This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft File: P-XZqjR4a6oW1Fa9857K-12XMPg.mft (raw, json) Hash identifier: +1TEdzTddAI0VEkBBTYGIeOVRtt7iTmncyXMtZWuRGU= Subject key identifier: 0D:73:BD:10:54:D6:78:E4:44:E9:7A:84:2E:21:6E:F0:51:FA:6D:D4 Authority key identifier: 3F:E5:D9:AA:34:78:6B:AA:16:D4:56:BD:F3:9E:CA:FB:5D:97:30:F8 Certificate issuer: /CN=3fe5d9aa34786baa16d456bdf39ecafb5d9730f8 Certificate serial: 019B3A8FF40DA238AFDA05204B23B5290FDF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-XZqjR4a6oW1Fa9857K-12XMPg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 07:01:11 +0000 Manifest this update: Sat 20 Dec 2025 07:01:11 +0000 Manifest next update: Sun 21 Dec 2025 07:01:11 +0000 Files and hashes: 1: I8Hl2QUOJ6pW-HzuzhburaAUCcs.roa (hash: TO7xgPDDMwBnfoyPmeOZq+S6vszklMWr0Jg0Yq+3Oiw=) 2: P-XZqjR4a6oW1Fa9857K-12XMPg.crl (hash: Gg4sQZ9824L5SgF6HNDUfdQnxSxV7quE3OHL6t2dkik=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.crl rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft rsync://rpki.ripe.net/repository/DEFAULT/P-XZqjR4a6oW1Fa9857K-12XMPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:f4:0d:a2:38:af:da:05:20:4b:23:b5:29:0f:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fe5d9aa34786baa16d456bdf39ecafb5d9730f8 Validity Not Before: Dec 20 07:01:11 2025 GMT Not After : Dec 21 07:01:11 2025 GMT Subject: CN=0d73bd1054d678e444e97a842e216ef051fa6dd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:32:22:92:ac:f1:fd:1d:32:56:c8:61:fd:5a: d0:df:57:62:0a:c6:d1:fb:03:94:3e:e5:dd:7a:39: b1:76:d1:b9:81:27:b0:bb:c1:99:07:c1:14:c7:cd: cd:df:5c:81:ca:1d:32:90:dd:0e:73:cb:95:77:3f: 40:65:38:fa:08:8c:4d:22:29:b7:8d:d2:03:d4:d9: 7b:e7:94:85:c8:ae:51:d4:8b:50:7d:03:f4:cd:83: b7:d1:d0:81:af:88:21:bf:bd:57:c9:9a:90:e1:b1: c2:12:57:31:52:ea:0e:33:91:7a:fd:65:f5:39:84: 81:d1:82:67:8b:ab:41:e4:c0:81:ea:36:86:80:e2: 81:6c:e4:c5:5a:69:82:b8:7a:ed:3d:04:63:e4:4a: 30:b8:fb:86:33:07:90:c5:26:53:24:c6:e3:c2:9b: 9d:49:0f:49:89:b8:98:97:ae:5e:0a:cd:54:fd:5a: 1e:9b:3f:cf:d8:5b:bd:33:12:aa:2d:27:11:bd:a3: 2e:85:cd:8f:35:6f:3a:34:78:9c:7e:c4:06:8a:b4: a4:02:e5:a5:18:63:bb:c9:fb:a0:e4:ff:9b:67:74: c0:cb:a7:82:da:49:d9:87:41:8c:51:ee:35:17:31: ac:81:34:0e:55:25:54:ae:36:a0:1b:3b:39:cf:f5: a1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:73:BD:10:54:D6:78:E4:44:E9:7A:84:2E:21:6E:F0:51:FA:6D:D4 X509v3 Authority Key Identifier: keyid:3F:E5:D9:AA:34:78:6B:AA:16:D4:56:BD:F3:9E:CA:FB:5D:97:30:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-XZqjR4a6oW1Fa9857K-12XMPg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:e0:43:36:98:2d:02:40:e7:dd:83:4b:1a:d3:5b:42:0b:70: 9f:42:f4:5a:a4:92:6c:11:61:9e:48:63:6d:19:ac:a2:26:71: 50:51:a9:62:fd:6f:cd:3a:12:60:09:49:08:2b:64:e5:a3:ac: 7e:58:9f:97:a7:b5:ed:1f:ca:bc:8d:f0:6b:b6:11:d4:b7:3e: 66:3e:0c:3f:9c:6a:7e:f1:2f:07:b8:08:72:53:20:9e:4d:24: e4:14:fd:60:1b:ce:16:62:c3:d0:76:a8:c8:62:26:a5:05:02: b4:dc:97:b2:90:d6:85:23:64:0c:54:8e:32:b6:e4:52:fc:20: 98:2c:67:4c:7b:d0:4c:1e:be:24:dd:d2:5a:bf:b1:fa:ad:e8: 1a:8e:71:c0:81:a6:a3:98:5c:f9:f3:d6:47:df:c8:03:92:42: 70:96:98:09:f7:27:b5:bf:8f:28:89:69:1a:f3:4a:1b:5c:d5: cd:30:cb:ff:b6:ba:dc:08:21:4b:65:3b:3f:69:cb:8b:39:40: 05:4a:42:56:f6:3b:9f:52:e3:05:42:1e:94:3a:ee:e2:d7:81: 91:56:0d:2f:80:24:21:90:c9:a7:98:e9:38:19:a0:22:fe:3e: 28:3f:98:e7:db:fd:47:25:18:5c:2d:40:ed:6d:f8:b5:09:43: 10:74:17:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j/QNojiv2gUgSyO1KQ/fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZTVkOWFhMzQ3ODZiYWExNmQ0NTZiZGYzOWVjYWZiNWQ5 NzMwZjgwHhcNMjUxMjIwMDcwMTExWhcNMjUxMjIxMDcwMTExWjAzMTEwLwYDVQQD EygwZDczYmQxMDU0ZDY3OGU0NDRlOTdhODQyZTIxNmVmMDUxZmE2ZGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6zIikqzx/R0yVshh/VrQ31diCsbR +wOUPuXdejmxdtG5gSewu8GZB8EUx83N31yByh0ykN0Oc8uVdz9AZTj6CIxNIim3 jdID1Nl755SFyK5R1ItQfQP0zYO30dCBr4ghv71XyZqQ4bHCElcxUuoOM5F6/WX1 OYSB0YJni6tB5MCB6jaGgOKBbOTFWmmCuHrtPQRj5EowuPuGMweQxSZTJMbjwpud SQ9JibiYl65eCs1U/Voemz/P2Fu9MxKqLScRvaMuhc2PNW86NHicfsQGirSkAuWl GGO7yfug5P+bZ3TAy6eC2knZh0GMUe41FzGsgTQOVSVUrjagGzs5z/Wh6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA1zvRBU1njkROl6hC4hbvBR+m3UMB8GA1UdIwQY MBaAFD/l2ao0eGuqFtRWvfOeyvtdlzD4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUC1YWnFqUjRhNm9XMUZhOTg1N0stMTJYTVBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9hMmZlNjgtNzYxZC00ZTZjLTlkY2Qt NTk0YzFhY2Q5ZGFmLzEvUC1YWnFqUjRhNm9XMUZhOTg1N0stMTJYTVBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9hMmZlNjgtNzYxZC00ZTZjLTlkY2QtNTk0YzFhY2Q5ZGFm LzEvUC1YWnFqUjRhNm9XMUZhOTg1N0stMTJYTVBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR+BDNpgt AkDn3YNLGtNbQgtwn0L0WqSSbBFhnkhjbRmsoiZxUFGpYv1vzToSYAlJCCtk5aOs flifl6e17R/KvI3wa7YR1Lc+Zj4MP5xqfvEvB7gIclMgnk0k5BT9YBvOFmLD0Hao yGImpQUCtNyXspDWhSNkDFSOMrbkUvwgmCxnTHvQTB6+JN3SWr+x+q3oGo5xwIGm o5hc+fPWR9/IA5JCcJaYCfcntb+PKIlpGvNKG1zVzTDL/7a63AghS2U7P2nLizlA BUpCVvY7n1LjBUIelDru4teBkVYNL4AkIZDJp5jpOBmgIv4+KD+Y59v9RyUYXC1A 7W34tQlDEHQXsA== -----END CERTIFICATE-----Generated at Sat Dec 20 08:21:15 2025 by rpki-client