This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft File: p2i77FqeEb-9rthKqNOqzaKYifk.mft (raw, json) Hash identifier: K2glHMZ9JMZcF1zExykJDsLn3wJys8pcHAmKI2jxGn4= Subject key identifier: 4B:8B:76:DF:7B:98:A3:73:81:D3:75:5B:4A:F1:D0:7D:BD:9A:78:82 Authority key identifier: A7:68:BB:EC:5A:9E:11:BF:BD:AE:D8:4A:A8:D3:AA:CD:A2:98:89:F9 Certificate issuer: /CN=a768bbec5a9e11bfbdaed84aa8d3aacda29889f9 Certificate serial: 019B337B7BB09DCCEF4A6C3AA225B400969E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2i77FqeEb-9rthKqNOqzaKYifk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 22:01:29 +0000 Manifest this update: Thu 18 Dec 2025 22:01:29 +0000 Manifest next update: Fri 19 Dec 2025 22:01:29 +0000 Files and hashes: 1: OgYJc9A280CynujJhuzMa0BI-4Q.roa (hash: MiNQpI1WP7M4DChXTEl99hg+v/DrVYZq8o6Yc8vjTOw=) 2: p2i77FqeEb-9rthKqNOqzaKYifk.crl (hash: phJxcjd8QZMJTaCmLMj0bdSKfJveGV6t37eOpCQhhZ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft rsync://rpki.ripe.net/repository/DEFAULT/p2i77FqeEb-9rthKqNOqzaKYifk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:7b:b0:9d:cc:ef:4a:6c:3a:a2:25:b4:00:96:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a768bbec5a9e11bfbdaed84aa8d3aacda29889f9 Validity Not Before: Dec 18 22:01:29 2025 GMT Not After : Dec 19 22:01:29 2025 GMT Subject: CN=4b8b76df7b98a37381d3755b4af1d07dbd9a7882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:02:cc:dc:aa:6f:e6:f0:d8:f7:e7:12:6b:b9: 3e:0d:24:94:f6:f4:29:91:2c:e9:af:86:d5:69:bc: 3c:28:48:72:f3:8e:74:79:4b:b6:bc:1a:3b:c2:2f: 0e:db:06:40:b0:16:4c:de:c0:0c:9e:a1:e0:3b:15: eb:d8:8a:36:90:c2:9f:23:63:64:09:1a:19:c5:58: 91:3e:41:f8:86:de:50:5b:86:de:b4:a5:63:bc:60: eb:21:59:ec:d3:4d:3a:9b:53:27:ca:65:e8:3c:22: 73:a4:28:3f:88:fe:f9:86:b5:48:90:f6:04:ec:00: 8c:f8:f3:8a:8f:ac:bb:86:d6:3c:b2:0c:cc:9a:94: 85:18:d7:f7:8c:f0:36:ab:e1:8a:56:2d:8e:cb:9e: 7c:3d:c8:ce:b2:76:5f:e1:57:6c:1d:62:8a:ef:8b: 25:80:77:41:ec:1c:dd:01:7d:b4:3d:e4:8e:c5:76: 5c:16:a2:b4:64:2b:52:54:01:a3:35:12:6b:00:94: ff:ca:bb:24:f2:00:b9:53:cd:30:f5:37:00:f0:c5: 95:63:4d:c1:9d:18:91:c4:2d:0f:62:b5:2d:98:cd: 49:51:3b:7e:6f:a8:02:e2:2d:a5:99:01:4e:e1:35: 4c:66:17:9d:c8:a9:17:30:84:ea:21:64:5b:16:1b: 49:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:8B:76:DF:7B:98:A3:73:81:D3:75:5B:4A:F1:D0:7D:BD:9A:78:82 X509v3 Authority Key Identifier: keyid:A7:68:BB:EC:5A:9E:11:BF:BD:AE:D8:4A:A8:D3:AA:CD:A2:98:89:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2i77FqeEb-9rthKqNOqzaKYifk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:b5:be:ae:04:61:a1:5d:9d:71:97:06:be:12:49:b0:c5:0d: e9:72:98:03:59:2c:87:a2:e1:bf:2f:d5:08:7a:ba:2e:d5:33: df:9b:fa:7f:54:24:a5:7a:59:94:53:0f:4b:25:4c:90:e4:ce: 72:c2:68:9f:ae:d3:27:67:4e:09:ec:21:cf:63:97:54:4a:41: d6:a5:80:d4:35:7e:1a:02:6f:9e:49:b1:60:31:c2:7e:bd:4e: f3:8f:e2:9a:e5:14:1d:61:86:c2:9b:32:66:4f:16:09:9f:2a: 95:ca:a2:ef:c8:09:44:d8:b1:f4:26:3c:38:8d:98:97:14:7c: 0d:26:fd:b3:fd:a6:e0:25:6f:de:94:89:af:a1:17:a4:ac:99: ef:1f:c0:19:21:a0:7c:e2:9c:74:ad:a8:b5:ae:c4:9f:44:6e: df:8e:bb:97:75:99:12:7e:d6:eb:40:52:85:41:15:56:cb:c8: 8a:bb:ac:68:cf:e9:d2:fd:00:dd:45:d2:a0:09:72:45:10:3d: c4:82:72:3c:53:53:f7:c7:a9:9b:a9:f7:d4:ba:cc:83:2b:11: 5c:8a:91:3f:75:c3:b4:c8:09:4e:c9:bd:9b:98:4b:94:5b:74: 3b:23:cc:9b:61:d0:dd:0a:ed:f9:91:ee:7c:85:dc:62:ad:18: 6c:b8:a9:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsze3uwnczvSmw6oiW0AJaeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NjhiYmVjNWE5ZTExYmZiZGFlZDg0YWE4ZDNhYWNkYTI5 ODg5ZjkwHhcNMjUxMjE4MjIwMTI5WhcNMjUxMjE5MjIwMTI5WjAzMTEwLwYDVQQD Eyg0YjhiNzZkZjdiOThhMzczODFkMzc1NWI0YWYxZDA3ZGJkOWE3ODgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQLM3Kpv5vDY9+cSa7k+DSSU9vQp kSzpr4bVabw8KEhy8450eUu2vBo7wi8O2wZAsBZM3sAMnqHgOxXr2Io2kMKfI2Nk CRoZxViRPkH4ht5QW4betKVjvGDrIVns0006m1MnymXoPCJzpCg/iP75hrVIkPYE 7ACM+POKj6y7htY8sgzMmpSFGNf3jPA2q+GKVi2Oy558PcjOsnZf4VdsHWKK74sl gHdB7BzdAX20PeSOxXZcFqK0ZCtSVAGjNRJrAJT/yrsk8gC5U80w9TcA8MWVY03B nRiRxC0PYrUtmM1JUTt+b6gC4i2lmQFO4TVMZhedyKkXMITqIWRbFhtJmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEuLdt97mKNzgdN1W0rx0H29mniCMB8GA1UdIwQY MBaAFKdou+xanhG/va7YSqjTqs2imIn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDJpNzdGcWVFYi05cnRoS3FOT3F6YUtZaWZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9lYWMxZjQtYWNlMS00Y2UxLWExODEt Y2ZjYWJiMTlmOTg5LzEvcDJpNzdGcWVFYi05cnRoS3FOT3F6YUtZaWZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9lYWMxZjQtYWNlMS00Y2UxLWExODEtY2ZjYWJiMTlmOTg5 LzEvcDJpNzdGcWVFYi05cnRoS3FOT3F6YUtZaWZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWrW+rgRh oV2dcZcGvhJJsMUN6XKYA1ksh6Lhvy/VCHq6LtUz35v6f1QkpXpZlFMPSyVMkOTO csJon67TJ2dOCewhz2OXVEpB1qWA1DV+GgJvnkmxYDHCfr1O84/imuUUHWGGwpsy Zk8WCZ8qlcqi78gJRNix9CY8OI2YlxR8DSb9s/2m4CVv3pSJr6EXpKyZ7x/AGSGg fOKcdK2ota7En0Ru3467l3WZEn7W60BShUEVVsvIirusaM/p0v0A3UXSoAlyRRA9 xIJyPFNT98epm6n31LrMgysRXIqRP3XDtMgJTsm9m5hLlFt0OyPMm2HQ3Qrt+ZHu fIXcYq0YbLip2Q== -----END CERTIFICATE-----Generated at Fri Dec 19 06:43:15 2025 by rpki-client