This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft File: pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft (raw, json) Hash identifier: AY9BSzRnaFyHfBQBSwkTZyEY8co/qgRtpH71A4yzWvQ= Subject key identifier: C1:A9:DE:D2:86:5B:B2:01:CA:AB:4C:00:19:77:F1:FB:ED:90:24:86 Authority key identifier: A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A Certificate issuer: /CN=a59da4a8638dbdd6fa43c27d3ac6ec8d9acc878a Certificate serial: 019AF163F0305F84F46E8510FBBE25A86099 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft Manifest number: 0A43 Signing time: Sat 06 Dec 2025 02:00:49 +0000 Manifest this update: Sat 06 Dec 2025 02:00:49 +0000 Manifest next update: Sun 07 Dec 2025 02:00:49 +0000 Files and hashes: 1: HEFFTvFDeW6D2zdX6lHRPyk7Ea4.roa (hash: IVFC13YcAYnwyOjaJYcCEYaHPK701G8dlJpbO9aBcgU=) 2: pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl (hash: EpIGeiWkaXzr5JIT70KCScS+e3ShlCpwEnpvGUnszOI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:f0:30:5f:84:f4:6e:85:10:fb:be:25:a8:60:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a59da4a8638dbdd6fa43c27d3ac6ec8d9acc878a Validity Not Before: Dec 6 02:00:49 2025 GMT Not After : Dec 7 02:00:49 2025 GMT Subject: CN=c1a9ded2865bb201caab4c001977f1fbed902486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:09:2c:69:09:04:0b:d7:98:e3:21:3b:10:1d: 3b:ae:01:58:8a:03:e4:31:a4:9c:a8:1b:3f:c1:94: 54:4d:3c:ae:df:62:86:9d:d5:3c:8e:82:27:f0:3d: 03:37:e0:97:28:00:f3:db:1f:29:db:b9:0a:f3:a5: 73:10:f5:47:f5:59:f7:6d:d0:d3:ee:04:e9:0b:ed: a6:c5:89:40:17:34:3c:a3:7e:91:ee:8b:7d:8f:20: 98:47:2f:18:15:1d:ee:3d:1a:51:c4:7f:33:94:a8: cb:09:c9:1e:8f:25:d4:56:38:2f:bb:6b:10:d7:74: bb:cb:f7:b8:43:66:45:d5:a2:b6:e7:5d:e5:62:e2: 19:28:70:4e:02:dd:33:5b:b3:40:84:67:b4:73:06: d1:52:51:34:59:9c:cd:ef:1b:bc:f1:6a:68:4e:5b: 0c:12:92:6b:d8:14:01:e8:ba:b3:02:ef:66:f6:84: ee:94:a8:67:fa:74:08:92:2d:f2:f0:c9:f6:31:15: 18:8b:c7:85:7d:af:91:97:05:f3:fe:ba:65:94:c7: 61:e3:3f:7b:ae:f6:18:0b:be:0c:9b:1f:8a:fa:eb: 56:73:4a:8d:0d:b4:24:f6:0f:43:e7:79:4d:a1:a3: 88:81:c0:a9:12:04:02:c2:4b:26:64:66:40:f8:f7: 78:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A9:DE:D2:86:5B:B2:01:CA:AB:4C:00:19:77:F1:FB:ED:90:24:86 X509v3 Authority Key Identifier: keyid:A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:56:ef:88:a4:28:65:8c:77:46:a1:7a:69:b5:b7:7f:c7:0b: 26:5e:7b:60:70:f6:8a:bb:49:3a:d4:65:c1:cc:fd:81:7a:fd: 73:c5:85:45:11:0b:85:67:61:8f:44:41:19:3a:f4:13:9b:06: dd:3a:da:22:80:1d:25:98:fa:96:ee:f2:04:79:aa:06:27:69: 0d:78:39:fc:2d:ab:e1:32:4a:04:d9:72:0e:f0:d0:96:cb:29: 69:1a:98:67:91:eb:86:1e:05:48:1c:c2:4a:56:42:58:dc:03: bb:3c:4f:ac:f7:52:b8:14:81:74:a3:c9:3c:28:f8:b7:f9:2c: 66:90:41:dc:a6:c4:d4:03:d1:8e:38:d4:ce:28:09:3f:92:5a: 54:53:25:7e:90:7c:ba:ab:73:df:a5:dc:42:74:dc:35:0d:3c: 60:18:5e:bc:3d:94:e5:c9:74:92:0c:9f:18:b5:05:b4:96:e2: 1d:d4:38:a9:3f:a5:24:12:1f:06:34:e8:2b:54:52:82:51:a2: 4b:f0:ed:fd:83:8a:4c:ad:66:55:8c:ba:32:8e:27:ec:4b:b6: 31:35:7e:90:02:10:49:22:94:f7:ea:ba:05:e2:bc:95:45:cb: 1c:cb:e0:39:4a:bc:7b:b1:66:9c:47:82:d6:4b:57:2a:6f:d1: a1:21:d7:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY/AwX4T0boUQ+74lqGCZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1OWRhNGE4NjM4ZGJkZDZmYTQzYzI3ZDNhYzZlYzhkOWFj Yzg3OGEwHhcNMjUxMjA2MDIwMDQ5WhcNMjUxMjA3MDIwMDQ5WjAzMTEwLwYDVQQD EyhjMWE5ZGVkMjg2NWJiMjAxY2FhYjRjMDAxOTc3ZjFmYmVkOTAyNDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgksaQkEC9eY4yE7EB07rgFYigPk MaScqBs/wZRUTTyu32KGndU8joIn8D0DN+CXKADz2x8p27kK86VzEPVH9Vn3bdDT 7gTpC+2mxYlAFzQ8o36R7ot9jyCYRy8YFR3uPRpRxH8zlKjLCckejyXUVjgvu2sQ 13S7y/e4Q2ZF1aK2513lYuIZKHBOAt0zW7NAhGe0cwbRUlE0WZzN7xu88WpoTlsM EpJr2BQB6LqzAu9m9oTulKhn+nQIki3y8Mn2MRUYi8eFfa+RlwXz/rpllMdh4z97 rvYYC74Mmx+K+utWc0qNDbQk9g9D53lNoaOIgcCpEgQCwksmZGZA+Pd4RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMGp3tKGW7IByqtMABl38fvtkCSGMB8GA1UdIwQY MBaAFKWdpKhjjb3W+kPCfTrG7I2azIeKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFoya3FHT052ZGI2UThKOU9zYnNqWnJNaDRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9hZTY3NTEtMTc4ZC00MWUxLWFlYzIt MGY2OGU1YmZmYzdkLzEvcFoya3FHT052ZGI2UThKOU9zYnNqWnJNaDRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9hZTY3NTEtMTc4ZC00MWUxLWFlYzItMGY2OGU1YmZmYzdk LzEvcFoya3FHT052ZGI2UThKOU9zYnNqWnJNaDRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbFbviKQo ZYx3RqF6abW3f8cLJl57YHD2irtJOtRlwcz9gXr9c8WFRRELhWdhj0RBGTr0E5sG 3TraIoAdJZj6lu7yBHmqBidpDXg5/C2r4TJKBNlyDvDQlsspaRqYZ5Hrhh4FSBzC SlZCWNwDuzxPrPdSuBSBdKPJPCj4t/ksZpBB3KbE1APRjjjUzigJP5JaVFMlfpB8 uqtz36XcQnTcNQ08YBhevD2U5cl0kgyfGLUFtJbiHdQ4qT+lJBIfBjToK1RSglGi S/Dt/YOKTK1mVYy6Mo4n7Eu2MTV+kAIQSSKU9+q6BeK8lUXLHMvgOUq8e7FmnEeC 1ktXKm/RoSHXrA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:20:47 2025 by rpki-client