This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.mft File: pxErNcd6Sxb761YSHJdNWdVmeEs.mft (raw, json) Hash identifier: zCissdoiyZg/QZvIay7zf9nfjo3aN9Y0GkDGBdwJmew= Subject key identifier: 43:D4:31:32:46:7F:43:F2:5E:BC:9B:09:DB:2B:40:13:ED:64:06:5E Authority key identifier: A7:11:2B:35:C7:7A:4B:16:FB:EB:56:12:1C:97:4D:59:D5:66:78:4B Certificate issuer: /CN=a7112b35c77a4b16fbeb56121c974d59d566784b Certificate serial: 019B3231DB54DACBB9256559F677237936E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxErNcd6Sxb761YSHJdNWdVmeEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 16:01:26 +0000 Manifest this update: Thu 18 Dec 2025 16:01:26 +0000 Manifest next update: Fri 19 Dec 2025 16:01:26 +0000 Files and hashes: 1: BwH9GKC4b7MR-_mPUkvo5kX6MbM.roa (hash: RyMXzPGYxLYPm9LtvHil8vaRU4zoAb2AHBWbWaC8/jg=) 2: pxErNcd6Sxb761YSHJdNWdVmeEs.crl (hash: /VBf2U9w8iy7vdl6EpWx8PtBQswiNwuYSmk9c1MgNfc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.mft rsync://rpki.ripe.net/repository/DEFAULT/pxErNcd6Sxb761YSHJdNWdVmeEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 16:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:db:54:da:cb:b9:25:65:59:f6:77:23:79:36:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7112b35c77a4b16fbeb56121c974d59d566784b Validity Not Before: Dec 18 16:01:26 2025 GMT Not After : Dec 19 16:01:26 2025 GMT Subject: CN=43d43132467f43f25ebc9b09db2b4013ed64065e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:10:85:ef:49:85:41:2d:2a:5c:37:83:69:ff: c1:c2:32:5e:0b:82:e3:39:d6:78:33:d6:46:c5:26: 03:74:98:73:88:d1:f3:83:b3:52:56:11:67:13:ce: 95:34:e0:66:1b:14:8e:c9:24:68:0a:52:44:35:90: b7:c9:86:64:0f:d8:1a:b4:9c:63:3a:f5:8f:47:08: ce:c7:f8:61:49:ce:2b:ee:9f:53:f1:ba:00:a1:ce: 67:92:42:ac:27:7a:61:17:2b:6a:02:05:d1:09:98: 67:6e:d3:92:17:ad:a8:92:ab:15:6f:53:b8:c5:05: ab:6c:53:e4:8b:2d:49:90:eb:1b:e1:12:28:46:9c: 16:3a:0d:ef:be:35:be:3d:3c:b2:c3:68:92:d2:be: fb:65:c8:6a:57:ea:93:8d:9d:4b:45:37:0f:11:3d: 00:db:bc:f5:0f:e0:7b:1d:65:ae:44:c8:f2:c7:49: 78:15:45:90:8e:96:db:bd:b6:c7:6e:22:0f:d0:22: d5:98:66:87:ed:94:b5:3d:10:03:1a:c6:08:24:a5: 17:b1:4f:0b:77:dc:68:0c:b6:9e:cf:fd:77:d0:7d: 66:f3:64:ef:b3:05:41:f6:15:b6:16:75:8c:67:eb: 94:42:bc:e4:c4:e9:32:ad:17:8c:8a:b3:ae:ec:33: 1c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D4:31:32:46:7F:43:F2:5E:BC:9B:09:DB:2B:40:13:ED:64:06:5E X509v3 Authority Key Identifier: keyid:A7:11:2B:35:C7:7A:4B:16:FB:EB:56:12:1C:97:4D:59:D5:66:78:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxErNcd6Sxb761YSHJdNWdVmeEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:33:0a:89:60:3e:71:96:c6:80:de:f0:1f:02:17:df:b7:94: 1b:5f:3b:5c:54:23:2b:fa:9c:11:36:6e:d9:5e:a1:3c:68:1f: df:77:44:f5:2b:40:99:2e:59:ab:9f:34:44:3f:ef:fe:a1:94: 4d:df:9c:85:15:5f:80:96:15:bc:78:d1:d9:6d:e1:39:36:fa: fa:f4:7f:ad:f6:84:ad:47:f2:99:da:6b:8e:68:2a:1d:07:c2: 92:b0:87:be:8e:3f:1a:f2:75:91:49:8c:23:19:4c:1a:38:9f: 48:bd:11:3c:05:55:89:a6:0a:e9:f0:9e:2d:4a:7a:20:86:63: 5f:7a:0a:90:b4:a2:87:27:e6:4c:74:b8:c2:8a:99:f5:9a:e7: ca:97:2c:2a:d4:ad:dd:21:38:bd:e2:10:17:db:09:cd:60:38: bd:82:70:da:cf:c4:cf:6b:a4:eb:b3:6d:6e:d8:81:7b:d8:16: fc:21:0a:dc:f7:ff:16:ee:f2:95:cb:98:0c:18:d5:9a:c7:1f: 9d:ab:c6:aa:c0:a3:82:bf:bc:1a:e3:86:00:a3:e7:c2:e5:fa: fc:a4:6c:e4:70:91:a2:68:12:24:ec:fe:50:6b:63:51:d4:b1: d1:c5:09:49:5c:67:90:3a:5b:3f:ed:ec:97:80:05:89:ed:8c: 8c:ce:87:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMdtU2su5JWVZ9ncjeTbpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3MTEyYjM1Yzc3YTRiMTZmYmViNTYxMjFjOTc0ZDU5ZDU2 Njc4NGIwHhcNMjUxMjE4MTYwMTI2WhcNMjUxMjE5MTYwMTI2WjAzMTEwLwYDVQQD Eyg0M2Q0MzEzMjQ2N2Y0M2YyNWViYzliMDlkYjJiNDAxM2VkNjQwNjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRCF70mFQS0qXDeDaf/BwjJeC4Lj OdZ4M9ZGxSYDdJhziNHzg7NSVhFnE86VNOBmGxSOySRoClJENZC3yYZkD9gatJxj OvWPRwjOx/hhSc4r7p9T8boAoc5nkkKsJ3phFytqAgXRCZhnbtOSF62okqsVb1O4 xQWrbFPkiy1JkOsb4RIoRpwWOg3vvjW+PTyyw2iS0r77ZchqV+qTjZ1LRTcPET0A 27z1D+B7HWWuRMjyx0l4FUWQjpbbvbbHbiIP0CLVmGaH7ZS1PRADGsYIJKUXsU8L d9xoDLaez/130H1m82TvswVB9hW2FnWMZ+uUQrzkxOkyrReMirOu7DMcfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEPUMTJGf0PyXrybCdsrQBPtZAZeMB8GA1UdIwQY MBaAFKcRKzXHeksW++tWEhyXTVnVZnhLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHhFck5jZDZTeGI3NjFZU0hKZE5XZFZtZUVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83MWNiZTUtNGEyOS00NTY3LWExZmEt Nzg4ODQyODIyNWI0LzEvcHhFck5jZDZTeGI3NjFZU0hKZE5XZFZtZUVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi83MWNiZTUtNGEyOS00NTY3LWExZmEtNzg4ODQyODIyNWI0 LzEvcHhFck5jZDZTeGI3NjFZU0hKZE5XZFZtZUVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfzMKiWA+ cZbGgN7wHwIX37eUG187XFQjK/qcETZu2V6hPGgf33dE9StAmS5Zq580RD/v/qGU Td+chRVfgJYVvHjR2W3hOTb6+vR/rfaErUfymdprjmgqHQfCkrCHvo4/GvJ1kUmM IxlMGjifSL0RPAVViaYK6fCeLUp6IIZjX3oKkLSihyfmTHS4woqZ9ZrnypcsKtSt 3SE4veIQF9sJzWA4vYJw2s/Ez2uk67NtbtiBe9gW/CEK3Pf/Fu7ylcuYDBjVmscf navGqsCjgr+8GuOGAKPnwuX6/KRs5HCRomgSJOz+UGtjUdSx0cUJSVxnkDpbP+3s l4AFie2MjM6Hjw== -----END CERTIFICATE-----Generated at Fri Dec 19 01:26:48 2025 by rpki-client