This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft File: pvE9aAzkgFkb-LN93KD66zu-dE4.mft (raw, json) Hash identifier: g7ZxBC4j7OKGzt110yfv6AvxnbCbvVmVimZ8SkSd5hs= Subject key identifier: 65:2B:9C:1F:01:89:7F:8F:B0:EE:47:2A:B5:F2:56:19:54:2D:DC:61 Authority key identifier: A6:F1:3D:68:0C:E4:80:59:1B:F8:B3:7D:DC:A0:FA:EB:3B:BE:74:4E Certificate issuer: /CN=a6f13d680ce480591bf8b37ddca0faeb3bbe744e Certificate serial: 019AF23FF163ECBE9513B02355BF3CB53F23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pvE9aAzkgFkb-LN93KD66zu-dE4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 06:01:07 +0000 Manifest this update: Sat 06 Dec 2025 06:01:07 +0000 Manifest next update: Sun 07 Dec 2025 06:01:07 +0000 Files and hashes: 1: OpKyWUUF45asysnRnTgjMvj5UEo.roa (hash: dG/NrnY4NueXZeuAaFWy5reT48MCWKXtWJgALxpo6BI=) 2: pvE9aAzkgFkb-LN93KD66zu-dE4.crl (hash: dJNVdg1Wq5ykF0dup18tCDh5eaIX6rVRO3v8omLc8Nk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft rsync://rpki.ripe.net/repository/DEFAULT/pvE9aAzkgFkb-LN93KD66zu-dE4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:f1:63:ec:be:95:13:b0:23:55:bf:3c:b5:3f:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6f13d680ce480591bf8b37ddca0faeb3bbe744e Validity Not Before: Dec 6 06:01:07 2025 GMT Not After : Dec 7 06:01:07 2025 GMT Subject: CN=652b9c1f01897f8fb0ee472ab5f25619542ddc61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0d:1c:25:b8:31:27:ca:5e:18:44:c0:46:21: ed:89:d3:2a:5d:fa:a9:66:e4:1f:19:35:5b:6b:8d: 87:f7:46:91:21:f6:76:a4:a7:9e:03:09:0e:0c:16: 36:72:7c:12:3c:c6:8c:c7:1c:89:84:16:1b:f6:49: 45:4b:f5:a8:13:bf:6f:41:37:e1:92:34:f4:2d:d2: de:df:e8:c6:af:35:97:9e:ed:d7:91:34:ca:ec:d3: b7:01:b9:33:54:e0:bb:aa:c3:fd:9c:71:5d:8f:c9: c1:67:ed:6b:12:bb:07:7d:8d:c2:18:5f:7a:d3:55: 67:e8:ba:eb:a1:8c:94:eb:e9:29:03:d2:ad:70:1a: 63:50:ad:96:b8:84:48:08:ea:ff:73:51:04:40:1b: 67:d7:6f:b2:fd:69:c6:a4:e1:65:b5:e1:aa:b1:97: 77:26:5b:ab:7d:a1:37:08:d7:4b:be:29:69:cf:6c: 23:6c:81:ff:a8:e7:1c:0a:4f:19:9f:e6:93:60:8b: 61:7c:33:01:1a:f5:cc:99:0f:c4:86:d3:8b:7b:bd: 6e:b9:83:f5:9f:91:b9:ef:d8:22:f4:da:fe:ad:ab: ee:5a:25:53:14:05:03:52:e7:98:67:24:3e:4e:21: 31:2c:ef:c8:8f:39:7b:3c:26:0e:21:47:f8:2d:9d: 01:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:2B:9C:1F:01:89:7F:8F:B0:EE:47:2A:B5:F2:56:19:54:2D:DC:61 X509v3 Authority Key Identifier: keyid:A6:F1:3D:68:0C:E4:80:59:1B:F8:B3:7D:DC:A0:FA:EB:3B:BE:74:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pvE9aAzkgFkb-LN93KD66zu-dE4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:91:a8:c6:9d:f3:7c:4a:83:24:7f:5e:21:5e:8c:cc:ad:c7: 0a:1b:44:44:79:5e:f7:01:ab:76:07:bb:2b:d7:4b:fb:6d:3c: af:8f:95:d6:05:7d:f7:42:82:66:a8:88:6b:fd:fe:14:9f:d0: 55:18:65:c4:48:70:f9:fa:e1:7a:f6:21:24:db:d6:11:2c:64: c8:2f:b6:09:22:68:95:ef:b2:57:b3:99:4c:2f:b9:aa:c2:5e: 5c:9f:6e:c8:36:07:0e:e1:09:70:c0:39:14:60:c3:ba:df:b0: 8a:23:34:47:9d:3c:a9:6c:17:c0:b0:3c:15:1c:d7:89:d3:2a: 71:06:6f:69:1d:2d:a8:c9:86:cd:a3:f5:b3:5f:71:92:5d:0b: 2c:85:5b:8f:02:6f:55:da:88:70:0e:66:18:5c:ef:c6:8a:16: 88:dc:a6:66:0a:bf:48:04:d3:69:03:ab:6a:ca:09:1a:10:52: a1:f3:5c:fd:7a:1d:fb:b8:79:d9:f4:60:73:d5:ae:de:ee:68: e8:a7:4e:76:91:cc:fe:a6:5a:4c:60:5f:33:99:fd:ec:f7:fd: c0:d7:0d:f2:88:7b:ba:73:47:f5:3b:ae:d0:69:f2:0f:82:da: 4b:17:3a:54:70:20:21:be:cb:ae:74:4d:bc:8a:16:8a:4b:02: 35:ed:3f:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP/Fj7L6VE7AjVb88tT8jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2ZjEzZDY4MGNlNDgwNTkxYmY4YjM3ZGRjYTBmYWViM2Ji ZTc0NGUwHhcNMjUxMjA2MDYwMTA3WhcNMjUxMjA3MDYwMTA3WjAzMTEwLwYDVQQD Eyg2NTJiOWMxZjAxODk3ZjhmYjBlZTQ3MmFiNWYyNTYxOTU0MmRkYzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwA0cJbgxJ8peGETARiHtidMqXfqp ZuQfGTVba42H90aRIfZ2pKeeAwkODBY2cnwSPMaMxxyJhBYb9klFS/WoE79vQTfh kjT0LdLe3+jGrzWXnu3XkTTK7NO3AbkzVOC7qsP9nHFdj8nBZ+1rErsHfY3CGF96 01Vn6LrroYyU6+kpA9KtcBpjUK2WuIRICOr/c1EEQBtn12+y/WnGpOFlteGqsZd3 JlurfaE3CNdLvilpz2wjbIH/qOccCk8Zn+aTYIthfDMBGvXMmQ/EhtOLe71uuYP1 n5G579gi9Nr+ravuWiVTFAUDUueYZyQ+TiExLO/Ijzl7PCYOIUf4LZ0BFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGUrnB8BiX+PsO5HKrXyVhlULdxhMB8GA1UdIwQY MBaAFKbxPWgM5IBZG/izfdyg+us7vnROMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHZFOWFBemtnRmtiLUxOOTNLRDY2enUtZEU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ZDFiMDItYjBmOS00ZTBlLWE0NTct MzBiZGI0OGRhNTIxLzEvcHZFOWFBemtnRmtiLUxOOTNLRDY2enUtZEU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ZDFiMDItYjBmOS00ZTBlLWE0NTctMzBiZGI0OGRhNTIx LzEvcHZFOWFBemtnRmtiLUxOOTNLRDY2enUtZEU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHpGoxp3z fEqDJH9eIV6MzK3HChtERHle9wGrdge7K9dL+208r4+V1gV990KCZqiIa/3+FJ/Q VRhlxEhw+frhevYhJNvWESxkyC+2CSJole+yV7OZTC+5qsJeXJ9uyDYHDuEJcMA5 FGDDut+wiiM0R508qWwXwLA8FRzXidMqcQZvaR0tqMmGzaP1s19xkl0LLIVbjwJv VdqIcA5mGFzvxooWiNymZgq/SATTaQOrasoJGhBSofNc/Xod+7h52fRgc9Wu3u5o 6KdOdpHM/qZaTGBfM5n97Pf9wNcN8oh7unNH9Tuu0GnyD4LaSxc6VHAgIb7LrnRN vIoWiksCNe0/5Q== -----END CERTIFICATE-----Generated at Sat Dec 6 10:53:34 2025 by rpki-client