This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft File: r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft (raw, json) Hash identifier: Fp36/fOvVyDh/UPTdu3F9jM1RgwaixhHAyq93NK8qhY= Subject key identifier: 97:35:1C:C2:8D:BE:8D:85:0E:63:1B:98:CA:C5:30:4C:9B:69:F1:D1 Authority key identifier: AF:E3:F1:ED:1B:49:C5:BA:7C:C1:F1:92:A4:02:47:65:A2:53:66:4E Certificate issuer: /CN=afe3f1ed1b49c5ba7cc1f192a4024765a253664e Certificate serial: 019B32684B67B7915F0A474F5C502257B563 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft Manifest number: 1470 Signing time: Thu 18 Dec 2025 17:00:54 +0000 Manifest this update: Thu 18 Dec 2025 17:00:54 +0000 Manifest next update: Fri 19 Dec 2025 17:00:54 +0000 Files and hashes: 1: BMtrajiT8kc1Pg7kzTaWX9dZggk.roa (hash: OKRwb7gvAgyjstxUa1W7+46wLP3OqM3yM6o0/CqxEn0=) 2: r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl (hash: AThvMQAIkk89IaGt0CV4AIq6oJLlC5i2jQ9qIWqcBwY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 17:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:4b:67:b7:91:5f:0a:47:4f:5c:50:22:57:b5:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afe3f1ed1b49c5ba7cc1f192a4024765a253664e Validity Not Before: Dec 18 17:00:54 2025 GMT Not After : Dec 19 17:00:54 2025 GMT Subject: CN=97351cc28dbe8d850e631b98cac5304c9b69f1d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:72:4e:cb:b0:f6:a2:ad:7a:7e:f7:fd:8d:e5: 81:fa:67:14:15:bd:10:b2:72:75:cc:b0:b2:fa:83: 01:35:64:0f:5b:12:75:2a:e9:9a:82:84:40:50:bb: d8:46:2e:d2:16:f9:6f:30:15:07:4d:aa:b2:32:e8: 0c:36:85:87:8e:ed:f4:66:23:5a:25:0b:ed:04:1e: 61:54:61:cc:eb:f2:bc:a9:e8:4d:c2:02:37:54:16: 77:7f:05:75:64:d3:96:09:20:e2:79:89:87:06:2e: 94:48:15:b1:6c:d0:6a:63:ee:e7:9d:ca:41:2f:30: ba:13:68:c4:b7:2a:a7:a9:56:6a:25:ee:0c:dd:64: 88:4d:fc:78:55:fe:74:15:c4:3f:8b:19:dd:54:4d: 10:e7:b9:4e:a6:a0:06:f8:21:c9:c2:45:63:6f:d4: 8f:ba:6e:88:35:ff:a7:a7:e0:69:fb:1c:28:26:d3: fa:47:ed:98:bf:91:29:de:54:0d:56:06:78:db:09: 43:a7:a0:5c:62:2c:a3:3d:85:20:aa:30:fb:45:56: 85:6e:e9:fe:dc:14:48:c9:6b:91:6e:67:0f:3d:51: 46:73:8f:0a:b5:9b:7b:d2:5a:50:3a:07:f7:d4:49: ac:ec:38:c5:70:28:f4:64:25:e3:6f:d0:38:e0:a2: 98:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:35:1C:C2:8D:BE:8D:85:0E:63:1B:98:CA:C5:30:4C:9B:69:F1:D1 X509v3 Authority Key Identifier: keyid:AF:E3:F1:ED:1B:49:C5:BA:7C:C1:F1:92:A4:02:47:65:A2:53:66:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:60:64:8a:48:13:b4:d7:98:d7:3e:f9:ac:20:d4:4b:20:0b: db:c6:70:eb:d0:27:4e:f9:9b:51:56:03:db:c7:b9:ae:48:df: 39:2d:18:72:5f:e2:bd:16:00:7d:a5:60:9c:fd:be:1c:fd:b6: e0:39:8f:31:a8:ae:bd:86:1f:22:29:f2:7d:04:06:e4:60:b2: 5f:dd:7e:77:d8:6c:03:24:94:f8:a6:54:2f:22:20:4c:0a:2b: cc:80:0c:5b:2e:dc:22:5a:1c:5d:a5:98:7d:5d:9e:c0:7d:da: a2:46:fe:7a:cc:ba:48:44:00:8b:77:21:9c:00:55:53:1e:78: 7b:4c:14:a1:73:56:0d:0d:f5:1a:c5:74:ab:e3:08:f1:be:4b: 2d:7b:19:63:b8:4c:ec:f1:b7:fe:1b:55:70:86:61:0c:3a:3c: 72:a9:10:c2:ae:7f:7c:05:d5:bf:43:50:0b:65:cc:57:2b:d5: d8:d5:1f:0e:ac:48:86:8e:3b:4e:07:ad:2e:24:b4:d0:3f:03: dd:65:81:9f:f2:9a:4c:bb:01:24:38:30:88:0c:89:92:45:56: d5:35:32:84:b4:69:ed:9c:a9:88:0d:97:e9:7e:1e:1c:e5:69: 83:b2:de:68:59:18:d3:5d:61:77:3d:cc:43:f7:91:ba:a8:00: eb:62:a5:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaEtnt5FfCkdPXFAiV7VjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZTNmMWVkMWI0OWM1YmE3Y2MxZjE5MmE0MDI0NzY1YTI1 MzY2NGUwHhcNMjUxMjE4MTcwMDU0WhcNMjUxMjE5MTcwMDU0WjAzMTEwLwYDVQQD Eyg5NzM1MWNjMjhkYmU4ZDg1MGU2MzFiOThjYWM1MzA0YzliNjlmMWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HJOy7D2oq16fvf9jeWB+mcUFb0Q snJ1zLCy+oMBNWQPWxJ1KumagoRAULvYRi7SFvlvMBUHTaqyMugMNoWHju30ZiNa JQvtBB5hVGHM6/K8qehNwgI3VBZ3fwV1ZNOWCSDieYmHBi6USBWxbNBqY+7nncpB LzC6E2jEtyqnqVZqJe4M3WSITfx4Vf50FcQ/ixndVE0Q57lOpqAG+CHJwkVjb9SP um6INf+np+Bp+xwoJtP6R+2Yv5Ep3lQNVgZ42wlDp6BcYiyjPYUgqjD7RVaFbun+ 3BRIyWuRbmcPPVFGc48KtZt70lpQOgf31Ems7DjFcCj0ZCXjb9A44KKYGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJc1HMKNvo2FDmMbmMrFMEybafHRMB8GA1UdIwQY MBaAFK/j8e0bScW6fMHxkqQCR2WiU2ZOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvci1QeDdSdEp4YnA4d2ZHU3BBSkhaYUpUWms0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9iNDQ0ODgtMDUwMC00NTM4LTkzYjEt MjY4OGQzNDZmNmFiLzEvci1QeDdSdEp4YnA4d2ZHU3BBSkhaYUpUWms0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9iNDQ0ODgtMDUwMC00NTM4LTkzYjEtMjY4OGQzNDZmNmFi LzEvci1QeDdSdEp4YnA4d2ZHU3BBSkhaYUpUWms0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaWBkikgT tNeY1z75rCDUSyAL28Zw69AnTvmbUVYD28e5rkjfOS0Ycl/ivRYAfaVgnP2+HP22 4DmPMaiuvYYfIinyfQQG5GCyX91+d9hsAySU+KZULyIgTAorzIAMWy7cIlocXaWY fV2ewH3aokb+esy6SEQAi3chnABVUx54e0wUoXNWDQ31GsV0q+MI8b5LLXsZY7hM 7PG3/htVcIZhDDo8cqkQwq5/fAXVv0NQC2XMVyvV2NUfDqxIho47TgetLiS00D8D 3WWBn/KaTLsBJDgwiAyJkkVW1TUyhLRp7ZypiA2X6X4eHOVpg7LeaFkY011hdz3M Q/eRuqgA62KlOg== -----END CERTIFICATE-----Generated at Fri Dec 19 03:09:27 2025 by rpki-client