Authority Key Identifier: keyid:A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:22:03:40:eb:6d:75:eb:ef:31:4f:a6:ea:b4:b2:44:e0:52: ae:69:f3:ef:3a:6c:9d:ab:42:da:ba:ee:c9:da:eb:35:de:4e: e8:6e:4e:0c:0a:bf:46:df:0a:12:f8:38:51:84:32:65:54:8e: 15:b0:cb:2a:f0:d6:f2:97:97:b6:03:40:ea:23:b3:ba:92:2e: 05:bf:2b:45:cb:00:ce:10:4f:9e:0f:6b:2f:71:78:9b:72:4a: c2:ab:13:63:ef:46:d1:f8:89:ea:b7:c0:28:38:c1:9e:f0:15: 9d:ef:37:b8:00:c0:27:7b:5f:90:6f:e0:fc:42:e9:52:c6:4b: 92:0e:71:50:0b:43:64:2f:29:18:ff:d2:60:02:fa:58:06:21: 1b:19:9b:30:4c:79:b8:d9:ea:99:dd:75:c9:4c:9e:5a:45:26: 2b:e3:75:60:50:41:33:41:47:02:6a:58:bd:ce:eb:5b:10:21: 56:a7:15:63:11:ee:d8:3e:7f:19:58:df:8b:40:8e:ed:83:bb: 6b:7b:f5:c8:79:c9:b4:75:4c:f4:a5:7a:b5:98:e2:de:43:f8: 1c:b2:f6:94:bc:67:79:29:de:68:00:2a:ce:ed:d0:41:2a:3e: 6a:44:51:a5:81:6c:5d:cc:97:74:4d:09:a3:f8:9b:3a:46:87: f4:f5:6c:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAOo4AEcd3echqoRdk5A7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3Zjk0YWI5MzUwNTRiODZkY2I1ZDZhZGJhZDJkZmRiNTY0 YjUyNDgwHhcNMjUxMjExMjAwMTE2WhcNMjUxMjEyMjAwMTE2WjAzMTEwLwYDVQQD EyhkNDlkNDlkMmM0NjdlNWZkNTA1ZTYwMDIxMGM1MGJjMTk3MWMzZGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumdv92pah7caPoxzUcEea9XTm83V o3t803sFQAZ16jJZyFk96KnTaxTiFZNu7rePwg6uxE3rPO3D67AH0m1bzZ+MThqV GeypJkzHT57erLEpJe2J3nNrIQ66YenHH0L0aelyD0XAkun+KSOq0MWOcIUEGIvt vIOlELaPTrGN9eHVF3C7Aw24REdj/7eI9GvqD4yJHgJM9t1/pEhbxoyrRFu3al37 Q9oLYBd447fF6A8OsfUYzsoG4YFAYR+AgZWT8IWj6xWnT6pv3OYxnUfDosREpwaG pGjdHT2VgYn7zHs3FGNM3ddv5DY4t3gZgpMlbJajb4/BYRgjZU94Msv39wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNSdSdLEZ+X9UF5gAhDFC8GXHD2+MB8GA1UdIwQY MBaAFKf5Srk1BUuG3LXWrbrS39tWS1JIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcF9sS3VUVUZTNGJjdGRhdHV0TGYyMVpMVWtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy83ZTM4YjItYmVjMS00NDY0LWEwY2Et N2QyNThiNjIwMTY5LzEvcF9sS3VUVUZTNGJjdGRhdHV0TGYyMVpMVWtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy83ZTM4YjItYmVjMS00NDY0LWEwY2EtN2QyNThiNjIwMTY5 LzEvcF9sS3VUVUZTNGJjdGRhdHV0TGYyMVpMVWtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZyIDQOtt devvMU+m6rSyROBSrmnz7zpsnatC2rruydrrNd5O6G5ODAq/Rt8KEvg4UYQyZVSO FbDLKvDW8peXtgNA6iOzupIuBb8rRcsAzhBPng9rL3F4m3JKwqsTY+9G0fiJ6rfA KDjBnvAVne83uADAJ3tfkG/g/ELpUsZLkg5xUAtDZC8pGP/SYAL6WAYhGxmbMEx5 uNnqmd11yUyeWkUmK+N1YFBBM0FHAmpYvc7rWxAhVqcVYxHu2D5/GVjfi0CO7YO7 a3v1yHnJtHVM9KV6tZji3kP4HLL2lLxneSneaAAqzu3QQSo+akRRpYFsXcyXdE0J o/ibOkaH9PVsgA== -----END CERTIFICATE-----Generated at Fri Dec 12 00:11:24 2025 by rpki-client