This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft File: pavEOvztcvuSd4covuVxxnj1OFM.mft (raw, json) Hash identifier: cbxj7EZhwwYza9Brawyu2SyIv+y//gbpJv3bOHvRO4E= Subject key identifier: 1D:9E:D3:6E:C7:9B:BA:DC:C0:E5:81:EA:8C:47:0A:8C:C4:DC:E2:57 Authority key identifier: A5:AB:C4:3A:FC:ED:72:FB:92:77:87:28:BE:E5:71:C6:78:F5:38:53 Certificate issuer: /CN=a5abc43afced72fb92778728bee571c678f53853 Certificate serial: 019B3C0FFC710D1796649CBEC55279C005CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 14:00:39 +0000 Manifest this update: Sat 20 Dec 2025 14:00:39 +0000 Manifest next update: Sun 21 Dec 2025 14:00:39 +0000 Files and hashes: 1: XTYDavgtknOlnwhLwE8YM7gzGNo.roa (hash: PldFwC0OKAPE16YsYJiSJ7/6hQNZV4y5TLuWK0kyNJ0=) 2: pavEOvztcvuSd4covuVxxnj1OFM.crl (hash: 8bAkHefdjrW2Ne2nzSCMBO073XvJxpKohNjQr70iNqE=) 3: sSPz7KsWNIMKyyRHlSkiZwosgKw.roa (hash: wjM7pq8MRvpOQBEJDje34R/IkWbdszEvqnHRsuBbId4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:0f:fc:71:0d:17:96:64:9c:be:c5:52:79:c0:05:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5abc43afced72fb92778728bee571c678f53853 Validity Not Before: Dec 20 14:00:39 2025 GMT Not After : Dec 21 14:00:39 2025 GMT Subject: CN=1d9ed36ec79bbadcc0e581ea8c470a8cc4dce257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d2:53:68:e7:83:af:4d:d2:6e:0e:19:0d:1d: f8:4a:41:93:5b:22:b2:a2:d8:dd:54:ac:7a:bb:6e: f4:e3:4f:bc:f6:b3:ca:f3:da:2c:19:40:9c:34:a4: 05:0a:7a:b7:bd:f0:76:7b:50:77:bb:59:d6:df:e5: 71:17:c2:62:f5:18:03:4d:22:9d:78:21:c5:9d:6c: 21:d0:91:6c:31:0c:00:59:1e:7f:c4:c5:dd:99:d9: d4:19:91:c2:2d:08:ce:8d:5f:2b:17:c3:29:cb:4d: c9:76:4e:b9:d6:d6:7a:26:d5:28:00:9c:72:bf:99: d3:3a:93:c4:d7:fa:a4:58:77:93:1d:d9:d2:a9:46: 73:b7:6a:a9:da:87:5d:36:13:90:04:66:ba:3e:67: 32:6a:97:14:c2:ac:3f:36:d3:b0:45:40:f2:ce:dc: 45:f2:a1:5c:59:a0:05:3f:02:6f:93:24:3d:81:d1: 5b:de:d2:58:ae:51:c9:5b:b8:27:9d:75:a3:f8:2a: bc:d5:dd:35:d4:c0:94:e8:17:c7:7b:91:e1:dc:72: 84:df:26:be:6f:41:b2:72:0b:1a:b6:9d:57:22:42: 4f:c3:13:44:e7:97:da:50:51:0f:53:f4:3a:f0:dd: 59:7c:70:e9:18:7a:50:f4:55:04:6b:0f:57:0f:db: 27:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:9E:D3:6E:C7:9B:BA:DC:C0:E5:81:EA:8C:47:0A:8C:C4:DC:E2:57 X509v3 Authority Key Identifier: keyid:A5:AB:C4:3A:FC:ED:72:FB:92:77:87:28:BE:E5:71:C6:78:F5:38:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption db:1a:8a:80:51:df:7b:37:3e:0a:80:cf:99:9b:97:0f:71:6d: 13:33:19:a1:39:3d:89:06:88:f7:d5:0f:b4:30:d3:43:0e:9a: 52:14:22:2f:2e:80:8c:99:c8:13:4c:62:67:a3:df:87:f8:59: d4:c4:1a:38:9c:ad:7e:14:83:ee:e3:5c:b4:63:d8:d5:fb:8d: 72:89:83:2d:77:68:b3:0e:76:c3:4d:af:82:09:03:5f:b5:a7: 91:83:1d:d1:50:ab:72:43:f2:20:1a:d2:85:c5:e4:76:d8:d4: f5:c6:53:8a:7c:41:bc:cb:44:b7:82:ce:e8:3f:47:4a:be:1e: 0e:2a:ed:37:2d:d7:c9:64:b0:34:e0:4d:90:4d:44:1f:83:4c: 6a:d9:44:f5:9c:4d:7a:4f:64:af:f4:22:33:45:23:38:f6:95: 6b:be:78:63:e0:39:35:ea:b7:4e:5a:7e:a7:e4:88:20:00:a6: be:75:4b:83:85:1e:68:26:5b:bc:06:b9:b2:89:c8:9d:0e:12: d5:2d:ed:e8:5c:1c:46:c8:21:46:a7:05:65:bc:08:15:97:fe: 4f:56:ee:2c:bc:f4:1c:0a:14:10:6a:56:ab:d7:b0:59:71:c4: d1:b3:2c:3d:06:71:4c:73:ef:d8:d2:be:9f:e8:d1:0b:2f:5e: ac:ed:5a:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8D/xxDReWZJy+xVJ5wAXPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YWJjNDNhZmNlZDcyZmI5Mjc3ODcyOGJlZTU3MWM2Nzhm NTM4NTMwHhcNMjUxMjIwMTQwMDM5WhcNMjUxMjIxMTQwMDM5WjAzMTEwLwYDVQQD EygxZDllZDM2ZWM3OWJiYWRjYzBlNTgxZWE4YzQ3MGE4Y2M0ZGNlMjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtJTaOeDr03Sbg4ZDR34SkGTWyKy otjdVKx6u27040+89rPK89osGUCcNKQFCnq3vfB2e1B3u1nW3+VxF8Ji9RgDTSKd eCHFnWwh0JFsMQwAWR5/xMXdmdnUGZHCLQjOjV8rF8Mpy03Jdk651tZ6JtUoAJxy v5nTOpPE1/qkWHeTHdnSqUZzt2qp2oddNhOQBGa6PmcyapcUwqw/NtOwRUDyztxF 8qFcWaAFPwJvkyQ9gdFb3tJYrlHJW7gnnXWj+Cq81d011MCU6BfHe5Hh3HKE3ya+ b0Gycgsatp1XIkJPwxNE55faUFEPU/Q68N1ZfHDpGHpQ9FUEaw9XD9sn0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2e027Hm7rcwOWB6oxHCozE3OJXMB8GA1UdIwQY MBaAFKWrxDr87XL7kneHKL7lccZ49ThTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGF2RU92enRjdnVTZDRjb3Z1Vnh4bmoxT0ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9lOWI3NmEtMTBiMy00N2MwLWE1MTct YjVlOTFmYzY1MDUxLzEvcGF2RU92enRjdnVTZDRjb3Z1Vnh4bmoxT0ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9lOWI3NmEtMTBiMy00N2MwLWE1MTctYjVlOTFmYzY1MDUx LzEvcGF2RU92enRjdnVTZDRjb3Z1Vnh4bmoxT0ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2xqKgFHf ezc+CoDPmZuXD3FtEzMZoTk9iQaI99UPtDDTQw6aUhQiLy6AjJnIE0xiZ6Pfh/hZ 1MQaOJytfhSD7uNctGPY1fuNcomDLXdosw52w02vggkDX7WnkYMd0VCrckPyIBrS hcXkdtjU9cZTinxBvMtEt4LO6D9HSr4eDirtNy3XyWSwNOBNkE1EH4NMatlE9ZxN ek9kr/QiM0UjOPaVa754Y+A5Neq3Tlp+p+SIIACmvnVLg4UeaCZbvAa5sonInQ4S 1S3t6FwcRsghRqcFZbwIFZf+T1buLLz0HAoUEGpWq9ewWXHE0bMsPQZxTHPv2NK+ n+jRCy9erO1aLA== -----END CERTIFICATE-----Generated at Sat Dec 20 20:28:56 2025 by rpki-client