This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft File: p1f4f4bpOyXvTAQzZku-ctqY-_4.mft (raw, json) Hash identifier: r+75H1n6TABLYwxuRJfMJTv9AcQmu3GKihxzwWnBhy8= Subject key identifier: 87:F3:6F:66:B0:98:4A:72:34:D7:A9:8D:90:7D:0D:D0:8B:70:BA:3E Authority key identifier: A7:57:F8:7F:86:E9:3B:25:EF:4C:04:33:66:4B:BE:72:DA:98:FB:FE Certificate issuer: /CN=a757f87f86e93b25ef4c0433664bbe72da98fbfe Certificate serial: 019B3C7E35DE18AA56639390BF95E18E3597 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1f4f4bpOyXvTAQzZku-ctqY-_4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft Manifest number: 059F Signing time: Sat 20 Dec 2025 16:01:02 +0000 Manifest this update: Sat 20 Dec 2025 16:01:02 +0000 Manifest next update: Sun 21 Dec 2025 16:01:02 +0000 Files and hashes: 1: IZ6vDZjMHwfmvRBOdfcy5i9E3QM.roa (hash: uS025afpY/Jz9tEZKMABnGMw3AujzF5/XTw1sc/dgNo=) 2: p1f4f4bpOyXvTAQzZku-ctqY-_4.crl (hash: ln3BVVBUqLg3CbphvIzKMPRNw4IgPOlHaoGracQAbpE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft rsync://rpki.ripe.net/repository/DEFAULT/p1f4f4bpOyXvTAQzZku-ctqY-_4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:35:de:18:aa:56:63:93:90:bf:95:e1:8e:35:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a757f87f86e93b25ef4c0433664bbe72da98fbfe Validity Not Before: Dec 20 16:01:02 2025 GMT Not After : Dec 21 16:01:02 2025 GMT Subject: CN=87f36f66b0984a7234d7a98d907d0dd08b70ba3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a7:a0:81:de:6a:60:a2:a1:5d:ba:50:3f:c1: 13:0b:43:1e:f0:08:5a:41:65:bc:5b:a5:02:4f:77: 2d:17:67:af:c0:40:62:ff:14:5e:10:5c:64:d4:00: 8d:34:60:34:6a:f5:b7:bf:a6:9f:fd:92:aa:79:f8: fb:00:e0:3e:d3:aa:c9:96:51:a0:3f:f5:60:fd:ac: 5f:0c:97:51:67:de:88:ca:77:70:91:a2:99:a7:06: 7f:c7:84:73:7e:3d:c5:0e:e2:0a:4c:46:a8:d4:c2: ab:c1:08:93:8c:e8:7b:30:b6:bf:91:80:68:0a:d1: 34:de:d8:9d:1c:7d:53:de:9c:f0:ab:39:29:a1:c8: aa:a2:51:47:c9:ce:8f:44:b1:87:5d:d3:54:d5:84: 69:4d:13:58:c8:c5:aa:65:8a:d9:35:02:d6:aa:48: 18:10:2d:86:3a:ef:a3:af:11:3e:7a:d0:ba:b1:0b: 3e:f8:06:5a:de:d1:47:f5:92:4e:30:1a:f5:93:5f: 72:c4:2a:4c:4b:4f:2d:51:71:c0:23:86:11:3e:cd: 37:9e:43:04:0b:64:66:60:29:31:45:5f:f5:aa:bc: 0c:b4:43:82:d2:8a:d8:67:44:ae:20:e5:fd:cb:e7: c9:1b:05:09:91:32:f2:43:56:c7:fa:42:1c:40:8c: 39:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:F3:6F:66:B0:98:4A:72:34:D7:A9:8D:90:7D:0D:D0:8B:70:BA:3E X509v3 Authority Key Identifier: keyid:A7:57:F8:7F:86:E9:3B:25:EF:4C:04:33:66:4B:BE:72:DA:98:FB:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1f4f4bpOyXvTAQzZku-ctqY-_4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:89:46:e3:bd:b6:1d:ea:7d:40:ff:5a:56:6c:83:80:14:75: ae:fd:b5:9a:5f:c3:cd:34:76:13:b6:31:fa:cb:9c:11:2c:68: 89:91:35:8b:fa:41:b5:b8:36:b8:4a:c5:6c:cb:e1:18:7e:e9: 2c:89:7f:76:9f:cc:3e:12:c9:f8:56:9f:c9:7d:6a:e3:98:ad: b8:61:16:08:a9:13:ae:7a:d7:fa:e4:79:de:7c:7c:9c:2a:1e: 23:13:61:39:da:82:c0:57:b3:ba:40:b9:66:0f:b6:f1:8d:6c: bf:d5:20:ed:5f:4b:c7:7f:b1:57:67:14:2d:e3:67:37:68:90: 52:98:7c:f4:2d:43:31:78:de:a9:ae:f8:85:d1:cc:d8:93:04: 23:65:99:99:b5:79:e0:0b:d2:7b:3e:0e:dc:b6:d7:43:74:3a: cf:fc:76:a5:5b:57:e0:8f:3e:7d:d9:70:8f:79:b2:90:a5:dd: 11:9a:13:70:bd:75:eb:2d:27:0e:7a:e8:da:34:cd:13:af:ec: be:e7:3a:02:c3:3d:c8:f0:e3:8f:c9:24:7b:59:18:98:4a:d3: c3:fd:34:d4:6f:eb:c1:a6:fe:0d:86:e7:95:19:9d:e9:15:b0: b5:13:1a:fc:08:49:74:83:96:8f:48:63:c7:e4:62:0b:35:24: 5a:5c:4d:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fjXeGKpWY5OQv5XhjjWXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NTdmODdmODZlOTNiMjVlZjRjMDQzMzY2NGJiZTcyZGE5 OGZiZmUwHhcNMjUxMjIwMTYwMTAyWhcNMjUxMjIxMTYwMTAyWjAzMTEwLwYDVQQD Eyg4N2YzNmY2NmIwOTg0YTcyMzRkN2E5OGQ5MDdkMGRkMDhiNzBiYTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaeggd5qYKKhXbpQP8ETC0Me8Aha QWW8W6UCT3ctF2evwEBi/xReEFxk1ACNNGA0avW3v6af/ZKqefj7AOA+06rJllGg P/Vg/axfDJdRZ96IyndwkaKZpwZ/x4Rzfj3FDuIKTEao1MKrwQiTjOh7MLa/kYBo CtE03tidHH1T3pzwqzkpociqolFHyc6PRLGHXdNU1YRpTRNYyMWqZYrZNQLWqkgY EC2GOu+jrxE+etC6sQs++AZa3tFH9ZJOMBr1k19yxCpMS08tUXHAI4YRPs03nkME C2RmYCkxRV/1qrwMtEOC0orYZ0SuIOX9y+fJGwUJkTLyQ1bH+kIcQIw5sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfzb2awmEpyNNepjZB9DdCLcLo+MB8GA1UdIwQY MBaAFKdX+H+G6Tsl70wEM2ZLvnLamPv+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDFmNGY0YnBPeVh2VEFRelprdS1jdHFZLV80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy84NmU0MGMtMTU2My00MGVhLThmNGUt YTE3ODMzMjUzM2UwLzEvcDFmNGY0YnBPeVh2VEFRelprdS1jdHFZLV80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy84NmU0MGMtMTU2My00MGVhLThmNGUtYTE3ODMzMjUzM2Uw LzEvcDFmNGY0YnBPeVh2VEFRelprdS1jdHFZLV80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIolG4722 Hep9QP9aVmyDgBR1rv21ml/DzTR2E7Yx+sucESxoiZE1i/pBtbg2uErFbMvhGH7p LIl/dp/MPhLJ+FafyX1q45ituGEWCKkTrnrX+uR53nx8nCoeIxNhOdqCwFezukC5 Zg+28Y1sv9Ug7V9Lx3+xV2cULeNnN2iQUph89C1DMXjeqa74hdHM2JMEI2WZmbV5 4AvSez4O3LbXQ3Q6z/x2pVtX4I8+fdlwj3mykKXdEZoTcL116y0nDnro2jTNE6/s vuc6AsM9yPDjj8kke1kYmErTw/001G/rwab+DYbnlRmd6RWwtRMa/AhJdIOWj0hj x+RiCzUkWlxNDQ== -----END CERTIFICATE-----Generated at Sat Dec 20 22:47:13 2025 by rpki-client