This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft File: p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft (raw, json) Hash identifier: 0OAJMUXd3L7NE5L7oe/NRv0Zdv2sYexkyG5c9fVVMVk= Subject key identifier: D6:85:55:10:BD:1B:A9:CF:26:20:3B:80:7F:D5:C0:22:8D:33:29:3F Authority key identifier: A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3 Certificate issuer: /CN=a7d78de0234e6f99701592f536e45f5f5594eec3 Certificate serial: 019B60F849EE329E77DAFE848F7630547AF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft Manifest number: 17A2 Signing time: Sat 27 Dec 2025 18:00:43 +0000 Manifest this update: Sat 27 Dec 2025 18:00:43 +0000 Manifest next update: Sun 28 Dec 2025 18:00:43 +0000 Files and hashes: 1: 4kRsEvvYS9vLgzT9RvhH3Igjm9k.roa (hash: I03jyb6kvpeR9AlCu8KypQT8GWzh4/aSh4au4iyy8+I=) 2: DpBq14ju-sMiK3daEy8ixQQfVTk.roa (hash: i+DQu9MJOrZ5CdMAuj/sQPS/Zyr6reglqbrHWvbkyx4=) 3: DqUoj4sK_ahE1s2i6xM85mI1I6k.roa (hash: ghiG8Oanf8lruQ8GxgH5btsaEet/0QjBhkR1Sn2dFKg=) 4: Fnl-4WGHpZ5LXFARfr2ATzp8vLk.roa (hash: ux6nyEJd1cHyE1av/8nhZIQD47mVZkeQGG+DrMwKlok=) 5: QX-JX3Qu6B9dGH2bgHRHXCFQSGM.roa (hash: Libk/j+UTy/9cJUk+hwXMnFM9cOquglWjTlufdsoMkE=) 6: bDPZ2IR6ImcRHKaCKb1DFYZSPeU.roa (hash: C/oWZRw0Dl261ZToD4X2GP0Mb4nYzslAlII1IzygPX8=) 7: jG76lLUgQYaSZsB__7tXEnh7-_I.roa (hash: fSIH28hM1SyCenkx+Z6chI8MtQGu7VXq7U7d1upY0CQ=) 8: ma5oVolydUxkukW1x1dx0oRVMTk.roa (hash: vE8qPyFhzLzPBn/Dd5S1DZU12rMMyEbmBmsnKLuenBI=) 9: p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl (hash: QSAQkcaKqcVU1CdI/BMafnIEY5/HUDoQwuAB/WUwFkg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 15:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:60:f8:49:ee:32:9e:77:da:fe:84:8f:76:30:54:7a:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d78de0234e6f99701592f536e45f5f5594eec3 Validity Not Before: Dec 27 18:00:43 2025 GMT Not After : Dec 28 18:00:43 2025 GMT Subject: CN=d6855510bd1ba9cf26203b807fd5c0228d33293f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4e:b5:b1:d5:c0:14:25:c6:46:1b:b5:7e:87: e8:e8:09:12:d6:9b:e3:14:eb:38:97:48:4c:65:ff: 26:8c:4b:55:f3:27:94:21:29:5a:c4:36:25:03:bc: 3d:a3:45:bf:59:1c:9d:f8:79:66:76:a1:c1:85:0b: 33:26:56:fa:fe:ea:60:d7:51:e0:11:e4:94:d1:08: 8d:ff:fb:2a:66:b8:1d:d0:a1:91:dd:3d:7a:1f:cf: 1d:31:a4:3f:63:c0:0a:38:5d:e1:db:ac:d6:4c:11: 4c:67:a0:2f:85:1b:1a:5e:37:ad:31:3e:3f:a0:c6: b3:31:c2:68:30:b4:8d:d9:9f:1f:62:ef:9f:a7:c8: 31:d4:89:0c:38:4e:a9:b9:a3:e4:f7:6e:8e:4d:43: 7e:5a:9d:3d:c3:37:8d:42:0c:57:91:fb:22:8f:5f: b6:af:d7:f9:ac:66:aa:36:2b:cc:c2:77:30:b1:61: d2:cb:4c:4e:99:98:66:bf:dc:c3:37:7b:69:72:f6: 7e:67:86:b5:35:5a:7f:b1:46:da:24:c3:f2:2b:57: 38:0e:13:00:56:98:ca:3a:bf:67:58:87:01:f5:df: 83:fe:8b:8c:85:b7:f2:96:d1:dc:8b:f8:f9:f5:01: 9e:d8:22:68:d0:c1:1b:c3:15:ac:a1:5f:f2:d8:47: bd:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:85:55:10:BD:1B:A9:CF:26:20:3B:80:7F:D5:C0:22:8D:33:29:3F X509v3 Authority Key Identifier: keyid:A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:da:70:ef:27:a2:06:57:42:5c:d4:75:6a:ff:c2:cb:d5:43: b0:6b:2b:34:79:ae:06:33:ae:7c:b8:3b:55:85:61:eb:c0:03: 4b:86:f0:ff:8d:ec:24:32:fe:c8:f5:bf:e1:2d:77:84:d7:54: e1:77:43:45:3a:ad:97:d9:5d:df:2b:dd:f8:08:d7:a9:e1:5f: 40:3b:ad:a9:b4:2d:01:83:f6:1c:ce:1b:27:52:64:13:28:54: 7b:41:f0:2c:d3:63:98:a7:72:df:e3:9e:39:04:fb:08:e9:d9: 4a:1c:09:96:43:5e:eb:8c:a5:69:aa:80:4f:87:9b:da:68:02: 71:8b:b9:72:01:e2:33:3f:3f:07:da:97:7a:e8:64:dc:41:e9: 37:c1:12:89:1e:ed:84:ca:5f:26:7c:70:b3:fc:5d:96:58:b5: 1d:59:d5:98:b5:fe:95:6e:49:56:d2:96:0d:ea:62:bd:1f:d1: d1:2d:01:6b:93:05:9a:be:72:9f:9f:b2:95:bc:56:e9:c3:03: 76:84:15:7f:69:84:fc:06:31:b3:f4:97:28:38:9e:0a:bf:71: f0:31:33:4f:f7:3f:20:c3:48:86:76:36:5f:c1:a5:72:75:2c: b8:e3:0e:48:8c:75:0c:07:7f:c9:97:4e:22:6b:d1:0e:18:27: b5:4a:82:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtg+EnuMp532v6Ej3YwVHr3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZDc4ZGUwMjM0ZTZmOTk3MDE1OTJmNTM2ZTQ1ZjVmNTU5 NGVlYzMwHhcNMjUxMjI3MTgwMDQzWhcNMjUxMjI4MTgwMDQzWjAzMTEwLwYDVQQD EyhkNjg1NTUxMGJkMWJhOWNmMjYyMDNiODA3ZmQ1YzAyMjhkMzMyOTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr061sdXAFCXGRhu1fofo6AkS1pvj FOs4l0hMZf8mjEtV8yeUISlaxDYlA7w9o0W/WRyd+HlmdqHBhQszJlb6/upg11Hg EeSU0QiN//sqZrgd0KGR3T16H88dMaQ/Y8AKOF3h26zWTBFMZ6AvhRsaXjetMT4/ oMazMcJoMLSN2Z8fYu+fp8gx1IkMOE6puaPk926OTUN+Wp09wzeNQgxXkfsij1+2 r9f5rGaqNivMwncwsWHSy0xOmZhmv9zDN3tpcvZ+Z4a1NVp/sUbaJMPyK1c4DhMA VpjKOr9nWIcB9d+D/ouMhbfyltHci/j59QGe2CJo0MEbwxWsoV/y2Ee9yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNaFVRC9G6nPJiA7gH/VwCKNMyk/MB8GA1UdIwQY MBaAFKfXjeAjTm+ZcBWS9TbkX19VlO7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8zMWFhYmEtYWM3ZS00ODlmLTg3N2Mt MjhkNWI2MDdhNDdmLzEvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8zMWFhYmEtYWM3ZS00ODlmLTg3N2MtMjhkNWI2MDdhNDdm LzEvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPtpw7yei BldCXNR1av/Cy9VDsGsrNHmuBjOufLg7VYVh68ADS4bw/43sJDL+yPW/4S13hNdU 4XdDRTqtl9ld3yvd+AjXqeFfQDutqbQtAYP2HM4bJ1JkEyhUe0HwLNNjmKdy3+Oe OQT7COnZShwJlkNe64ylaaqAT4eb2mgCcYu5cgHiMz8/B9qXeuhk3EHpN8ESiR7t hMpfJnxws/xdlli1HVnVmLX+lW5JVtKWDepivR/R0S0Ba5MFmr5yn5+ylbxW6cMD doQVf2mE/AYxs/SXKDieCr9x8DEzT/c/IMNIhnY2X8GlcnUsuOMOSIx1DAd/yZdO ImvRDhgntUqCow== -----END CERTIFICATE-----Generated at Sat Dec 27 21:02:36 2025 by rpki-client