This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft File: p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft (raw, json) Hash identifier: JjKZlXwUF06bJN8srdpyrkNAJkQopjUHVIAEZL3Ae6w= Subject key identifier: 41:40:54:4D:8E:B1:A1:0E:53:95:F8:A6:F9:B4:8B:36:8F:A0:01:F7 Authority key identifier: A7:CA:9A:DA:44:52:4F:C5:36:FA:3E:CA:BF:75:8D:F2:64:07:C8:B1 Certificate issuer: /CN=a7ca9ada44524fc536fa3ecabf758df26407c8b1 Certificate serial: 019B42B7A74D07F02CE7A9557F490A7E3AC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft Manifest number: 1459 Signing time: Sun 21 Dec 2025 21:01:30 +0000 Manifest this update: Sun 21 Dec 2025 21:01:30 +0000 Manifest next update: Mon 22 Dec 2025 21:01:30 +0000 Files and hashes: 1: AGh_BXwDaFnqdr1rluMLMPMOrnM.roa (hash: L7VSHEAFfvwnZGbHuhPcAH6Mmh4M0FtFsSBsZ0VnfV0=) 2: p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl (hash: bU5NMzm18HHZGDnNqHfJTorTGR7XoazoG4lfIWbfG28=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:a7:4d:07:f0:2c:e7:a9:55:7f:49:0a:7e:3a:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7ca9ada44524fc536fa3ecabf758df26407c8b1 Validity Not Before: Dec 21 21:01:30 2025 GMT Not After : Dec 22 21:01:30 2025 GMT Subject: CN=4140544d8eb1a10e5395f8a6f9b48b368fa001f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d6:61:fd:ef:ae:60:c1:2d:b2:d6:d6:ea:15: df:64:36:47:d6:ef:fa:3f:ef:34:1d:0f:c8:22:8b: fe:00:f0:4c:d9:41:3b:64:5f:88:a2:0c:72:5e:f5: ab:f6:71:d4:e2:32:6f:04:54:df:64:e6:a8:53:14: 21:b5:b3:17:3b:17:f3:0e:61:50:aa:9b:af:03:2a: 54:99:b9:96:1d:0c:12:e8:c4:12:66:38:8c:dc:f5: 08:f3:67:5c:8d:b8:ee:c7:66:f9:d9:6c:76:60:19: 67:72:69:56:5d:10:61:09:4a:a2:f1:5c:d2:e7:85: 14:09:f6:ad:20:ec:68:32:53:75:7a:e4:c0:95:a8: b2:36:91:5e:6c:97:86:a1:05:a2:52:09:bc:98:6f: 06:4d:c7:12:9f:5b:94:ff:64:a1:15:5a:16:db:4b: 6a:c3:79:10:6f:90:2f:cc:31:e9:c9:81:9a:1a:cf: 7c:97:31:79:3b:e4:14:93:06:1d:a2:1c:dd:37:4c: 47:df:fc:7f:ca:1c:46:ce:5f:f2:6c:45:12:14:9c: 04:73:3c:8e:65:ba:18:6e:67:85:15:a2:9d:f3:69: a9:57:77:0c:ba:0d:5a:cc:85:4c:96:a3:71:f9:f8: 5e:82:80:ae:22:05:28:f8:88:e5:0f:95:d3:72:19: 44:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:40:54:4D:8E:B1:A1:0E:53:95:F8:A6:F9:B4:8B:36:8F:A0:01:F7 X509v3 Authority Key Identifier: keyid:A7:CA:9A:DA:44:52:4F:C5:36:FA:3E:CA:BF:75:8D:F2:64:07:C8:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:76:72:a9:74:9a:71:99:77:0d:11:ff:db:ef:1e:00:47:49: 91:35:a1:80:91:71:69:90:11:78:19:ac:35:51:3e:c0:3f:fa: f6:27:30:d7:92:8e:af:39:7b:fb:fc:1c:03:04:3d:32:64:f3: f3:46:73:32:46:9b:03:a3:cf:8f:9f:42:af:a9:07:c7:19:de: 53:d7:77:4b:4f:2b:71:26:04:41:02:d2:d5:d1:98:c3:d4:b5: 12:9c:6c:9c:72:0c:9a:28:38:df:4a:c4:5c:f8:d6:ce:9b:64: 41:e4:e7:a4:e3:bb:d5:21:11:a0:69:a8:58:92:dd:47:4e:9e: 8d:2d:5a:3e:e5:68:a0:e8:9b:cd:61:a5:1f:8a:50:aa:04:67: 3b:8d:8d:09:63:f6:db:a0:e6:23:fa:fc:56:a8:06:31:42:61: 81:1f:87:b6:ac:d0:79:80:57:97:23:62:1b:f4:f0:9a:78:6d: 4e:58:20:67:c3:1b:10:ae:93:8c:72:57:5d:10:c6:84:c2:88: 2d:d9:a7:ec:8f:a9:f9:0b:f2:57:b5:f6:2f:28:8d:ac:78:a7: e1:65:ce:de:ce:7f:6e:f6:12:fc:df:e1:51:89:32:94:95:84: c9:73:4c:28:62:cc:56:38:8b:bb:d0:1f:79:72:c5:4a:e9:56: 64:22:c8:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt6dNB/As56lVf0kKfjrCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3Y2E5YWRhNDQ1MjRmYzUzNmZhM2VjYWJmNzU4ZGYyNjQw N2M4YjEwHhcNMjUxMjIxMjEwMTMwWhcNMjUxMjIyMjEwMTMwWjAzMTEwLwYDVQQD Eyg0MTQwNTQ0ZDhlYjFhMTBlNTM5NWY4YTZmOWI0OGIzNjhmYTAwMWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNZh/e+uYMEtstbW6hXfZDZH1u/6 P+80HQ/IIov+APBM2UE7ZF+IogxyXvWr9nHU4jJvBFTfZOaoUxQhtbMXOxfzDmFQ qpuvAypUmbmWHQwS6MQSZjiM3PUI82dcjbjux2b52Wx2YBlncmlWXRBhCUqi8VzS 54UUCfatIOxoMlN1euTAlaiyNpFebJeGoQWiUgm8mG8GTccSn1uU/2ShFVoW20tq w3kQb5AvzDHpyYGaGs98lzF5O+QUkwYdohzdN0xH3/x/yhxGzl/ybEUSFJwEczyO ZboYbmeFFaKd82mpV3cMug1azIVMlqNx+fhegoCuIgUo+IjlD5XTchlEvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEFAVE2OsaEOU5X4pvm0izaPoAH3MB8GA1UdIwQY MBaAFKfKmtpEUk/FNvo+yr91jfJkB8ixMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDhxYTJrUlNUOFUyLWo3S3YzV044bVFIeUxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mN2VjNzAtMGRlZC00MmNhLTlkMDAt OWQ5ZTFiNmJlZWU5LzEvcDhxYTJrUlNUOFUyLWo3S3YzV044bVFIeUxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9mN2VjNzAtMGRlZC00MmNhLTlkMDAtOWQ5ZTFiNmJlZWU5 LzEvcDhxYTJrUlNUOFUyLWo3S3YzV044bVFIeUxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOnZyqXSa cZl3DRH/2+8eAEdJkTWhgJFxaZAReBmsNVE+wD/69icw15KOrzl7+/wcAwQ9MmTz 80ZzMkabA6PPj59Cr6kHxxneU9d3S08rcSYEQQLS1dGYw9S1EpxsnHIMmig430rE XPjWzptkQeTnpOO71SERoGmoWJLdR06ejS1aPuVooOibzWGlH4pQqgRnO42NCWP2 26DmI/r8VqgGMUJhgR+HtqzQeYBXlyNiG/TwmnhtTlggZ8MbEK6TjHJXXRDGhMKI Ldmn7I+p+QvyV7X2LyiNrHin4WXO3s5/bvYS/N/hUYkylJWEyXNMKGLMVjiLu9Af eXLFSulWZCLIGg== -----END CERTIFICATE-----Generated at Mon Dec 22 00:36:43 2025 by rpki-client