This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft File: r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft (raw, json) Hash identifier: XjukkYuTqzmJiA2BaB/C0sk9mH+SQJ6xOKWHuNiSfis= Subject key identifier: 1F:97:21:B6:2D:25:81:35:EB:DD:DA:6D:CF:42:6C:25:C4:56:55:07 Authority key identifier: AF:E3:F1:ED:1B:49:C5:BA:7C:C1:F1:92:A4:02:47:65:A2:53:66:4E Certificate issuer: /CN=afe3f1ed1b49c5ba7cc1f192a4024765a253664e Certificate serial: 019B3A21E309D9BA9D746DD2C44249097315 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft Manifest number: 1474 Signing time: Sat 20 Dec 2025 05:00:57 +0000 Manifest this update: Sat 20 Dec 2025 05:00:57 +0000 Manifest next update: Sun 21 Dec 2025 05:00:57 +0000 Files and hashes: 1: BMtrajiT8kc1Pg7kzTaWX9dZggk.roa (hash: OKRwb7gvAgyjstxUa1W7+46wLP3OqM3yM6o0/CqxEn0=) 2: r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl (hash: 4FU0NLQRAt7IVOodrawbls05wWnilzpwqrDuhpRVYLg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:e3:09:d9:ba:9d:74:6d:d2:c4:42:49:09:73:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afe3f1ed1b49c5ba7cc1f192a4024765a253664e Validity Not Before: Dec 20 05:00:57 2025 GMT Not After : Dec 21 05:00:57 2025 GMT Subject: CN=1f9721b62d258135ebddda6dcf426c25c4565507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:dd:67:3b:63:ba:db:04:25:bd:78:bf:1e:09: a7:08:cd:0e:2d:b4:4b:c0:99:f5:20:e6:31:44:6f: 57:86:fe:da:08:e9:bc:c1:d8:9a:7d:af:fd:bb:a8: fe:94:da:72:dd:27:03:9f:b4:f6:2f:68:83:90:18: 38:7c:e7:27:ab:6b:5a:94:94:49:95:cd:d6:5c:e5: 2b:0c:96:35:b8:6b:6a:4e:c1:31:4f:64:fe:91:47: 3d:5f:b0:81:9c:da:d4:fa:93:68:13:e4:df:59:f0: e7:a0:07:4f:31:2f:72:91:21:fc:1a:14:36:5d:30: cd:58:01:e4:11:9a:e0:a2:4c:64:29:27:bc:3a:bb: 76:35:1b:79:a1:a7:ce:20:03:a7:b9:c7:0e:df:3b: 24:85:93:53:57:e8:a9:3b:cc:1d:48:a8:b8:7e:f8: 50:6c:e2:5a:05:8e:66:dd:4c:1c:25:11:ac:38:92: ae:f2:9c:4e:31:c7:fe:4a:6a:0e:30:89:18:a9:8e: 3f:9c:4b:6f:39:f0:62:0e:12:ff:2e:16:9c:2f:03: bf:51:c3:4e:14:e6:d7:85:b0:ad:47:5c:a4:b9:f8: 4b:c1:e6:78:ca:3b:8d:13:fa:51:a0:b6:15:c7:43: 2e:8f:38:e6:ad:ca:8d:85:01:d8:e1:5a:e0:09:9c: a3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:97:21:B6:2D:25:81:35:EB:DD:DA:6D:CF:42:6C:25:C4:56:55:07 X509v3 Authority Key Identifier: keyid:AF:E3:F1:ED:1B:49:C5:BA:7C:C1:F1:92:A4:02:47:65:A2:53:66:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:89:8b:6c:24:50:45:16:50:ba:12:cd:4b:b1:7b:cc:b0:3d: 00:78:79:dd:de:4e:2a:90:d2:b1:7f:40:09:f5:63:a8:c9:75: 07:3c:a2:39:f2:4d:d8:69:28:d5:83:17:9f:00:e5:e3:a4:5f: e4:2d:71:0f:99:17:af:4d:00:dc:bd:82:a3:2d:df:7e:66:71: 93:62:50:f6:1e:98:65:50:76:79:43:0f:57:b5:41:c4:c8:af: 01:e7:b0:4a:46:82:f6:a6:35:02:56:d8:ec:76:2a:10:9b:95: 37:8d:61:62:53:4d:6f:44:06:c6:f0:11:be:63:93:eb:ba:cc: ca:e3:d2:e9:ec:14:37:37:8e:2d:1b:ce:e8:27:69:56:95:82: a6:38:61:5e:c6:b9:3e:fa:82:2f:cf:44:8b:0e:eb:31:17:01: 9b:69:8f:97:d4:99:97:9e:10:c7:fd:dd:ae:6b:d0:21:5e:60: 41:ec:ca:fe:c2:ef:4d:e0:28:e2:cc:e3:cf:f8:82:c5:73:34: 0d:98:b7:20:33:94:6a:35:f7:6c:06:c3:79:30:4e:b0:d0:36: ec:d4:a3:e6:d9:56:90:8d:ae:44:d3:7d:be:13:f6:ea:cb:25: 6f:be:5a:59:bf:c0:cc:02:78:42:39:d9:a8:95:e6:5f:3e:e3: 05:5a:07:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IeMJ2bqddG3SxEJJCXMVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZTNmMWVkMWI0OWM1YmE3Y2MxZjE5MmE0MDI0NzY1YTI1 MzY2NGUwHhcNMjUxMjIwMDUwMDU3WhcNMjUxMjIxMDUwMDU3WjAzMTEwLwYDVQQD EygxZjk3MjFiNjJkMjU4MTM1ZWJkZGRhNmRjZjQyNmMyNWM0NTY1NTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp91nO2O62wQlvXi/HgmnCM0OLbRL wJn1IOYxRG9Xhv7aCOm8wdiafa/9u6j+lNpy3ScDn7T2L2iDkBg4fOcnq2talJRJ lc3WXOUrDJY1uGtqTsExT2T+kUc9X7CBnNrU+pNoE+TfWfDnoAdPMS9ykSH8GhQ2 XTDNWAHkEZrgokxkKSe8Ort2NRt5oafOIAOnuccO3zskhZNTV+ipO8wdSKi4fvhQ bOJaBY5m3UwcJRGsOJKu8pxOMcf+SmoOMIkYqY4/nEtvOfBiDhL/LhacLwO/UcNO FObXhbCtR1ykufhLweZ4yjuNE/pRoLYVx0MujzjmrcqNhQHY4VrgCZyjdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+XIbYtJYE1693abc9CbCXEVlUHMB8GA1UdIwQY MBaAFK/j8e0bScW6fMHxkqQCR2WiU2ZOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvci1QeDdSdEp4YnA4d2ZHU3BBSkhaYUpUWms0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9iNDQ0ODgtMDUwMC00NTM4LTkzYjEt MjY4OGQzNDZmNmFiLzEvci1QeDdSdEp4YnA4d2ZHU3BBSkhaYUpUWms0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9iNDQ0ODgtMDUwMC00NTM4LTkzYjEtMjY4OGQzNDZmNmFi LzEvci1QeDdSdEp4YnA4d2ZHU3BBSkhaYUpUWms0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFYmLbCRQ RRZQuhLNS7F7zLA9AHh53d5OKpDSsX9ACfVjqMl1BzyiOfJN2Gko1YMXnwDl46Rf 5C1xD5kXr00A3L2Coy3ffmZxk2JQ9h6YZVB2eUMPV7VBxMivAeewSkaC9qY1AlbY 7HYqEJuVN41hYlNNb0QGxvARvmOT67rMyuPS6ewUNzeOLRvO6CdpVpWCpjhhXsa5 PvqCL89Eiw7rMRcBm2mPl9SZl54Qx/3drmvQIV5gQezK/sLvTeAo4szjz/iCxXM0 DZi3IDOUajX3bAbDeTBOsNA27NSj5tlWkI2uRNN9vhP26sslb75aWb/AzAJ4QjnZ qJXmXz7jBVoHAw== -----END CERTIFICATE-----Generated at Sat Dec 20 07:40:54 2025 by rpki-client