This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft File: pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft (raw, json) Hash identifier: YPJ9cAHt1qqKGkAI7ZWWcoPNrQVg8F9J1XML4i4hxYA= Subject key identifier: 42:94:40:60:26:39:D3:5F:63:CD:FA:27:D8:44:BB:FC:33:4E:FA:5C Authority key identifier: A6:7F:1C:F2:74:26:07:0A:ED:A7:B2:60:53:45:3C:28:3F:DF:75:37 Certificate issuer: /CN=a67f1cf27426070aeda7b26053453c283fdf7537 Certificate serial: 019AF209082DFDF90926C0E259F2220F8F65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft Manifest number: 09EE Signing time: Sat 06 Dec 2025 05:01:09 +0000 Manifest this update: Sat 06 Dec 2025 05:01:09 +0000 Manifest next update: Sun 07 Dec 2025 05:01:09 +0000 Files and hashes: 1: pGhFSYKZpUat85kiXiiCd2_IqX0.roa (hash: rRFD7qwRqqnJAuhQ1luySoQoJ9GoQlnTCcam7ZPbXJk=) 2: pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl (hash: ELo8kfinMKJq62LlgGJhRgdIZemffEK5/BkHDj0s6qQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:08:2d:fd:f9:09:26:c0:e2:59:f2:22:0f:8f:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a67f1cf27426070aeda7b26053453c283fdf7537 Validity Not Before: Dec 6 05:01:09 2025 GMT Not After : Dec 7 05:01:09 2025 GMT Subject: CN=429440602639d35f63cdfa27d844bbfc334efa5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a7:e9:8a:30:14:7b:3e:45:3a:69:3f:af:ba: 63:17:d6:8c:df:cf:8a:3b:b8:68:3e:18:53:73:c8: 12:a4:63:20:5d:6d:2d:5d:a1:fc:c2:67:71:d7:f2: ae:96:89:83:6f:22:10:23:74:4a:8f:03:ac:93:2a: b2:e1:54:e2:26:9c:11:e4:61:4a:9a:fb:96:1d:62: 26:ae:83:6a:64:94:a1:22:78:44:6c:f2:7b:75:70: 2e:8b:94:f2:25:a2:d0:1c:91:e1:cd:61:29:27:f7: a7:ce:8b:75:9e:01:77:0a:07:95:00:21:7e:90:29: c4:4d:e7:61:dd:0b:36:0b:66:b3:26:68:b8:76:9c: 9e:77:a3:eb:b2:92:c9:69:56:f4:9a:34:33:8b:89: 9f:e8:0a:db:b9:5c:92:8a:1a:7a:fb:01:36:3a:ed: d1:f2:49:53:ab:b4:e1:c8:36:86:92:4f:b5:0a:c6: 05:50:2f:03:44:49:9d:db:5a:07:20:de:0c:70:61: 60:59:74:13:8c:b7:3c:c3:e9:bd:0e:34:f3:25:0f: ff:5a:a0:21:d1:0c:32:1a:2c:e4:5c:a9:e0:73:32: a2:61:42:27:2c:c5:11:cb:1d:bd:2b:73:fd:53:c9: e9:71:fe:0b:72:0c:1c:9f:1a:60:87:37:3f:f8:fe: 07:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:94:40:60:26:39:D3:5F:63:CD:FA:27:D8:44:BB:FC:33:4E:FA:5C X509v3 Authority Key Identifier: keyid:A6:7F:1C:F2:74:26:07:0A:ED:A7:B2:60:53:45:3C:28:3F:DF:75:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:0b:6d:d1:ae:87:01:5f:18:1c:fb:60:04:19:a6:f0:5b:75: 77:df:ac:dd:9a:c6:8e:9c:5a:eb:69:2c:e8:60:37:09:ed:bb: dc:29:a3:aa:f9:3c:84:41:41:8f:a1:41:9d:23:36:d1:5b:df: 24:5c:23:b7:59:0a:d6:b0:fb:15:e7:d4:06:59:29:a2:67:d5: 15:74:78:9a:d1:bf:36:25:47:3b:c9:e7:09:ff:c6:af:57:51: 8a:42:16:d1:88:ce:40:4b:a0:2f:77:ab:d9:ae:c3:9d:f9:81: a0:ed:94:36:8b:07:29:67:d9:ff:04:bc:d1:4a:5e:ed:19:98: c7:84:18:24:0b:6c:37:41:b2:11:77:4a:ee:e3:ca:f0:c7:bf: 70:70:71:80:4d:2b:8d:8b:d8:75:ae:81:34:56:07:95:c9:95: 53:8a:54:92:67:34:8e:e5:4a:09:73:04:03:43:e6:5a:91:80: d7:ee:57:bc:d9:4f:7b:bf:0c:38:ba:ab:0b:70:95:8b:af:9f: bc:a1:c1:e1:2d:6e:7d:ec:36:14:fa:84:e8:2b:85:f1:a7:20: 8f:9d:e8:b4:23:62:77:74:0f:55:cf:70:5a:57:8f:49:e5:7a: f4:bf:f6:83:38:23:65:a8:31:29:e8:61:ce:e2:33:e9:08:05: 8a:d7:ac:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCQgt/fkJJsDiWfIiD49lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2N2YxY2YyNzQyNjA3MGFlZGE3YjI2MDUzNDUzYzI4M2Zk Zjc1MzcwHhcNMjUxMjA2MDUwMTA5WhcNMjUxMjA3MDUwMTA5WjAzMTEwLwYDVQQD Eyg0Mjk0NDA2MDI2MzlkMzVmNjNjZGZhMjdkODQ0YmJmYzMzNGVmYTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsafpijAUez5FOmk/r7pjF9aM38+K O7hoPhhTc8gSpGMgXW0tXaH8wmdx1/KulomDbyIQI3RKjwOskyqy4VTiJpwR5GFK mvuWHWImroNqZJShInhEbPJ7dXAui5TyJaLQHJHhzWEpJ/enzot1ngF3CgeVACF+ kCnETedh3Qs2C2azJmi4dpyed6PrspLJaVb0mjQzi4mf6ArbuVySihp6+wE2Ou3R 8klTq7ThyDaGkk+1CsYFUC8DREmd21oHIN4McGFgWXQTjLc8w+m9DjTzJQ//WqAh 0QwyGizkXKngczKiYUInLMURyx29K3P9U8npcf4Lcgwcnxpghzc/+P4HAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEKUQGAmOdNfY836J9hEu/wzTvpcMB8GA1UdIwQY MBaAFKZ/HPJ0JgcK7aeyYFNFPCg/33U3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcG44YzhuUW1Cd3J0cDdKZ1UwVThLRF9mZFRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8xMmUyYzQtMjQzZC00NGRmLWIwZGMt YjlkNjY4ZjA1MWRlLzEvcG44YzhuUW1Cd3J0cDdKZ1UwVThLRF9mZFRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8xMmUyYzQtMjQzZC00NGRmLWIwZGMtYjlkNjY4ZjA1MWRl LzEvcG44YzhuUW1Cd3J0cDdKZ1UwVThLRF9mZFRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKwtt0a6H AV8YHPtgBBmm8Ft1d9+s3ZrGjpxa62ks6GA3Ce273Cmjqvk8hEFBj6FBnSM20Vvf JFwjt1kK1rD7FefUBlkpomfVFXR4mtG/NiVHO8nnCf/Gr1dRikIW0YjOQEugL3er 2a7DnfmBoO2UNosHKWfZ/wS80Upe7RmYx4QYJAtsN0GyEXdK7uPK8Me/cHBxgE0r jYvYda6BNFYHlcmVU4pUkmc0juVKCXMEA0PmWpGA1+5XvNlPe78MOLqrC3CVi6+f vKHB4S1ufew2FPqE6CuF8acgj53otCNid3QPVc9wWlePSeV69L/2gzgjZagxKehh zuIz6QgFitesJQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:07:56 2025 by rpki-client