This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft File: paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft (raw, json) Hash identifier: 8riN4a5SazKoGAYO3N7pimAmyoo+DT3W0w4vP+oGIWQ= Subject key identifier: BF:22:53:E8:5B:24:1B:E9:1F:7A:41:1A:A0:A6:F4:58:BF:B2:A5:C2 Authority key identifier: A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D Certificate issuer: /CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d Certificate serial: 019AF5E5D62826229A6874379F24D0DAB2B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 23:01:11 +0000 Manifest this update: Sat 06 Dec 2025 23:01:11 +0000 Manifest next update: Sun 07 Dec 2025 23:01:11 +0000 Files and hashes: 1: Ef4jdp4ch3bGe_Ka3GRq8dFNRyA.roa (hash: 0HcHv8IPsRtMKEw7Kx2nplJJT6BUJZOb81lct/uUUeg=) 2: NH2BjpUAouOhcpZouA1RZzjRVTY.roa (hash: 24a7YxtpdykxCsVljEKHdP+oA0xGv3G4hBA1X06gGy8=) 3: paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl (hash: 4FjqqUzo2cSRjOZchrAMNJi5OSPo4oi5GmhwSyjmj70=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:d6:28:26:22:9a:68:74:37:9f:24:d0:da:b2:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d Validity Not Before: Dec 6 23:01:11 2025 GMT Not After : Dec 7 23:01:11 2025 GMT Subject: CN=bf2253e85b241be91f7a411aa0a6f458bfb2a5c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4b:99:b4:ab:7b:6a:a3:f9:dd:bc:c1:41:20: 33:fc:4a:28:7e:56:af:36:29:db:45:78:24:dd:30: 5a:a1:53:fc:90:ae:f6:cc:43:fd:4c:21:bb:b9:e8: e1:e6:e6:b0:bf:c5:c7:e7:67:b8:50:56:47:17:5d: 74:be:1c:94:86:a4:d6:50:77:13:95:68:90:e2:f0: 10:14:99:a5:50:96:b4:8d:20:bd:6b:69:47:9f:8a: 7d:3e:97:d2:29:39:36:42:26:bf:fd:2f:15:8b:e5: 4a:92:09:05:ed:c5:d4:0f:a4:98:9f:c1:7b:8e:5e: ae:ac:e5:59:e4:e7:28:c7:82:bf:95:b2:ee:fd:e5: e7:e4:6d:e7:bc:54:e3:2d:71:36:bc:0c:c9:66:d9: 9c:de:c0:ff:59:d3:8e:04:09:fe:ff:5c:f6:e4:a0: f4:32:c0:25:fc:49:ca:11:1a:8b:9a:75:8b:96:85: dd:e2:43:b7:66:63:a1:9e:10:b5:42:04:e8:48:5f: 1f:1d:80:30:c8:04:ea:29:66:ab:19:18:87:4e:ff: 20:46:93:ce:c9:e7:3c:a2:6c:8c:09:88:df:40:47: 85:7c:9a:df:0d:a0:f8:e4:cc:ec:3f:cb:c4:03:62: 36:07:c4:2b:66:b5:97:f3:5a:da:b3:a9:f6:64:9b: 76:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:22:53:E8:5B:24:1B:E9:1F:7A:41:1A:A0:A6:F4:58:BF:B2:A5:C2 X509v3 Authority Key Identifier: keyid:A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:7d:f3:c2:d7:4f:3b:2f:bf:10:b4:55:2f:ea:28:1c:e7:7a: 97:ae:c8:9a:0a:b7:61:8d:f0:ac:88:04:0d:62:2e:74:45:e5: 01:b3:b5:72:0d:ae:70:71:8d:81:89:04:c6:07:6e:6c:a6:d9: f3:3c:6a:f6:dd:06:63:1e:3e:19:a7:e3:74:a3:36:46:ff:c1: 56:be:1f:2f:b8:0b:15:45:f2:e1:14:23:5a:a0:0e:1e:2a:bf: 02:32:b7:87:ac:96:ae:07:5b:a2:72:05:5a:29:60:9b:b6:c0: ad:53:01:bd:2f:2d:2a:a0:d5:8b:37:a8:56:81:ff:48:eb:37: 06:0a:2d:8c:65:aa:7f:9b:a1:2b:ba:6b:71:a0:3e:d8:a2:da: 49:da:0d:57:53:1c:61:11:ab:9f:81:dd:27:72:9e:c5:57:13: 12:84:3e:8c:db:ea:0b:48:fc:fa:82:78:b2:6e:b5:21:23:9f: 99:38:cd:41:99:f0:92:eb:08:47:8f:ac:c0:3d:76:b6:02:72: 07:2f:76:16:e5:17:b7:05:ba:b0:0f:f7:47:3b:c6:d9:fd:9b: cc:20:3f:7a:a9:ce:17:11:f1:ad:bc:ba:f7:ef:6f:ca:7b:39: 11:62:60:f1:e0:c0:f7:ce:01:8b:75:fa:e6:59:2b:64:78:ed: 8d:55:b9:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15dYoJiKaaHQ3nyTQ2rKyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YTQyZDI2MGQ1ZWNkYzJmYTJiMGI1ZGJmNjAzYjkwZDcx NTQ0NGQwHhcNMjUxMjA2MjMwMTExWhcNMjUxMjA3MjMwMTExWjAzMTEwLwYDVQQD EyhiZjIyNTNlODViMjQxYmU5MWY3YTQxMWFhMGE2ZjQ1OGJmYjJhNWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0uZtKt7aqP53bzBQSAz/Eooflav NinbRXgk3TBaoVP8kK72zEP9TCG7uejh5uawv8XH52e4UFZHF110vhyUhqTWUHcT lWiQ4vAQFJmlUJa0jSC9a2lHn4p9PpfSKTk2Qia//S8Vi+VKkgkF7cXUD6SYn8F7 jl6urOVZ5Ocox4K/lbLu/eXn5G3nvFTjLXE2vAzJZtmc3sD/WdOOBAn+/1z25KD0 MsAl/EnKERqLmnWLloXd4kO3ZmOhnhC1QgToSF8fHYAwyATqKWarGRiHTv8gRpPO yec8omyMCYjfQEeFfJrfDaD45MzsP8vEA2I2B8QrZrWX81ras6n2ZJt2VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL8iU+hbJBvpH3pBGqCm9Fi/sqXCMB8GA1UdIwQY MBaAFKWkLSYNXs3C+isLXb9gO5DXFURNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGFRdEpnMWV6Y0w2S3d0ZHYyQTdrTmNWUkUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9jMzkyZDctMGE5OS00MWM5LWEyY2Qt ZjBkMmI5NDNjYjUzLzEvcGFRdEpnMWV6Y0w2S3d0ZHYyQTdrTmNWUkUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9jMzkyZDctMGE5OS00MWM5LWEyY2QtZjBkMmI5NDNjYjUz LzEvcGFRdEpnMWV6Y0w2S3d0ZHYyQTdrTmNWUkUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAon3zwtdP Oy+/ELRVL+ooHOd6l67Imgq3YY3wrIgEDWIudEXlAbO1cg2ucHGNgYkExgdubKbZ 8zxq9t0GYx4+GafjdKM2Rv/BVr4fL7gLFUXy4RQjWqAOHiq/AjK3h6yWrgdbonIF Wilgm7bArVMBvS8tKqDVizeoVoH/SOs3BgotjGWqf5uhK7prcaA+2KLaSdoNV1Mc YRGrn4HdJ3KexVcTEoQ+jNvqC0j8+oJ4sm61ISOfmTjNQZnwkusIR4+swD12tgJy By92FuUXtwW6sA/3RzvG2f2bzCA/eqnOFxHxrby69+9vyns5EWJg8eDA984Bi3X6 5lkrZHjtjVW5jA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:26:47 2025 by rpki-client