This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft File: pDtTIrjqOKegRNywZxp126EEPX4.mft (raw, json) Hash identifier: axiVhio+H36AdOilZyyqI+mGpQh4qx4oCN/hrU6oPgY= Subject key identifier: A8:D4:C1:33:17:1D:63:0C:7C:76:83:15:EB:7A:2C:D6:D3:66:E7:F9 Authority key identifier: A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E Certificate issuer: /CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e Certificate serial: 019AF12DE2E10B5C26A55A82A15320C55814 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 01:01:47 +0000 Manifest this update: Sat 06 Dec 2025 01:01:47 +0000 Manifest next update: Sun 07 Dec 2025 01:01:47 +0000 Files and hashes: 1: iMT6U9mtu2u4ZrZg6QFZA1PI4b4.roa (hash: gM1ZjnX5a45F3g+DHFf4ROLZzbrv4Z9zB/pBieJvcD0=) 2: pDtTIrjqOKegRNywZxp126EEPX4.crl (hash: esBE7ZZyBxNNjanLhGcDazcNSQTfY5ty96URB8RwYf0=) 3: uSjPkHVrQGEYzySpy8LO3vhOhQk.roa (hash: 7CsfbkRbBqND0q0gdzh2M/F8+y9Oj0uA6RZKZkPuiPY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:e2:e1:0b:5c:26:a5:5a:82:a1:53:20:c5:58:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e Validity Not Before: Dec 6 01:01:47 2025 GMT Not After : Dec 7 01:01:47 2025 GMT Subject: CN=a8d4c133171d630c7c768315eb7a2cd6d366e7f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:32:c9:f4:02:24:7f:1a:9c:be:72:d9:40:86: b8:1c:85:32:0d:5b:d1:12:e4:73:76:fc:8c:c9:40: 6c:db:33:ac:db:07:57:99:16:eb:fb:75:46:04:b7: 8d:e7:fd:15:33:b0:bd:d1:97:2b:11:91:a9:87:12: 4d:55:d3:46:17:99:29:25:db:3f:48:a0:62:69:fc: 65:68:58:7b:6b:f2:e3:b8:5d:e5:8c:18:98:9a:13: 0a:87:99:fe:ae:2d:08:04:3b:28:78:70:01:ef:a0: 4f:f9:e9:69:85:2b:aa:3a:f1:13:5e:01:47:03:20: 31:8e:37:cc:93:99:d1:8e:51:88:30:f8:97:3e:e1: a2:4d:04:af:ba:e4:25:32:9c:e0:a8:18:a1:5a:1d: a9:f4:57:b7:26:0b:46:44:c8:5e:be:0e:ba:14:5e: 7a:47:4c:e9:5a:6b:e9:c3:d4:b6:f4:8a:11:1d:67: 0b:e6:de:30:a2:93:95:3e:df:88:1b:93:09:51:8e: fe:10:9c:0d:02:e6:2e:80:c9:a5:8e:97:34:88:94: 73:0d:9a:fb:86:e8:24:fe:b1:f2:d2:a2:29:0a:c6: 4b:77:25:8e:9b:98:78:81:1b:0f:e9:ab:30:1e:e2: 93:d8:d4:f6:af:78:aa:e4:3b:e8:86:a6:17:15:b7: ce:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D4:C1:33:17:1D:63:0C:7C:76:83:15:EB:7A:2C:D6:D3:66:E7:F9 X509v3 Authority Key Identifier: keyid:A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:8d:01:3a:58:80:ee:a3:cd:b1:dc:b5:81:d0:e1:10:a8:1f: a6:eb:42:e2:63:62:65:81:5e:bf:3f:d1:ce:98:61:29:f0:43: 0c:4e:51:f9:a4:c7:f2:ff:fc:a3:8b:6e:d2:3a:42:08:d1:08: 7b:1d:d6:a4:d9:6f:0c:96:63:5e:d1:6a:20:b5:0a:53:95:45: b0:7d:b3:a5:a2:a3:66:67:10:cc:69:f7:1f:35:af:f0:21:bd: 7a:92:61:c1:ef:b7:a8:0e:3e:0e:98:aa:86:aa:b5:89:43:04: c7:b6:45:3c:62:ae:17:18:1d:db:d8:b5:72:e0:f1:e7:09:c5: e9:1d:26:aa:9c:e1:73:13:01:8c:10:4a:e1:aa:1e:4f:ab:b9: 5f:72:4d:bc:95:93:f3:18:5d:30:dc:1c:59:4d:f4:2f:5b:8e: 01:c1:23:ff:2a:2c:44:8f:28:7c:c1:aa:24:9f:12:ac:cf:1c: bd:d4:70:b2:f0:d8:79:c3:47:6b:10:d6:87:23:d7:35:fd:a3: ed:4a:3b:17:6b:29:fc:71:43:24:19:22:d2:ec:2f:48:66:56: 8b:92:c1:d0:2f:e1:3b:e7:e7:da:24:06:1d:fc:8d:f0:37:01: 7d:46:77:53:05:e0:08:cd:0c:5b:8d:2d:9f:2b:75:cf:53:09: d4:5c:27:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLeLhC1wmpVqCoVMgxVgUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0M2I1MzIyYjhlYTM4YTdhMDQ0ZGNiMDY3MWE3NWRiYTEw NDNkN2UwHhcNMjUxMjA2MDEwMTQ3WhcNMjUxMjA3MDEwMTQ3WjAzMTEwLwYDVQQD EyhhOGQ0YzEzMzE3MWQ2MzBjN2M3NjgzMTVlYjdhMmNkNmQzNjZlN2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjLJ9AIkfxqcvnLZQIa4HIUyDVvR EuRzdvyMyUBs2zOs2wdXmRbr+3VGBLeN5/0VM7C90ZcrEZGphxJNVdNGF5kpJds/ SKBiafxlaFh7a/LjuF3ljBiYmhMKh5n+ri0IBDsoeHAB76BP+elphSuqOvETXgFH AyAxjjfMk5nRjlGIMPiXPuGiTQSvuuQlMpzgqBihWh2p9Fe3JgtGRMhevg66FF56 R0zpWmvpw9S29IoRHWcL5t4wopOVPt+IG5MJUY7+EJwNAuYugMmljpc0iJRzDZr7 hugk/rHy0qIpCsZLdyWOm5h4gRsP6aswHuKT2NT2r3iq5DvohqYXFbfORQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKjUwTMXHWMMfHaDFet6LNbTZuf5MB8GA1UdIwQY MBaAFKQ7UyK46jinoETcsGcadduhBD1+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcER0VElyanFPS2VnUk55d1p4cDEyNkVFUFg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9hZTUyMDYtYzg0My00YmQ1LTg4NjAt NzFlOTViMDRiM2VjLzEvcER0VElyanFPS2VnUk55d1p4cDEyNkVFUFg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9hZTUyMDYtYzg0My00YmQ1LTg4NjAtNzFlOTViMDRiM2Vj LzEvcER0VElyanFPS2VnUk55d1p4cDEyNkVFUFg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM40BOliA 7qPNsdy1gdDhEKgfputC4mNiZYFevz/RzphhKfBDDE5R+aTH8v/8o4tu0jpCCNEI ex3WpNlvDJZjXtFqILUKU5VFsH2zpaKjZmcQzGn3HzWv8CG9epJhwe+3qA4+Dpiq hqq1iUMEx7ZFPGKuFxgd29i1cuDx5wnF6R0mqpzhcxMBjBBK4aoeT6u5X3JNvJWT 8xhdMNwcWU30L1uOAcEj/yosRI8ofMGqJJ8SrM8cvdRwsvDYecNHaxDWhyPXNf2j 7Uo7F2sp/HFDJBki0uwvSGZWi5LB0C/hO+fn2iQGHfyN8DcBfUZ3UwXgCM0MW40t nyt1z1MJ1Fwn3A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:23:00 2025 by rpki-client