This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft File: p0j74dfTpqpHTeQ_qIXOLQkcUps.mft (raw, json) Hash identifier: WdtsqWZlmg43e9fdDGFg9iYGSZl3MIPw9Gagomgy5fk= Subject key identifier: C7:AC:DD:CD:B0:72:80:96:4C:50:9C:FA:B0:45:E5:9C:FD:AE:00:6C Authority key identifier: A7:48:FB:E1:D7:D3:A6:AA:47:4D:E4:3F:A8:85:CE:2D:09:1C:52:9B Certificate issuer: /CN=a748fbe1d7d3a6aa474de43fa885ce2d091c529b Certificate serial: 019B2BF8E0AFE4EAD7E7DD36F8B2FA8C9380 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0j74dfTpqpHTeQ_qIXOLQkcUps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft Manifest number: 14D1 Signing time: Wed 17 Dec 2025 11:01:29 +0000 Manifest this update: Wed 17 Dec 2025 11:01:29 +0000 Manifest next update: Thu 18 Dec 2025 11:01:29 +0000 Files and hashes: 1: 7FOJ9WC3T7pHyWWCuyPjcheMLEQ.roa (hash: nKrGLaOlKefy6/k/jC1QdJsWJ/jAJ+vYp4Lo3APL+Ec=) 2: p0j74dfTpqpHTeQ_qIXOLQkcUps.crl (hash: 8I70cXU8p6Q+4necH9SoLOACHdsf+FMlEGwrLPO9H+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft rsync://rpki.ripe.net/repository/DEFAULT/p0j74dfTpqpHTeQ_qIXOLQkcUps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:e0:af:e4:ea:d7:e7:dd:36:f8:b2:fa:8c:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a748fbe1d7d3a6aa474de43fa885ce2d091c529b Validity Not Before: Dec 17 11:01:29 2025 GMT Not After : Dec 18 11:01:29 2025 GMT Subject: CN=c7acddcdb07280964c509cfab045e59cfdae006c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b4:da:14:cf:c7:87:79:62:86:50:98:2e:71: 00:dd:e1:2a:8d:0c:65:f8:75:0d:9e:f3:8b:04:35: d4:ed:b5:72:35:3e:28:65:5b:e9:e5:ee:8e:3e:db: f2:82:c5:2e:e7:d5:55:5f:ef:6d:67:96:36:d9:70: ba:f3:9a:f9:c4:66:cd:4b:b2:c0:66:c0:ab:d9:a2: 6f:72:9e:26:4a:43:71:2e:43:43:00:00:1e:94:bb: 89:f0:ce:24:23:cb:83:b0:e8:65:52:6e:b9:c0:09: af:30:bb:0a:de:b0:77:67:2d:d1:a0:e4:12:df:22: b1:2c:fb:ce:c2:a0:f1:0a:b2:61:56:63:dd:06:ad: 9d:03:1e:20:65:73:5a:b3:e8:40:6b:fe:9f:aa:b3: 4a:95:41:6d:a8:f4:80:74:e4:a7:11:dd:a6:85:8e: c5:50:28:ec:de:ca:ef:82:80:6f:39:d4:b7:82:64: 75:7f:ec:b4:90:7e:b5:72:90:a9:58:6b:a7:b2:ae: dd:60:aa:c3:01:62:39:80:c8:36:a4:5d:28:f6:e0: 32:5a:b7:0f:cb:d7:1a:b5:b6:4a:13:4e:cf:30:cc: 7c:99:72:1d:10:98:4c:d6:a7:c6:8d:f4:42:02:8b: 6b:20:03:c3:64:08:11:ac:79:9b:06:67:82:1a:17: 7a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:AC:DD:CD:B0:72:80:96:4C:50:9C:FA:B0:45:E5:9C:FD:AE:00:6C X509v3 Authority Key Identifier: keyid:A7:48:FB:E1:D7:D3:A6:AA:47:4D:E4:3F:A8:85:CE:2D:09:1C:52:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0j74dfTpqpHTeQ_qIXOLQkcUps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:ea:32:0c:d4:27:d3:f1:af:ed:6e:c8:11:f8:5b:07:d8:e4: c0:4a:d2:8a:43:d8:49:64:95:f1:3f:d9:15:64:70:9e:19:b2: 9a:b6:f5:26:be:17:26:52:4b:ab:f2:b0:9a:eb:d1:8f:f0:8e: dd:ae:99:a1:2d:0f:b8:e6:29:b0:72:a4:fc:9d:f5:60:6a:ba: cd:72:c8:a7:39:9d:b9:10:db:95:ed:61:1a:ad:dd:47:ca:18: 24:bf:d7:0f:dc:6f:95:c3:33:b2:63:fc:fe:1f:fd:63:ae:ca: 44:f0:af:d5:98:9e:c6:37:d9:28:e7:00:36:3e:13:39:a9:57: 64:98:4a:f1:0f:35:25:d5:9d:83:25:93:41:10:a5:86:b7:da: de:09:1e:4e:cb:80:b6:ad:86:40:15:8e:dc:ad:fd:b4:b8:35: 00:27:70:cd:3a:89:37:e4:eb:41:b7:0c:a9:6f:e8:bc:2e:b7: bf:09:86:4d:4c:c5:df:f2:14:8f:22:b3:06:73:0b:c2:d8:b9: 0f:bd:74:22:b8:93:ff:b5:88:66:d2:38:f3:e2:f7:f4:d2:8c: dd:94:be:76:e1:35:30:6b:1e:b8:98:b9:96:25:f1:c9:2f:4d: b5:0f:c7:88:03:19:59:1b:ba:b6:24:26:61:da:d1:be:9a:30: 18:b1:1b:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+OCv5OrX5902+LL6jJOAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NDhmYmUxZDdkM2E2YWE0NzRkZTQzZmE4ODVjZTJkMDkx YzUyOWIwHhcNMjUxMjE3MTEwMTI5WhcNMjUxMjE4MTEwMTI5WjAzMTEwLwYDVQQD EyhjN2FjZGRjZGIwNzI4MDk2NGM1MDljZmFiMDQ1ZTU5Y2ZkYWUwMDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLTaFM/Hh3lihlCYLnEA3eEqjQxl +HUNnvOLBDXU7bVyNT4oZVvp5e6OPtvygsUu59VVX+9tZ5Y22XC685r5xGbNS7LA ZsCr2aJvcp4mSkNxLkNDAAAelLuJ8M4kI8uDsOhlUm65wAmvMLsK3rB3Zy3RoOQS 3yKxLPvOwqDxCrJhVmPdBq2dAx4gZXNas+hAa/6fqrNKlUFtqPSAdOSnEd2mhY7F UCjs3srvgoBvOdS3gmR1f+y0kH61cpCpWGunsq7dYKrDAWI5gMg2pF0o9uAyWrcP y9catbZKE07PMMx8mXIdEJhM1qfGjfRCAotrIAPDZAgRrHmbBmeCGhd6bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMes3c2wcoCWTFCc+rBF5Zz9rgBsMB8GA1UdIwQY MBaAFKdI++HX06aqR03kP6iFzi0JHFKbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDBqNzRkZlRwcXBIVGVRX3FJWE9MUWtjVXBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9hNzIzZDgtZDhjYy00ZTYwLTg1YWIt NmM5YjVjOWJmYTc1LzEvcDBqNzRkZlRwcXBIVGVRX3FJWE9MUWtjVXBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9hNzIzZDgtZDhjYy00ZTYwLTg1YWItNmM5YjVjOWJmYTc1 LzEvcDBqNzRkZlRwcXBIVGVRX3FJWE9MUWtjVXBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXOoyDNQn 0/Gv7W7IEfhbB9jkwErSikPYSWSV8T/ZFWRwnhmymrb1Jr4XJlJLq/KwmuvRj/CO 3a6ZoS0PuOYpsHKk/J31YGq6zXLIpzmduRDble1hGq3dR8oYJL/XD9xvlcMzsmP8 /h/9Y67KRPCv1ZiexjfZKOcANj4TOalXZJhK8Q81JdWdgyWTQRClhrfa3gkeTsuA tq2GQBWO3K39tLg1ACdwzTqJN+TrQbcMqW/ovC63vwmGTUzF3/IUjyKzBnMLwti5 D710IriT/7WIZtI48+L39NKM3ZS+duE1MGseuJi5liXxyS9NtQ/HiAMZWRu6tiQm YdrRvpowGLEbOg== -----END CERTIFICATE-----Generated at Wed Dec 17 19:07:35 2025 by rpki-client