This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft File: p2i77FqeEb-9rthKqNOqzaKYifk.mft (raw, json) Hash identifier: hjp9rx2lA9Qa17Ml5S2n0Z2oEAL30KjahCzq1n/II7U= Subject key identifier: 8A:66:1D:81:6C:AE:34:95:EE:99:C0:AB:2F:9D:82:AA:61:A8:BA:B2 Authority key identifier: A7:68:BB:EC:5A:9E:11:BF:BD:AE:D8:4A:A8:D3:AA:CD:A2:98:89:F9 Certificate issuer: /CN=a768bbec5a9e11bfbdaed84aa8d3aacda29889f9 Certificate serial: 019B1E3D2F29D4AEFE20226D0D60AC7058F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2i77FqeEb-9rthKqNOqzaKYifk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft Manifest number: 1778 Signing time: Sun 14 Dec 2025 19:01:24 +0000 Manifest this update: Sun 14 Dec 2025 19:01:24 +0000 Manifest next update: Mon 15 Dec 2025 19:01:24 +0000 Files and hashes: 1: OgYJc9A280CynujJhuzMa0BI-4Q.roa (hash: MiNQpI1WP7M4DChXTEl99hg+v/DrVYZq8o6Yc8vjTOw=) 2: p2i77FqeEb-9rthKqNOqzaKYifk.crl (hash: GePA+z0SCgv6JoO9MlfTgk9bKBL1w7/C+ZFPuCkI5iE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft rsync://rpki.ripe.net/repository/DEFAULT/p2i77FqeEb-9rthKqNOqzaKYifk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:3d:2f:29:d4:ae:fe:20:22:6d:0d:60:ac:70:58:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a768bbec5a9e11bfbdaed84aa8d3aacda29889f9 Validity Not Before: Dec 14 19:01:24 2025 GMT Not After : Dec 15 19:01:24 2025 GMT Subject: CN=8a661d816cae3495ee99c0ab2f9d82aa61a8bab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4a:3d:eb:b7:e8:73:7a:6b:93:c9:49:31:3e: 14:3d:83:c7:17:b4:30:3d:8b:62:36:c6:e2:e4:7e: d0:e0:67:83:f9:27:b3:bd:ad:8e:3f:64:66:f7:12: e3:1d:22:aa:5f:f7:a4:9c:1b:cb:fe:b7:9e:7a:86: 24:60:59:ae:c7:99:85:06:cf:cc:a8:e3:b9:86:61: 83:81:c7:8a:03:cf:de:17:f5:a7:5a:3c:5f:4a:46: 1f:8f:96:46:71:c1:e7:21:a2:63:b5:d5:7b:38:b2: 17:65:ab:5a:de:35:6c:93:27:cc:c7:cf:28:d2:36: b1:37:1e:c3:b9:0e:08:6d:2f:ec:82:d5:67:c8:f3: 93:df:a9:a6:c0:94:db:93:ad:9d:79:89:9d:5a:08: 1c:92:b6:d9:b2:c9:9b:f6:f2:9d:87:63:ce:1b:34: 87:d7:86:06:d0:29:d7:39:c0:28:16:03:cd:c8:30: c4:2e:5f:65:a3:61:b6:9e:8a:3d:2c:08:ef:3b:42: 36:6a:c7:79:d2:a6:6f:f9:e4:ef:c3:d6:67:19:a3: ca:cb:b6:ca:82:9c:c1:58:86:47:0f:12:25:71:71: 7f:81:33:91:23:96:82:b8:26:9f:45:3e:b1:cf:34: ca:ab:50:6b:c7:a9:b4:b2:f2:a5:b9:ee:03:9f:fb: 4e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:66:1D:81:6C:AE:34:95:EE:99:C0:AB:2F:9D:82:AA:61:A8:BA:B2 X509v3 Authority Key Identifier: keyid:A7:68:BB:EC:5A:9E:11:BF:BD:AE:D8:4A:A8:D3:AA:CD:A2:98:89:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2i77FqeEb-9rthKqNOqzaKYifk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:4c:db:3f:db:df:13:88:bc:b0:07:4b:81:fa:b4:b1:df:9f: f8:42:30:65:e5:b2:a7:df:03:cb:c7:19:69:17:c4:f7:be:f3: 72:60:c2:f0:b9:88:43:7c:c7:23:02:e9:bf:9b:0d:8d:55:09: f3:e6:6d:46:1d:95:3c:4d:7f:1e:ce:f0:b3:52:91:77:09:20: 58:1f:2f:42:9b:ec:46:1a:6c:15:24:4d:70:6b:71:6e:83:36: 89:3d:b2:90:7c:2d:59:83:94:21:3a:7e:03:3a:2a:21:45:1b: 2f:2a:ff:41:3b:50:c0:45:4b:b0:3a:94:4f:60:7b:dc:e5:58: 7c:1a:df:53:ed:c5:f2:2d:82:c0:06:b7:4b:b2:b2:c5:d6:9e: 18:f9:e9:61:1f:5a:8e:75:2f:70:62:9f:78:52:51:90:df:f1: 9f:0b:c4:47:ad:9e:a5:a1:ed:a4:d0:78:e6:f7:78:bb:48:bf: 18:0a:23:4c:df:90:04:02:52:d8:b8:fa:42:85:73:2b:19:4d: fb:79:e1:13:a9:f0:35:4d:ae:6f:e4:8e:6b:fd:93:65:a2:84: a5:c5:d2:51:d8:57:af:6b:20:ed:98:e1:21:d2:af:e1:48:34: 7d:be:ba:74:93:73:0c:dc:78:c0:ed:e8:ce:9d:d0:09:cb:d5: 92:59:1d:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsePS8p1K7+ICJtDWCscFj5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NjhiYmVjNWE5ZTExYmZiZGFlZDg0YWE4ZDNhYWNkYTI5 ODg5ZjkwHhcNMjUxMjE0MTkwMTI0WhcNMjUxMjE1MTkwMTI0WjAzMTEwLwYDVQQD Eyg4YTY2MWQ4MTZjYWUzNDk1ZWU5OWMwYWIyZjlkODJhYTYxYThiYWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ko967foc3prk8lJMT4UPYPHF7Qw PYtiNsbi5H7Q4GeD+Sezva2OP2Rm9xLjHSKqX/eknBvL/reeeoYkYFmux5mFBs/M qOO5hmGDgceKA8/eF/WnWjxfSkYfj5ZGccHnIaJjtdV7OLIXZata3jVskyfMx88o 0jaxNx7DuQ4IbS/sgtVnyPOT36mmwJTbk62deYmdWggckrbZssmb9vKdh2POGzSH 14YG0CnXOcAoFgPNyDDELl9lo2G2noo9LAjvO0I2asd50qZv+eTvw9ZnGaPKy7bK gpzBWIZHDxIlcXF/gTORI5aCuCafRT6xzzTKq1Brx6m0svKlue4Dn/tOWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIpmHYFsrjSV7pnAqy+dgqphqLqyMB8GA1UdIwQY MBaAFKdou+xanhG/va7YSqjTqs2imIn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDJpNzdGcWVFYi05cnRoS3FOT3F6YUtZaWZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9lYWMxZjQtYWNlMS00Y2UxLWExODEt Y2ZjYWJiMTlmOTg5LzEvcDJpNzdGcWVFYi05cnRoS3FOT3F6YUtZaWZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9lYWMxZjQtYWNlMS00Y2UxLWExODEtY2ZjYWJiMTlmOTg5 LzEvcDJpNzdGcWVFYi05cnRoS3FOT3F6YUtZaWZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtkzbP9vf E4i8sAdLgfq0sd+f+EIwZeWyp98Dy8cZaRfE977zcmDC8LmIQ3zHIwLpv5sNjVUJ 8+ZtRh2VPE1/Hs7ws1KRdwkgWB8vQpvsRhpsFSRNcGtxboM2iT2ykHwtWYOUITp+ AzoqIUUbLyr/QTtQwEVLsDqUT2B73OVYfBrfU+3F8i2CwAa3S7KyxdaeGPnpYR9a jnUvcGKfeFJRkN/xnwvER62epaHtpNB45vd4u0i/GAojTN+QBAJS2Lj6QoVzKxlN +3nhE6nwNU2ub+SOa/2TZaKEpcXSUdhXr2sg7ZjhIdKv4Ug0fb66dJNzDNx4wO3o zp3QCcvVklkdjw== -----END CERTIFICATE-----Generated at Sun Dec 14 21:23:15 2025 by rpki-client