This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.mft File: p7He9pWIXq3lzMi0vioCuxYHnpw.mft (raw, json) Hash identifier: XaVuRT1ZVg8KhD2sqawZCcSeIoOuZGpmUcL+kxl5B8Q= Subject key identifier: 38:60:E9:93:40:9C:57:D8:0A:C8:A8:6F:68:0A:0E:06:FE:D5:E9:5F Authority key identifier: A7:B1:DE:F6:95:88:5E:AD:E5:CC:C8:B4:BE:2A:02:BB:16:07:9E:9C Certificate issuer: /CN=a7b1def695885eade5ccc8b4be2a02bb16079e9c Certificate serial: 019B620ADAF12E874F1D328410096C900EE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p7He9pWIXq3lzMi0vioCuxYHnpw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.mft Manifest number: 09EC Signing time: Sat 27 Dec 2025 23:00:37 +0000 Manifest this update: Sat 27 Dec 2025 23:00:37 +0000 Manifest next update: Sun 28 Dec 2025 23:00:37 +0000 Files and hashes: 1: 2ZXONPsq8Wq-C73Y4ZOdG8CP47o.roa (hash: 23qtSB8U1yvtJIhVOx0ex1wgA9IS3rvYP3HTfvaa5cc=) 2: p7He9pWIXq3lzMi0vioCuxYHnpw.crl (hash: xMxQ+ZXOd3CF4hrx/dvwtXZrn/wPIWHbs0HALfLkpJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.mft rsync://rpki.ripe.net/repository/DEFAULT/p7He9pWIXq3lzMi0vioCuxYHnpw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 23:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:0a:da:f1:2e:87:4f:1d:32:84:10:09:6c:90:0e:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7b1def695885eade5ccc8b4be2a02bb16079e9c Validity Not Before: Dec 27 23:00:37 2025 GMT Not After : Dec 28 23:00:37 2025 GMT Subject: CN=3860e993409c57d80ac8a86f680a0e06fed5e95f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9a:e3:42:49:03:ce:f4:5f:f3:14:b3:19:bc: 5b:b6:5b:12:f4:a6:c4:b1:7a:5e:2f:fd:5b:2a:bb: d7:51:2a:12:af:e2:6a:c5:36:60:16:40:3c:9a:f5: 92:9a:11:7f:90:18:07:d6:31:eb:e2:4e:fb:bf:25: 74:98:11:0d:6a:75:2f:77:33:38:82:38:ef:ca:86: ab:5f:47:c1:7c:1d:ef:e0:c4:17:97:3b:7a:9a:5a: af:75:aa:18:54:0f:ca:0b:0e:a8:cd:e6:8b:82:5f: 2e:c9:12:ff:97:ec:82:18:8a:ca:d6:92:1c:e6:fb: 3e:b3:08:ac:ff:f5:70:d4:1d:35:88:62:ee:97:65: fa:6b:5e:90:eb:60:2d:43:76:6f:84:8d:29:e0:c1: 27:e3:09:2b:fd:40:60:d6:78:62:7d:48:ec:4a:64: 83:39:ea:7f:7e:68:60:e4:19:66:0a:cf:d3:69:13: 91:28:fd:1f:a4:c6:e6:70:81:3b:33:c6:63:cd:46: 85:c4:9e:e1:5f:f2:3b:f4:fa:c1:2d:ad:e9:2e:09: f0:e8:d7:a7:ba:aa:9b:f5:bb:c8:4d:5e:d5:07:98: 5f:a6:d8:eb:f7:13:83:cb:cb:cf:66:0c:61:3a:3e: c0:e7:90:fd:8e:d8:31:22:6f:e6:90:f4:64:02:20: 0c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:60:E9:93:40:9C:57:D8:0A:C8:A8:6F:68:0A:0E:06:FE:D5:E9:5F X509v3 Authority Key Identifier: keyid:A7:B1:DE:F6:95:88:5E:AD:E5:CC:C8:B4:BE:2A:02:BB:16:07:9E:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p7He9pWIXq3lzMi0vioCuxYHnpw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:77:ea:94:68:21:2b:97:a3:b0:78:e3:99:86:13:b0:55:31: 6c:22:b6:85:b8:e7:0a:9d:73:9c:f0:28:f8:55:50:56:f1:b7: f0:e4:93:01:99:ad:ff:af:95:80:46:14:2f:ec:c6:cd:ab:5b: 7d:59:90:5b:df:a6:75:7b:8b:bd:4a:01:d0:0e:3d:2c:1b:77: e5:20:44:c0:c8:41:39:6a:ba:be:17:6e:6d:f0:81:55:f6:58: 67:82:1b:22:63:66:73:6d:7a:63:a7:21:bd:4e:d0:90:6e:76: 5c:c4:4f:9a:c9:15:a8:e8:57:59:66:9f:fe:26:f3:ff:f3:dc: c0:e1:4b:68:95:37:6d:ab:38:aa:dc:1a:bc:38:34:2f:c5:43: 9a:b7:cf:02:9f:20:6b:48:41:f4:ec:a8:47:85:e4:a4:06:a6: c4:0e:c5:53:56:5f:de:4a:b3:c4:3f:3f:0a:5a:0f:b3:0d:89: 69:b4:33:1c:05:14:1f:b0:97:0b:e1:94:16:31:75:4a:51:ac: 89:79:0b:61:9b:56:6c:5f:1b:1b:bf:48:e6:5b:67:af:27:ec: f3:91:12:20:d1:86:64:9a:f2:a3:11:1d:32:6e:55:06:47:2a: 3e:80:27:da:fd:9d:e0:14:a6:94:ba:f7:07:d9:22:5d:6a:e1: 62:4e:ad:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtiCtrxLodPHTKEEAlskA7pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3YjFkZWY2OTU4ODVlYWRlNWNjYzhiNGJlMmEwMmJiMTYw NzllOWMwHhcNMjUxMjI3MjMwMDM3WhcNMjUxMjI4MjMwMDM3WjAzMTEwLwYDVQQD EygzODYwZTk5MzQwOWM1N2Q4MGFjOGE4NmY2ODBhMGUwNmZlZDVlOTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3prjQkkDzvRf8xSzGbxbtlsS9KbE sXpeL/1bKrvXUSoSr+JqxTZgFkA8mvWSmhF/kBgH1jHr4k77vyV0mBENanUvdzM4 gjjvyoarX0fBfB3v4MQXlzt6mlqvdaoYVA/KCw6ozeaLgl8uyRL/l+yCGIrK1pIc 5vs+swis//Vw1B01iGLul2X6a16Q62AtQ3ZvhI0p4MEn4wkr/UBg1nhifUjsSmSD Oep/fmhg5BlmCs/TaRORKP0fpMbmcIE7M8ZjzUaFxJ7hX/I79PrBLa3pLgnw6Nen uqqb9bvITV7VB5hfptjr9xODy8vPZgxhOj7A55D9jtgxIm/mkPRkAiAMpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDhg6ZNAnFfYCsiob2gKDgb+1elfMB8GA1UdIwQY MBaAFKex3vaViF6t5czItL4qArsWB56cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDdIZTlwV0lYcTNsek1pMHZpb0N1eFlIbnB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82ODhjYWUtNWY5Ni00ODc1LTg3MDEt OTQ0ZWNlYzdhNDIzLzEvcDdIZTlwV0lYcTNsek1pMHZpb0N1eFlIbnB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC82ODhjYWUtNWY5Ni00ODc1LTg3MDEtOTQ0ZWNlYzdhNDIz LzEvcDdIZTlwV0lYcTNsek1pMHZpb0N1eFlIbnB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV3fqlGgh K5ejsHjjmYYTsFUxbCK2hbjnCp1znPAo+FVQVvG38OSTAZmt/6+VgEYUL+zGzatb fVmQW9+mdXuLvUoB0A49LBt35SBEwMhBOWq6vhdubfCBVfZYZ4IbImNmc216Y6ch vU7QkG52XMRPmskVqOhXWWaf/ibz//PcwOFLaJU3bas4qtwavDg0L8VDmrfPAp8g a0hB9OyoR4XkpAamxA7FU1Zf3kqzxD8/CloPsw2JabQzHAUUH7CXC+GUFjF1SlGs iXkLYZtWbF8bG79I5ltnryfs85ESINGGZJryoxEdMm5VBkcqPoAn2v2d4BSmlLr3 B9kiXWrhYk6tUg== -----END CERTIFICATE-----Generated at Sun Dec 28 07:29:40 2025 by rpki-client