This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.mft File: pRA1bcClIYlc5h-FSV4G2vehKzs.mft (raw, json) Hash identifier: hXZrjpUCn3b+heY5C2D51VknTz1lJfkm+9HSRCTh5PU= Subject key identifier: 31:93:36:FF:FD:EE:C4:FC:9E:A1:E2:14:19:0F:4F:05:97:9A:8F:8A Authority key identifier: A5:10:35:6D:C0:A5:21:89:5C:E6:1F:85:49:5E:06:DA:F7:A1:2B:3B Certificate issuer: /CN=a510356dc0a521895ce61f85495e06daf7a12b3b Certificate serial: 019AF2096090CB5300B0AEB3FB7DCE66C4DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pRA1bcClIYlc5h-FSV4G2vehKzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 05:01:32 +0000 Manifest this update: Sat 06 Dec 2025 05:01:32 +0000 Manifest next update: Sun 07 Dec 2025 05:01:32 +0000 Files and hashes: 1: DZzf4gixVG1v_XBOTEdiJTCnpgc.roa (hash: EKgVMjgzgQW/dE4uPulEkrnDhBOvFfmwxhJ1zs6dJk4=) 2: PyDzr8WmYcRo05FGb5UzcWZdKls.roa (hash: IYIt11a1r2unTfjZQuVOMhykI3XsxsOfurke5JUMHZc=) 3: pRA1bcClIYlc5h-FSV4G2vehKzs.crl (hash: fPqrlwcWQAQOjA0hxeIm3bcZ2VuWbczBILpF4WKntxM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.crl rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.mft rsync://rpki.ripe.net/repository/DEFAULT/pRA1bcClIYlc5h-FSV4G2vehKzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:60:90:cb:53:00:b0:ae:b3:fb:7d:ce:66:c4:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a510356dc0a521895ce61f85495e06daf7a12b3b Validity Not Before: Dec 6 05:01:32 2025 GMT Not After : Dec 7 05:01:32 2025 GMT Subject: CN=319336fffdeec4fc9ea1e214190f4f05979a8f8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6f:9e:d7:cc:0a:cd:39:5d:9d:e0:d0:12:55: da:da:bd:9c:36:88:76:fb:e9:f4:e3:80:30:eb:5e: e2:9b:e3:58:cc:b4:b8:be:3c:bf:f7:59:8e:43:ca: fc:8a:55:f6:33:b3:87:dd:3d:f3:81:39:a9:11:5c: 62:6c:0f:45:54:ab:c1:0e:02:ec:db:02:98:c5:28: 78:d4:60:f7:27:4b:d0:e4:34:53:f1:30:18:66:49: cf:fe:60:8f:f9:0f:f8:48:96:e5:c9:57:2e:67:0c: 2c:6f:27:43:6e:94:3f:ce:3a:73:f2:4a:57:b4:73: 3d:7c:3e:82:34:ac:63:96:23:b9:7c:3b:f9:8d:85: d3:b1:25:70:f1:2e:6f:7e:ed:a2:aa:33:5b:05:2f: 14:d3:91:f1:6a:df:88:13:c7:87:1c:6b:e5:4d:9e: 60:71:ad:ea:d2:ed:e7:da:64:8a:11:d1:83:a3:dc: cd:99:e6:7e:63:bf:de:20:49:38:ea:48:38:f0:1c: 2f:f4:ff:70:23:10:bc:28:fc:51:5e:11:82:5e:c0: 39:85:62:1d:32:b6:14:48:5b:34:74:a3:8c:2c:c7: dd:dc:f1:ee:54:fc:f7:ce:a8:e7:24:3d:30:58:c0: 0c:a7:f8:1c:c3:bc:88:a7:a6:fb:3c:d9:19:cd:2d: e2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:93:36:FF:FD:EE:C4:FC:9E:A1:E2:14:19:0F:4F:05:97:9A:8F:8A X509v3 Authority Key Identifier: keyid:A5:10:35:6D:C0:A5:21:89:5C:E6:1F:85:49:5E:06:DA:F7:A1:2B:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pRA1bcClIYlc5h-FSV4G2vehKzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:db:11:b9:db:c7:f3:b8:ad:9d:be:73:bb:69:bb:d7:1d:c4: 4c:35:c7:a8:7b:54:59:74:ec:35:db:7f:9a:cf:b0:26:ee:21: f9:8b:4b:26:42:b1:bb:bc:cc:61:c5:df:8a:59:0b:45:9c:d2: f5:57:6c:b8:97:5c:28:b8:1c:9d:db:ba:23:65:6a:1a:76:6a: 3f:a3:2e:53:4d:e4:c3:d9:6a:01:2e:12:d2:c0:24:cf:64:6f: 8a:71:c0:a1:46:05:33:56:a5:d6:b0:78:18:c3:ea:b8:86:09: 7b:60:a2:2a:e9:d6:1e:a9:ae:ef:58:95:fa:78:2e:65:90:5f: 93:3c:65:40:40:33:67:da:b4:10:05:e2:c7:ab:7f:2f:85:1e: 4f:8d:c1:7f:4c:a0:23:bc:d3:04:31:a6:ed:09:d9:87:d0:00: 1c:33:69:56:30:82:77:de:d0:e0:51:f5:9d:fa:2b:7c:1d:64: ee:1a:68:55:c4:5f:31:b6:5d:9a:2a:39:90:45:01:99:23:fd: 2c:da:03:7f:fe:85:9c:88:1e:c1:bf:3a:d9:b9:cd:da:39:17: e7:1e:2b:d7:91:38:17:82:98:38:86:0d:25:95:fe:e8:24:62: de:6f:d8:e8:85:2f:be:6e:3f:fe:f2:53:52:4e:eb:84:b1:37: 80:1c:7d:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCWCQy1MAsK6z+33OZsTfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MTAzNTZkYzBhNTIxODk1Y2U2MWY4NTQ5NWUwNmRhZjdh MTJiM2IwHhcNMjUxMjA2MDUwMTMyWhcNMjUxMjA3MDUwMTMyWjAzMTEwLwYDVQQD EygzMTkzMzZmZmZkZWVjNGZjOWVhMWUyMTQxOTBmNGYwNTk3OWE4ZjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzm+e18wKzTldneDQElXa2r2cNoh2 ++n044Aw617im+NYzLS4vjy/91mOQ8r8ilX2M7OH3T3zgTmpEVxibA9FVKvBDgLs 2wKYxSh41GD3J0vQ5DRT8TAYZknP/mCP+Q/4SJblyVcuZwwsbydDbpQ/zjpz8kpX tHM9fD6CNKxjliO5fDv5jYXTsSVw8S5vfu2iqjNbBS8U05Hxat+IE8eHHGvlTZ5g ca3q0u3n2mSKEdGDo9zNmeZ+Y7/eIEk46kg48Bwv9P9wIxC8KPxRXhGCXsA5hWId MrYUSFs0dKOMLMfd3PHuVPz3zqjnJD0wWMAMp/gcw7yIp6b7PNkZzS3ipQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDGTNv/97sT8nqHiFBkPTwWXmo+KMB8GA1UdIwQY MBaAFKUQNW3ApSGJXOYfhUleBtr3oSs7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFJBMWJjQ2xJWWxjNWgtRlNWNEcydmVoS3pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zYzdjN2MtNDMyNi00MTg0LTgzNTYt MDExODJmODQwNzg5LzEvcFJBMWJjQ2xJWWxjNWgtRlNWNEcydmVoS3pzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8zYzdjN2MtNDMyNi00MTg0LTgzNTYtMDExODJmODQwNzg5 LzEvcFJBMWJjQ2xJWWxjNWgtRlNWNEcydmVoS3pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgNsRudvH 87itnb5zu2m71x3ETDXHqHtUWXTsNdt/ms+wJu4h+YtLJkKxu7zMYcXfilkLRZzS 9VdsuJdcKLgcndu6I2VqGnZqP6MuU03kw9lqAS4S0sAkz2RvinHAoUYFM1al1rB4 GMPquIYJe2CiKunWHqmu71iV+nguZZBfkzxlQEAzZ9q0EAXix6t/L4UeT43Bf0yg I7zTBDGm7QnZh9AAHDNpVjCCd97Q4FH1nforfB1k7hpoVcRfMbZdmio5kEUBmSP9 LNoDf/6FnIgewb862bnN2jkX5x4r15E4F4KYOIYNJZX+6CRi3m/Y6IUvvm4//vJT Uk7rhLE3gBx9Mg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:25 2025 by rpki-client