This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft File: p1f4f4bpOyXvTAQzZku-ctqY-_4.mft (raw, json) Hash identifier: P7uC6ZKtWRhKYXMZYAN02VWPL1ocGzjfHAKSUMV6WrI= Subject key identifier: 99:50:B1:48:5A:F7:1F:CB:28:92:D1:1B:59:DB:CF:C3:4A:60:62:56 Authority key identifier: A7:57:F8:7F:86:E9:3B:25:EF:4C:04:33:66:4B:BE:72:DA:98:FB:FE Certificate issuer: /CN=a757f87f86e93b25ef4c0433664bbe72da98fbfe Certificate serial: 019B1BAAD5972E6C15EA83D64CCBB68B5182 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1f4f4bpOyXvTAQzZku-ctqY-_4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft Manifest number: 058E Signing time: Sun 14 Dec 2025 07:02:19 +0000 Manifest this update: Sun 14 Dec 2025 07:02:19 +0000 Manifest next update: Mon 15 Dec 2025 07:02:19 +0000 Files and hashes: 1: IZ6vDZjMHwfmvRBOdfcy5i9E3QM.roa (hash: uS025afpY/Jz9tEZKMABnGMw3AujzF5/XTw1sc/dgNo=) 2: p1f4f4bpOyXvTAQzZku-ctqY-_4.crl (hash: WgGzPa0sDDChgudsKEzl6FAiV+0ozF6PnNkQo7IjgGs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft rsync://rpki.ripe.net/repository/DEFAULT/p1f4f4bpOyXvTAQzZku-ctqY-_4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 07:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:aa:d5:97:2e:6c:15:ea:83:d6:4c:cb:b6:8b:51:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a757f87f86e93b25ef4c0433664bbe72da98fbfe Validity Not Before: Dec 14 07:02:19 2025 GMT Not After : Dec 15 07:02:19 2025 GMT Subject: CN=9950b1485af71fcb2892d11b59dbcfc34a606256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e2:51:c6:18:a5:bd:12:d0:12:2c:1a:c2:6f: b3:91:26:8b:be:46:82:45:00:d0:d0:8c:00:1c:7f: 49:6c:73:f2:8e:50:8b:89:24:26:e4:cd:f9:ba:b9: 71:a9:11:6c:f1:ea:cf:b6:4c:de:55:0e:7c:38:59: f8:ba:02:56:ea:ee:04:44:c0:47:e2:61:3d:f5:bb: aa:6a:01:c6:b9:5b:cc:83:54:7b:d9:40:63:ef:1e: e8:e9:35:c4:0a:c2:78:da:05:64:da:57:c4:a7:e7: 47:68:f2:a3:df:a1:ea:99:79:75:db:de:ca:2c:f4: fc:77:f1:06:92:5a:47:af:78:f5:ee:38:d8:9d:2f: 3a:82:14:c5:e8:fa:52:c8:85:8c:a6:83:a0:6f:5b: 7a:f1:d8:7a:44:41:7a:7a:95:9e:e8:ca:1f:bb:67: b7:9b:bf:0e:d8:23:31:ed:45:23:ba:d5:8d:0f:1c: 64:ff:08:0e:40:29:be:f6:d8:61:6b:26:2a:a3:24: a6:e3:60:72:5a:77:f0:7c:c0:5d:8d:be:7e:34:9a: 6f:3e:ad:9e:cd:e3:a2:77:a2:68:5b:15:c6:37:08: fe:b4:99:d8:f6:88:6e:b3:8b:61:25:a1:a7:64:f4: 69:99:07:21:5c:83:fe:8d:b5:52:de:e4:f1:6a:08: 4a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:50:B1:48:5A:F7:1F:CB:28:92:D1:1B:59:DB:CF:C3:4A:60:62:56 X509v3 Authority Key Identifier: keyid:A7:57:F8:7F:86:E9:3B:25:EF:4C:04:33:66:4B:BE:72:DA:98:FB:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1f4f4bpOyXvTAQzZku-ctqY-_4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:48:51:e1:61:f0:9f:16:db:15:ee:e7:4e:46:01:cd:f6:e7: ff:9e:40:08:cc:ce:e7:34:2d:13:c4:50:20:05:ec:1a:d6:46: 57:71:58:c1:cc:1e:98:ea:6b:64:63:52:31:3a:24:21:e7:ff: ec:68:4f:9d:d4:56:cc:10:80:93:98:0b:60:5d:f8:3e:3e:f8: 61:91:a5:79:10:8b:ed:bf:98:54:f7:7c:40:92:db:77:f8:73: 00:4e:07:b3:3d:f1:87:e9:02:0f:00:23:30:03:2f:e5:bb:ba: 03:c9:ed:8c:3f:b3:39:ec:58:97:63:c1:ee:d4:be:88:5f:e8: 97:7f:d3:66:77:89:f1:cc:af:c3:cf:f1:57:e9:b0:c7:9d:9a: aa:b9:27:a4:63:bc:1c:7f:63:3c:cc:33:d3:84:60:6e:1e:86: 53:4e:26:e9:73:34:59:5c:58:8e:69:c1:76:c5:00:3c:45:58: 40:68:2e:40:ec:de:aa:0b:e2:dc:3c:68:08:50:0c:44:1c:b3: 88:e4:d0:73:4a:71:f7:aa:1d:8f:5b:17:20:ec:e7:11:2e:84: 15:18:12:29:8b:61:62:d0:3a:35:21:94:4e:b1:a5:74:f4:18: d0:2f:7a:61:ce:67:df:07:af:cd:19:ce:f1:03:33:e2:94:59: 41:e1:3c:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbqtWXLmwV6oPWTMu2i1GCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NTdmODdmODZlOTNiMjVlZjRjMDQzMzY2NGJiZTcyZGE5 OGZiZmUwHhcNMjUxMjE0MDcwMjE5WhcNMjUxMjE1MDcwMjE5WjAzMTEwLwYDVQQD Eyg5OTUwYjE0ODVhZjcxZmNiMjg5MmQxMWI1OWRiY2ZjMzRhNjA2MjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OJRxhilvRLQEiwawm+zkSaLvkaC RQDQ0IwAHH9JbHPyjlCLiSQm5M35urlxqRFs8erPtkzeVQ58OFn4ugJW6u4ERMBH 4mE99buqagHGuVvMg1R72UBj7x7o6TXECsJ42gVk2lfEp+dHaPKj36HqmXl1297K LPT8d/EGklpHr3j17jjYnS86ghTF6PpSyIWMpoOgb1t68dh6REF6epWe6Mofu2e3 m78O2CMx7UUjutWNDxxk/wgOQCm+9thhayYqoySm42ByWnfwfMBdjb5+NJpvPq2e zeOid6JoWxXGNwj+tJnY9ohus4thJaGnZPRpmQchXIP+jbVS3uTxaghKpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJlQsUha9x/LKJLRG1nbz8NKYGJWMB8GA1UdIwQY MBaAFKdX+H+G6Tsl70wEM2ZLvnLamPv+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDFmNGY0YnBPeVh2VEFRelprdS1jdHFZLV80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy84NmU0MGMtMTU2My00MGVhLThmNGUt YTE3ODMzMjUzM2UwLzEvcDFmNGY0YnBPeVh2VEFRelprdS1jdHFZLV80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy84NmU0MGMtMTU2My00MGVhLThmNGUtYTE3ODMzMjUzM2Uw LzEvcDFmNGY0YnBPeVh2VEFRelprdS1jdHFZLV80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe0hR4WHw nxbbFe7nTkYBzfbn/55ACMzO5zQtE8RQIAXsGtZGV3FYwcwemOprZGNSMTokIef/ 7GhPndRWzBCAk5gLYF34Pj74YZGleRCL7b+YVPd8QJLbd/hzAE4Hsz3xh+kCDwAj MAMv5bu6A8ntjD+zOexYl2PB7tS+iF/ol3/TZneJ8cyvw8/xV+mwx52aqrknpGO8 HH9jPMwz04Rgbh6GU04m6XM0WVxYjmnBdsUAPEVYQGguQOzeqgvi3DxoCFAMRByz iOTQc0px96odj1sXIOznES6EFRgSKYthYtA6NSGUTrGldPQY0C96Yc5n3wevzRnO 8QMz4pRZQeE80Q== -----END CERTIFICATE-----Generated at Sun Dec 14 17:25:31 2025 by rpki-client