This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft File: pNAp8sMhrbWeyl_KV6Hrm99THWo.mft (raw, json) Hash identifier: u9u8qrVuQy/pevhca8kg5gkopPYPHiWf1ondVZuzy/I= Subject key identifier: 05:F6:77:7E:0A:1F:40:14:83:AD:1E:63:C2:59:1E:15:2D:9D:CD:1F Authority key identifier: A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A Certificate issuer: /CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a Certificate serial: 019AF1D1D3AAD533288A93DBA2804499D870 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 04:00:51 +0000 Manifest this update: Sat 06 Dec 2025 04:00:51 +0000 Manifest next update: Sun 07 Dec 2025 04:00:51 +0000 Files and hashes: 1: pNAp8sMhrbWeyl_KV6Hrm99THWo.crl (hash: iisBzop6MpewdLOFz5FPdbqmg+3XS2CU8czQ5vutlOo=) 2: yPrWz37IXjB7ODdHPO3TzqpY_oY.roa (hash: 34zVN/3obTpRgYhbmY7ABdm+4sQRJRCWRUdOZLf3tEk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:d3:aa:d5:33:28:8a:93:db:a2:80:44:99:d8:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a Validity Not Before: Dec 6 04:00:51 2025 GMT Not After : Dec 7 04:00:51 2025 GMT Subject: CN=05f6777e0a1f401483ad1e63c2591e152d9dcd1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:af:e5:b9:73:62:68:4e:87:50:b3:aa:35:a4: 1b:89:4e:5c:5e:93:fb:31:ec:6c:fe:c7:a2:c1:68: 15:74:43:9f:70:55:c2:1a:e0:e2:e4:9c:42:50:19: ca:63:4d:86:d9:c5:e9:7d:7d:4b:03:32:c0:0b:9d: 6e:0b:28:7e:54:0b:70:48:af:e2:f2:c7:01:29:9c: 92:dc:58:66:07:76:96:be:61:be:6a:8d:77:e1:65: 6e:51:91:c3:bd:c9:f3:2c:e1:b3:32:60:28:f7:42: 1b:74:b0:b6:cb:93:3d:8c:c3:9c:87:40:33:37:7c: c9:23:86:39:2c:d3:a9:a2:06:7c:38:44:c4:5c:98: 62:bf:37:35:0b:36:33:06:7b:82:61:b5:2f:8f:4b: 82:67:cb:ce:83:72:ab:ef:b1:64:7c:f7:7f:e7:83: ed:12:53:76:34:33:45:c1:88:31:ac:c4:88:50:6d: ac:26:65:af:93:e7:1e:14:0b:33:34:33:fc:ed:fc: 6b:49:d7:9f:bd:bc:e4:b7:a8:9e:41:79:75:15:af: 04:5a:59:fd:f0:11:ca:5a:5d:60:ca:bc:57:fe:3d: a7:64:1c:e6:be:fe:62:2d:47:37:92:ca:7d:ae:e3: ce:97:22:e6:ce:34:e8:cf:ea:c9:88:6f:8c:ed:73: c9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:F6:77:7E:0A:1F:40:14:83:AD:1E:63:C2:59:1E:15:2D:9D:CD:1F X509v3 Authority Key Identifier: keyid:A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:09:29:97:c2:fb:e0:5c:75:66:58:90:6f:55:f5:19:a6:07: 09:92:7d:57:19:ba:df:d6:6f:48:63:c6:43:e9:7f:2c:32:31: d9:46:8f:de:99:d6:58:81:1e:ce:29:36:b0:8a:96:24:d0:f6: 4c:02:9f:d9:82:e6:39:7e:19:f7:28:7e:65:d5:68:5b:4f:fc: 65:5f:3e:d9:13:00:b5:34:5b:c4:57:9c:dc:0f:16:c7:e0:0b: e2:0a:41:f2:5d:17:b0:4d:9e:73:c3:a1:a4:16:94:8a:13:ae: c0:01:35:7d:da:a5:44:48:d0:34:0e:9f:2a:f6:4d:d4:0b:49: 10:07:8c:62:ae:72:8b:d7:f8:68:a3:1e:a5:01:9d:95:70:20: b1:d0:8d:89:4c:98:6e:07:5d:b0:87:db:3b:a7:76:04:de:ed: 16:db:c1:0f:f5:cd:ba:29:1f:77:56:29:98:b9:7f:3c:69:46: 37:d3:29:2e:ab:64:fa:bf:e3:49:3f:8c:bc:56:64:9b:89:b2: d0:d1:ac:76:87:eb:4c:df:94:43:37:01:bd:7c:a7:d2:16:54: 29:2b:cf:29:10:bf:2c:60:fa:0a:d9:d3:08:aa:c1:c9:77:f8: 51:2a:1c:35:ed:1e:b9:dd:46:c3:01:ba:7e:54:e0:d9:6c:e2: 94:73:61:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0dOq1TMoipPbooBEmdhwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZDAyOWYyYzMyMWFkYjU5ZWNhNWZjYTU3YTFlYjliZGY1 MzFkNmEwHhcNMjUxMjA2MDQwMDUxWhcNMjUxMjA3MDQwMDUxWjAzMTEwLwYDVQQD EygwNWY2Nzc3ZTBhMWY0MDE0ODNhZDFlNjNjMjU5MWUxNTJkOWRjZDFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAna/luXNiaE6HULOqNaQbiU5cXpP7 Mexs/seiwWgVdEOfcFXCGuDi5JxCUBnKY02G2cXpfX1LAzLAC51uCyh+VAtwSK/i 8scBKZyS3FhmB3aWvmG+ao134WVuUZHDvcnzLOGzMmAo90IbdLC2y5M9jMOch0Az N3zJI4Y5LNOpogZ8OETEXJhivzc1CzYzBnuCYbUvj0uCZ8vOg3Kr77FkfPd/54Pt ElN2NDNFwYgxrMSIUG2sJmWvk+ceFAszNDP87fxrSdefvbzkt6ieQXl1Fa8EWln9 8BHKWl1gyrxX/j2nZBzmvv5iLUc3ksp9ruPOlyLmzjToz+rJiG+M7XPJgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAX2d34KH0AUg60eY8JZHhUtnc0fMB8GA1UdIwQY MBaAFKTQKfLDIa21nspfyleh65vfUx1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE5BcDhzTWhyYldleWxfS1Y2SHJtOTlUSFdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xMjY3NTYtOWE5NC00YTkxLWJmNDct OGFkNmZmYjI2MTdkLzEvcE5BcDhzTWhyYldleWxfS1Y2SHJtOTlUSFdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8xMjY3NTYtOWE5NC00YTkxLWJmNDctOGFkNmZmYjI2MTdk LzEvcE5BcDhzTWhyYldleWxfS1Y2SHJtOTlUSFdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuQkpl8L7 4Fx1ZliQb1X1GaYHCZJ9Vxm639ZvSGPGQ+l/LDIx2UaP3pnWWIEezik2sIqWJND2 TAKf2YLmOX4Z9yh+ZdVoW0/8ZV8+2RMAtTRbxFec3A8Wx+AL4gpB8l0XsE2ec8Oh pBaUihOuwAE1fdqlREjQNA6fKvZN1AtJEAeMYq5yi9f4aKMepQGdlXAgsdCNiUyY bgddsIfbO6d2BN7tFtvBD/XNuikfd1YpmLl/PGlGN9MpLqtk+r/jST+MvFZkm4my 0NGsdofrTN+UQzcBvXyn0hZUKSvPKRC/LGD6CtnTCKrByXf4USocNe0eud1GwwG6 flTg2WzilHNhNg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:14 2025 by rpki-client