This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft File: pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft (raw, json) Hash identifier: oV8zvYlTIhkUap3LLa4Ddy+mf0rOuBXBedN1mDrpMd0= Subject key identifier: EC:CA:2E:D1:5F:7E:47:F4:FB:ED:8A:BA:20:C9:9F:A7:F1:0C:92:B9 Authority key identifier: A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9 Certificate issuer: /CN=a57f291818d8719738268d844994a2e10824d4c9 Certificate serial: 019B2219ED303393B669E5C47360AD7C4A1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft Manifest number: 177B Signing time: Mon 15 Dec 2025 13:01:22 +0000 Manifest this update: Mon 15 Dec 2025 13:01:22 +0000 Manifest next update: Tue 16 Dec 2025 13:01:22 +0000 Files and hashes: 1: 5e1NxuIhpqcGoJaPew5Kl5__8Lc.roa (hash: SNl+Y4M8n9I3K17PdDkj5othPOFaJvzjGzvPP4WmJSg=) 2: 7ybz4qgk4RPqp8xdPC6X_E4gtbM.roa (hash: ogGugsf7sS6PtDmol4WlYpBYEAXHnn37bVsSaSAg3P8=) 3: pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl (hash: J1TilD8vm4veMtEjlhlVNKOjgAXuRdGgLsd8s0ZTPR8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 13:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:19:ed:30:33:93:b6:69:e5:c4:73:60:ad:7c:4a:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a57f291818d8719738268d844994a2e10824d4c9 Validity Not Before: Dec 15 13:01:22 2025 GMT Not After : Dec 16 13:01:22 2025 GMT Subject: CN=ecca2ed15f7e47f4fbed8aba20c99fa7f10c92b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:41:5f:f7:39:7b:f0:d8:b8:32:f3:0b:bb:0e: 34:90:43:0d:b6:0e:a3:74:75:01:bb:71:cf:04:c3: a0:86:67:0b:24:18:fd:44:d5:90:74:31:8d:b6:3e: 39:2f:ea:21:ab:83:40:eb:83:1e:24:a6:8d:d4:08: e6:4c:8b:e8:9f:6d:d3:ce:a7:f7:f3:40:38:84:96: c1:cf:53:df:03:ee:04:02:b3:1e:cd:c2:d5:f2:bc: 54:f6:ea:5d:b6:a4:b8:28:c1:9a:a6:1f:f5:63:59: 23:ec:4b:f7:3f:a9:ce:e9:38:4f:8e:82:54:7d:1b: fd:ee:b9:05:61:de:86:f8:d9:a6:18:7a:60:d4:85: 03:5a:79:34:8c:1b:88:47:b8:22:21:3e:1c:1d:9f: ac:ad:3a:b4:cb:11:66:a5:8f:02:1a:c9:8b:a2:74: 40:78:91:2e:3e:ef:28:48:7a:a9:21:76:a1:7e:78: ff:49:48:39:d5:a0:7d:54:21:e5:b8:49:2f:73:e6: 03:ff:f1:78:de:b1:21:37:b6:c5:3b:82:96:56:23: 33:b8:df:97:25:5e:02:16:54:41:c7:9a:54:48:21: 3c:66:a3:5e:d5:c5:ee:69:c7:fc:a2:c7:c9:db:7c: 25:aa:a7:7a:a0:01:02:27:f8:7e:da:b2:83:eb:5f: b5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:CA:2E:D1:5F:7E:47:F4:FB:ED:8A:BA:20:C9:9F:A7:F1:0C:92:B9 X509v3 Authority Key Identifier: keyid:A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:21:e9:8d:35:34:57:34:b6:37:ae:9d:4b:85:03:31:6b:ab: 9a:0b:c2:36:d9:54:e5:7e:d5:2b:93:79:bc:19:88:96:e9:2c: 30:1c:90:0a:ec:b7:a6:db:9e:21:74:f7:79:04:21:bc:ba:c4: cd:96:83:b8:1d:6d:94:8a:c5:46:61:26:dd:e7:4b:84:78:0e: b6:29:d3:32:39:dc:83:ec:1a:40:c9:c8:da:44:f6:28:80:e2: 6e:ed:18:26:0c:73:87:f6:86:a5:77:d7:0a:6d:62:8d:d9:e3: 50:61:b5:3e:f7:56:98:fb:cf:c0:87:b9:0f:34:91:8e:bc:e9: c1:5c:d3:94:24:c7:c8:b9:f9:2b:b3:4b:a6:af:0b:38:03:2a: c5:63:c5:21:7b:74:87:66:14:1d:c8:db:0a:5a:ea:cd:09:a9: 92:be:12:3c:b2:00:a7:fb:a5:7a:90:83:c3:5f:ac:c7:63:f5: 2d:a9:2e:b9:ea:3d:56:03:ed:d0:70:be:55:fd:76:4c:01:bf: 07:9e:de:cb:5b:86:cd:22:cc:eb:2c:3c:22:23:4d:93:11:a3: 1a:f4:34:85:60:35:a4:ef:ba:dc:43:07:4c:de:54:51:5a:e5: 8d:f0:27:5b:22:bc:9d:5b:ee:35:54:c2:4b:fc:42:3e:c8:f5: cc:ba:90:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiGe0wM5O2aeXEc2CtfEobMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1N2YyOTE4MThkODcxOTczODI2OGQ4NDQ5OTRhMmUxMDgy NGQ0YzkwHhcNMjUxMjE1MTMwMTIyWhcNMjUxMjE2MTMwMTIyWjAzMTEwLwYDVQQD EyhlY2NhMmVkMTVmN2U0N2Y0ZmJlZDhhYmEyMGM5OWZhN2YxMGM5MmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUFf9zl78Ni4MvMLuw40kEMNtg6j dHUBu3HPBMOghmcLJBj9RNWQdDGNtj45L+ohq4NA64MeJKaN1AjmTIvon23Tzqf3 80A4hJbBz1PfA+4EArMezcLV8rxU9updtqS4KMGaph/1Y1kj7Ev3P6nO6ThPjoJU fRv97rkFYd6G+NmmGHpg1IUDWnk0jBuIR7giIT4cHZ+srTq0yxFmpY8CGsmLonRA eJEuPu8oSHqpIXahfnj/SUg51aB9VCHluEkvc+YD//F43rEhN7bFO4KWViMzuN+X JV4CFlRBx5pUSCE8ZqNe1cXuacf8osfJ23wlqqd6oAECJ/h+2rKD61+1FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOzKLtFffkf0++2KuiDJn6fxDJK5MB8GA1UdIwQY MBaAFKV/KRgY2HGXOCaNhEmUouEIJNTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFg4cEdCalljWmM0Sm8yRVNaU2k0UWdrMU1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85NjNhODMtZDJkMS00NjRjLWJkYjAt YjFhOTc5M2VlMzI0LzEvcFg4cEdCalljWmM0Sm8yRVNaU2k0UWdrMU1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85NjNhODMtZDJkMS00NjRjLWJkYjAtYjFhOTc5M2VlMzI0 LzEvcFg4cEdCalljWmM0Sm8yRVNaU2k0UWdrMU1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZSHpjTU0 VzS2N66dS4UDMWurmgvCNtlU5X7VK5N5vBmIluksMByQCuy3ptueIXT3eQQhvLrE zZaDuB1tlIrFRmEm3edLhHgOtinTMjncg+waQMnI2kT2KIDibu0YJgxzh/aGpXfX Cm1ijdnjUGG1PvdWmPvPwIe5DzSRjrzpwVzTlCTHyLn5K7NLpq8LOAMqxWPFIXt0 h2YUHcjbClrqzQmpkr4SPLIAp/ulepCDw1+sx2P1Lakuueo9VgPt0HC+Vf12TAG/ B57ey1uGzSLM6yw8IiNNkxGjGvQ0hWA1pO+63EMHTN5UUVrljfAnWyK8nVvuNVTC S/xCPsj1zLqQ8w== -----END CERTIFICATE-----Generated at Mon Dec 15 16:53:38 2025 by rpki-client