This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft File: p9ha3isNTsHKCSqOJwPBkgDHLzI.mft (raw, json) Hash identifier: EANiHTf2NNZVpslZivP4ZWVa2ZNVIAUaAbwYRZYPxs4= Subject key identifier: 77:72:CC:9A:16:94:EC:7E:67:04:B6:8C:81:ED:0B:84:DA:02:80:6B Authority key identifier: A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32 Certificate issuer: /CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32 Certificate serial: 019B54BD9EA5BD27AAD6DE57B0E715B1594D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft Manifest number: 100A Signing time: Thu 25 Dec 2025 09:01:11 +0000 Manifest this update: Thu 25 Dec 2025 09:01:11 +0000 Manifest next update: Fri 26 Dec 2025 09:01:11 +0000 Files and hashes: 1: 6riQFYOnevsA9sVsHrkvtdsLBq4.roa (hash: 5uUkQdH5SvzA028+fnhXMEwCfe7fiY4uQ2BW/w0zxVk=) 2: V78L3J5oIjHVBChvXIOgu9Ohs78.roa (hash: CdwTBRVREg2srUT+l5SA7LltUlSHpLsaVjkjqAH9C7o=) 3: p9ha3isNTsHKCSqOJwPBkgDHLzI.crl (hash: TpPLqR+wDjkVpYwmSqRmTtspXGEGgOiGTItdF1LyuOY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 09:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:bd:9e:a5:bd:27:aa:d6:de:57:b0:e7:15:b1:59:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32 Validity Not Before: Dec 25 09:01:11 2025 GMT Not After : Dec 26 09:01:11 2025 GMT Subject: CN=7772cc9a1694ec7e6704b68c81ed0b84da02806b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:18:1e:e7:a3:05:82:c0:a9:2e:b6:f0:3a:6e: e3:50:fe:47:e0:dc:c7:10:58:54:15:ab:70:e6:c8: 78:ce:46:d9:4c:68:13:c8:09:5f:fc:f1:f3:69:ef: 6c:c7:f1:4e:4c:f6:88:07:45:d4:7c:7e:8a:ff:9a: cc:ab:34:e8:de:a4:95:50:74:f2:bc:90:42:04:d3: 23:46:f6:ac:55:5c:48:c9:b5:52:6a:6b:31:56:9c: 78:94:f6:f0:39:d3:eb:69:84:e7:42:65:b4:11:c7: 66:0c:db:64:6c:e3:ae:23:49:4a:ae:f4:95:12:68: 2b:9d:a3:89:6d:1f:34:be:cd:cd:fd:78:86:9f:b8: d2:c4:28:1d:e6:9f:ef:32:03:48:6b:9d:48:46:26: 24:56:91:6a:e2:10:a7:cd:31:83:c3:ca:5d:f0:6e: 79:2c:ba:9b:84:36:20:ac:a6:08:c8:74:d3:fe:e0: 3b:4f:54:77:f0:c8:29:3b:bd:8e:f1:3f:b6:0e:e1: 44:d2:00:84:06:28:8a:44:30:16:83:6c:e9:d4:5d: ec:73:a0:f0:44:70:ae:59:3d:e8:b0:44:fc:ec:94: 0b:42:cc:c5:d8:e0:c9:33:30:25:e2:a2:81:9f:cc: db:2e:8f:e3:24:96:24:b1:a0:66:6f:32:eb:28:d0: 53:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:72:CC:9A:16:94:EC:7E:67:04:B6:8C:81:ED:0B:84:DA:02:80:6B X509v3 Authority Key Identifier: keyid:A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:df:48:23:76:a5:02:d4:72:21:4a:30:f3:d7:37:b8:b9:e1: b1:c6:ce:de:5c:0c:72:d7:1b:bc:c5:43:4c:dd:ca:da:0c:a9: 99:3a:ae:db:5f:f0:c9:be:74:bc:98:7f:89:b9:41:d6:76:cd: cb:40:34:e2:b9:b2:9b:3f:35:34:4f:86:f7:c4:4d:1a:29:a8: 13:30:01:92:cf:65:12:d2:79:e5:58:0c:ad:b4:dc:bf:9a:45: 4f:b3:7b:b4:8c:25:1d:fa:f4:f7:fb:90:f7:31:03:b2:57:98: 1e:26:17:58:8c:27:07:e2:0c:72:cb:54:7a:60:38:1d:25:f5: 96:47:cc:ff:55:41:c9:91:11:4c:b2:bd:ab:27:e8:73:e5:12: cc:61:86:9b:4c:59:ef:a9:4c:17:95:74:79:8b:fb:67:6c:a8: 0b:d9:ad:1c:14:65:49:f8:75:cc:e5:83:1b:94:27:57:61:e5: 36:48:0c:28:84:17:fa:40:08:b8:81:44:e2:62:9b:fc:7c:31: 0d:fd:b4:31:0a:e3:09:8c:17:49:e3:88:51:0e:13:50:96:6f: 5b:1a:ed:ae:e8:ed:f5:5f:cd:e2:cb:22:93:72:3d:5d:d1:0d: d9:ac:e6:b0:24:40:ad:1b:5f:81:52:11:f9:ef:6d:e4:d0:09: c0:fe:8f:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUvZ6lvSeq1t5XsOcVsVlNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZDg1YWRlMmIwZDRlYzFjYTA5MmE4ZTI3MDNjMTkyMDBj NzJmMzIwHhcNMjUxMjI1MDkwMTExWhcNMjUxMjI2MDkwMTExWjAzMTEwLwYDVQQD Eyg3NzcyY2M5YTE2OTRlYzdlNjcwNGI2OGM4MWVkMGI4NGRhMDI4MDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRge56MFgsCpLrbwOm7jUP5H4NzH EFhUFatw5sh4zkbZTGgTyAlf/PHzae9sx/FOTPaIB0XUfH6K/5rMqzTo3qSVUHTy vJBCBNMjRvasVVxIybVSamsxVpx4lPbwOdPraYTnQmW0EcdmDNtkbOOuI0lKrvSV EmgrnaOJbR80vs3N/XiGn7jSxCgd5p/vMgNIa51IRiYkVpFq4hCnzTGDw8pd8G55 LLqbhDYgrKYIyHTT/uA7T1R38MgpO72O8T+2DuFE0gCEBiiKRDAWg2zp1F3sc6Dw RHCuWT3osET87JQLQszF2ODJMzAl4qKBn8zbLo/jJJYksaBmbzLrKNBTqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHdyzJoWlOx+ZwS2jIHtC4TaAoBrMB8GA1UdIwQY MBaAFKfYWt4rDU7BygkqjicDwZIAxy8yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDloYTNpc05Uc0hLQ1NxT0p3UEJrZ0RITHpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS80MDMxNDItZGNmYy00ZmI1LWFlMWYt MDRiMGJmNjBiOWI3LzEvcDloYTNpc05Uc0hLQ1NxT0p3UEJrZ0RITHpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS80MDMxNDItZGNmYy00ZmI1LWFlMWYtMDRiMGJmNjBiOWI3 LzEvcDloYTNpc05Uc0hLQ1NxT0p3UEJrZ0RITHpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHt9II3al AtRyIUow89c3uLnhscbO3lwMctcbvMVDTN3K2gypmTqu21/wyb50vJh/iblB1nbN y0A04rmymz81NE+G98RNGimoEzABks9lEtJ55VgMrbTcv5pFT7N7tIwlHfr09/uQ 9zEDsleYHiYXWIwnB+IMcstUemA4HSX1lkfM/1VByZERTLK9qyfoc+USzGGGm0xZ 76lMF5V0eYv7Z2yoC9mtHBRlSfh1zOWDG5QnV2HlNkgMKIQX+kAIuIFE4mKb/Hwx Df20MQrjCYwXSeOIUQ4TUJZvWxrtrujt9V/N4ssik3I9XdEN2azmsCRArRtfgVIR +e9t5NAJwP6Pyw== -----END CERTIFICATE-----Generated at Thu Dec 25 14:16:10 2025 by rpki-client