This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft File: pH9wjDSl5x2vPS5UuZq3Twae-As.mft (raw, json) Hash identifier: JMuS4XjYpxAEhW0yvoUk0XkpNkMd4+3k6u8QYSaQyZI= Subject key identifier: D6:CB:E4:93:07:45:20:70:A4:B7:6F:CC:3C:A5:E8:60:29:47:E3:48 Authority key identifier: A4:7F:70:8C:34:A5:E7:1D:AF:3D:2E:54:B9:9A:B7:4F:06:9E:F8:0B Certificate issuer: /CN=a47f708c34a5e71daf3d2e54b99ab74f069ef80b Certificate serial: 019AAC4BB4190FCBDE653D18699C5118808C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pH9wjDSl5x2vPS5UuZq3Twae-As.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft Manifest number: 0CD7 Signing time: Sat 22 Nov 2025 16:00:33 +0000 Manifest this update: Sat 22 Nov 2025 16:00:33 +0000 Manifest next update: Sun 23 Nov 2025 16:00:33 +0000 Files and hashes: 1: 6y2PxXoNf17k752-h-Vh6181ybg.roa (hash: /D4LWQIJRMeiTsLLzqJFb6QygqeaBkt1FMx26cAAcmk=) 2: Uxq2zaQ3C0F2KaVo_-rxCUMMpzU.roa (hash: VbEHRBQ6CnI3V57/ypd9YP2tAsM8cgW+F1+a7XG3s5Q=) 3: pH9wjDSl5x2vPS5UuZq3Twae-As.crl (hash: 2tATKZIUBsm83id5iev7fpZC+eKI9EvO9WLklyCZV0k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft rsync://rpki.ripe.net/repository/DEFAULT/pH9wjDSl5x2vPS5UuZq3Twae-As.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:4b:b4:19:0f:cb:de:65:3d:18:69:9c:51:18:80:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a47f708c34a5e71daf3d2e54b99ab74f069ef80b Validity Not Before: Nov 22 16:00:33 2025 GMT Not After : Nov 23 16:00:33 2025 GMT Subject: CN=d6cbe49307452070a4b76fcc3ca5e8602947e348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:cd:62:73:db:57:1f:02:28:a6:30:ab:d3:e5: af:74:30:31:e0:15:7e:9e:46:81:a0:43:1d:1d:ab: d8:34:26:00:8b:34:a6:84:e5:36:f5:4a:2a:7c:4a: 14:b6:90:1d:f4:9a:ae:c5:a7:e2:93:30:cc:f6:36: ce:a6:df:2f:9f:a3:87:27:99:6c:d4:61:0c:a5:2f: 64:18:ce:f6:94:a0:63:b4:d9:8a:81:81:69:75:41: a2:7d:f6:84:85:f4:68:17:18:c9:7e:a1:20:f1:fd: 21:28:bc:96:d3:a3:36:87:d8:74:1c:ed:81:95:5a: ba:f2:9f:99:15:cd:6d:61:4d:55:dd:b3:3e:f3:9b: bd:a4:3a:ca:48:c6:ac:65:d1:a6:cf:f8:f5:13:ae: 70:42:37:3e:dc:6d:e3:59:02:54:86:6c:eb:40:34: 81:5e:bc:61:5a:17:6e:93:0a:01:0a:09:b6:fe:27: 23:97:80:ee:bf:d9:f0:6b:13:ea:7b:c9:10:7e:7e: d4:e6:c5:df:2b:39:98:25:02:a4:7e:a2:12:d5:f0: 21:23:7b:9a:df:c5:ac:87:ce:4b:09:04:56:78:3b: e0:3c:82:b4:14:55:c8:c4:50:c6:ae:8e:06:79:35: 48:4b:d5:b1:38:b0:e4:73:c4:da:06:bb:51:3b:0a: f1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:CB:E4:93:07:45:20:70:A4:B7:6F:CC:3C:A5:E8:60:29:47:E3:48 X509v3 Authority Key Identifier: keyid:A4:7F:70:8C:34:A5:E7:1D:AF:3D:2E:54:B9:9A:B7:4F:06:9E:F8:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pH9wjDSl5x2vPS5UuZq3Twae-As.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:41:01:ca:af:55:c5:12:25:12:49:f6:c8:b0:fe:d0:12:91: 52:03:65:61:77:a1:5a:05:21:bb:6e:c6:b8:9a:6c:98:8d:bf: e5:b8:57:b0:38:1f:21:e6:93:ee:74:04:91:11:97:2d:f4:54: 0c:de:71:e3:2c:03:5d:a5:2c:64:ac:5c:cc:c1:b5:60:45:71: 3f:ef:18:ab:07:5c:19:8e:f9:fe:68:ef:37:95:44:c8:7e:4b: 9d:7f:c5:dc:aa:6a:7f:39:65:8b:ba:07:9d:54:e9:15:33:01: e9:c4:cc:30:e3:67:69:83:12:5c:53:13:96:14:e8:db:d3:64: 16:42:9d:74:ff:f6:d6:53:9a:3c:31:cf:3f:b3:3f:28:3b:c6: d5:5b:ee:ac:19:8f:e4:ed:4a:2b:85:c1:d9:f5:4f:6a:6a:0d: ca:4a:58:7a:c3:ce:f4:c2:62:7b:d5:fb:a8:7a:9f:ae:50:78: aa:9a:a0:f5:9e:4f:e1:ae:b5:12:c7:8f:b6:36:1d:da:3b:ce: dc:e6:bf:d3:1f:b5:92:c4:c6:9c:e5:76:ed:c7:2f:22:48:b9: ff:8a:cd:e7:a5:fa:7f:b5:4d:be:5f:33:46:0a:3e:a9:d3:d8: b3:2e:f4:0c:71:a0:08:38:44:a1:eb:16:ed:7e:76:ba:a1:63: 07:06:b2:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsS7QZD8veZT0YaZxRGICMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0N2Y3MDhjMzRhNWU3MWRhZjNkMmU1NGI5OWFiNzRmMDY5 ZWY4MGIwHhcNMjUxMTIyMTYwMDMzWhcNMjUxMTIzMTYwMDMzWjAzMTEwLwYDVQQD EyhkNmNiZTQ5MzA3NDUyMDcwYTRiNzZmY2MzY2E1ZTg2MDI5NDdlMzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl81ic9tXHwIopjCr0+WvdDAx4BV+ nkaBoEMdHavYNCYAizSmhOU29UoqfEoUtpAd9JquxafikzDM9jbOpt8vn6OHJ5ls 1GEMpS9kGM72lKBjtNmKgYFpdUGiffaEhfRoFxjJfqEg8f0hKLyW06M2h9h0HO2B lVq68p+ZFc1tYU1V3bM+85u9pDrKSMasZdGmz/j1E65wQjc+3G3jWQJUhmzrQDSB XrxhWhdukwoBCgm2/icjl4Duv9nwaxPqe8kQfn7U5sXfKzmYJQKkfqIS1fAhI3ua 38Wsh85LCQRWeDvgPIK0FFXIxFDGro4GeTVIS9WxOLDkc8TaBrtROwrxZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNbL5JMHRSBwpLdvzDyl6GApR+NIMB8GA1UdIwQY MBaAFKR/cIw0pecdrz0uVLmat08GnvgLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEg5d2pEU2w1eDJ2UFM1VXVacTNUd2FlLUFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8wMTlhMWUtYmU5OC00MTRjLThjMmMt NmIyN2ZmMjI1N2M2LzEvcEg5d2pEU2w1eDJ2UFM1VXVacTNUd2FlLUFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8wMTlhMWUtYmU5OC00MTRjLThjMmMtNmIyN2ZmMjI1N2M2 LzEvcEg5d2pEU2w1eDJ2UFM1VXVacTNUd2FlLUFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT0EByq9V xRIlEkn2yLD+0BKRUgNlYXehWgUhu27GuJpsmI2/5bhXsDgfIeaT7nQEkRGXLfRU DN5x4ywDXaUsZKxczMG1YEVxP+8YqwdcGY75/mjvN5VEyH5LnX/F3Kpqfzlli7oH nVTpFTMB6cTMMONnaYMSXFMTlhTo29NkFkKddP/21lOaPDHPP7M/KDvG1VvurBmP 5O1KK4XB2fVPamoNykpYesPO9MJie9X7qHqfrlB4qpqg9Z5P4a61EsePtjYd2jvO 3Oa/0x+1ksTGnOV27ccvIki5/4rN56X6f7VNvl8zRgo+qdPYsy70DHGgCDhEoesW 7X52uqFjBwaybg== -----END CERTIFICATE-----Generated at Sat Nov 22 21:39:50 2025 by rpki-client