This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.mft File: pxn9xw058Tw3hNMlrith8PPJn0g.mft (raw, json) Hash identifier: mffM07wflosa6DNADDwYNQ0FRLSs8gFek2sUtPtAlSo= Subject key identifier: 1F:0D:A0:59:9D:DC:FD:BC:8D:CD:9F:53:FC:58:8B:1D:3E:B9:EE:87 Authority key identifier: A7:19:FD:C7:0D:39:F1:3C:37:84:D3:25:AE:2B:61:F0:F3:C9:9F:48 Certificate issuer: /CN=a719fdc70d39f13c3784d325ae2b61f0f3c99f48 Certificate serial: 019B5297F06F12A754767C3729818C0CC1DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxn9xw058Tw3hNMlrith8PPJn0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.mft Manifest number: 1794 Signing time: Wed 24 Dec 2025 23:00:47 +0000 Manifest this update: Wed 24 Dec 2025 23:00:47 +0000 Manifest next update: Thu 25 Dec 2025 23:00:47 +0000 Files and hashes: 1: ldBjKa6qQD6NaVa0xAumkdWo3gI.roa (hash: 2YMpg6Ripbk87w4Re6g4mOYhXFU2yNWWD+lkjoRwRkM=) 2: pxn9xw058Tw3hNMlrith8PPJn0g.crl (hash: /zwZ4Dy+u5qHzKXc3WQWdkKkWnNhqazQMQRnNb/zswM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.crl rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.mft rsync://rpki.ripe.net/repository/DEFAULT/pxn9xw058Tw3hNMlrith8PPJn0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:97:f0:6f:12:a7:54:76:7c:37:29:81:8c:0c:c1:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a719fdc70d39f13c3784d325ae2b61f0f3c99f48 Validity Not Before: Dec 24 23:00:47 2025 GMT Not After : Dec 25 23:00:47 2025 GMT Subject: CN=1f0da0599ddcfdbc8dcd9f53fc588b1d3eb9ee87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:90:c8:f2:d0:16:7f:8a:26:f4:b1:16:41:96: 21:59:a7:7d:c1:c7:75:0e:41:b5:76:a9:43:1b:f9: d5:a0:94:3d:a8:1e:0f:74:f0:15:ea:d2:d2:bd:54: 22:dc:0a:23:f8:cf:86:ba:c7:cb:86:e0:66:30:7e: 71:a6:9f:de:53:9a:2a:4d:34:5a:b0:34:94:18:0f: 9e:ce:0e:b0:49:2c:48:04:39:45:ad:aa:74:ab:c2: 19:65:da:c4:5f:19:d0:a2:9a:45:d2:40:f3:e1:35: b4:68:99:54:29:09:02:6d:c5:3a:f0:8f:63:54:ae: 2f:10:4c:b4:23:6c:e9:96:f1:67:6c:f1:d3:34:43: 01:b0:fa:1a:32:8d:7a:e6:5e:35:01:36:c4:37:4f: 7d:3c:28:d9:8c:1b:9a:c6:56:85:09:90:c7:57:ad: 9e:71:e3:38:f7:11:2e:49:4f:a9:48:0d:92:fe:16: d1:df:10:ca:f4:6f:14:c0:9a:25:f3:c0:d2:1f:b1: 82:63:f2:8d:16:5d:83:f6:aa:d4:b4:7d:12:eb:cc: 2c:28:c0:41:04:4c:7a:28:51:a0:cc:8c:e7:0c:52: da:f9:eb:9f:58:f5:65:7a:4d:95:cd:8a:8f:ec:f1: 9f:44:ab:82:2a:4a:32:02:40:66:b2:2f:85:a9:e6: 30:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:0D:A0:59:9D:DC:FD:BC:8D:CD:9F:53:FC:58:8B:1D:3E:B9:EE:87 X509v3 Authority Key Identifier: keyid:A7:19:FD:C7:0D:39:F1:3C:37:84:D3:25:AE:2B:61:F0:F3:C9:9F:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxn9xw058Tw3hNMlrith8PPJn0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:31:8c:7d:26:b4:b2:8a:9a:83:2c:23:20:65:bf:a1:b8:14: d4:1d:53:b4:3e:cd:18:29:e3:db:9e:56:f3:e6:34:17:f2:9c: 37:95:1e:07:58:63:ff:f7:86:f3:73:85:81:e8:39:31:97:cf: c5:13:2e:59:ab:e1:d8:60:0a:23:68:a6:55:44:ac:ab:9f:8d: e3:8f:6d:07:ba:49:b9:31:71:52:f2:b6:eb:45:a9:98:1f:c3: a4:57:41:d7:58:b6:49:17:fa:98:b0:84:e6:3f:5d:ea:d3:87: 30:7f:ca:ac:a1:df:ac:cf:8b:85:43:a9:45:b8:6f:dc:95:d0: 94:e7:61:d2:99:80:85:7f:43:4b:3b:cb:b3:7f:98:7b:89:33: 91:1f:2f:e9:0f:ac:f5:22:b1:6a:7b:0b:81:63:5e:35:92:46: 58:1c:d2:2e:96:7f:e3:15:91:c0:04:e5:dd:8c:c1:ad:2d:91: 72:d6:de:04:0c:a6:bf:f9:71:51:19:1b:1e:c0:a0:f4:98:80: 61:bc:00:25:66:d8:d1:1e:86:ae:9a:a5:1b:41:cb:ca:ca:71: 26:79:36:bc:05:63:33:0d:6e:c0:20:8a:e7:ce:0c:03:8e:a0: dd:82:1c:04:0b:5e:53:da:dd:9e:0a:cb:8d:11:e8:bb:77:95: 78:ad:cd:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSl/BvEqdUdnw3KYGMDMHbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3MTlmZGM3MGQzOWYxM2MzNzg0ZDMyNWFlMmI2MWYwZjNj OTlmNDgwHhcNMjUxMjI0MjMwMDQ3WhcNMjUxMjI1MjMwMDQ3WjAzMTEwLwYDVQQD EygxZjBkYTA1OTlkZGNmZGJjOGRjZDlmNTNmYzU4OGIxZDNlYjllZTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55DI8tAWf4om9LEWQZYhWad9wcd1 DkG1dqlDG/nVoJQ9qB4PdPAV6tLSvVQi3Aoj+M+GusfLhuBmMH5xpp/eU5oqTTRa sDSUGA+ezg6wSSxIBDlFrap0q8IZZdrEXxnQoppF0kDz4TW0aJlUKQkCbcU68I9j VK4vEEy0I2zplvFnbPHTNEMBsPoaMo165l41ATbEN099PCjZjBuaxlaFCZDHV62e ceM49xEuSU+pSA2S/hbR3xDK9G8UwJol88DSH7GCY/KNFl2D9qrUtH0S68wsKMBB BEx6KFGgzIznDFLa+eufWPVlek2VzYqP7PGfRKuCKkoyAkBmsi+FqeYw8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB8NoFmd3P28jc2fU/xYix0+ue6HMB8GA1UdIwQY MBaAFKcZ/ccNOfE8N4TTJa4rYfDzyZ9IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHhuOXh3MDU4VHczaE5NbHJpdGg4UFBKbjBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9kNzJiZjMtMWNhOS00MDIzLWFjZjUt ZDVhNDIzNDQyZDM1LzEvcHhuOXh3MDU4VHczaE5NbHJpdGg4UFBKbjBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9kNzJiZjMtMWNhOS00MDIzLWFjZjUtZDVhNDIzNDQyZDM1 LzEvcHhuOXh3MDU4VHczaE5NbHJpdGg4UFBKbjBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIzGMfSa0 soqagywjIGW/obgU1B1TtD7NGCnj255W8+Y0F/KcN5UeB1hj//eG83OFgeg5MZfP xRMuWavh2GAKI2imVUSsq5+N449tB7pJuTFxUvK260WpmB/DpFdB11i2SRf6mLCE 5j9d6tOHMH/KrKHfrM+LhUOpRbhv3JXQlOdh0pmAhX9DSzvLs3+Ye4kzkR8v6Q+s 9SKxansLgWNeNZJGWBzSLpZ/4xWRwATl3YzBrS2RctbeBAymv/lxURkbHsCg9JiA YbwAJWbY0R6GrpqlG0HLyspxJnk2vAVjMw1uwCCK584MA46g3YIcBAteU9rdngrL jRHou3eVeK3NHw== -----END CERTIFICATE-----Generated at Thu Dec 25 03:34:42 2025 by rpki-client