This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft File: p0NjdfsDInVrVdr_ZOJl73LA2lI.mft (raw, json) Hash identifier: xN1gHyrURovIQsR2pEEaLlLjVnZke+yZuRUXS7cxAMg= Subject key identifier: 00:CE:3E:46:ED:05:10:B5:89:09:26:A1:15:09:90:31:6E:81:27:8A Authority key identifier: A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52 Certificate issuer: /CN=a7436375fb0322756b55daff64e265ef72c0da52 Certificate serial: 019B416D83373B4D8E18E5501CF26A05F78C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft Manifest number: 1793 Signing time: Sun 21 Dec 2025 15:00:54 +0000 Manifest this update: Sun 21 Dec 2025 15:00:54 +0000 Manifest next update: Mon 22 Dec 2025 15:00:54 +0000 Files and hashes: 1: 4x6rjkazNCLflUWUlsTwU4cxca8.roa (hash: ow7cUKut6886qX9EXf4fCgAMPFDIEd+yoCgqSPSsnlI=) 2: 7h9PVYRfpJWQVe6p_fUNqkMIVJM.roa (hash: 0F7e9cMMXcDHwo+/3DX5egozFHFiaYZUkpRfNYs9hic=) 3: p0NjdfsDInVrVdr_ZOJl73LA2lI.crl (hash: TxIsX6atr/lyNs2U1Nt587Y3ur0cRAO5z2MftwIVRbQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:83:37:3b:4d:8e:18:e5:50:1c:f2:6a:05:f7:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7436375fb0322756b55daff64e265ef72c0da52 Validity Not Before: Dec 21 15:00:54 2025 GMT Not After : Dec 22 15:00:54 2025 GMT Subject: CN=00ce3e46ed0510b5890926a1150990316e81278a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:88:39:44:8e:79:25:ee:9a:d8:ff:38:54:95: c2:dd:d4:a0:94:33:6e:4b:ed:08:7e:97:25:6e:74: 40:86:a6:04:18:d0:e6:e2:3f:a2:8e:dc:4a:85:5c: 14:50:82:be:08:6d:13:58:8f:f9:09:fb:d7:17:ac: 9b:f9:f1:1e:4a:09:43:69:62:2e:6a:d2:44:d2:a5: 07:42:a8:d6:12:4a:28:31:97:2a:49:d2:ef:9c:51: 8e:2f:c4:77:1f:1f:c6:59:d8:c7:ef:26:d9:b4:2d: 5a:e9:88:6b:31:2f:24:e3:de:fa:fa:12:cd:b0:14: 64:d4:d1:8d:16:9d:7a:81:a8:77:95:b1:43:eb:19: 85:2f:db:ae:ea:53:1a:22:f8:22:44:b1:0d:c7:60: 80:b7:e7:a0:66:c9:28:80:eb:3f:b9:46:2c:1a:6f: 8a:f7:54:00:cd:c1:1b:2d:34:9f:e9:2e:5e:42:70: 1e:8b:e4:11:76:ad:57:d0:c7:5c:05:b4:12:61:73: 43:8c:13:f8:00:b3:0e:3a:d7:d3:db:1c:46:9d:56: 16:89:48:65:5a:37:4d:43:f6:c3:53:1c:59:fe:c6: ee:6a:a8:a6:da:4f:05:05:91:74:d1:ab:45:65:fd: 08:ed:8f:7c:ab:9e:fe:48:6a:0e:e7:81:6e:9e:68: 7e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:CE:3E:46:ED:05:10:B5:89:09:26:A1:15:09:90:31:6E:81:27:8A X509v3 Authority Key Identifier: keyid:A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:cd:39:90:b7:1c:ae:c0:1e:b4:94:35:f4:37:a9:07:f6:56: 17:98:7c:af:04:01:94:0a:b2:c2:be:72:fa:25:b6:98:32:a7: 6e:aa:e4:f8:45:8e:f7:6a:fa:a4:be:10:f2:f1:14:a1:c7:c3: ea:29:9d:8c:f3:0c:ed:7c:7d:2b:ac:39:03:85:52:e9:c4:0f: cc:9c:5d:77:f9:11:63:f6:92:5e:26:e7:3c:c7:e8:0e:16:12: ab:54:e1:17:6f:32:1c:f6:9c:fe:c3:c4:9c:b1:fd:88:97:3d: 49:25:60:8c:b9:7f:76:46:da:3f:b3:ba:28:ab:14:e3:be:a6: 32:e2:87:aa:9d:b1:67:e8:70:b6:6f:0d:e4:51:3b:47:0b:ae: aa:6f:f9:a2:e7:38:10:49:b5:4e:ad:54:a1:e5:e3:05:8c:5b: 8c:d5:46:d5:fb:f4:1a:ae:73:36:13:f2:08:b1:f0:4d:a8:27: 2e:3d:62:25:12:e6:7f:c1:dd:dc:b9:cb:8f:55:f1:a6:3d:c9: 82:6d:be:a7:d5:37:63:52:aa:4e:00:79:36:96:65:d4:2b:23: b5:a3:56:46:8b:fb:6c:63:ef:48:ce:99:ba:b4:9f:c9:5f:d0: e0:00:06:9c:2e:b5:ba:c5:2e:77:d6:14:71:79:dc:3b:16:5f: 9c:e7:0b:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbYM3O02OGOVQHPJqBfeMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NDM2Mzc1ZmIwMzIyNzU2YjU1ZGFmZjY0ZTI2NWVmNzJj MGRhNTIwHhcNMjUxMjIxMTUwMDU0WhcNMjUxMjIyMTUwMDU0WjAzMTEwLwYDVQQD EygwMGNlM2U0NmVkMDUxMGI1ODkwOTI2YTExNTA5OTAzMTZlODEyNzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0og5RI55Je6a2P84VJXC3dSglDNu S+0IfpclbnRAhqYEGNDm4j+ijtxKhVwUUIK+CG0TWI/5CfvXF6yb+fEeSglDaWIu atJE0qUHQqjWEkooMZcqSdLvnFGOL8R3Hx/GWdjH7ybZtC1a6YhrMS8k4976+hLN sBRk1NGNFp16gah3lbFD6xmFL9uu6lMaIvgiRLENx2CAt+egZskogOs/uUYsGm+K 91QAzcEbLTSf6S5eQnAei+QRdq1X0MdcBbQSYXNDjBP4ALMOOtfT2xxGnVYWiUhl WjdNQ/bDUxxZ/sbuaqim2k8FBZF00atFZf0I7Y98q57+SGoO54Funmh+GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFADOPkbtBRC1iQkmoRUJkDFugSeKMB8GA1UdIwQY MBaAFKdDY3X7AyJ1a1Xa/2TiZe9ywNpSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDBOamRmc0RJblZyVmRyX1pPSmw3M0xBMmxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9lNWUzZmEtOTllZS00NWNmLWJkOWEt MGU2YzFmZTlkMDE1LzEvcDBOamRmc0RJblZyVmRyX1pPSmw3M0xBMmxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9lNWUzZmEtOTllZS00NWNmLWJkOWEtMGU2YzFmZTlkMDE1 LzEvcDBOamRmc0RJblZyVmRyX1pPSmw3M0xBMmxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP805kLcc rsAetJQ19DepB/ZWF5h8rwQBlAqywr5y+iW2mDKnbqrk+EWO92r6pL4Q8vEUocfD 6imdjPMM7Xx9K6w5A4VS6cQPzJxdd/kRY/aSXibnPMfoDhYSq1ThF28yHPac/sPE nLH9iJc9SSVgjLl/dkbaP7O6KKsU476mMuKHqp2xZ+hwtm8N5FE7Rwuuqm/5ouc4 EEm1Tq1UoeXjBYxbjNVG1fv0Gq5zNhPyCLHwTagnLj1iJRLmf8Hd3LnLj1Xxpj3J gm2+p9U3Y1KqTgB5NpZl1CsjtaNWRov7bGPvSM6ZurSfyV/Q4AAGnC61usUud9YU cXncOxZfnOcL4w== -----END CERTIFICATE-----Generated at Sun Dec 21 18:32:57 2025 by rpki-client