This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft File: p_lKuTUFS4bctdatutLf21ZLUkg.mft (raw, json) Hash identifier: wOhL4cIuYVCz52kw7XrYNA67oPNGTgiILzBvskIhsSU= Subject key identifier: D9:9B:61:8D:C6:96:10:02:B6:7C:DF:01:10:60:7B:B3:11:0D:0A:E4 Authority key identifier: A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48 Certificate issuer: /CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248 Certificate serial: 019B3D59B0B075CC5B8B5D680094DC48D663 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 20:00:46 +0000 Manifest this update: Sat 20 Dec 2025 20:00:46 +0000 Manifest next update: Sun 21 Dec 2025 20:00:46 +0000 Files and hashes: 1: 64bxF7wA4GbyNp68j4QvJJrXvcY.roa (hash: /BZbUI4tcOvcN8G1/WOb5wicEcPAOnUGplNlfdXvoLw=) 2: 6i00LPl42nHb8qbMKvKVhPUPT4A.roa (hash: 2YZA57Jg0ln+zFDDEt7ePeu3FeU4ieQ7XTEhkxEpCwM=) 3: O0E_dnFN5zi96CvgLLN6eJoyMkM.roa (hash: Ns1LJilR3FhqXle0WRn94Ds/xQRz0HxzYlILaBi7ZCU=) 4: p_lKuTUFS4bctdatutLf21ZLUkg.crl (hash: ZmBWMXvK01q7/6GAtIttJ53HehMLMFtPzKFFAww6tec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:b0:b0:75:cc:5b:8b:5d:68:00:94:dc:48:d6:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248 Validity Not Before: Dec 20 20:00:46 2025 GMT Not After : Dec 21 20:00:46 2025 GMT Subject: CN=d99b618dc6961002b67cdf0110607bb3110d0ae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c5:50:55:5b:58:86:97:b9:b9:3b:eb:e8:3b: 39:ed:12:bf:b7:93:e7:7a:a9:18:c8:c3:bf:a2:c5: 46:0c:00:13:00:0b:00:c5:e4:87:b5:3c:2f:3d:85: 87:87:d8:ea:f0:cb:65:8b:7e:e8:a6:54:27:80:3b: 35:e1:74:1b:6e:79:75:d9:64:16:36:fd:17:e4:3c: 4f:26:b7:ee:e4:a0:42:ff:50:b6:a3:9f:d8:06:c4: ef:db:05:1e:63:11:77:43:fe:f2:13:6d:82:34:c7: 2d:56:66:aa:ee:06:23:a1:f6:7e:ce:79:0f:d5:b2: 1a:ad:e6:52:48:55:e5:4e:44:5a:3b:83:90:a5:b4: a4:bc:5d:e6:86:93:9f:27:12:c5:bb:fa:6a:78:65: 44:91:e7:11:93:d7:38:63:99:7a:4d:b2:72:4e:7b: 19:cb:d4:4a:cd:d2:09:4d:a2:15:44:89:10:e8:47: 0a:33:16:45:59:d6:83:6d:ed:5e:c5:a4:6b:ba:52: d1:e3:db:45:72:41:df:b9:17:b9:63:54:42:25:a6: 93:b1:59:e1:3f:e6:d4:24:b4:02:ef:89:d6:85:96: 32:98:4d:48:42:91:8e:32:7d:46:ea:96:b8:a3:5c: cf:22:ba:5f:c3:f5:11:56:be:e0:c4:6a:04:c3:cc: 51:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:9B:61:8D:C6:96:10:02:B6:7C:DF:01:10:60:7B:B3:11:0D:0A:E4 X509v3 Authority Key Identifier: keyid:A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:d9:8c:c5:a0:e9:cd:17:b3:f3:44:27:61:d1:2c:00:d5:c9: d0:03:4f:ea:90:d0:79:0b:5f:00:37:83:d0:6f:7d:6f:d6:bc: d2:dd:ef:50:3d:d8:fc:11:05:7b:ec:9b:57:d0:2e:43:63:7c: a4:b2:3b:32:1a:2f:88:f1:14:5d:01:3f:18:c5:2d:67:ed:14: 1a:cc:d3:55:0f:50:76:7a:7d:21:f2:e1:6c:f1:a8:63:15:22: 47:10:b5:ed:4e:d0:32:7e:b5:a3:00:b4:13:f8:b3:47:d7:4d: d8:3d:85:48:0b:ac:d9:fc:6d:db:7d:32:ad:46:a5:c8:79:f1: 21:57:93:5b:c7:73:5e:79:5e:79:e0:78:8f:e0:bb:51:90:24: 16:82:63:fb:b3:da:26:3b:e6:3d:59:1e:41:9f:e1:cc:fe:76: 0e:50:aa:53:a5:78:09:49:d2:a2:30:af:bd:61:be:35:29:63: b3:70:43:9a:c5:c2:2b:b1:d9:35:34:ad:73:46:bb:21:bb:31: a7:30:5d:6f:7e:24:eb:ea:7a:94:da:55:9b:c5:5f:1d:4c:27: df:33:68:19:66:7c:e7:76:29:e4:80:30:02:60:b4:12:82:d4: 13:d8:97:75:3e:e8:cc:d2:28:3b:d3:d9:dd:6c:9f:f0:b9:90: 4e:14:a8:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WbCwdcxbi11oAJTcSNZjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3Zjk0YWI5MzUwNTRiODZkY2I1ZDZhZGJhZDJkZmRiNTY0 YjUyNDgwHhcNMjUxMjIwMjAwMDQ2WhcNMjUxMjIxMjAwMDQ2WjAzMTEwLwYDVQQD EyhkOTliNjE4ZGM2OTYxMDAyYjY3Y2RmMDExMDYwN2JiMzExMGQwYWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8VQVVtYhpe5uTvr6Ds57RK/t5Pn eqkYyMO/osVGDAATAAsAxeSHtTwvPYWHh9jq8Mtli37oplQngDs14XQbbnl12WQW Nv0X5DxPJrfu5KBC/1C2o5/YBsTv2wUeYxF3Q/7yE22CNMctVmaq7gYjofZ+znkP 1bIareZSSFXlTkRaO4OQpbSkvF3mhpOfJxLFu/pqeGVEkecRk9c4Y5l6TbJyTnsZ y9RKzdIJTaIVRIkQ6EcKMxZFWdaDbe1exaRrulLR49tFckHfuRe5Y1RCJaaTsVnh P+bUJLQC74nWhZYymE1IQpGOMn1G6pa4o1zPIrpfw/URVr7gxGoEw8xR7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNmbYY3GlhACtnzfARBge7MRDQrkMB8GA1UdIwQY MBaAFKf5Srk1BUuG3LXWrbrS39tWS1JIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcF9sS3VUVUZTNGJjdGRhdHV0TGYyMVpMVWtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy83ZTM4YjItYmVjMS00NDY0LWEwY2Et N2QyNThiNjIwMTY5LzEvcF9sS3VUVUZTNGJjdGRhdHV0TGYyMVpMVWtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy83ZTM4YjItYmVjMS00NDY0LWEwY2EtN2QyNThiNjIwMTY5 LzEvcF9sS3VUVUZTNGJjdGRhdHV0TGYyMVpMVWtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAotmMxaDp zRez80QnYdEsANXJ0ANP6pDQeQtfADeD0G99b9a80t3vUD3Y/BEFe+ybV9AuQ2N8 pLI7MhoviPEUXQE/GMUtZ+0UGszTVQ9Qdnp9IfLhbPGoYxUiRxC17U7QMn61owC0 E/izR9dN2D2FSAus2fxt230yrUalyHnxIVeTW8dzXnleeeB4j+C7UZAkFoJj+7Pa JjvmPVkeQZ/hzP52DlCqU6V4CUnSojCvvWG+NSljs3BDmsXCK7HZNTStc0a7Ibsx pzBdb34k6+p6lNpVm8VfHUwn3zNoGWZ853Yp5IAwAmC0EoLUE9iXdT7ozNIoO9PZ 3Wyf8LmQThSohg== -----END CERTIFICATE-----Generated at Sun Dec 21 03:51:51 2025 by rpki-client