This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft File: p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft (raw, json) Hash identifier: Ora7mCfIyQ8h5fLuGkHFO7YC9J80mbb1z+n3BMWbICw= Subject key identifier: 2A:1E:AB:AF:3F:67:33:55:FE:94:AA:3E:70:E4:1D:12:36:47:C9:74 Authority key identifier: A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3 Certificate issuer: /CN=a7d78de0234e6f99701592f536e45f5f5594eec3 Certificate serial: 019B3E3573F6E176093475073E2C656737B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft Manifest number: 1790 Signing time: Sun 21 Dec 2025 00:00:48 +0000 Manifest this update: Sun 21 Dec 2025 00:00:48 +0000 Manifest next update: Mon 22 Dec 2025 00:00:48 +0000 Files and hashes: 1: 4kRsEvvYS9vLgzT9RvhH3Igjm9k.roa (hash: I03jyb6kvpeR9AlCu8KypQT8GWzh4/aSh4au4iyy8+I=) 2: DpBq14ju-sMiK3daEy8ixQQfVTk.roa (hash: i+DQu9MJOrZ5CdMAuj/sQPS/Zyr6reglqbrHWvbkyx4=) 3: DqUoj4sK_ahE1s2i6xM85mI1I6k.roa (hash: ghiG8Oanf8lruQ8GxgH5btsaEet/0QjBhkR1Sn2dFKg=) 4: Fnl-4WGHpZ5LXFARfr2ATzp8vLk.roa (hash: ux6nyEJd1cHyE1av/8nhZIQD47mVZkeQGG+DrMwKlok=) 5: QX-JX3Qu6B9dGH2bgHRHXCFQSGM.roa (hash: Libk/j+UTy/9cJUk+hwXMnFM9cOquglWjTlufdsoMkE=) 6: bDPZ2IR6ImcRHKaCKb1DFYZSPeU.roa (hash: C/oWZRw0Dl261ZToD4X2GP0Mb4nYzslAlII1IzygPX8=) 7: jG76lLUgQYaSZsB__7tXEnh7-_I.roa (hash: fSIH28hM1SyCenkx+Z6chI8MtQGu7VXq7U7d1upY0CQ=) 8: ma5oVolydUxkukW1x1dx0oRVMTk.roa (hash: vE8qPyFhzLzPBn/Dd5S1DZU12rMMyEbmBmsnKLuenBI=) 9: p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl (hash: fBBfMElGH6SaU48q5e3K2i+Pvimf/3kaUfeSsE0dSOs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:35:73:f6:e1:76:09:34:75:07:3e:2c:65:67:37:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d78de0234e6f99701592f536e45f5f5594eec3 Validity Not Before: Dec 21 00:00:48 2025 GMT Not After : Dec 22 00:00:48 2025 GMT Subject: CN=2a1eabaf3f673355fe94aa3e70e41d123647c974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c0:af:db:5f:37:74:25:f0:66:b3:4f:38:a2: 87:23:fc:53:6b:90:0c:bc:92:ac:3e:6b:f4:c5:be: ab:6d:dd:bd:42:34:aa:55:cf:c9:42:92:c0:4c:4a: 48:87:fc:68:de:62:6c:20:67:bf:08:b1:b9:9b:d4: 00:88:0b:10:f1:b2:df:c1:47:e9:bd:42:08:f0:57: 92:f9:f0:8a:0f:fb:7c:92:9c:d7:d6:65:0e:b9:ee: ed:1a:46:68:4c:ef:b8:f1:03:1b:b3:6c:42:52:fe: 66:81:2a:cf:d0:d6:fc:07:76:a5:97:79:85:97:8b: cb:e2:d0:5a:25:7c:8b:00:a1:55:7d:3c:3e:a4:d9: 16:70:df:41:df:a4:25:f2:e5:e4:cf:4b:86:96:6f: 01:e1:fd:7f:25:1f:83:f7:ad:2a:70:8f:e8:be:19: 48:cf:a8:0a:80:ed:50:54:e4:f3:ba:1a:1d:35:04: f3:af:cc:5b:7e:8b:c2:92:df:d2:48:b4:0c:d7:32: d1:5f:44:3d:42:bc:2d:5c:e5:73:87:bb:72:d4:76: cc:31:fa:f2:19:b4:aa:5a:eb:d2:8e:c4:2f:fd:1c: 6b:6d:a8:b5:3d:d7:be:8f:f9:85:6a:a2:3c:fb:86: 3d:69:d4:cc:3e:ab:0f:d6:ba:29:db:7b:42:62:07: 08:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:1E:AB:AF:3F:67:33:55:FE:94:AA:3E:70:E4:1D:12:36:47:C9:74 X509v3 Authority Key Identifier: keyid:A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:60:ef:60:f6:6e:18:1e:59:67:ec:cb:bc:26:86:66:8d:4a: 4f:7e:47:56:69:b8:92:af:5c:9d:6a:76:16:3c:02:09:9d:11: b3:7c:c2:0b:8a:b1:46:1f:b3:9f:c3:84:25:c8:b5:a0:91:90: 56:6d:a1:7f:03:73:88:55:27:d3:48:3b:d7:ab:5b:13:b2:38: f3:17:c6:f5:25:5f:0d:4b:d2:dc:89:ec:cd:9e:8a:3f:44:50: 8b:43:22:58:1d:49:2a:d1:56:0c:3c:3a:5f:47:0f:84:79:ea: cc:fc:eb:09:56:cf:6a:49:94:29:0e:18:be:06:e3:52:42:ed: c8:43:17:ce:92:77:7f:64:1f:e4:ce:fb:de:10:54:02:c9:82: 10:2d:23:1e:99:68:0b:a9:be:39:19:38:ae:61:92:e4:f7:85: 4e:cd:f7:da:32:97:2a:2c:97:f3:9c:9b:55:0e:1f:b9:12:80: 65:45:7f:9d:f9:f9:6e:64:d1:19:60:5e:9a:a6:c3:99:25:35: 79:9d:0a:c7:22:e7:72:b7:04:44:d8:9c:91:de:16:c1:69:5f: 14:a0:ad:72:3f:0a:d0:df:fa:eb:b7:a0:1c:9d:79:52:68:56: 14:ac:fe:25:41:bb:11:d1:91:67:df:4e:fc:07:5f:ac:2a:d4: 3d:3e:ba:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+NXP24XYJNHUHPixlZze2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZDc4ZGUwMjM0ZTZmOTk3MDE1OTJmNTM2ZTQ1ZjVmNTU5 NGVlYzMwHhcNMjUxMjIxMDAwMDQ4WhcNMjUxMjIyMDAwMDQ4WjAzMTEwLwYDVQQD EygyYTFlYWJhZjNmNjczMzU1ZmU5NGFhM2U3MGU0MWQxMjM2NDdjOTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8Cv2183dCXwZrNPOKKHI/xTa5AM vJKsPmv0xb6rbd29QjSqVc/JQpLATEpIh/xo3mJsIGe/CLG5m9QAiAsQ8bLfwUfp vUII8FeS+fCKD/t8kpzX1mUOue7tGkZoTO+48QMbs2xCUv5mgSrP0Nb8B3all3mF l4vL4tBaJXyLAKFVfTw+pNkWcN9B36Ql8uXkz0uGlm8B4f1/JR+D960qcI/ovhlI z6gKgO1QVOTzuhodNQTzr8xbfovCkt/SSLQM1zLRX0Q9QrwtXOVzh7ty1HbMMfry GbSqWuvSjsQv/Rxrbai1Pde+j/mFaqI8+4Y9adTMPqsP1rop23tCYgcIEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCoeq68/ZzNV/pSqPnDkHRI2R8l0MB8GA1UdIwQY MBaAFKfXjeAjTm+ZcBWS9TbkX19VlO7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8zMWFhYmEtYWM3ZS00ODlmLTg3N2Mt MjhkNWI2MDdhNDdmLzEvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8zMWFhYmEtYWM3ZS00ODlmLTg3N2MtMjhkNWI2MDdhNDdm LzEvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFmDvYPZu GB5ZZ+zLvCaGZo1KT35HVmm4kq9cnWp2FjwCCZ0Rs3zCC4qxRh+zn8OEJci1oJGQ Vm2hfwNziFUn00g716tbE7I48xfG9SVfDUvS3InszZ6KP0RQi0MiWB1JKtFWDDw6 X0cPhHnqzPzrCVbPakmUKQ4YvgbjUkLtyEMXzpJ3f2Qf5M773hBUAsmCEC0jHplo C6m+ORk4rmGS5PeFTs332jKXKiyX85ybVQ4fuRKAZUV/nfn5bmTRGWBemqbDmSU1 eZ0KxyLncrcERNickd4WwWlfFKCtcj8K0N/667egHJ15UmhWFKz+JUG7EdGRZ99O /AdfrCrUPT66SQ== -----END CERTIFICATE-----Generated at Sun Dec 21 08:36:40 2025 by rpki-client