This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft File: r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft (raw, json) Hash identifier: 3g7CHOz8NUcMs2hmlNA/CJPUTW46liFLhDDDX2LGVfI= Subject key identifier: 97:94:75:0C:8F:EE:C4:A6:82:12:C3:EA:F9:AB:83:A5:8C:25:D2:69 Authority key identifier: AF:E3:F1:ED:1B:49:C5:BA:7C:C1:F1:92:A4:02:47:65:A2:53:66:4E Certificate issuer: /CN=afe3f1ed1b49c5ba7cc1f192a4024765a253664e Certificate serial: 019B687AEDA8E52AF0201102FF380AD45FE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft Manifest number: 148C Signing time: Mon 29 Dec 2025 05:00:45 +0000 Manifest this update: Mon 29 Dec 2025 05:00:45 +0000 Manifest next update: Tue 30 Dec 2025 05:00:45 +0000 Files and hashes: 1: BMtrajiT8kc1Pg7kzTaWX9dZggk.roa (hash: OKRwb7gvAgyjstxUa1W7+46wLP3OqM3yM6o0/CqxEn0=) 2: r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl (hash: kd+VES81Q1CnHZgpVdBtRuPjMJmFm0vFfH0FHJAho+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 05:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:7a:ed:a8:e5:2a:f0:20:11:02:ff:38:0a:d4:5f:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afe3f1ed1b49c5ba7cc1f192a4024765a253664e Validity Not Before: Dec 29 05:00:45 2025 GMT Not After : Dec 30 05:00:45 2025 GMT Subject: CN=9794750c8feec4a68212c3eaf9ab83a58c25d269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3d:15:15:cc:d0:9c:0f:2d:ab:07:d7:58:5b: 56:a2:bc:ba:b0:50:63:28:98:b6:d9:07:de:b1:d2: d7:00:95:bd:65:39:69:ee:f7:4a:69:36:bc:90:db: 06:7a:9f:67:32:47:bc:12:f0:9c:20:65:19:20:f8: 94:a4:94:8a:95:c9:ff:12:3e:80:4b:48:14:ca:41: 47:77:21:38:30:34:79:2b:0e:2d:e4:6b:38:f1:42: 1e:e6:39:20:76:4c:0b:1e:a1:8b:8e:5b:bf:d5:54: c6:04:cc:45:b7:73:64:62:dd:7d:69:67:4c:65:09: 79:be:01:c1:36:8d:8b:73:d9:71:72:c2:f5:ff:f3: 42:c6:f8:2d:f2:28:8a:ae:ca:c3:53:e5:ef:12:b3: 49:75:db:d5:4c:d0:41:75:43:92:5a:d1:35:cf:81: c1:4c:2b:e1:7b:59:b6:6a:d0:e6:2d:94:56:c7:4d: a6:07:f7:ae:bb:64:ac:56:b9:ca:46:71:86:85:8b: 90:b0:3b:3a:c0:8c:52:78:a3:54:f6:21:77:dc:99: c9:aa:71:83:68:f3:e1:3c:65:2d:39:b4:d5:79:ad: ac:90:ae:4b:73:ec:f0:8a:a3:dc:4b:69:14:42:11: 0d:1a:3e:86:b7:d4:e7:3b:87:3e:20:fd:e8:8f:5a: ea:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:94:75:0C:8F:EE:C4:A6:82:12:C3:EA:F9:AB:83:A5:8C:25:D2:69 X509v3 Authority Key Identifier: keyid:AF:E3:F1:ED:1B:49:C5:BA:7C:C1:F1:92:A4:02:47:65:A2:53:66:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:4b:5c:30:f7:b5:21:4e:d0:35:37:77:9a:6c:49:f4:72:e6: 6e:19:79:a0:12:a4:8a:7a:21:0f:cd:b1:99:a1:76:42:81:9c: 6f:04:16:44:93:a1:6a:ae:57:51:f0:15:fb:d7:4e:b9:0d:7a: e3:a0:39:a7:c8:3a:a0:23:67:af:e1:de:b7:9a:10:2f:63:39: e9:a5:dc:5b:82:b8:7e:bb:59:42:13:f4:04:46:7b:b9:b3:a1: 46:30:f4:96:d0:23:26:9b:d9:0e:41:cf:64:f6:c7:73:4f:82: 9a:21:1c:f5:a1:59:ca:95:d9:d5:64:97:f7:2b:00:54:04:f4: 27:42:f1:c6:81:f0:78:e9:34:ab:32:df:98:ea:6c:48:6d:90: e0:b5:1f:55:97:43:de:40:4a:ce:31:b2:e2:70:17:07:d0:be: b3:fe:86:87:84:47:b7:a0:67:80:9e:53:4b:46:1a:45:9e:fb: 85:43:d4:1b:b1:73:a3:ac:af:d7:80:6b:aa:db:77:14:ec:0d: 86:53:1b:c4:f0:44:c3:b8:80:07:a7:24:d9:a6:78:ba:0d:5c: e6:7f:bd:9d:09:51:81:55:64:d7:b8:e0:7a:b9:29:0f:74:1d: 68:12:18:98:9e:a7:d3:4f:66:d0:06:f8:f5:54:c0:13:3a:23: c8:0f:2b:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtoeu2o5SrwIBEC/zgK1F/lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZTNmMWVkMWI0OWM1YmE3Y2MxZjE5MmE0MDI0NzY1YTI1 MzY2NGUwHhcNMjUxMjI5MDUwMDQ1WhcNMjUxMjMwMDUwMDQ1WjAzMTEwLwYDVQQD Eyg5Nzk0NzUwYzhmZWVjNGE2ODIxMmMzZWFmOWFiODNhNThjMjVkMjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvT0VFczQnA8tqwfXWFtWory6sFBj KJi22QfesdLXAJW9ZTlp7vdKaTa8kNsGep9nMke8EvCcIGUZIPiUpJSKlcn/Ej6A S0gUykFHdyE4MDR5Kw4t5Gs48UIe5jkgdkwLHqGLjlu/1VTGBMxFt3NkYt19aWdM ZQl5vgHBNo2Lc9lxcsL1//NCxvgt8iiKrsrDU+XvErNJddvVTNBBdUOSWtE1z4HB TCvhe1m2atDmLZRWx02mB/euu2SsVrnKRnGGhYuQsDs6wIxSeKNU9iF33JnJqnGD aPPhPGUtObTVea2skK5Lc+zwiqPcS2kUQhENGj6Gt9TnO4c+IP3oj1rqewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJeUdQyP7sSmghLD6vmrg6WMJdJpMB8GA1UdIwQY MBaAFK/j8e0bScW6fMHxkqQCR2WiU2ZOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvci1QeDdSdEp4YnA4d2ZHU3BBSkhaYUpUWms0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9iNDQ0ODgtMDUwMC00NTM4LTkzYjEt MjY4OGQzNDZmNmFiLzEvci1QeDdSdEp4YnA4d2ZHU3BBSkhaYUpUWms0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9iNDQ0ODgtMDUwMC00NTM4LTkzYjEtMjY4OGQzNDZmNmFi LzEvci1QeDdSdEp4YnA4d2ZHU3BBSkhaYUpUWms0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABktcMPe1 IU7QNTd3mmxJ9HLmbhl5oBKkinohD82xmaF2QoGcbwQWRJOhaq5XUfAV+9dOuQ16 46A5p8g6oCNnr+Het5oQL2M56aXcW4K4frtZQhP0BEZ7ubOhRjD0ltAjJpvZDkHP ZPbHc0+CmiEc9aFZypXZ1WSX9ysAVAT0J0LxxoHweOk0qzLfmOpsSG2Q4LUfVZdD 3kBKzjGy4nAXB9C+s/6Gh4RHt6BngJ5TS0YaRZ77hUPUG7Fzo6yv14Brqtt3FOwN hlMbxPBEw7iAB6ck2aZ4ug1c5n+9nQlRgVVk17jgerkpD3QdaBIYmJ6n009m0Ab4 9VTAEzojyA8rwg== -----END CERTIFICATE-----Generated at Mon Dec 29 14:57:21 2025 by rpki-client