This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft File: p0j74dfTpqpHTeQ_qIXOLQkcUps.mft (raw, json) Hash identifier: GuUAPJVf+tQaNOk3pNOrn/Xuv+34EY7VCMctZp4AhEo= Subject key identifier: B6:76:C3:83:27:5A:04:F2:2F:81:A2:AB:EA:CA:61:27:8A:0C:CE:E7 Authority key identifier: A7:48:FB:E1:D7:D3:A6:AA:47:4D:E4:3F:A8:85:CE:2D:09:1C:52:9B Certificate issuer: /CN=a748fbe1d7d3a6aa474de43fa885ce2d091c529b Certificate serial: 019B3D59AF94DBFCAA0165E7E098E1532FE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0j74dfTpqpHTeQ_qIXOLQkcUps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft Manifest number: 14DA Signing time: Sat 20 Dec 2025 20:00:46 +0000 Manifest this update: Sat 20 Dec 2025 20:00:46 +0000 Manifest next update: Sun 21 Dec 2025 20:00:46 +0000 Files and hashes: 1: 7FOJ9WC3T7pHyWWCuyPjcheMLEQ.roa (hash: nKrGLaOlKefy6/k/jC1QdJsWJ/jAJ+vYp4Lo3APL+Ec=) 2: p0j74dfTpqpHTeQ_qIXOLQkcUps.crl (hash: iW8yV7EZ2tGuenbxPq1uIik44GJfQjY8ajv/wbpUDfE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft rsync://rpki.ripe.net/repository/DEFAULT/p0j74dfTpqpHTeQ_qIXOLQkcUps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:af:94:db:fc:aa:01:65:e7:e0:98:e1:53:2f:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a748fbe1d7d3a6aa474de43fa885ce2d091c529b Validity Not Before: Dec 20 20:00:46 2025 GMT Not After : Dec 21 20:00:46 2025 GMT Subject: CN=b676c383275a04f22f81a2abeaca61278a0ccee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b5:db:2b:27:8a:01:bc:d8:5d:5d:ef:a8:e8: 78:a4:3a:79:07:31:84:ac:1e:b1:9c:c8:c2:5c:42: 82:b7:7f:80:5c:cf:c1:39:7b:0e:6b:3d:85:c3:00: 78:2b:e9:74:28:bb:a5:d9:a5:1d:00:18:f9:d0:27: 46:51:52:81:a4:8a:68:6d:7c:96:c9:f0:93:9e:a0: d3:dd:af:90:c5:46:60:8f:f2:67:e2:75:c8:99:37: c8:82:6d:37:e1:42:1c:ee:fa:f6:5d:3a:4f:50:3b: a8:76:09:41:f1:00:f2:3f:8a:aa:f3:5e:45:e1:3b: e8:09:0c:75:12:58:e0:85:7e:7b:03:30:93:20:cc: b3:a0:e6:bd:cf:19:db:4c:16:ad:9b:35:8f:65:ee: 14:75:1e:44:18:8c:8c:a9:bc:8a:a2:f3:83:6e:c7: b0:ab:05:5c:db:77:c3:e9:c1:1b:b8:0d:ae:e8:f8: 0a:aa:64:7b:14:16:54:f9:c7:e2:3f:d2:58:67:e9: 97:a1:23:09:fd:81:ae:a9:86:f1:56:79:c1:39:fd: f5:d3:ed:43:d8:c0:03:38:b3:d5:f6:44:35:0c:99: e7:2a:08:cb:00:d2:1f:94:84:2f:59:74:b7:21:2e: c4:23:06:fd:bf:11:4b:6f:57:18:c0:37:a0:61:6f: c1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:76:C3:83:27:5A:04:F2:2F:81:A2:AB:EA:CA:61:27:8A:0C:CE:E7 X509v3 Authority Key Identifier: keyid:A7:48:FB:E1:D7:D3:A6:AA:47:4D:E4:3F:A8:85:CE:2D:09:1C:52:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0j74dfTpqpHTeQ_qIXOLQkcUps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:cc:32:8c:06:54:53:ed:ce:6b:84:3f:6f:01:18:33:bc:5c: f3:ed:cd:0e:a0:81:2c:93:21:b5:a8:fc:b2:10:f8:8c:12:71: c5:65:19:74:00:5b:03:89:ed:fc:50:cd:1a:bd:ce:c3:17:f8: d5:51:91:09:a5:4e:88:8b:61:d1:54:b6:e9:a6:ef:c8:fb:ba: 8a:12:67:cf:7e:07:ad:5a:ac:d8:93:f3:79:a0:ec:f5:e0:15: 60:2a:9c:fb:49:03:61:4a:a8:e6:33:f1:6b:e9:7b:88:63:0f: 7c:a4:f1:f7:92:07:89:9a:28:c1:6c:9e:06:9d:4d:28:39:2d: 1f:ad:88:a6:3b:75:41:f8:fb:91:05:bd:74:12:73:f0:b3:01: 74:66:c9:0b:79:19:7a:9d:b7:f3:0b:65:be:89:04:80:b5:e2: 1d:4e:02:7e:ad:ab:96:62:d0:3e:d5:b2:9f:51:b9:f7:10:63: b8:cf:39:67:c6:c6:45:12:27:58:8c:08:7f:a8:25:14:e4:50: c6:66:82:0a:01:48:83:df:2d:3d:e3:8a:39:58:5d:bd:95:60: 79:80:96:02:80:e7:07:c5:80:f2:ae:fa:1f:2d:c0:f8:e4:ee: 63:59:a6:d9:9a:21:50:b4:26:9f:c2:fa:4b:82:7d:fc:d3:9e: ea:49:62:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Wa+U2/yqAWXn4JjhUy/hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NDhmYmUxZDdkM2E2YWE0NzRkZTQzZmE4ODVjZTJkMDkx YzUyOWIwHhcNMjUxMjIwMjAwMDQ2WhcNMjUxMjIxMjAwMDQ2WjAzMTEwLwYDVQQD EyhiNjc2YzM4MzI3NWEwNGYyMmY4MWEyYWJlYWNhNjEyNzhhMGNjZWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLXbKyeKAbzYXV3vqOh4pDp5BzGE rB6xnMjCXEKCt3+AXM/BOXsOaz2FwwB4K+l0KLul2aUdABj50CdGUVKBpIpobXyW yfCTnqDT3a+QxUZgj/Jn4nXImTfIgm034UIc7vr2XTpPUDuodglB8QDyP4qq815F 4TvoCQx1EljghX57AzCTIMyzoOa9zxnbTBatmzWPZe4UdR5EGIyMqbyKovODbsew qwVc23fD6cEbuA2u6PgKqmR7FBZU+cfiP9JYZ+mXoSMJ/YGuqYbxVnnBOf310+1D 2MADOLPV9kQ1DJnnKgjLANIflIQvWXS3IS7EIwb9vxFLb1cYwDegYW/B1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLZ2w4MnWgTyL4Giq+rKYSeKDM7nMB8GA1UdIwQY MBaAFKdI++HX06aqR03kP6iFzi0JHFKbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDBqNzRkZlRwcXBIVGVRX3FJWE9MUWtjVXBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9hNzIzZDgtZDhjYy00ZTYwLTg1YWIt NmM5YjVjOWJmYTc1LzEvcDBqNzRkZlRwcXBIVGVRX3FJWE9MUWtjVXBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9hNzIzZDgtZDhjYy00ZTYwLTg1YWItNmM5YjVjOWJmYTc1 LzEvcDBqNzRkZlRwcXBIVGVRX3FJWE9MUWtjVXBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArcwyjAZU U+3Oa4Q/bwEYM7xc8+3NDqCBLJMhtaj8shD4jBJxxWUZdABbA4nt/FDNGr3Owxf4 1VGRCaVOiIth0VS26abvyPu6ihJnz34HrVqs2JPzeaDs9eAVYCqc+0kDYUqo5jPx a+l7iGMPfKTx95IHiZoowWyeBp1NKDktH62Ipjt1Qfj7kQW9dBJz8LMBdGbJC3kZ ep238wtlvokEgLXiHU4Cfq2rlmLQPtWyn1G59xBjuM85Z8bGRRInWIwIf6glFORQ xmaCCgFIg98tPeOKOVhdvZVgeYCWAoDnB8WA8q76Hy3A+OTuY1mm2ZohULQmn8L6 S4J9/NOe6kliGA== -----END CERTIFICATE-----Generated at Sun Dec 21 00:12:29 2025 by rpki-client