This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft File: p5860xQqLAL5krlqsLm2OQr3_gI.mft (raw, json) Hash identifier: bN0EdqyzXDjunIktU4k2GnClHhqKgUqAukL0XIpEesQ= Subject key identifier: ED:9A:91:45:9F:40:7E:41:7C:96:82:EA:63:A4:F2:4C:C2:7D:0B:3E Authority key identifier: A7:9F:3A:D3:14:2A:2C:02:F9:92:B9:6A:B0:B9:B6:39:0A:F7:FE:02 Certificate issuer: /CN=a79f3ad3142a2c02f992b96ab0b9b6390af7fe02 Certificate serial: 019B5229D0F616710FAE81826E3D94A428DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft Manifest number: 07E7 Signing time: Wed 24 Dec 2025 21:00:30 +0000 Manifest this update: Wed 24 Dec 2025 21:00:30 +0000 Manifest next update: Thu 25 Dec 2025 21:00:30 +0000 Files and hashes: 1: G5Dr2RNwPGFwAwTeNB-9AS_pm0Q.roa (hash: 0MjYAJyBV4+bo72HSaSmqLthye1AQFWyhQOJxf+19uc=) 2: p5860xQqLAL5krlqsLm2OQr3_gI.crl (hash: 3HRklwXVTtT4l9U+Gptcxv4Vv6jptOum4U4Jvhqfig8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:29:d0:f6:16:71:0f:ae:81:82:6e:3d:94:a4:28:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a79f3ad3142a2c02f992b96ab0b9b6390af7fe02 Validity Not Before: Dec 24 21:00:30 2025 GMT Not After : Dec 25 21:00:30 2025 GMT Subject: CN=ed9a91459f407e417c9682ea63a4f24cc27d0b3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:80:6b:15:44:85:4b:b8:8d:8e:1d:e9:ce:d0: 14:27:c7:93:07:19:ed:06:ef:6b:f9:a0:bb:9b:a7: 03:d8:00:1e:ff:e7:6a:cf:9e:bb:1b:80:1b:ba:eb: af:8c:45:d7:fc:bd:a9:bf:ad:d7:5a:11:b2:4e:1d: e0:6b:c4:55:fa:3d:d5:19:82:78:b8:83:58:46:ca: d7:a8:b3:7c:ed:23:02:d8:bb:38:2c:cf:fb:28:da: ca:0d:05:ce:e5:f5:2d:c1:7b:32:a9:a5:fc:b5:49: b0:23:b4:a3:8a:df:b3:d5:57:ee:36:a3:fb:34:b6: 05:a6:11:db:5f:c8:d9:8e:56:88:c5:8b:36:47:2c: 44:8c:d1:cc:6c:c5:68:b6:21:10:c8:e9:b7:8c:f6: 04:4c:54:3f:74:e3:17:f1:2d:cd:21:73:60:33:d0: 16:00:f6:67:25:da:fa:c3:1a:db:23:bb:bf:a2:63: 05:9c:42:ef:ed:86:9b:ac:28:20:c2:21:bb:cd:10: 28:3e:0a:ad:71:9f:ad:6c:4f:bb:cf:2e:be:33:5b: fc:e3:c7:7f:95:6b:1e:ca:51:a1:46:62:c4:30:08: 5c:10:1b:ba:94:34:3d:41:8b:52:95:75:38:81:1c: 91:a6:01:57:d9:7f:9a:be:46:42:9e:f2:02:ad:ce: 94:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:9A:91:45:9F:40:7E:41:7C:96:82:EA:63:A4:F2:4C:C2:7D:0B:3E X509v3 Authority Key Identifier: keyid:A7:9F:3A:D3:14:2A:2C:02:F9:92:B9:6A:B0:B9:B6:39:0A:F7:FE:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:e9:19:58:a3:39:9e:cc:bb:35:b7:72:d5:7e:f1:ed:70:a2: de:0a:b5:7f:e4:97:32:b3:7a:1d:3f:68:dc:67:7f:7d:aa:e8: d5:94:07:f3:79:2e:81:8d:a5:90:9f:dc:15:10:92:1b:25:91: f0:3e:2b:e9:6d:46:6e:6c:f8:bb:97:35:45:28:18:88:30:92: 1d:b8:16:9c:9d:96:ba:13:e7:05:61:89:7a:74:28:b3:ed:6e: 94:5c:b4:af:38:b9:4b:51:aa:b0:46:02:ab:39:1a:4f:c7:11: 9c:25:2d:45:22:63:cf:3a:80:7d:98:0d:37:a2:07:c3:51:ca: b1:a1:eb:4d:80:2d:ac:ff:cc:f1:38:c8:54:91:66:5f:17:83: 5b:e9:7b:22:1a:69:cd:5a:6d:23:68:66:66:d8:d4:7d:ce:da: ea:6d:59:fa:19:bc:5b:03:06:10:60:14:d2:b1:b7:c8:32:3a: 19:c2:a8:b8:89:17:5c:d1:3a:8e:d4:db:f5:b9:04:fc:2c:66: 03:14:ad:4d:05:88:27:88:46:14:f5:92:c7:23:b4:9d:f1:7a: a6:27:8c:46:2b:04:90:99:bd:78:98:ea:6f:ec:7f:b5:0c:93: f2:d6:a2:5c:ca:cc:80:b9:41:80:b6:59:64:6c:59:2a:7e:39: 96:40:ad:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSKdD2FnEProGCbj2UpCjbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3OWYzYWQzMTQyYTJjMDJmOTkyYjk2YWIwYjliNjM5MGFm N2ZlMDIwHhcNMjUxMjI0MjEwMDMwWhcNMjUxMjI1MjEwMDMwWjAzMTEwLwYDVQQD EyhlZDlhOTE0NTlmNDA3ZTQxN2M5NjgyZWE2M2E0ZjI0Y2MyN2QwYjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYBrFUSFS7iNjh3pztAUJ8eTBxnt Bu9r+aC7m6cD2AAe/+dqz567G4AbuuuvjEXX/L2pv63XWhGyTh3ga8RV+j3VGYJ4 uINYRsrXqLN87SMC2Ls4LM/7KNrKDQXO5fUtwXsyqaX8tUmwI7Sjit+z1VfuNqP7 NLYFphHbX8jZjlaIxYs2RyxEjNHMbMVotiEQyOm3jPYETFQ/dOMX8S3NIXNgM9AW APZnJdr6wxrbI7u/omMFnELv7YabrCggwiG7zRAoPgqtcZ+tbE+7zy6+M1v848d/ lWseylGhRmLEMAhcEBu6lDQ9QYtSlXU4gRyRpgFX2X+avkZCnvICrc6UlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO2akUWfQH5BfJaC6mOk8kzCfQs+MB8GA1UdIwQY MBaAFKefOtMUKiwC+ZK5arC5tjkK9/4CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDU4NjB4UXFMQUw1a3JscXNMbTJPUXIzX2dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82MzYzY2UtYzhhMC00OTYxLWFlODAt ZDVhNzg1NTE3YmJmLzEvcDU4NjB4UXFMQUw1a3JscXNMbTJPUXIzX2dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi82MzYzY2UtYzhhMC00OTYxLWFlODAtZDVhNzg1NTE3YmJm LzEvcDU4NjB4UXFMQUw1a3JscXNMbTJPUXIzX2dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMOkZWKM5 nsy7Nbdy1X7x7XCi3gq1f+SXMrN6HT9o3Gd/faro1ZQH83kugY2lkJ/cFRCSGyWR 8D4r6W1Gbmz4u5c1RSgYiDCSHbgWnJ2WuhPnBWGJenQos+1ulFy0rzi5S1GqsEYC qzkaT8cRnCUtRSJjzzqAfZgNN6IHw1HKsaHrTYAtrP/M8TjIVJFmXxeDW+l7Ihpp zVptI2hmZtjUfc7a6m1Z+hm8WwMGEGAU0rG3yDI6GcKouIkXXNE6jtTb9bkE/Cxm AxStTQWIJ4hGFPWSxyO0nfF6pieMRisEkJm9eJjqb+x/tQyT8taiXMrMgLlBgLZZ ZGxZKn45lkCtug== -----END CERTIFICATE-----Generated at Thu Dec 25 05:15:30 2025 by rpki-client