This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft File: P-XZqjR4a6oW1Fa9857K-12XMPg.mft (raw, json) Hash identifier: crcbVUohA34aE1VvuKFxSq5E7QvYbuNOLrYW5d4Yqqk= Subject key identifier: E9:35:72:CE:94:15:93:28:91:73:65:5C:29:E3:A4:1E:FB:3F:22:91 Authority key identifier: 3F:E5:D9:AA:34:78:6B:AA:16:D4:56:BD:F3:9E:CA:FB:5D:97:30:F8 Certificate issuer: /CN=3fe5d9aa34786baa16d456bdf39ecafb5d9730f8 Certificate serial: 019B6AD7A4BB1319D56784909A0979E49022 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-XZqjR4a6oW1Fa9857K-12XMPg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft Manifest number: 179F Signing time: Mon 29 Dec 2025 16:01:15 +0000 Manifest this update: Mon 29 Dec 2025 16:01:15 +0000 Manifest next update: Tue 30 Dec 2025 16:01:15 +0000 Files and hashes: 1: I8Hl2QUOJ6pW-HzuzhburaAUCcs.roa (hash: TO7xgPDDMwBnfoyPmeOZq+S6vszklMWr0Jg0Yq+3Oiw=) 2: P-XZqjR4a6oW1Fa9857K-12XMPg.crl (hash: sC2gCvV7uBOJ7qeobI/SUWq1Wop5msfT1WOXtGS728Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.crl rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft rsync://rpki.ripe.net/repository/DEFAULT/P-XZqjR4a6oW1Fa9857K-12XMPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:d7:a4:bb:13:19:d5:67:84:90:9a:09:79:e4:90:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fe5d9aa34786baa16d456bdf39ecafb5d9730f8 Validity Not Before: Dec 29 16:01:15 2025 GMT Not After : Dec 30 16:01:15 2025 GMT Subject: CN=e93572ce941593289173655c29e3a41efb3f2291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:90:41:29:0d:8e:59:c6:e0:2b:f5:7e:9d:86: 9a:97:82:6a:b4:77:4e:f7:77:59:9e:4d:3e:46:e1: 2f:07:ab:a4:a5:24:41:f4:80:a2:19:3e:fb:a9:5b: 09:a4:0e:44:f1:b0:12:f9:d9:de:ac:72:96:19:cb: 95:5a:1f:2c:f6:34:1b:f6:ee:c7:c7:c7:ef:b8:fe: 9e:c8:24:a6:d8:58:33:1e:d6:4d:d7:0b:8f:70:b4: a5:4e:fc:24:02:96:6b:e0:f6:00:3a:46:f6:b6:54: c5:7e:89:76:bd:a0:f6:31:e1:a1:96:e1:d7:8e:ad: 23:07:52:c6:93:e8:95:35:20:a9:80:69:db:32:e0: e3:11:2a:12:f4:b4:65:cc:a1:ea:4c:27:59:b6:fa: d4:24:4e:f7:a2:b7:10:4e:42:80:c4:d8:2f:c4:e1: a2:0a:05:9d:a5:d8:8c:88:c4:39:32:02:96:91:3b: 3e:17:18:ac:7f:08:c8:9e:d0:41:bd:7c:84:32:4a: 39:2b:9e:8b:9e:5f:55:dc:bf:5b:de:2a:61:64:d0: 60:00:c0:bb:0f:ac:02:3c:8d:31:c6:5f:80:0a:9d: b7:43:cb:1a:5b:7e:c0:04:08:cc:55:1b:d2:07:a9: 92:8c:a5:9a:6b:f4:4f:1c:43:ce:b9:fa:83:f0:fb: 99:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:35:72:CE:94:15:93:28:91:73:65:5C:29:E3:A4:1E:FB:3F:22:91 X509v3 Authority Key Identifier: keyid:3F:E5:D9:AA:34:78:6B:AA:16:D4:56:BD:F3:9E:CA:FB:5D:97:30:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-XZqjR4a6oW1Fa9857K-12XMPg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:55:83:59:81:fb:76:b5:0e:5e:4f:d3:3d:87:32:af:bb:f6: 97:9c:9b:b0:e7:47:64:22:d1:25:d1:82:94:5c:71:e7:51:84: ad:55:b6:df:e7:98:2c:87:99:a7:f1:95:74:50:d0:ba:2a:3f: 1f:ac:b2:c9:69:42:4d:69:59:47:20:a6:cb:84:05:3d:f8:a1: d9:05:b8:0a:96:a6:66:0c:b3:7c:83:87:13:b1:f7:47:b2:31: 5a:e5:88:2b:29:2e:8f:a3:3e:7b:94:54:9d:d8:a1:e4:ea:e8: bf:04:8f:bb:04:47:52:3e:be:f6:79:48:b0:11:93:6d:74:df: d9:5a:6e:b3:22:25:b1:0a:97:c0:8b:c2:67:79:af:ed:35:8c: 60:a8:d2:b4:f6:fb:9e:ea:b4:bb:11:de:9c:d7:e0:1d:4d:c3: 00:38:12:8f:00:ea:b9:59:c5:06:d8:76:48:67:71:52:57:6d: 2b:7d:bd:df:1a:40:63:ca:ff:26:bb:31:10:45:62:1b:34:ba: 16:68:9e:b0:a2:70:82:c2:64:49:57:71:7c:ab:c9:48:94:38: 59:dc:07:30:54:e2:78:ed:00:a5:94:d9:82:85:7b:52:1f:eb: b6:d4:8e:5a:ef:7b:51:b7:ef:29:67:bd:2d:2b:2e:92:a9:20: 4d:b0:4b:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtq16S7ExnVZ4SQmgl55JAiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZTVkOWFhMzQ3ODZiYWExNmQ0NTZiZGYzOWVjYWZiNWQ5 NzMwZjgwHhcNMjUxMjI5MTYwMTE1WhcNMjUxMjMwMTYwMTE1WjAzMTEwLwYDVQQD EyhlOTM1NzJjZTk0MTU5MzI4OTE3MzY1NWMyOWUzYTQxZWZiM2YyMjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JBBKQ2OWcbgK/V+nYaal4JqtHdO 93dZnk0+RuEvB6ukpSRB9ICiGT77qVsJpA5E8bAS+dnerHKWGcuVWh8s9jQb9u7H x8fvuP6eyCSm2FgzHtZN1wuPcLSlTvwkApZr4PYAOkb2tlTFfol2vaD2MeGhluHX jq0jB1LGk+iVNSCpgGnbMuDjESoS9LRlzKHqTCdZtvrUJE73orcQTkKAxNgvxOGi CgWdpdiMiMQ5MgKWkTs+FxisfwjIntBBvXyEMko5K56Lnl9V3L9b3iphZNBgAMC7 D6wCPI0xxl+ACp23Q8saW37ABAjMVRvSB6mSjKWaa/RPHEPOufqD8PuZLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOk1cs6UFZMokXNlXCnjpB77PyKRMB8GA1UdIwQY MBaAFD/l2ao0eGuqFtRWvfOeyvtdlzD4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUC1YWnFqUjRhNm9XMUZhOTg1N0stMTJYTVBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9hMmZlNjgtNzYxZC00ZTZjLTlkY2Qt NTk0YzFhY2Q5ZGFmLzEvUC1YWnFqUjRhNm9XMUZhOTg1N0stMTJYTVBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9hMmZlNjgtNzYxZC00ZTZjLTlkY2QtNTk0YzFhY2Q5ZGFm LzEvUC1YWnFqUjRhNm9XMUZhOTg1N0stMTJYTVBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASlWDWYH7 drUOXk/TPYcyr7v2l5ybsOdHZCLRJdGClFxx51GErVW23+eYLIeZp/GVdFDQuio/ H6yyyWlCTWlZRyCmy4QFPfih2QW4CpamZgyzfIOHE7H3R7IxWuWIKykuj6M+e5RU ndih5OrovwSPuwRHUj6+9nlIsBGTbXTf2VpusyIlsQqXwIvCZ3mv7TWMYKjStPb7 nuq0uxHenNfgHU3DADgSjwDquVnFBth2SGdxUldtK3293xpAY8r/JrsxEEViGzS6 FmiesKJwgsJkSVdxfKvJSJQ4WdwHMFTieO0ApZTZgoV7Uh/rttSOWu97UbfvKWe9 LSsukqkgTbBLWg== -----END CERTIFICATE-----Generated at Tue Dec 30 00:20:10 2025 by rpki-client