This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft File: paVuvwHgA0n2cwGRgFYMmjGuqHE.mft (raw, json) Hash identifier: MFsS35E7qvWaCrIrkpls9vyOt33CCJ5Bmr58WwRu3HU= Subject key identifier: 91:6C:40:39:C6:98:37:30:74:74:DC:ED:2D:AA:23:F0:AD:2F:5C:1B Authority key identifier: A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71 Certificate issuer: /CN=a5a56ebf01e00349f673019180560c9a31aea871 Certificate serial: 019B25884B491FA0D995EED367909078D92C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft Manifest number: 0E7F Signing time: Tue 16 Dec 2025 05:00:47 +0000 Manifest this update: Tue 16 Dec 2025 05:00:47 +0000 Manifest next update: Wed 17 Dec 2025 05:00:47 +0000 Files and hashes: 1: Up1DgVu6Rzl8j-xWcnRJPbc9w5c.roa (hash: S1Y+h0243/EB07fB0dXlduT0obEhbg3cgY40o4HTbzQ=) 2: paVuvwHgA0n2cwGRgFYMmjGuqHE.crl (hash: qrwWGdR4P3RqJ4U5Pb7mQyGxBPBJmu4eXNLwFUGgis0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:88:4b:49:1f:a0:d9:95:ee:d3:67:90:90:78:d9:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5a56ebf01e00349f673019180560c9a31aea871 Validity Not Before: Dec 16 05:00:47 2025 GMT Not After : Dec 17 05:00:47 2025 GMT Subject: CN=916c4039c69837307474dced2daa23f0ad2f5c1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e7:c6:33:7f:3e:6e:bf:be:c5:c1:cb:3c:0c: 41:ff:8c:75:55:6d:a1:44:06:81:0c:0e:0f:4c:5e: 81:42:fa:80:3c:63:74:6a:13:b9:36:88:dc:d6:5d: be:11:21:6c:7c:89:19:eb:45:0f:ae:21:a5:cc:cc: 3a:70:76:96:6c:1b:83:0e:12:7f:3b:00:62:d1:ba: de:3f:d1:55:7a:98:1e:04:dc:d8:3f:49:d1:30:34: 07:b6:65:4d:2e:b3:25:0a:bf:ad:60:14:c5:fd:95: 7f:6d:58:8e:ae:a1:c2:8a:60:21:81:11:83:61:49: 24:98:11:48:66:db:52:db:de:02:0a:cc:68:f1:51: cf:5a:d4:74:86:c5:9c:c1:a4:69:0f:c6:82:ff:06: ae:40:e6:50:4c:8c:4a:db:b7:49:32:f3:a9:15:9a: 17:d9:f7:c6:dd:f7:c8:97:7f:1d:8c:4d:e5:e6:96: 35:28:a3:b9:27:04:64:89:c9:49:0b:52:ac:e0:8f: 9c:ba:3d:01:18:10:ad:f1:7d:22:7b:ae:79:df:a9: 00:5a:62:95:ee:ce:0c:5d:f8:99:c9:c3:73:e9:6a: 67:67:81:db:91:f1:94:67:75:ff:01:f0:b1:1a:6d: e8:07:a8:23:d5:89:65:7d:3c:32:7d:2c:57:14:be: 08:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:6C:40:39:C6:98:37:30:74:74:DC:ED:2D:AA:23:F0:AD:2F:5C:1B X509v3 Authority Key Identifier: keyid:A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:75:aa:7c:97:90:30:06:db:e0:fd:f0:96:75:6e:a1:0f:db: f6:6a:c2:2f:41:ad:f2:f0:e8:cc:2b:b7:f4:5c:1a:3c:8b:e4: f8:71:fa:7c:b8:b7:97:e5:98:da:d6:74:12:55:32:c7:18:9f: bd:e0:b6:0d:91:ce:e5:30:9a:1b:29:bb:56:57:74:84:be:d3: 1c:75:ef:e9:1e:5e:43:f4:6a:ab:fd:78:c7:95:04:46:c8:08: 8d:a4:9b:95:39:dd:b2:7a:55:6d:2e:76:81:30:97:39:ef:05: c1:a8:3a:84:25:3e:80:a7:96:93:22:8b:29:cb:4b:ba:5d:34: de:e9:21:9f:7b:13:b1:28:c1:ca:9d:6f:db:70:c3:94:ca:40: 36:bf:65:e3:1b:46:1b:27:80:c1:ce:b8:35:8c:5f:1d:d3:ba: 8f:ae:54:ac:d7:de:35:5d:ea:94:31:ff:52:53:84:04:ce:5e: 87:16:01:d4:94:07:4f:60:ca:c9:e8:59:30:72:a0:d8:8f:79: b0:46:3f:e9:46:70:1e:2d:86:37:d2:26:76:9f:ae:fb:6d:8d: dc:d5:57:16:34:f0:25:c3:24:1c:82:bd:0c:e2:55:80:02:55: 7b:b4:b1:26:a0:d8:bc:14:54:df:03:50:ef:e4:09:f4:87:5c: 41:16:22:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsliEtJH6DZle7TZ5CQeNksMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YTU2ZWJmMDFlMDAzNDlmNjczMDE5MTgwNTYwYzlhMzFh ZWE4NzEwHhcNMjUxMjE2MDUwMDQ3WhcNMjUxMjE3MDUwMDQ3WjAzMTEwLwYDVQQD Eyg5MTZjNDAzOWM2OTgzNzMwNzQ3NGRjZWQyZGFhMjNmMGFkMmY1YzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOfGM38+br++xcHLPAxB/4x1VW2h RAaBDA4PTF6BQvqAPGN0ahO5Nojc1l2+ESFsfIkZ60UPriGlzMw6cHaWbBuDDhJ/ OwBi0breP9FVepgeBNzYP0nRMDQHtmVNLrMlCr+tYBTF/ZV/bViOrqHCimAhgRGD YUkkmBFIZttS294CCsxo8VHPWtR0hsWcwaRpD8aC/wauQOZQTIxK27dJMvOpFZoX 2ffG3ffIl38djE3l5pY1KKO5JwRkiclJC1Ks4I+cuj0BGBCt8X0ie65536kAWmKV 7s4MXfiZycNz6WpnZ4HbkfGUZ3X/AfCxGm3oB6gj1YllfTwyfSxXFL4IswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJFsQDnGmDcwdHTc7S2qI/CtL1wbMB8GA1UdIwQY MBaAFKWlbr8B4ANJ9nMBkYBWDJoxrqhxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGFWdXZ3SGdBMG4yY3dHUmdGWU1takd1cUhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81NTRjMzUtYTgzYy00MzI5LWEwOGQt MmQ0NmQzMGRhY2JmLzEvcGFWdXZ3SGdBMG4yY3dHUmdGWU1takd1cUhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS81NTRjMzUtYTgzYy00MzI5LWEwOGQtMmQ0NmQzMGRhY2Jm LzEvcGFWdXZ3SGdBMG4yY3dHUmdGWU1takd1cUhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxXWqfJeQ MAbb4P3wlnVuoQ/b9mrCL0Gt8vDozCu39FwaPIvk+HH6fLi3l+WY2tZ0ElUyxxif veC2DZHO5TCaGym7Vld0hL7THHXv6R5eQ/Rqq/14x5UERsgIjaSblTndsnpVbS52 gTCXOe8Fwag6hCU+gKeWkyKLKctLul003ukhn3sTsSjByp1v23DDlMpANr9l4xtG GyeAwc64NYxfHdO6j65UrNfeNV3qlDH/UlOEBM5ehxYB1JQHT2DKyehZMHKg2I95 sEY/6UZwHi2GN9Imdp+u+22N3NVXFjTwJcMkHIK9DOJVgAJVe7SxJqDYvBRU3wNQ 7+QJ9IdcQRYi7g== -----END CERTIFICATE-----Generated at Tue Dec 16 07:01:02 2025 by rpki-client