This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft File: p_lKuTUFS4bctdatutLf21ZLUkg.mft (raw, json) Hash identifier: JOATwbjsCYzPohB04BMj9lyJUetx7NgpVnPOmsUkWgM= Subject key identifier: 31:46:5D:A5:2B:81:92:E2:2C:DE:AD:95:5F:B1:B8:9F:E2:F8:7E:79 Authority key identifier: A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48 Certificate issuer: /CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248 Certificate serial: 019B4136EEF9F30B089C0AC4F8BCC24B7A04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 14:01:17 +0000 Manifest this update: Sun 21 Dec 2025 14:01:17 +0000 Manifest next update: Mon 22 Dec 2025 14:01:17 +0000 Files and hashes: 1: 64bxF7wA4GbyNp68j4QvJJrXvcY.roa (hash: /BZbUI4tcOvcN8G1/WOb5wicEcPAOnUGplNlfdXvoLw=) 2: 6i00LPl42nHb8qbMKvKVhPUPT4A.roa (hash: 2YZA57Jg0ln+zFDDEt7ePeu3FeU4ieQ7XTEhkxEpCwM=) 3: O0E_dnFN5zi96CvgLLN6eJoyMkM.roa (hash: Ns1LJilR3FhqXle0WRn94Ds/xQRz0HxzYlILaBi7ZCU=) 4: p_lKuTUFS4bctdatutLf21ZLUkg.crl (hash: I3tNuJgncoTHKq5IXIxopVJNBxbJ5kJQJES2T13xxMc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:ee:f9:f3:0b:08:9c:0a:c4:f8:bc:c2:4b:7a:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248 Validity Not Before: Dec 21 14:01:17 2025 GMT Not After : Dec 22 14:01:17 2025 GMT Subject: CN=31465da52b8192e22cdead955fb1b89fe2f87e79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6d:b9:e8:db:03:33:43:e1:f1:2e:ea:91:6f: 1c:84:5e:13:3e:0a:b4:b7:46:ee:81:a0:e7:51:b3: 4a:45:2a:be:8a:89:e4:48:df:7c:fa:77:68:05:f3: 8c:ad:6f:e7:7b:0b:32:4e:fb:97:85:39:79:21:5a: 7f:2b:2a:59:5a:93:b8:8c:cc:21:4a:a9:f6:6e:1e: 1c:86:f5:f6:00:60:17:8d:26:ed:98:a7:e7:41:0c: fa:e4:61:71:8b:a1:16:cc:e0:8a:86:5f:b4:26:c1: 63:d2:ac:21:12:86:8b:98:3d:77:11:44:b4:42:55: 26:b6:d9:f8:2b:a0:01:f1:b7:9a:47:2e:55:10:74: d7:94:4a:b4:b2:73:f8:64:31:a3:da:e5:d0:d1:da: ce:b9:18:38:52:1b:f8:ea:32:12:d0:b3:14:6c:b9: c7:7a:a8:ab:29:9f:85:c2:46:ce:1a:1c:86:2b:98: fe:a9:7e:ac:5e:c3:17:c6:f1:57:f9:b9:cd:e3:c8: 23:f1:db:c5:fe:14:d6:df:e7:36:90:3f:fe:ab:78: ca:bf:eb:9c:bf:03:82:b7:42:01:54:c6:6f:c0:61: 3c:cf:5c:2e:50:d7:6d:fd:00:0d:64:01:40:be:6b: d4:34:19:24:5e:a0:42:bd:99:e8:c6:af:26:0e:a3: e7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:46:5D:A5:2B:81:92:E2:2C:DE:AD:95:5F:B1:B8:9F:E2:F8:7E:79 X509v3 Authority Key Identifier: keyid:A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:7c:c6:6d:15:f4:48:d1:97:a1:60:38:b0:06:a5:b9:d1:95: 1d:9e:19:07:a8:c7:73:c9:51:ea:86:b3:ec:fe:e9:8e:f2:35: 02:13:f9:47:1b:02:d5:56:3e:d1:b1:73:72:91:12:af:21:68: 82:a2:f6:09:bf:c6:2d:13:a7:4b:8f:ef:f4:a7:b8:ae:35:e4: 1f:4a:eb:0b:d9:98:99:78:ca:87:71:a2:ef:9a:51:41:f5:87: 5f:57:71:7f:fd:a4:e9:2b:bc:8a:7d:1c:4f:b8:09:68:d6:50: ce:29:8c:ff:13:3b:c6:c4:24:2a:a2:17:b1:bb:47:4a:74:6f: 01:da:6e:0b:0a:1c:15:7d:4d:07:37:47:5b:7f:0c:20:aa:8f: 19:9e:21:61:92:b2:3b:5d:73:30:6a:e0:58:76:76:77:21:df: d7:6a:9f:8d:a4:c3:37:df:dc:ef:79:56:06:1e:2f:06:a8:5b: 30:cf:4e:7b:65:b2:51:00:1d:26:9b:f5:70:8d:2c:02:69:c9: ea:38:bc:61:ee:df:f4:38:b7:ae:88:06:d7:b8:76:67:18:a7: 72:4a:2d:df:e9:93:f0:49:47:e4:10:15:c8:bd:34:e3:24:1b: b5:6f:01:5c:e2:4c:e7:54:65:5f:57:18:50:e7:e6:14:25:6d: 56:d5:f7:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNu758wsInArE+LzCS3oEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3Zjk0YWI5MzUwNTRiODZkY2I1ZDZhZGJhZDJkZmRiNTY0 YjUyNDgwHhcNMjUxMjIxMTQwMTE3WhcNMjUxMjIyMTQwMTE3WjAzMTEwLwYDVQQD EygzMTQ2NWRhNTJiODE5MmUyMmNkZWFkOTU1ZmIxYjg5ZmUyZjg3ZTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2256NsDM0Ph8S7qkW8chF4TPgq0 t0bugaDnUbNKRSq+ionkSN98+ndoBfOMrW/newsyTvuXhTl5IVp/KypZWpO4jMwh Sqn2bh4chvX2AGAXjSbtmKfnQQz65GFxi6EWzOCKhl+0JsFj0qwhEoaLmD13EUS0 QlUmttn4K6AB8beaRy5VEHTXlEq0snP4ZDGj2uXQ0drOuRg4Uhv46jIS0LMUbLnH eqirKZ+FwkbOGhyGK5j+qX6sXsMXxvFX+bnN48gj8dvF/hTW3+c2kD/+q3jKv+uc vwOCt0IBVMZvwGE8z1wuUNdt/QANZAFAvmvUNBkkXqBCvZnoxq8mDqPnAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDFGXaUrgZLiLN6tlV+xuJ/i+H55MB8GA1UdIwQY MBaAFKf5Srk1BUuG3LXWrbrS39tWS1JIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcF9sS3VUVUZTNGJjdGRhdHV0TGYyMVpMVWtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy83ZTM4YjItYmVjMS00NDY0LWEwY2Et N2QyNThiNjIwMTY5LzEvcF9sS3VUVUZTNGJjdGRhdHV0TGYyMVpMVWtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy83ZTM4YjItYmVjMS00NDY0LWEwY2EtN2QyNThiNjIwMTY5 LzEvcF9sS3VUVUZTNGJjdGRhdHV0TGYyMVpMVWtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANHzGbRX0 SNGXoWA4sAaludGVHZ4ZB6jHc8lR6oaz7P7pjvI1AhP5RxsC1VY+0bFzcpESryFo gqL2Cb/GLROnS4/v9Ke4rjXkH0rrC9mYmXjKh3Gi75pRQfWHX1dxf/2k6Su8in0c T7gJaNZQzimM/xM7xsQkKqIXsbtHSnRvAdpuCwocFX1NBzdHW38MIKqPGZ4hYZKy O11zMGrgWHZ2dyHf12qfjaTDN9/c73lWBh4vBqhbMM9Oe2WyUQAdJpv1cI0sAmnJ 6ji8Ye7f9Di3rogG17h2Zxinckot3+mT8ElH5BAVyL004yQbtW8BXOJM51RlX1cY UOfmFCVtVtX3ow== -----END CERTIFICATE-----Generated at Sun Dec 21 15:54:25 2025 by rpki-client