This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft File: pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft (raw, json) Hash identifier: UQtHCLJtSoyYVNTZR38Dlpo+R9NYhLcX1ZKiJ/NhmCs= Subject key identifier: BD:53:F0:3C:F3:C8:FB:FD:53:3C:17:3D:63:D9:AC:7D:DF:35:B4:C3 Authority key identifier: A4:0C:1A:D5:47:B9:3E:BF:65:5C:58:04:38:DF:A5:AE:42:7C:65:11 Certificate issuer: /CN=a40c1ad547b93ebf655c580438dfa5ae427c6511 Certificate serial: 019AF0BEE63D5915424A4F406E594A5C7260 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft Manifest number: 0DAF Signing time: Fri 05 Dec 2025 23:00:33 +0000 Manifest this update: Fri 05 Dec 2025 23:00:33 +0000 Manifest next update: Sat 06 Dec 2025 23:00:33 +0000 Files and hashes: 1: 1LXoG8lIrfkrrE3BvhbCNRs7Cyg.roa (hash: qehfEzu5pVPdqrtkKPnNAj43cdjEk3H8LlXqlcvxhLI=) 2: pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.crl (hash: 9UbeakEniE1V4LydxI3JZG4Bnokn24Gvsurv8ttKNGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft rsync://rpki.ripe.net/repository/DEFAULT/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:e6:3d:59:15:42:4a:4f:40:6e:59:4a:5c:72:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a40c1ad547b93ebf655c580438dfa5ae427c6511 Validity Not Before: Dec 5 23:00:33 2025 GMT Not After : Dec 6 23:00:33 2025 GMT Subject: CN=bd53f03cf3c8fbfd533c173d63d9ac7ddf35b4c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:24:4a:7c:4c:41:f8:b1:85:84:a3:d7:31:ca: d0:f5:53:da:24:54:c0:24:ff:0b:09:bc:6e:ce:a3: 40:6a:ff:57:e0:58:4e:16:aa:c3:d7:81:53:bd:ad: 80:fa:90:be:25:c9:ab:c9:79:10:ae:9f:f6:ac:ce: 21:c4:ea:84:62:6d:c2:96:42:88:ca:c3:3f:2c:c7: a9:f6:26:6e:36:51:3b:3e:6d:ec:ca:d0:42:b1:7f: 37:5d:c3:c2:bb:63:89:05:70:19:cb:34:5d:77:f2: a6:26:19:b4:1c:1a:cc:ef:73:0a:75:2f:cc:f7:5a: 7a:c0:30:a2:9d:c9:e4:95:b4:84:78:6e:f0:4a:19: 07:d4:eb:27:ef:ae:c9:1e:65:04:89:4a:f2:a1:37: d5:66:a4:60:ec:81:26:fe:7e:b5:10:f5:f9:7f:d4: 7c:e9:0d:ef:9c:ef:76:12:68:b2:23:29:e7:ee:8b: bc:4f:e5:e0:1f:9d:4e:04:17:42:74:30:13:29:55: 5a:cc:1c:7a:37:c5:93:3f:b8:aa:4d:03:c0:f1:dd: 1a:66:94:33:f5:00:56:e6:65:b6:00:36:8f:69:ec: 36:c1:3b:6b:d0:3e:f3:c1:5a:37:7f:c1:1a:4f:da: 15:fd:c2:72:3f:e1:a7:60:5f:1b:b4:4c:6a:4f:f0: 19:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:53:F0:3C:F3:C8:FB:FD:53:3C:17:3D:63:D9:AC:7D:DF:35:B4:C3 X509v3 Authority Key Identifier: keyid:A4:0C:1A:D5:47:B9:3E:BF:65:5C:58:04:38:DF:A5:AE:42:7C:65:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:b5:9e:b5:f7:d1:cf:a3:11:13:fa:bd:ab:d1:18:a3:c1:23: 22:af:4a:8a:be:c0:eb:ba:11:f8:a0:a9:ff:8c:8d:9c:6b:eb: 9b:c2:7b:72:f3:fb:90:75:3f:9c:4c:18:35:79:5c:13:b7:c2: 36:a3:fe:cb:ab:1f:fd:9f:a8:38:aa:29:3d:d5:47:c5:46:88: fc:a2:1d:c5:f6:42:62:07:4c:c5:f4:87:8f:53:19:28:85:48: 9a:16:32:1f:ae:72:1f:b7:fb:22:03:91:b8:f2:aa:2f:37:9f: 13:26:a2:45:9d:2a:c6:8f:a9:5e:29:60:9d:f2:82:8d:23:d6: 3a:a6:23:e1:15:15:9d:95:1a:5f:1a:54:24:0e:e4:3b:4f:ab: 50:8b:2d:9a:eb:14:04:0e:f5:64:f0:ae:0f:63:55:43:9d:98: 1a:41:38:ae:e2:51:08:94:12:b7:d4:dc:a2:36:c8:24:d6:4e: 7a:c0:9d:4e:70:db:20:0d:89:d9:c6:92:2e:24:f1:4f:62:1b: 13:92:f9:85:7c:e0:ac:c5:6f:0e:53:7f:78:58:58:28:d4:83: 3a:f0:d0:d0:c7:bb:21:79:72:be:69:1f:11:99:84:67:4f:8d: b0:bd:bf:5c:a8:8a:bf:25:15:12:80:6a:3e:78:9e:1c:a3:2d: 6a:8d:2c:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvuY9WRVCSk9AbllKXHJgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MGMxYWQ1NDdiOTNlYmY2NTVjNTgwNDM4ZGZhNWFlNDI3 YzY1MTEwHhcNMjUxMjA1MjMwMDMzWhcNMjUxMjA2MjMwMDMzWjAzMTEwLwYDVQQD EyhiZDUzZjAzY2YzYzhmYmZkNTMzYzE3M2Q2M2Q5YWM3ZGRmMzViNGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyRKfExB+LGFhKPXMcrQ9VPaJFTA JP8LCbxuzqNAav9X4FhOFqrD14FTva2A+pC+JcmryXkQrp/2rM4hxOqEYm3ClkKI ysM/LMep9iZuNlE7Pm3sytBCsX83XcPCu2OJBXAZyzRdd/KmJhm0HBrM73MKdS/M 91p6wDCincnklbSEeG7wShkH1Osn767JHmUEiUryoTfVZqRg7IEm/n61EPX5f9R8 6Q3vnO92EmiyIynn7ou8T+XgH51OBBdCdDATKVVazBx6N8WTP7iqTQPA8d0aZpQz 9QBW5mW2ADaPaew2wTtr0D7zwVo3f8EaT9oV/cJyP+GnYF8btExqT/AZ9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL1T8DzzyPv9UzwXPWPZrH3fNbTDMB8GA1UdIwQY MBaAFKQMGtVHuT6/ZVxYBDjfpa5CfGURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEF3YTFVZTVQcjlsWEZnRU9OLWxya0o4WlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy82YTRlNTctZmJlMy00YmMyLWI4YTUt ZGM4ZmNjNmJkYWFhLzEvcEF3YTFVZTVQcjlsWEZnRU9OLWxya0o4WlJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy82YTRlNTctZmJlMy00YmMyLWI4YTUtZGM4ZmNjNmJkYWFh LzEvcEF3YTFVZTVQcjlsWEZnRU9OLWxya0o4WlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXLWetffR z6MRE/q9q9EYo8EjIq9Kir7A67oR+KCp/4yNnGvrm8J7cvP7kHU/nEwYNXlcE7fC NqP+y6sf/Z+oOKopPdVHxUaI/KIdxfZCYgdMxfSHj1MZKIVImhYyH65yH7f7IgOR uPKqLzefEyaiRZ0qxo+pXilgnfKCjSPWOqYj4RUVnZUaXxpUJA7kO0+rUIstmusU BA71ZPCuD2NVQ52YGkE4ruJRCJQSt9TcojbIJNZOesCdTnDbIA2J2caSLiTxT2Ib E5L5hXzgrMVvDlN/eFhYKNSDOvDQ0Me7IXlyvmkfEZmEZ0+NsL2/XKiKvyUVEoBq PnieHKMtao0sTA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:01:25 2025 by rpki-client