This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft File: paVuvwHgA0n2cwGRgFYMmjGuqHE.mft (raw, json) Hash identifier: opVoZ5yfHf+oCuYzoN1/+AEQFb0RP82WyTV4/InDNyU= Subject key identifier: 22:11:E0:7F:B3:EB:27:DD:16:D5:60:3D:58:EC:CD:7C:21:B1:DE:42 Authority key identifier: A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71 Certificate issuer: /CN=a5a56ebf01e00349f673019180560c9a31aea871 Certificate serial: 019AF16417CB6DAA625006C79A1465854A22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft Manifest number: 0E64 Signing time: Sat 06 Dec 2025 02:00:59 +0000 Manifest this update: Sat 06 Dec 2025 02:00:59 +0000 Manifest next update: Sun 07 Dec 2025 02:00:59 +0000 Files and hashes: 1: Up1DgVu6Rzl8j-xWcnRJPbc9w5c.roa (hash: S1Y+h0243/EB07fB0dXlduT0obEhbg3cgY40o4HTbzQ=) 2: paVuvwHgA0n2cwGRgFYMmjGuqHE.crl (hash: I5C8Byq0TH18vfHch1iN34tS4S32m5uDArhF3df+ejo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:17:cb:6d:aa:62:50:06:c7:9a:14:65:85:4a:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5a56ebf01e00349f673019180560c9a31aea871 Validity Not Before: Dec 6 02:00:59 2025 GMT Not After : Dec 7 02:00:59 2025 GMT Subject: CN=2211e07fb3eb27dd16d5603d58eccd7c21b1de42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:62:ce:93:6d:dd:c0:bb:12:30:55:6d:cc:63: bb:06:7a:4b:95:25:fe:b8:76:f0:7f:64:d0:46:83: 99:4b:8e:65:d5:43:65:84:fb:fd:b3:46:ed:6a:55: bc:e8:0f:14:ac:ad:a4:bd:ac:15:6e:e5:74:ed:64: 77:72:fb:6a:ec:52:a8:bc:8d:33:29:dd:88:77:65: 65:f9:62:dc:5b:21:9a:c0:d5:60:ad:40:3f:56:da: c7:8c:05:0a:3a:4c:d1:3b:a0:89:b6:b9:b6:65:ce: 33:2b:7c:a6:91:d3:b8:78:43:40:35:71:0d:53:4b: 45:ff:43:3d:67:9a:e8:85:b0:9e:c2:ec:4a:d0:cc: 79:a2:c1:89:7c:11:bc:fa:47:9b:02:93:6e:b6:93: db:d6:5d:e9:ea:b4:87:f0:f6:2b:89:34:ae:f6:be: e8:00:d1:01:61:9f:f4:38:9b:b4:92:b6:ba:bc:10: 71:82:78:a7:ac:af:05:62:6a:26:0e:29:48:c4:b7: 42:9a:12:ad:4b:73:cf:a5:b0:24:e0:cc:60:7f:ef: 11:a1:86:39:e8:8a:36:50:b4:52:8e:39:e4:d3:08: 55:04:79:fd:86:fa:36:90:38:97:45:7a:bc:d3:17: 0a:a5:eb:28:00:d9:b9:19:d5:b5:a9:c1:b2:00:59: c5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:11:E0:7F:B3:EB:27:DD:16:D5:60:3D:58:EC:CD:7C:21:B1:DE:42 X509v3 Authority Key Identifier: keyid:A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:29:2d:88:e0:f7:67:41:5c:d3:85:1a:dd:f7:b5:7b:ec:9c: 37:7a:68:73:ac:f0:63:6d:4d:2b:0f:6b:f3:8e:db:39:ca:8d: eb:f8:1a:5c:6c:97:3d:2e:97:0c:b2:2a:70:b9:29:b3:42:f5: 5a:f1:e3:2f:25:98:e9:51:39:a3:76:ce:52:c8:4e:11:d6:6b: 54:03:15:e5:25:86:5a:42:33:37:c1:13:70:58:95:5e:38:48: fe:31:97:fb:11:9b:4f:d3:51:44:46:58:fe:25:09:4a:07:e3: 83:35:61:60:a3:cc:31:66:bd:03:7e:a7:84:e1:e6:a0:0a:cf: 47:e5:ce:3c:1f:8d:25:9a:af:20:7b:67:c6:01:44:fe:2c:b9: ce:69:2c:43:1b:9f:9c:9a:c7:77:21:04:4a:c0:52:17:e8:2f: fd:9a:c2:89:cf:66:a9:2d:d0:8d:28:a7:3d:bc:d4:48:a9:88: 0b:1c:8b:8a:ce:73:35:9b:4e:fd:13:1b:34:23:58:0c:26:26: 24:0d:bd:09:44:8f:18:15:2d:1d:e1:47:43:8c:dd:7f:74:cd: 0c:ff:14:3e:cd:be:7a:e7:dd:8d:15:d0:96:13:0e:a4:76:06: 07:a6:8c:54:e0:9c:78:2a:54:5f:c0:05:c2:af:aa:2d:d0:5c: 51:23:a9:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZBfLbapiUAbHmhRlhUoiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YTU2ZWJmMDFlMDAzNDlmNjczMDE5MTgwNTYwYzlhMzFh ZWE4NzEwHhcNMjUxMjA2MDIwMDU5WhcNMjUxMjA3MDIwMDU5WjAzMTEwLwYDVQQD EygyMjExZTA3ZmIzZWIyN2RkMTZkNTYwM2Q1OGVjY2Q3YzIxYjFkZTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2LOk23dwLsSMFVtzGO7BnpLlSX+ uHbwf2TQRoOZS45l1UNlhPv9s0btalW86A8UrK2kvawVbuV07WR3cvtq7FKovI0z Kd2Id2Vl+WLcWyGawNVgrUA/VtrHjAUKOkzRO6CJtrm2Zc4zK3ymkdO4eENANXEN U0tF/0M9Z5rohbCewuxK0Mx5osGJfBG8+kebApNutpPb1l3p6rSH8PYriTSu9r7o ANEBYZ/0OJu0kra6vBBxgninrK8FYmomDilIxLdCmhKtS3PPpbAk4Mxgf+8RoYY5 6Io2ULRSjjnk0whVBHn9hvo2kDiXRXq80xcKpesoANm5GdW1qcGyAFnFLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCIR4H+z6yfdFtVgPVjszXwhsd5CMB8GA1UdIwQY MBaAFKWlbr8B4ANJ9nMBkYBWDJoxrqhxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGFWdXZ3SGdBMG4yY3dHUmdGWU1takd1cUhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81NTRjMzUtYTgzYy00MzI5LWEwOGQt MmQ0NmQzMGRhY2JmLzEvcGFWdXZ3SGdBMG4yY3dHUmdGWU1takd1cUhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS81NTRjMzUtYTgzYy00MzI5LWEwOGQtMmQ0NmQzMGRhY2Jm LzEvcGFWdXZ3SGdBMG4yY3dHUmdGWU1takd1cUhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjSktiOD3 Z0Fc04Ua3fe1e+ycN3poc6zwY21NKw9r847bOcqN6/gaXGyXPS6XDLIqcLkps0L1 WvHjLyWY6VE5o3bOUshOEdZrVAMV5SWGWkIzN8ETcFiVXjhI/jGX+xGbT9NRREZY /iUJSgfjgzVhYKPMMWa9A36nhOHmoArPR+XOPB+NJZqvIHtnxgFE/iy5zmksQxuf nJrHdyEESsBSF+gv/ZrCic9mqS3QjSinPbzUSKmICxyLis5zNZtO/RMbNCNYDCYm JA29CUSPGBUtHeFHQ4zdf3TNDP8UPs2+eufdjRXQlhMOpHYGB6aMVOCceCpUX8AF wq+qLdBcUSOpuA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:56:08 2025 by rpki-client