This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft File: PabmnmXdClQFmXA-0MkkdMsg6Tk.mft (raw, json) Hash identifier: DreClfWg3w7Sz1A5q2+f73ij8bw0mftjYvDnmM8EMOc= Subject key identifier: 22:72:7D:57:58:D9:EB:26:34:E9:32:25:5D:AE:A1:AC:E3:A8:11:FE Authority key identifier: 3D:A6:E6:9E:65:DD:0A:54:05:99:70:3E:D0:C9:24:74:CB:20:E9:39 Certificate issuer: /CN=3da6e69e65dd0a540599703ed0c92474cb20e939 Certificate serial: 019AF1D1ECAA51CC5DD9DAF34192BD8CD8F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PabmnmXdClQFmXA-0MkkdMsg6Tk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft Manifest number: 16C1 Signing time: Sat 06 Dec 2025 04:00:57 +0000 Manifest this update: Sat 06 Dec 2025 04:00:57 +0000 Manifest next update: Sun 07 Dec 2025 04:00:57 +0000 Files and hashes: 1: PabmnmXdClQFmXA-0MkkdMsg6Tk.crl (hash: Tb+R2xn1dYqhjoGf2Ili3IAuarE2xj8gZA18ceGQLE4=) 2: wgfEWoteV0ugJhJFFY5StCpYga4.roa (hash: Bu0QgGIHWGxscJbgnF2zr/rd8qdTFWvwHrlBzc8O9aU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.crl rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft rsync://rpki.ripe.net/repository/DEFAULT/PabmnmXdClQFmXA-0MkkdMsg6Tk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ec:aa:51:cc:5d:d9:da:f3:41:92:bd:8c:d8:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3da6e69e65dd0a540599703ed0c92474cb20e939 Validity Not Before: Dec 6 04:00:57 2025 GMT Not After : Dec 7 04:00:57 2025 GMT Subject: CN=22727d5758d9eb2634e932255daea1ace3a811fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7d:7f:29:0d:ac:f5:e4:50:c9:d3:36:cb:cd: c8:1d:0d:2e:6d:57:e6:16:14:69:e3:e9:83:c5:fd: bb:39:9e:e7:3b:89:b8:a9:06:9d:3b:89:23:e0:08: dd:bb:a9:cd:3f:0f:eb:d5:56:53:d9:6c:69:45:a0: 0d:c9:36:d4:3b:5a:74:84:e8:ac:b3:02:11:a2:6c: 04:3e:33:de:2b:0d:47:53:21:87:4e:38:13:13:0d: aa:a3:a3:ab:9c:8b:fb:64:cf:bd:bb:29:d6:1a:11: 36:be:6d:12:a7:b4:0c:60:49:36:5e:8d:5e:45:2d: 8d:d9:c6:c9:90:de:d1:c9:f1:3c:66:c7:ab:61:d7: 21:84:15:4f:e6:4b:0d:3c:41:0c:81:89:6c:e3:36: 78:05:34:82:9a:a7:b8:d1:c5:c6:7a:9c:88:78:ac: 88:1c:c5:28:e3:3a:a4:61:aa:7d:7b:95:b9:81:55: 83:a6:95:f9:b9:00:bb:db:72:2d:ee:0c:ab:89:e5: 9b:c9:2e:2d:fa:57:46:36:2d:b1:a2:9a:4d:dd:e3: e5:dd:2f:06:9f:e5:26:8b:59:87:31:88:79:da:1c: 92:31:dc:d2:51:be:67:52:e8:5d:ce:bd:42:2c:7d: 30:51:0b:4e:ba:b2:59:7f:f2:6f:f2:cf:81:d3:5e: 9d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:72:7D:57:58:D9:EB:26:34:E9:32:25:5D:AE:A1:AC:E3:A8:11:FE X509v3 Authority Key Identifier: keyid:3D:A6:E6:9E:65:DD:0A:54:05:99:70:3E:D0:C9:24:74:CB:20:E9:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PabmnmXdClQFmXA-0MkkdMsg6Tk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:18:02:33:8e:0a:8a:f1:1c:c5:ad:bf:f1:2f:99:80:5a:7f: a8:e2:5b:a7:35:a2:56:27:f1:99:86:44:eb:9c:32:15:64:be: d1:ce:1b:b5:c4:3e:9f:01:ff:5d:6b:f9:f7:52:84:e5:c2:88: d6:17:e5:e1:a8:d7:3b:1b:22:69:89:d1:ab:13:26:71:99:1c: 9f:33:2c:76:10:b1:6b:34:90:64:c2:9f:79:df:a0:ab:e7:75: 9c:a5:a0:cb:66:85:a8:0c:36:36:36:88:70:8d:69:bb:0b:cb: 32:21:6e:5d:3c:b5:17:3a:e9:7b:8d:fe:35:76:23:0a:0c:ce: 2b:7a:3d:01:34:b7:a2:8b:52:31:df:43:cb:77:3d:df:d0:8e: 56:b4:d1:7c:31:37:4a:a1:47:fe:7e:bd:48:28:22:a2:fa:9a: d9:57:b1:25:27:a2:f3:b8:db:8a:c6:30:96:b1:35:e4:6c:72: 56:54:77:26:66:1a:c6:75:90:8d:39:22:dd:37:f2:c7:1a:f0: 7a:35:f1:b4:8b:44:62:a6:d9:ad:ca:cc:8a:50:d6:ca:a8:b8: 94:12:6a:0b:69:30:1b:52:7f:12:38:aa:e5:f9:21:47:7a:a2: ad:8d:91:47:71:20:b6:3e:6f:c7:62:9d:28:74:0a:df:6c:32: 68:7a:dd:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0eyqUcxd2drzQZK9jNj4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkYTZlNjllNjVkZDBhNTQwNTk5NzAzZWQwYzkyNDc0Y2Iy MGU5MzkwHhcNMjUxMjA2MDQwMDU3WhcNMjUxMjA3MDQwMDU3WjAzMTEwLwYDVQQD EygyMjcyN2Q1NzU4ZDllYjI2MzRlOTMyMjU1ZGFlYTFhY2UzYTgxMWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw31/KQ2s9eRQydM2y83IHQ0ubVfm FhRp4+mDxf27OZ7nO4m4qQadO4kj4Ajdu6nNPw/r1VZT2WxpRaANyTbUO1p0hOis swIRomwEPjPeKw1HUyGHTjgTEw2qo6OrnIv7ZM+9uynWGhE2vm0Sp7QMYEk2Xo1e RS2N2cbJkN7RyfE8ZserYdchhBVP5ksNPEEMgYls4zZ4BTSCmqe40cXGepyIeKyI HMUo4zqkYap9e5W5gVWDppX5uQC723It7gyrieWbyS4t+ldGNi2xoppN3ePl3S8G n+Umi1mHMYh52hySMdzSUb5nUuhdzr1CLH0wUQtOurJZf/Jv8s+B016dRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCJyfVdY2esmNOkyJV2uoazjqBH+MB8GA1UdIwQY MBaAFD2m5p5l3QpUBZlwPtDJJHTLIOk5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGFibW5tWGRDbFFGbVhBLTBNa2tkTXNnNlRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mN2M0YTItYjYwNi00MjkyLWI5Zjct ZmEzYzRlZjVlZGY2LzEvUGFibW5tWGRDbFFGbVhBLTBNa2tkTXNnNlRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9mN2M0YTItYjYwNi00MjkyLWI5ZjctZmEzYzRlZjVlZGY2 LzEvUGFibW5tWGRDbFFGbVhBLTBNa2tkTXNnNlRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFBgCM44K ivEcxa2/8S+ZgFp/qOJbpzWiVifxmYZE65wyFWS+0c4btcQ+nwH/XWv591KE5cKI 1hfl4ajXOxsiaYnRqxMmcZkcnzMsdhCxazSQZMKfed+gq+d1nKWgy2aFqAw2NjaI cI1puwvLMiFuXTy1Fzrpe43+NXYjCgzOK3o9ATS3ootSMd9Dy3c939COVrTRfDE3 SqFH/n69SCgiovqa2VexJSei87jbisYwlrE15GxyVlR3JmYaxnWQjTki3Tfyxxrw ejXxtItEYqbZrcrMilDWyqi4lBJqC2kwG1J/Ejiq5fkhR3qirY2RR3Egtj5vx2Kd KHQK32wyaHrddQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:49 2025 by rpki-client