This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft File: rpPMjMqB-gDcU-e4B46RtcEbou8.mft (raw, json) Hash identifier: ljhCfvaPOcUeN8ZRcnlXzNYjHZEbzD0lWmwfsRKqOfA= Subject key identifier: 3E:D3:9B:A2:46:D0:1F:88:45:70:4B:30:38:0C:B4:ED:F1:9B:78:20 Authority key identifier: AE:93:CC:8C:CA:81:FA:00:DC:53:E7:B8:07:8E:91:B5:C1:1B:A2:EF Certificate issuer: /CN=ae93cc8cca81fa00dc53e7b8078e91b5c11ba2ef Certificate serial: 019AF19A97996132B1A128CD02C92340CD3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft Manifest number: 126A Signing time: Sat 06 Dec 2025 03:00:31 +0000 Manifest this update: Sat 06 Dec 2025 03:00:31 +0000 Manifest next update: Sun 07 Dec 2025 03:00:31 +0000 Files and hashes: 1: crHez21ajs4tpxPy7D0FO2U5bxU.roa (hash: gCTLggUH/wf+1HoWxwo5Fpy8idWpj7d4gVSkhA0S2qM=) 2: rpPMjMqB-gDcU-e4B46RtcEbou8.crl (hash: eVR/sYYY7FkOjNHH9plzEbeXlculCcqeVxU1wSBZQqw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.crl rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:97:99:61:32:b1:a1:28:cd:02:c9:23:40:cd:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae93cc8cca81fa00dc53e7b8078e91b5c11ba2ef Validity Not Before: Dec 6 03:00:31 2025 GMT Not After : Dec 7 03:00:31 2025 GMT Subject: CN=3ed39ba246d01f8845704b30380cb4edf19b7820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:81:e6:86:58:e7:0d:03:79:b9:03:44:56:7d: b1:f6:24:ef:83:1d:78:29:a5:3b:90:ea:9f:3e:f9: 15:6f:a3:3d:39:79:e7:db:97:39:35:d4:c9:76:3f: e4:38:7b:53:7d:b2:30:99:73:3e:11:26:df:77:67: bb:90:84:91:3f:c7:33:df:32:d7:5c:c1:bc:02:7d: 2b:d2:cc:65:60:5e:d1:e6:92:16:6b:82:db:39:78: d2:b3:21:3a:7c:a7:40:0f:c1:49:93:00:d4:44:19: 4c:67:23:19:b6:ea:1a:5c:4a:27:df:d3:1b:8d:18: 08:e7:07:98:2a:01:2a:71:6d:d4:5b:f6:8d:56:59: 05:3f:be:ef:24:97:f1:64:d4:45:0d:e2:c9:07:4b: c0:e4:b5:23:51:a1:e7:c8:20:ed:3e:ee:f5:f5:91: 15:8a:21:4b:dc:b1:31:06:e6:3f:d8:b9:8f:81:84: 39:91:48:72:a2:2e:4b:48:3a:9e:a2:36:ef:b0:3e: 7e:e2:88:63:dd:af:ae:c6:7a:45:41:4a:64:bf:9e: 16:85:38:48:4c:36:a7:fc:a9:e6:7e:ab:1c:21:72: dc:37:27:23:29:f8:bd:29:dc:1a:32:38:1f:78:2b: bc:8b:b4:76:92:0e:cc:c7:12:9f:f5:90:fd:5f:5e: f2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:D3:9B:A2:46:D0:1F:88:45:70:4B:30:38:0C:B4:ED:F1:9B:78:20 X509v3 Authority Key Identifier: keyid:AE:93:CC:8C:CA:81:FA:00:DC:53:E7:B8:07:8E:91:B5:C1:1B:A2:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:ac:87:26:d4:aa:98:5c:ea:c7:e6:b1:b4:8a:7c:ae:7a:e5: d7:b8:5a:a1:5f:c2:65:5a:95:78:fe:b4:34:fd:a8:94:9f:be: 67:01:93:0f:8a:f4:e8:90:8d:72:55:48:1f:ae:5f:6a:33:4c: 2b:c3:82:4b:72:cb:88:93:01:14:58:2d:12:24:6b:74:4b:c1: 87:7b:c6:69:a2:bd:a0:08:48:aa:c5:45:38:1d:8e:9b:c7:b2: 3b:95:d7:45:ed:fd:71:e3:de:a5:76:59:ce:56:e4:7b:a2:f5: 75:b9:6c:ee:b8:69:31:d6:12:59:0e:92:f4:91:d1:a5:7c:95: e8:05:4e:86:14:1d:0f:d6:6c:f5:db:5f:22:3e:4c:ec:c9:29: 63:1b:ac:01:98:93:62:de:ce:cd:39:ac:7d:9f:ef:56:7d:71: 43:d8:f2:0b:79:df:ac:fd:53:5d:6c:08:82:1c:75:4b:8a:10: 31:45:a6:8e:23:61:cc:e8:79:5b:a1:aa:68:9f:0d:e5:04:8c: aa:7c:c6:b1:49:0f:be:69:52:89:2d:6a:84:73:28:c4:0f:50: db:54:ee:f0:d8:ec:26:a9:35:a5:12:d0:07:9e:a7:63:0d:fa: a6:90:62:09:2d:f5:bf:e1:2a:ab:28:3c:ca:f9:5e:9c:56:96: 35:3e:4a:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmpeZYTKxoSjNAskjQM07MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlOTNjYzhjY2E4MWZhMDBkYzUzZTdiODA3OGU5MWI1YzEx YmEyZWYwHhcNMjUxMjA2MDMwMDMxWhcNMjUxMjA3MDMwMDMxWjAzMTEwLwYDVQQD EygzZWQzOWJhMjQ2ZDAxZjg4NDU3MDRiMzAzODBjYjRlZGYxOWI3ODIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oHmhljnDQN5uQNEVn2x9iTvgx14 KaU7kOqfPvkVb6M9OXnn25c5NdTJdj/kOHtTfbIwmXM+ESbfd2e7kISRP8cz3zLX XMG8An0r0sxlYF7R5pIWa4LbOXjSsyE6fKdAD8FJkwDURBlMZyMZtuoaXEon39Mb jRgI5weYKgEqcW3UW/aNVlkFP77vJJfxZNRFDeLJB0vA5LUjUaHnyCDtPu719ZEV iiFL3LExBuY/2LmPgYQ5kUhyoi5LSDqeojbvsD5+4ohj3a+uxnpFQUpkv54WhThI TDan/KnmfqscIXLcNycjKfi9KdwaMjgfeCu8i7R2kg7MxxKf9ZD9X17yqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD7Tm6JG0B+IRXBLMDgMtO3xm3ggMB8GA1UdIwQY MBaAFK6TzIzKgfoA3FPnuAeOkbXBG6LvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnBQTWpNcUItZ0RjVS1lNEI0NlJ0Y0Vib3U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8xNzk4OTEtNDFjYy00YWEwLWFiNjgt ZjQwNmM4M2IzZmJhLzEvcnBQTWpNcUItZ0RjVS1lNEI0NlJ0Y0Vib3U4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS8xNzk4OTEtNDFjYy00YWEwLWFiNjgtZjQwNmM4M2IzZmJh LzEvcnBQTWpNcUItZ0RjVS1lNEI0NlJ0Y0Vib3U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2KyHJtSq mFzqx+axtIp8rnrl17haoV/CZVqVeP60NP2olJ++ZwGTD4r06JCNclVIH65fajNM K8OCS3LLiJMBFFgtEiRrdEvBh3vGaaK9oAhIqsVFOB2Om8eyO5XXRe39cePepXZZ zlbke6L1dbls7rhpMdYSWQ6S9JHRpXyV6AVOhhQdD9Zs9dtfIj5M7MkpYxusAZiT Yt7OzTmsfZ/vVn1xQ9jyC3nfrP1TXWwIghx1S4oQMUWmjiNhzOh5W6GqaJ8N5QSM qnzGsUkPvmlSiS1qhHMoxA9Q21Tu8NjsJqk1pRLQB56nYw36ppBiCS31v+Eqqyg8 yvlenFaWNT5KJg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:40:33 2025 by rpki-client