This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft File: pNAp8sMhrbWeyl_KV6Hrm99THWo.mft (raw, json) Hash identifier: Caa6xXt76Tzdf40sL50IVrVumXFVrhp3gVAvipftke4= Subject key identifier: C3:39:B3:66:50:74:8D:1F:35:48:E6:5D:A8:79:1D:B2:9F:72:BF:A9 Authority key identifier: A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A Certificate issuer: /CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a Certificate serial: 019B318CC0C11E850163315028A9EE7E6C54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 13:01:06 +0000 Manifest this update: Thu 18 Dec 2025 13:01:06 +0000 Manifest next update: Fri 19 Dec 2025 13:01:06 +0000 Files and hashes: 1: pNAp8sMhrbWeyl_KV6Hrm99THWo.crl (hash: 6M2ZEShAdxQ5asDy3QYotqu79lkI+OFlQ0jrE/6mPiA=) 2: yPrWz37IXjB7ODdHPO3TzqpY_oY.roa (hash: 34zVN/3obTpRgYhbmY7ABdm+4sQRJRCWRUdOZLf3tEk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8c:c0:c1:1e:85:01:63:31:50:28:a9:ee:7e:6c:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a Validity Not Before: Dec 18 13:01:06 2025 GMT Not After : Dec 19 13:01:06 2025 GMT Subject: CN=c339b36650748d1f3548e65da8791db29f72bfa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:fd:5e:bd:96:f1:6d:5c:a2:57:51:a8:0f:3f: 3f:23:91:5a:40:79:41:99:5b:ee:71:ec:d4:3a:83: 81:09:ca:b5:84:77:e4:68:9d:fe:75:e6:83:c5:5b: 81:b6:8f:c5:e4:30:19:64:b4:54:d2:5a:42:73:18: 40:d9:da:b9:e0:83:86:e4:01:23:95:69:8b:19:52: fd:0e:96:b0:2d:39:9e:a2:a1:4c:71:6c:24:86:e7: b9:a8:dc:e0:f6:5b:d7:56:b3:15:d9:19:22:5f:5f: 2f:63:93:a5:89:60:da:31:97:40:b1:30:e2:dc:71: 48:e3:bf:4e:e9:68:68:ef:6b:53:8b:2d:7c:1a:33: 47:84:e8:2f:d4:33:c4:99:e2:21:05:d7:2d:a2:3f: 57:98:3e:22:be:7f:3a:27:78:a7:3c:37:d7:d1:cc: 8f:00:5f:97:f7:79:5b:f8:fa:b4:22:95:e0:e1:f7: 70:70:df:22:8e:33:9a:0b:0f:89:7c:a2:29:86:98: d1:e7:e5:56:d9:4f:7d:bc:88:7f:1d:3a:3f:8a:41: 92:e3:6c:c5:4b:0e:fa:8c:6e:13:e9:25:94:23:31: ca:5c:e4:07:79:68:3c:ee:7a:de:1c:3e:1f:d1:8f: d7:97:0d:fc:93:ce:ce:f6:10:9d:a2:8b:42:3b:a0: bd:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:39:B3:66:50:74:8D:1F:35:48:E6:5D:A8:79:1D:B2:9F:72:BF:A9 X509v3 Authority Key Identifier: keyid:A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:ee:12:66:46:24:bf:2e:40:ac:8a:e6:da:d0:5b:34:22:51: c8:4a:13:e1:6d:dc:75:6d:28:fc:f5:a1:b3:23:d4:a3:c8:a8: 3f:33:71:05:ed:16:c6:e6:ef:30:59:27:fc:28:8e:25:86:db: 19:ef:65:2a:60:db:03:20:41:1b:0c:a4:69:b3:9b:fe:f7:5d: dc:4a:44:c5:9e:c5:30:19:36:2b:26:d3:dd:cd:a0:ca:4f:e5: 97:b2:a0:a2:f9:3a:95:91:8c:d8:d8:73:f9:42:dd:b7:0a:32: 1a:b6:61:4d:00:5d:c3:75:89:08:78:88:b6:8a:83:f4:db:a6: 66:ec:79:ca:45:05:b6:a4:de:1a:06:98:a1:93:3b:fc:57:66: 36:2f:14:b6:9b:e2:38:c5:59:98:d4:3d:8d:14:fa:51:4f:bc: 2c:13:85:30:d7:2e:87:87:7b:f4:a0:87:1a:e1:85:4a:3f:55: 99:df:e2:79:64:3e:2c:a4:a5:93:59:f2:8a:a2:0c:27:39:56: af:ea:66:e2:e0:cc:ef:64:24:57:5b:22:4c:68:ae:8a:42:c1: af:0d:a4:36:85:9b:5d:2d:98:7f:ba:fb:0f:5f:2e:f4:c2:49: 70:41:87:39:e3:8d:db:b2:00:60:2f:c1:87:87:49:c9:13:dd: 32:ab:47:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjMDBHoUBYzFQKKnufmxUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZDAyOWYyYzMyMWFkYjU5ZWNhNWZjYTU3YTFlYjliZGY1 MzFkNmEwHhcNMjUxMjE4MTMwMTA2WhcNMjUxMjE5MTMwMTA2WjAzMTEwLwYDVQQD EyhjMzM5YjM2NjUwNzQ4ZDFmMzU0OGU2NWRhODc5MWRiMjlmNzJiZmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5P1evZbxbVyiV1GoDz8/I5FaQHlB mVvucezUOoOBCcq1hHfkaJ3+deaDxVuBto/F5DAZZLRU0lpCcxhA2dq54IOG5AEj lWmLGVL9DpawLTmeoqFMcWwkhue5qNzg9lvXVrMV2RkiX18vY5OliWDaMZdAsTDi 3HFI479O6Who72tTiy18GjNHhOgv1DPEmeIhBdctoj9XmD4ivn86J3inPDfX0cyP AF+X93lb+Pq0IpXg4fdwcN8ijjOaCw+JfKIphpjR5+VW2U99vIh/HTo/ikGS42zF Sw76jG4T6SWUIzHKXOQHeWg87nreHD4f0Y/Xlw38k87O9hCdootCO6C9KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMM5s2ZQdI0fNUjmXah5HbKfcr+pMB8GA1UdIwQY MBaAFKTQKfLDIa21nspfyleh65vfUx1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE5BcDhzTWhyYldleWxfS1Y2SHJtOTlUSFdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xMjY3NTYtOWE5NC00YTkxLWJmNDct OGFkNmZmYjI2MTdkLzEvcE5BcDhzTWhyYldleWxfS1Y2SHJtOTlUSFdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8xMjY3NTYtOWE5NC00YTkxLWJmNDctOGFkNmZmYjI2MTdk LzEvcE5BcDhzTWhyYldleWxfS1Y2SHJtOTlUSFdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARe4SZkYk vy5ArIrm2tBbNCJRyEoT4W3cdW0o/PWhsyPUo8ioPzNxBe0WxubvMFkn/CiOJYbb Ge9lKmDbAyBBGwykabOb/vdd3EpExZ7FMBk2KybT3c2gyk/ll7Kgovk6lZGM2Nhz +ULdtwoyGrZhTQBdw3WJCHiItoqD9NumZux5ykUFtqTeGgaYoZM7/FdmNi8Utpvi OMVZmNQ9jRT6UU+8LBOFMNcuh4d79KCHGuGFSj9Vmd/ieWQ+LKSlk1nyiqIMJzlW r+pm4uDM72QkV1siTGiuikLBrw2kNoWbXS2Yf7r7D18u9MJJcEGHOeON27IAYC/B h4dJyRPdMqtHWQ== -----END CERTIFICATE-----Generated at Thu Dec 18 20:37:33 2025 by rpki-client