This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.mft File: px4O7lkN4v2N7Epn6HvIlv_IsrU.mft (raw, json) Hash identifier: 4yUctKdeEUTYmtAKZOvpGfysyb44LhpYgec+LR4xxe8= Subject key identifier: 8E:A5:D7:19:9E:D5:56:AE:34:D0:75:06:8F:81:1E:C2:0C:70:86:41 Authority key identifier: A7:1E:0E:EE:59:0D:E2:FD:8D:EC:4A:67:E8:7B:C8:96:FF:C8:B2:B5 Certificate issuer: /CN=a71e0eee590de2fd8dec4a67e87bc896ffc8b2b5 Certificate serial: 019B5A5151CC526AC24779CC6D9B4EC55D26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/px4O7lkN4v2N7Epn6HvIlv_IsrU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 11:00:37 +0000 Manifest this update: Fri 26 Dec 2025 11:00:37 +0000 Manifest next update: Sat 27 Dec 2025 11:00:37 +0000 Files and hashes: 1: gACG_CZ-Iug99I2lwvBj2F9-h5o.roa (hash: nmlBka4iP6DO0ZjdL5pCRw7PZdQRFau0PkO/pT9dD0g=) 2: px4O7lkN4v2N7Epn6HvIlv_IsrU.crl (hash: X92UT/mHDz+lUQI0YwObF8LXGKv4VyQ9z6QsEzT+DlY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.mft rsync://rpki.ripe.net/repository/DEFAULT/px4O7lkN4v2N7Epn6HvIlv_IsrU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:51:cc:52:6a:c2:47:79:cc:6d:9b:4e:c5:5d:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71e0eee590de2fd8dec4a67e87bc896ffc8b2b5 Validity Not Before: Dec 26 11:00:37 2025 GMT Not After : Dec 27 11:00:37 2025 GMT Subject: CN=8ea5d7199ed556ae34d075068f811ec20c708641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5b:92:32:f4:01:a8:a3:d8:7f:17:c5:6b:dd: 02:aa:9f:6a:8e:7b:83:81:6f:70:19:94:a0:6a:f9: 5f:e3:d9:fe:1e:95:58:24:36:98:5a:44:ad:b4:6a: 17:35:de:b9:80:f2:30:32:1b:2f:06:42:91:a9:bb: 6f:6e:8b:a3:9e:d1:b6:9d:f7:46:fa:50:28:3d:50: c3:35:0f:17:45:0b:d9:ad:fe:f8:69:04:10:f1:84: 21:10:c2:de:09:0a:a5:2b:3c:88:4d:3d:9a:db:e4: 3f:b3:2b:79:70:66:7b:63:22:34:61:2f:b9:9b:ad: 8a:f4:1d:4e:36:91:a1:93:8e:4c:79:5d:13:d1:07: b7:0f:e2:26:9b:f1:de:c7:cb:62:71:f0:a7:2f:7b: 1a:10:be:f4:b6:97:d4:12:bc:22:1c:b0:30:c1:c4: e0:0a:98:1c:fe:47:dd:84:57:57:a3:66:19:ec:9d: 36:54:15:2d:1b:02:7a:f4:eb:e4:34:d6:d2:62:ac: 09:00:27:5f:7d:77:c0:4d:8f:06:52:e3:f3:59:77: 2f:e4:37:e3:6e:1d:df:9a:77:1b:ab:0a:55:f7:1f: 30:66:65:80:52:62:32:d9:4c:fb:6f:88:e7:0f:dc: 16:65:a6:4c:1c:af:bf:57:75:ed:09:b3:59:70:81: a9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A5:D7:19:9E:D5:56:AE:34:D0:75:06:8F:81:1E:C2:0C:70:86:41 X509v3 Authority Key Identifier: keyid:A7:1E:0E:EE:59:0D:E2:FD:8D:EC:4A:67:E8:7B:C8:96:FF:C8:B2:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/px4O7lkN4v2N7Epn6HvIlv_IsrU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:03:34:7f:c2:11:82:b1:95:36:ed:a9:7b:e2:a9:d6:76:bf: b7:9c:1c:0f:8c:9a:ca:46:67:1f:ec:c1:d4:ab:b3:ee:7b:23: e9:45:b3:e3:d8:74:f3:65:a2:76:10:2a:ce:d3:52:99:ea:74: 1e:79:dd:f5:34:3d:3a:f7:ca:bd:09:51:96:98:b8:83:07:bf: 55:9b:a9:9d:00:4d:45:7c:05:a5:25:02:a7:d0:f8:fe:7a:7a: 72:ad:bf:cd:e8:ad:bb:37:33:0f:03:ce:e6:67:0a:ac:45:5e: bd:07:70:82:77:29:d6:6a:dd:68:35:7e:1b:d8:44:e9:e0:f6: 96:68:24:73:36:0a:7b:2b:97:8f:83:5e:23:cd:89:9e:42:43: c0:96:d6:81:8d:e2:49:eb:06:83:13:6f:4d:a2:e2:3e:74:46: 7a:f2:be:35:ba:60:c4:c3:5c:48:ec:17:d6:f4:31:28:01:90: 6a:27:0d:58:4c:d1:7b:32:41:5d:c5:6b:aa:0d:b5:9e:6c:08: 6c:9f:9e:5a:99:66:4d:20:37:06:ce:eb:9f:43:c2:3e:04:08: 85:66:86:31:1e:ba:39:d5:8a:47:93:f9:72:30:5e:80:b2:c5: 12:13:63:53:4f:eb:eb:73:54:38:fb:63:88:5b:79:36:6c:3e: b9:80:f4:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUVHMUmrCR3nMbZtOxV0mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3MWUwZWVlNTkwZGUyZmQ4ZGVjNGE2N2U4N2JjODk2ZmZj OGIyYjUwHhcNMjUxMjI2MTEwMDM3WhcNMjUxMjI3MTEwMDM3WjAzMTEwLwYDVQQD Eyg4ZWE1ZDcxOTllZDU1NmFlMzRkMDc1MDY4ZjgxMWVjMjBjNzA4NjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1uSMvQBqKPYfxfFa90Cqp9qjnuD gW9wGZSgavlf49n+HpVYJDaYWkSttGoXNd65gPIwMhsvBkKRqbtvboujntG2nfdG +lAoPVDDNQ8XRQvZrf74aQQQ8YQhEMLeCQqlKzyITT2a2+Q/syt5cGZ7YyI0YS+5 m62K9B1ONpGhk45MeV0T0Qe3D+Imm/Hex8ticfCnL3saEL70tpfUErwiHLAwwcTg Cpgc/kfdhFdXo2YZ7J02VBUtGwJ69OvkNNbSYqwJACdffXfATY8GUuPzWXcv5Dfj bh3fmncbqwpV9x8wZmWAUmIy2Uz7b4jnD9wWZaZMHK+/V3XtCbNZcIGpcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI6l1xme1VauNNB1Bo+BHsIMcIZBMB8GA1UdIwQY MBaAFKceDu5ZDeL9jexKZ+h7yJb/yLK1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHg0Tzdsa040djJON0VwbjZIdklsdl9Jc3JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9jNTFmZDYtM2QwOC00MjA1LWI3NDct YjgwNTMwYTVlMDQyLzEvcHg0Tzdsa040djJON0VwbjZIdklsdl9Jc3JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9jNTFmZDYtM2QwOC00MjA1LWI3NDctYjgwNTMwYTVlMDQy LzEvcHg0Tzdsa040djJON0VwbjZIdklsdl9Jc3JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoAM0f8IR grGVNu2pe+Kp1na/t5wcD4yaykZnH+zB1Kuz7nsj6UWz49h082WidhAqztNSmep0 Hnnd9TQ9OvfKvQlRlpi4gwe/VZupnQBNRXwFpSUCp9D4/np6cq2/zeituzczDwPO 5mcKrEVevQdwgncp1mrdaDV+G9hE6eD2lmgkczYKeyuXj4NeI82JnkJDwJbWgY3i SesGgxNvTaLiPnRGevK+NbpgxMNcSOwX1vQxKAGQaicNWEzRezJBXcVrqg21nmwI bJ+eWplmTSA3Bs7rn0PCPgQIhWaGMR66OdWKR5P5cjBegLLFEhNjU0/r63NUOPtj iFt5Nmw+uYD0/A== -----END CERTIFICATE-----Generated at Fri Dec 26 16:01:53 2025 by rpki-client