This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft File: pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft (raw, json) Hash identifier: OcT2j/U1IIFShr0eaexTdBGopLwYFJ29v75dd/5KTyo= Subject key identifier: DD:6C:B6:DA:FE:64:80:54:E7:A4:70:3F:DF:A6:5A:23:EC:ED:50:DE Authority key identifier: A5:0F:21:C3:DC:93:75:7F:C0:32:82:A8:35:60:0D:65:9F:96:1E:8E Certificate issuer: /CN=a50f21c3dc93757fc03282a835600d659f961e8e Certificate serial: 019AF27667ACD81CA0E1531897150E654125 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft Manifest number: 0C43 Signing time: Sat 06 Dec 2025 07:00:37 +0000 Manifest this update: Sat 06 Dec 2025 07:00:37 +0000 Manifest next update: Sun 07 Dec 2025 07:00:37 +0000 Files and hashes: 1: XKCgbBOF2hVHKDo78niiU6jULHg.roa (hash: QEaRFAJhUUsQeo4vGH+Fx3VQmk/EsBaPpLYF/MqkgOs=) 2: pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl (hash: wVse2fijSYbUfOXrbOEI+hn4zapniCtPOVyTnH4L8ys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:67:ac:d8:1c:a0:e1:53:18:97:15:0e:65:41:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a50f21c3dc93757fc03282a835600d659f961e8e Validity Not Before: Dec 6 07:00:37 2025 GMT Not After : Dec 7 07:00:37 2025 GMT Subject: CN=dd6cb6dafe648054e7a4703fdfa65a23eced50de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:88:21:e9:d2:6b:8d:1e:f1:83:a7:ae:76:1e: 26:5b:09:4d:f7:54:8c:41:9b:6a:fd:9c:ec:1a:85: f6:9c:68:b3:43:1c:11:2f:28:84:05:da:e7:73:03: 4f:49:58:6c:74:8e:c0:83:be:35:da:fe:fc:8d:3b: 0a:64:77:11:ce:13:4c:0e:35:55:df:78:45:d1:04: 50:cb:06:50:32:6e:a0:0c:0b:13:00:54:ed:fa:d5: cc:68:61:35:64:b5:d3:bb:4d:38:7d:ed:c8:07:bf: 85:c4:64:96:bf:c8:d3:21:06:02:a3:66:e7:c9:33: 9b:c7:be:8c:bb:e7:30:5e:72:9e:27:5b:af:09:04: ea:f0:ea:f9:fc:a6:10:f3:e0:76:ed:6b:a4:df:87: 76:4c:14:c3:81:e0:13:33:46:c5:5d:5c:a2:09:d7: 8f:74:15:99:a8:67:7f:87:a1:19:ab:52:75:cf:de: 64:fe:96:30:61:e9:05:44:41:dd:7a:56:83:67:69: e0:a2:5f:91:b5:a4:7b:5a:79:0b:7a:60:f2:09:35: ce:0e:86:8b:5f:1e:65:38:b2:dd:7f:5a:b6:77:77: 98:f0:b1:0b:b6:b1:45:55:7a:d0:59:3f:36:72:d0: 61:a9:dc:06:70:43:19:c6:5d:dc:92:b9:e1:22:80: 2d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:6C:B6:DA:FE:64:80:54:E7:A4:70:3F:DF:A6:5A:23:EC:ED:50:DE X509v3 Authority Key Identifier: keyid:A5:0F:21:C3:DC:93:75:7F:C0:32:82:A8:35:60:0D:65:9F:96:1E:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:58:ff:b9:30:52:d5:00:06:a4:c2:77:f2:83:46:67:6c:66: 46:66:ee:a7:d5:e1:a9:d8:74:0e:be:a4:0c:1d:96:8b:42:15: fa:da:e4:08:58:7e:5c:1f:0f:22:6c:2e:c1:8a:ba:b8:fd:ae: 9f:a6:7a:e4:0f:55:b6:ee:2b:ec:f2:1f:58:08:08:5d:06:23: cb:8e:64:a8:49:1f:67:c3:53:16:6e:4c:a5:64:37:0d:cf:25: 13:c9:f3:61:f2:9f:72:54:de:7e:31:5a:b6:94:50:8f:54:ea: 43:05:b2:50:7a:11:a9:13:fe:3f:82:43:01:d3:77:28:25:5f: b2:7a:79:bd:c1:99:69:87:3f:96:27:dd:f6:7a:7c:49:7d:0e: 57:e5:69:4a:93:16:ad:1d:6e:72:ff:bd:f4:6b:b8:f4:72:04: 5d:3e:cb:80:f1:2a:98:46:69:57:9d:3a:58:9b:0a:0c:d9:d8: 0e:79:c9:9a:0d:0c:44:95:e4:66:5e:aa:cc:19:2d:1b:4a:dd: 8f:3c:a1:27:81:0b:86:ae:13:ce:3b:00:49:07:a1:09:0d:ed: 82:12:50:0d:17:7e:2a:68:c4:e5:f4:3e:b8:f6:64:f9:cf:39: fb:dc:91:9e:17:9f:70:cd:a8:57:bf:9a:24:14:1b:c9:a8:1e: b0:01:4f:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydmes2Byg4VMYlxUOZUElMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MGYyMWMzZGM5Mzc1N2ZjMDMyODJhODM1NjAwZDY1OWY5 NjFlOGUwHhcNMjUxMjA2MDcwMDM3WhcNMjUxMjA3MDcwMDM3WjAzMTEwLwYDVQQD EyhkZDZjYjZkYWZlNjQ4MDU0ZTdhNDcwM2ZkZmE2NWEyM2VjZWQ1MGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIgh6dJrjR7xg6eudh4mWwlN91SM QZtq/ZzsGoX2nGizQxwRLyiEBdrncwNPSVhsdI7Ag7412v78jTsKZHcRzhNMDjVV 33hF0QRQywZQMm6gDAsTAFTt+tXMaGE1ZLXTu004fe3IB7+FxGSWv8jTIQYCo2bn yTObx76Mu+cwXnKeJ1uvCQTq8Or5/KYQ8+B27Wuk34d2TBTDgeATM0bFXVyiCdeP dBWZqGd/h6EZq1J1z95k/pYwYekFREHdelaDZ2ngol+RtaR7WnkLemDyCTXODoaL Xx5lOLLdf1q2d3eY8LELtrFFVXrQWT82ctBhqdwGcEMZxl3ckrnhIoAt8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1sttr+ZIBU56RwP9+mWiPs7VDeMB8GA1UdIwQY MBaAFKUPIcPck3V/wDKCqDVgDWWflh6OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFE4aHc5eVRkWF9BTW9Lb05XQU5aWi1XSG80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9lYTFkZjctODA4YS00N2MzLWFlNTEt YjA4NDNlYzM4ODIzLzEvcFE4aHc5eVRkWF9BTW9Lb05XQU5aWi1XSG80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9lYTFkZjctODA4YS00N2MzLWFlNTEtYjA4NDNlYzM4ODIz LzEvcFE4aHc5eVRkWF9BTW9Lb05XQU5aWi1XSG80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQVj/uTBS 1QAGpMJ38oNGZ2xmRmbup9Xhqdh0Dr6kDB2Wi0IV+trkCFh+XB8PImwuwYq6uP2u n6Z65A9Vtu4r7PIfWAgIXQYjy45kqEkfZ8NTFm5MpWQ3Dc8lE8nzYfKfclTefjFa tpRQj1TqQwWyUHoRqRP+P4JDAdN3KCVfsnp5vcGZaYc/lifd9np8SX0OV+VpSpMW rR1ucv+99Gu49HIEXT7LgPEqmEZpV506WJsKDNnYDnnJmg0MRJXkZl6qzBktG0rd jzyhJ4ELhq4TzjsASQehCQ3tghJQDRd+KmjE5fQ+uPZk+c85+9yRnhefcM2oV7+a JBQbyagesAFPUw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:33:11 2025 by rpki-client