This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft File: PabmnmXdClQFmXA-0MkkdMsg6Tk.mft (raw, json) Hash identifier: ubETLaALLpBN8MCJMWTaxAg2u7ftD40c1ZQJkQe59iM= Subject key identifier: 3C:28:FE:8A:02:BF:09:D7:EF:8F:DF:49:B8:0E:F6:EF:CA:33:F6:7F Authority key identifier: 3D:A6:E6:9E:65:DD:0A:54:05:99:70:3E:D0:C9:24:74:CB:20:E9:39 Certificate issuer: /CN=3da6e69e65dd0a540599703ed0c92474cb20e939 Certificate serial: 019B2BC239BCBBE5C409A78AAA88FACFF517 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PabmnmXdClQFmXA-0MkkdMsg6Tk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft Manifest number: 16DF Signing time: Wed 17 Dec 2025 10:01:47 +0000 Manifest this update: Wed 17 Dec 2025 10:01:47 +0000 Manifest next update: Thu 18 Dec 2025 10:01:47 +0000 Files and hashes: 1: PabmnmXdClQFmXA-0MkkdMsg6Tk.crl (hash: Qrtn+62s/VO3LtNxN57sDVWo/a8pjmGeX4gBmnV+ekM=) 2: wgfEWoteV0ugJhJFFY5StCpYga4.roa (hash: Bu0QgGIHWGxscJbgnF2zr/rd8qdTFWvwHrlBzc8O9aU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.crl rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft rsync://rpki.ripe.net/repository/DEFAULT/PabmnmXdClQFmXA-0MkkdMsg6Tk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c2:39:bc:bb:e5:c4:09:a7:8a:aa:88:fa:cf:f5:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3da6e69e65dd0a540599703ed0c92474cb20e939 Validity Not Before: Dec 17 10:01:47 2025 GMT Not After : Dec 18 10:01:47 2025 GMT Subject: CN=3c28fe8a02bf09d7ef8fdf49b80ef6efca33f67f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:82:8a:92:3f:6d:ae:d5:36:58:e6:1a:28:2b: 36:aa:30:b3:ee:d4:cc:70:b4:b7:35:e8:d5:87:3c: b7:ce:66:0f:c3:d5:2c:bf:1e:93:bd:18:40:a9:e2: 7c:36:a4:9c:d9:0c:fa:27:4d:43:fe:4e:b0:6f:06: ad:c3:33:ba:95:c3:25:58:2e:e7:6e:32:1e:8d:aa: c6:eb:6d:c3:1e:33:03:53:ea:13:4d:d8:5d:fb:0a: db:ab:c5:ed:8c:a8:3f:66:da:86:49:f6:42:33:5e: d0:d3:8a:a4:df:81:cb:67:09:77:97:2c:a7:64:9c: e2:65:75:13:78:68:f7:35:dc:ef:e9:9a:26:65:c9: fe:12:b9:7d:ae:ff:02:f9:58:ff:84:ef:f4:62:05: c9:82:42:77:02:2c:33:ea:f9:0a:d0:34:1d:cf:a3: 64:7a:58:c1:c2:10:62:55:73:30:c7:85:5d:60:55: 28:44:f5:b5:93:ff:87:36:72:41:0b:f3:ae:5d:7d: a7:2f:5d:42:93:c5:89:82:de:40:22:20:ef:76:f4: 62:f3:5e:7b:f9:bc:bf:00:7e:6c:0b:00:fe:c3:40: f7:6f:9b:bd:2a:7d:8e:44:49:db:5a:5e:ea:ad:d1: e3:b3:ad:0b:ff:0a:15:9b:24:85:8d:34:81:16:93: 71:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:28:FE:8A:02:BF:09:D7:EF:8F:DF:49:B8:0E:F6:EF:CA:33:F6:7F X509v3 Authority Key Identifier: keyid:3D:A6:E6:9E:65:DD:0A:54:05:99:70:3E:D0:C9:24:74:CB:20:E9:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PabmnmXdClQFmXA-0MkkdMsg6Tk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:0f:86:ce:25:94:5d:4f:b2:89:51:7c:6e:ae:5e:13:9d:69: ac:e4:9b:e6:78:c2:e1:67:57:25:39:57:e1:d0:b8:73:ab:1d: ce:6c:41:b4:ea:20:cd:dc:d8:62:2e:6f:d9:96:8b:a0:66:a0: 51:28:55:68:48:5d:07:ce:f5:09:c2:87:f8:af:85:3f:eb:39: d7:ff:c2:f0:ab:61:90:f8:e0:7e:a8:66:ae:3e:40:a5:dc:01: 0e:80:9b:41:87:10:f6:1d:cb:4e:a8:cf:51:78:3a:ad:7b:50: fb:8c:34:8d:48:ea:24:df:55:06:b7:ae:30:cc:5f:b6:38:9f: 7a:70:d9:d0:8f:12:e8:8d:6a:f3:b3:fa:b7:78:c6:c0:50:3e: f8:45:82:d1:04:40:f1:2a:94:2a:35:fe:85:e6:03:22:40:ec: c1:29:fb:02:34:1c:d5:34:35:44:4e:fe:de:69:c9:a5:e1:24: 87:30:9d:d5:30:26:ee:5d:8c:5a:08:16:ba:2c:f1:8d:f7:c6: f8:f6:38:1a:18:5f:a1:9c:c7:3b:07:c1:d1:47:18:9d:90:d2: e7:0a:fe:c5:81:f0:0f:4f:6b:04:e7:34:59:bf:08:60:a0:bc: f0:44:13:e4:9c:3a:e9:cb:48:cc:f8:32:4f:d1:34:d5:cd:0f: 01:f6:54:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrwjm8u+XECaeKqoj6z/UXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkYTZlNjllNjVkZDBhNTQwNTk5NzAzZWQwYzkyNDc0Y2Iy MGU5MzkwHhcNMjUxMjE3MTAwMTQ3WhcNMjUxMjE4MTAwMTQ3WjAzMTEwLwYDVQQD EygzYzI4ZmU4YTAyYmYwOWQ3ZWY4ZmRmNDliODBlZjZlZmNhMzNmNjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIKKkj9trtU2WOYaKCs2qjCz7tTM cLS3NejVhzy3zmYPw9Usvx6TvRhAqeJ8NqSc2Qz6J01D/k6wbwatwzO6lcMlWC7n bjIejarG623DHjMDU+oTTdhd+wrbq8XtjKg/ZtqGSfZCM17Q04qk34HLZwl3lyyn ZJziZXUTeGj3Ndzv6ZomZcn+Erl9rv8C+Vj/hO/0YgXJgkJ3Aiwz6vkK0DQdz6Nk eljBwhBiVXMwx4VdYFUoRPW1k/+HNnJBC/OuXX2nL11Ck8WJgt5AIiDvdvRi8157 +by/AH5sCwD+w0D3b5u9Kn2OREnbWl7qrdHjs60L/woVmySFjTSBFpNx8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDwo/ooCvwnX74/fSbgO9u/KM/Z/MB8GA1UdIwQY MBaAFD2m5p5l3QpUBZlwPtDJJHTLIOk5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGFibW5tWGRDbFFGbVhBLTBNa2tkTXNnNlRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mN2M0YTItYjYwNi00MjkyLWI5Zjct ZmEzYzRlZjVlZGY2LzEvUGFibW5tWGRDbFFGbVhBLTBNa2tkTXNnNlRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9mN2M0YTItYjYwNi00MjkyLWI5ZjctZmEzYzRlZjVlZGY2 LzEvUGFibW5tWGRDbFFGbVhBLTBNa2tkTXNnNlRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlA+GziWU XU+yiVF8bq5eE51prOSb5njC4WdXJTlX4dC4c6sdzmxBtOogzdzYYi5v2ZaLoGag UShVaEhdB871CcKH+K+FP+s51//C8KthkPjgfqhmrj5ApdwBDoCbQYcQ9h3LTqjP UXg6rXtQ+4w0jUjqJN9VBreuMMxftjifenDZ0I8S6I1q87P6t3jGwFA++EWC0QRA 8SqUKjX+heYDIkDswSn7AjQc1TQ1RE7+3mnJpeEkhzCd1TAm7l2MWggWuizxjffG +PY4GhhfoZzHOwfB0UcYnZDS5wr+xYHwD09rBOc0Wb8IYKC88EQT5Jw66ctIzPgy T9E01c0PAfZUHg== -----END CERTIFICATE-----Generated at Wed Dec 17 13:45:10 2025 by rpki-client