This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft File: p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft (raw, json) Hash identifier: z7SvTFBAtKkYayIH1jMzaxLWNymrB0t7fzkqfXCHEg4= Subject key identifier: C8:A3:BF:CA:2A:8F:8A:91:B5:2B:AE:AF:A8:93:AA:C8:BF:26:B1:B3 Authority key identifier: A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3 Certificate issuer: /CN=a7d78de0234e6f99701592f536e45f5f5594eec3 Certificate serial: 019AF6C105F2B67D65E8F474A073808375B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft Manifest number: 176B Signing time: Sun 07 Dec 2025 03:00:36 +0000 Manifest this update: Sun 07 Dec 2025 03:00:36 +0000 Manifest next update: Mon 08 Dec 2025 03:00:36 +0000 Files and hashes: 1: 4kRsEvvYS9vLgzT9RvhH3Igjm9k.roa (hash: I03jyb6kvpeR9AlCu8KypQT8GWzh4/aSh4au4iyy8+I=) 2: DpBq14ju-sMiK3daEy8ixQQfVTk.roa (hash: i+DQu9MJOrZ5CdMAuj/sQPS/Zyr6reglqbrHWvbkyx4=) 3: DqUoj4sK_ahE1s2i6xM85mI1I6k.roa (hash: ghiG8Oanf8lruQ8GxgH5btsaEet/0QjBhkR1Sn2dFKg=) 4: Fnl-4WGHpZ5LXFARfr2ATzp8vLk.roa (hash: ux6nyEJd1cHyE1av/8nhZIQD47mVZkeQGG+DrMwKlok=) 5: QX-JX3Qu6B9dGH2bgHRHXCFQSGM.roa (hash: Libk/j+UTy/9cJUk+hwXMnFM9cOquglWjTlufdsoMkE=) 6: bDPZ2IR6ImcRHKaCKb1DFYZSPeU.roa (hash: C/oWZRw0Dl261ZToD4X2GP0Mb4nYzslAlII1IzygPX8=) 7: jG76lLUgQYaSZsB__7tXEnh7-_I.roa (hash: fSIH28hM1SyCenkx+Z6chI8MtQGu7VXq7U7d1upY0CQ=) 8: ma5oVolydUxkukW1x1dx0oRVMTk.roa (hash: vE8qPyFhzLzPBn/Dd5S1DZU12rMMyEbmBmsnKLuenBI=) 9: p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl (hash: u9eK1T+9tZdz3j77ZpSogjpXWEPTZtvaSs+RHOmnRcI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 03:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:c1:05:f2:b6:7d:65:e8:f4:74:a0:73:80:83:75:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d78de0234e6f99701592f536e45f5f5594eec3 Validity Not Before: Dec 7 03:00:36 2025 GMT Not After : Dec 8 03:00:36 2025 GMT Subject: CN=c8a3bfca2a8f8a91b52baeafa893aac8bf26b1b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a5:2c:43:15:48:f7:5b:db:af:2b:8b:36:96: a8:d2:a3:22:78:a9:69:cb:22:07:77:0b:0d:03:87: 6d:66:42:ac:e2:97:ed:8d:5a:10:35:75:b5:6a:d3: ed:c5:ab:0a:83:a5:23:ea:d0:82:bb:d7:00:f1:81: 71:6b:63:2a:1d:ce:33:c9:98:4a:9e:a0:37:35:ee: 19:ff:02:1f:6c:44:5d:0e:02:ac:93:81:fc:79:5b: 5a:3c:7d:47:63:08:42:d4:b4:68:cd:e7:4b:c6:66: 1f:d5:0c:a2:68:14:09:a8:14:81:a7:36:96:11:ab: 20:0c:de:8d:59:94:ac:54:48:46:c9:28:4e:a5:e3: 09:f5:b3:df:ea:7a:e9:9e:45:54:d1:12:98:d5:d3: 84:b1:7a:ad:a7:f0:5f:5a:09:c2:28:b9:06:b4:35: 9c:4a:9c:22:6a:54:63:90:7d:ed:a7:b6:7a:6b:76: 26:0c:74:48:9d:75:52:b3:68:30:5f:67:6b:0b:17: 9f:ed:0c:bd:80:fa:77:7c:64:c6:f9:1a:54:2d:20: e2:c6:cc:ba:a1:5d:c9:2a:e2:1d:ab:a7:05:a7:81: 7d:46:aa:91:0a:26:05:0c:76:0b:2d:9f:d3:1e:ee: f9:06:31:a2:ba:55:51:49:69:c8:84:56:ba:c9:e9: 86:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A3:BF:CA:2A:8F:8A:91:B5:2B:AE:AF:A8:93:AA:C8:BF:26:B1:B3 X509v3 Authority Key Identifier: keyid:A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:1f:0f:aa:22:ea:d7:45:38:26:cb:c6:ac:e4:83:63:90:0e: f6:40:d0:3b:56:9f:17:c0:9d:0e:f5:60:0f:b4:76:48:e7:de: 12:b6:a8:b7:91:81:ec:bc:32:df:99:b6:e3:b6:7d:d5:51:97: 24:fa:9d:b4:dc:ed:6d:52:8a:16:11:bb:52:9c:bb:e0:ac:cb: e8:ce:14:a3:76:bd:44:d5:6e:30:f0:d6:a5:dc:2c:41:5a:e0: 1a:31:09:a9:db:4c:8a:5b:d5:06:1f:a4:db:85:e4:c4:ff:fd: c3:80:e1:29:71:00:04:86:5d:e4:ca:ea:57:48:c6:77:b8:40: b3:a5:fa:a4:86:98:4f:0f:1b:cb:3a:90:2f:22:88:f1:23:83: a1:5e:6f:5c:32:6c:16:14:bd:4f:9e:38:fc:56:36:24:c1:8e: c1:d0:cf:d4:a8:f1:59:8d:ea:b5:bb:d4:c6:35:41:ef:b6:56: 83:b0:2e:16:1a:a5:2f:b4:40:8f:f1:56:80:00:4a:5d:39:70: 7a:29:bd:01:24:ec:03:e1:9d:0d:ce:60:bd:80:3f:32:68:6c: e1:22:96:d7:93:fa:64:34:6d:36:44:e2:3a:7e:9f:12:9f:d7: 3a:78:44:aa:f2:45:57:c5:c3:4b:3c:19:99:d4:36:af:54:31: e5:e7:07:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2wQXytn1l6PR0oHOAg3W4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZDc4ZGUwMjM0ZTZmOTk3MDE1OTJmNTM2ZTQ1ZjVmNTU5 NGVlYzMwHhcNMjUxMjA3MDMwMDM2WhcNMjUxMjA4MDMwMDM2WjAzMTEwLwYDVQQD EyhjOGEzYmZjYTJhOGY4YTkxYjUyYmFlYWZhODkzYWFjOGJmMjZiMWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1aUsQxVI91vbryuLNpao0qMieKlp yyIHdwsNA4dtZkKs4pftjVoQNXW1atPtxasKg6Uj6tCCu9cA8YFxa2MqHc4zyZhK nqA3Ne4Z/wIfbERdDgKsk4H8eVtaPH1HYwhC1LRozedLxmYf1QyiaBQJqBSBpzaW EasgDN6NWZSsVEhGyShOpeMJ9bPf6nrpnkVU0RKY1dOEsXqtp/BfWgnCKLkGtDWc SpwialRjkH3tp7Z6a3YmDHRInXVSs2gwX2drCxef7Qy9gPp3fGTG+RpULSDixsy6 oV3JKuIdq6cFp4F9RqqRCiYFDHYLLZ/THu75BjGiulVRSWnIhFa6yemGHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMijv8oqj4qRtSuur6iTqsi/JrGzMB8GA1UdIwQY MBaAFKfXjeAjTm+ZcBWS9TbkX19VlO7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8zMWFhYmEtYWM3ZS00ODlmLTg3N2Mt MjhkNWI2MDdhNDdmLzEvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8zMWFhYmEtYWM3ZS00ODlmLTg3N2MtMjhkNWI2MDdhNDdm LzEvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXh8PqiLq 10U4JsvGrOSDY5AO9kDQO1afF8CdDvVgD7R2SOfeEraot5GB7Lwy35m247Z91VGX JPqdtNztbVKKFhG7Upy74KzL6M4Uo3a9RNVuMPDWpdwsQVrgGjEJqdtMilvVBh+k 24XkxP/9w4DhKXEABIZd5MrqV0jGd7hAs6X6pIaYTw8byzqQLyKI8SODoV5vXDJs FhS9T544/FY2JMGOwdDP1KjxWY3qtbvUxjVB77ZWg7AuFhqlL7RAj/FWgABKXTlw eim9ASTsA+GdDc5gvYA/Mmhs4SKW15P6ZDRtNkTiOn6fEp/XOnhEqvJFV8XDSzwZ mdQ2r1Qx5ecHSA== -----END CERTIFICATE-----Generated at Sun Dec 7 13:08:35 2025 by rpki-client