This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft File: 0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft (raw, json) Hash identifier: Y6gUxd94KnKkITqhLxpDiKNOewHBMEOUL4+llZX6pq0= Subject key identifier: EB:B4:47:B8:C4:D7:A7:4B:E6:1E:61:A2:5E:22:EC:6B:38:9F:20:C1 Authority key identifier: D0:F6:B8:43:6F:66:34:CD:31:D7:09:7C:E2:42:A5:49:93:5B:18:D7 Certificate issuer: /CN=d0f6b8436f6634cd31d7097ce242a549935b18d7 Certificate serial: 019AF208A1E268B8EE6E6390BF6811A6287D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft Manifest number: 1736 Signing time: Sat 06 Dec 2025 05:00:43 +0000 Manifest this update: Sat 06 Dec 2025 05:00:43 +0000 Manifest next update: Sun 07 Dec 2025 05:00:43 +0000 Files and hashes: 1: 0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl (hash: XwsRGgv2c9E7qeP0rD06/OEvCC+c2LQ/2pferuCZ5jk=) 2: PRL7sgUPxAooAgpR2OCFKktRv4I.roa (hash: 7EnjkpMFrtIGkSxH/V71N/Yi8O1F+vC6f4Et13UAYFE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:a1:e2:68:b8:ee:6e:63:90:bf:68:11:a6:28:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0f6b8436f6634cd31d7097ce242a549935b18d7 Validity Not Before: Dec 6 05:00:43 2025 GMT Not After : Dec 7 05:00:43 2025 GMT Subject: CN=ebb447b8c4d7a74be61e61a25e22ec6b389f20c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c1:ce:a6:4a:5e:7e:20:4f:a5:50:87:1c:e8: 20:a9:b1:47:08:d0:ee:7a:86:d6:4e:66:40:b2:52: 3c:62:a8:47:9b:af:2d:00:6e:5a:73:bd:bf:c9:0d: 4a:fd:a0:3a:a2:83:1b:90:f7:a0:34:08:ae:17:d2: cb:d4:08:a8:1e:0f:3c:6e:45:c6:23:c9:2e:d4:1f: 09:f6:63:58:16:63:10:00:fe:dc:a0:a7:b2:1b:57: a8:e5:1f:5b:a0:b7:c1:77:0e:3f:aa:62:ce:26:f0: ca:42:04:4e:e1:2a:42:a3:d0:a5:ab:e1:42:e4:7a: 2d:89:43:8c:c6:64:84:ec:70:56:07:0e:00:b0:f2: 5b:6d:98:a0:bd:75:ed:fb:c0:d2:c6:0b:fc:5c:5a: a6:e6:7d:5b:5b:1d:71:c9:0e:60:de:72:ce:36:94: 56:07:cb:19:8d:65:de:c4:8b:4e:cc:40:6b:00:e1: 9f:8f:41:d2:45:79:e5:8c:a7:31:d1:d8:0a:dc:c0: cb:cf:eb:68:d4:92:63:37:df:31:3e:a8:a4:7e:1c: 6e:0f:8c:e4:96:cd:1c:03:ab:28:27:c6:b8:6e:fe: 05:f5:7d:1e:71:f6:31:24:c5:4b:b4:b3:15:ca:52: c4:08:8b:9c:aa:3a:e3:23:4b:0f:29:0c:2c:df:8b: 9b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B4:47:B8:C4:D7:A7:4B:E6:1E:61:A2:5E:22:EC:6B:38:9F:20:C1 X509v3 Authority Key Identifier: keyid:D0:F6:B8:43:6F:66:34:CD:31:D7:09:7C:E2:42:A5:49:93:5B:18:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:e7:b2:f9:ba:34:ed:ae:f1:5b:ff:7b:bd:06:ce:14:f4:57: 4f:74:df:e3:18:9a:aa:40:a1:b6:d5:59:2a:bb:53:fb:09:b0: 66:8e:f2:b4:16:fa:22:1a:c6:a9:ee:f1:f7:cb:9d:b8:4d:fc: 39:6c:0c:51:9d:7f:ed:24:91:ca:20:98:ab:13:a1:09:20:41: 1d:dc:76:b0:af:c7:de:a9:e1:30:5d:06:e9:4c:b9:ec:7a:e7: c3:bd:8f:a9:1b:a1:89:07:07:63:fa:58:53:25:3c:0e:21:bc: 23:b9:f0:6e:ff:b7:05:54:8e:fd:e4:52:27:42:3d:45:27:32: 5c:a6:55:fe:c6:89:c9:79:77:78:01:a7:e7:aa:42:25:5e:7e: bc:43:a4:d2:10:8e:3b:4d:24:11:a6:0c:5c:f3:02:6d:76:f3: 52:f0:71:7c:41:b0:d2:59:cd:cf:88:b7:a0:a3:69:bb:33:e2: 53:57:73:9f:29:54:a8:08:b6:12:e2:55:87:50:2f:c8:0e:41: c3:df:5f:a8:ba:98:47:70:7b:d6:91:b7:5b:b7:c3:13:a4:fb: 03:d2:af:34:d1:7f:b5:63:f3:3e:d6:c8:57:3a:32:cf:71:7a: 95:79:e8:6a:ac:07:19:b9:4e:f2:a9:5e:04:f1:58:d5:68:54: a2:3b:e6:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCKHiaLjubmOQv2gRpih9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwZjZiODQzNmY2NjM0Y2QzMWQ3MDk3Y2UyNDJhNTQ5OTM1 YjE4ZDcwHhcNMjUxMjA2MDUwMDQzWhcNMjUxMjA3MDUwMDQzWjAzMTEwLwYDVQQD EyhlYmI0NDdiOGM0ZDdhNzRiZTYxZTYxYTI1ZTIyZWM2YjM4OWYyMGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcHOpkpefiBPpVCHHOggqbFHCNDu eobWTmZAslI8YqhHm68tAG5ac72/yQ1K/aA6ooMbkPegNAiuF9LL1AioHg88bkXG I8ku1B8J9mNYFmMQAP7coKeyG1eo5R9boLfBdw4/qmLOJvDKQgRO4SpCo9Clq+FC 5HotiUOMxmSE7HBWBw4AsPJbbZigvXXt+8DSxgv8XFqm5n1bWx1xyQ5g3nLONpRW B8sZjWXexItOzEBrAOGfj0HSRXnljKcx0dgK3MDLz+to1JJjN98xPqikfhxuD4zk ls0cA6soJ8a4bv4F9X0ecfYxJMVLtLMVylLECIucqjrjI0sPKQws34ubUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOu0R7jE16dL5h5hol4i7Gs4nyDBMB8GA1UdIwQY MBaAFND2uENvZjTNMdcJfOJCpUmTWxjXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFBhNFEyOW1OTTB4MXdsODRrS2xTWk5iR05jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC81MTRhNDItMGJlOC00NWU4LWE3ZjAt NTVkYThlYzM2MDE0LzEvMFBhNFEyOW1OTTB4MXdsODRrS2xTWk5iR05jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC81MTRhNDItMGJlOC00NWU4LWE3ZjAtNTVkYThlYzM2MDE0 LzEvMFBhNFEyOW1OTTB4MXdsODRrS2xTWk5iR05jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhOey+bo0 7a7xW/97vQbOFPRXT3Tf4xiaqkChttVZKrtT+wmwZo7ytBb6IhrGqe7x98uduE38 OWwMUZ1/7SSRyiCYqxOhCSBBHdx2sK/H3qnhMF0G6Uy57Hrnw72PqRuhiQcHY/pY UyU8DiG8I7nwbv+3BVSO/eRSJ0I9RScyXKZV/saJyXl3eAGn56pCJV5+vEOk0hCO O00kEaYMXPMCbXbzUvBxfEGw0lnNz4i3oKNpuzPiU1dznylUqAi2EuJVh1AvyA5B w99fqLqYR3B71pG3W7fDE6T7A9KvNNF/tWPzPtbIVzoyz3F6lXnoaqwHGblO8qle BPFY1WhUojvmPw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:12:10 2025 by rpki-client