This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft File: paHquv4t5wOCJ6hZOnrFzDkvN04.mft (raw, json) Hash identifier: 0z1rcwNF/BmXEN+mEmIEcVFmwyZamoB0Wu2gkuEtaHg= Subject key identifier: 98:45:DF:A3:56:90:95:3D:1A:74:CD:71:88:CE:47:66:70:C7:A2:44 Authority key identifier: A5:A1:EA:BA:FE:2D:E7:03:82:27:A8:59:3A:7A:C5:CC:39:2F:37:4E Certificate issuer: /CN=a5a1eabafe2de7038227a8593a7ac5cc392f374e Certificate serial: 019AF1D1A9D0D0E6F2F5A0F117658743F41D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paHquv4t5wOCJ6hZOnrFzDkvN04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft Manifest number: 1403 Signing time: Sat 06 Dec 2025 04:00:40 +0000 Manifest this update: Sat 06 Dec 2025 04:00:40 +0000 Manifest next update: Sun 07 Dec 2025 04:00:40 +0000 Files and hashes: 1: paHquv4t5wOCJ6hZOnrFzDkvN04.crl (hash: KDpxFwms3cdpyUh5Zu3ARof5LvBdeKLukuZVBgBD4aA=) 2: wW2KE3gY8QjEsnXJFmwHDL7WH6g.roa (hash: rYujNDXyFY6K7NmLNp1LWeOiCz0Qh+l0K7mCOQxVp3c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft rsync://rpki.ripe.net/repository/DEFAULT/paHquv4t5wOCJ6hZOnrFzDkvN04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:a9:d0:d0:e6:f2:f5:a0:f1:17:65:87:43:f4:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5a1eabafe2de7038227a8593a7ac5cc392f374e Validity Not Before: Dec 6 04:00:40 2025 GMT Not After : Dec 7 04:00:40 2025 GMT Subject: CN=9845dfa35690953d1a74cd7188ce476670c7a244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:46:5c:e6:64:85:40:0d:e5:b5:a9:be:1a:79: 8e:e1:ac:69:65:3e:24:40:88:74:f1:c2:80:fd:b3: aa:5e:c7:97:5c:60:48:36:1a:50:59:1d:f0:64:48: a2:3b:6d:80:cf:1b:b7:99:4c:2b:7f:bc:02:b3:73: b6:39:97:17:a8:88:7b:af:a4:9d:d4:de:20:46:59: d5:1c:40:94:32:8f:ff:7f:28:20:2a:59:ef:61:f1: 9b:76:31:fc:fe:09:41:0c:4e:13:36:3f:21:f1:81: 17:7a:0c:2f:33:9d:f3:a5:21:10:91:d1:4e:18:42: f9:fb:cb:6f:43:8a:10:87:43:82:37:d0:f0:7a:44: 91:24:21:17:d9:8a:1a:24:38:1e:1b:23:f6:b0:b5: 4d:b6:31:cc:a1:a9:76:9f:9a:f3:17:3e:e2:ea:35: af:ce:54:5e:24:f2:01:16:bc:27:1e:67:56:7d:8f: 11:37:7d:7d:25:80:d6:a4:d1:c5:ba:cd:fa:a4:94: 84:61:2d:5d:f2:54:c9:11:55:94:40:5b:fd:c0:97: 5c:39:78:40:94:aa:a0:65:dc:fc:a6:cd:c2:65:d4: b2:ef:53:1a:c9:09:fa:a3:42:a9:9d:ef:bb:5a:71: a6:de:30:7a:41:92:0f:49:b9:8a:b6:c9:68:4a:7b: f8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:45:DF:A3:56:90:95:3D:1A:74:CD:71:88:CE:47:66:70:C7:A2:44 X509v3 Authority Key Identifier: keyid:A5:A1:EA:BA:FE:2D:E7:03:82:27:A8:59:3A:7A:C5:CC:39:2F:37:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paHquv4t5wOCJ6hZOnrFzDkvN04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:2e:ba:32:c8:3c:05:fa:29:f0:4d:01:69:36:fc:9c:2a:90: ce:64:89:d0:87:7a:36:ca:7c:7c:d4:bb:c2:1f:1f:21:3e:d3: 9c:bd:6c:57:ca:51:0c:61:ea:f1:61:9c:ea:9e:2e:54:28:f6: 02:3e:c5:69:9f:d3:d8:cc:4a:ee:49:fd:18:a0:d9:a5:07:e1: 3e:1e:99:eb:a3:a9:7d:33:de:99:47:84:ae:ca:93:4a:c4:2e: ba:e3:45:f3:e9:64:68:07:ab:aa:4c:b4:59:eb:17:6d:d5:6a: b2:0e:e3:61:3a:89:2d:7a:06:49:72:e7:08:c2:03:a5:1e:17: b0:18:e1:33:66:cc:9d:60:f7:49:ac:2e:7c:3b:00:fb:43:0d: 7f:ac:e7:3a:0e:70:43:cc:da:61:64:53:3e:8f:fd:7f:52:9e: ff:2b:93:0b:f3:18:d7:90:f9:ec:cb:8d:ff:c8:56:96:91:c5: 67:5a:43:69:5b:f0:64:95:00:cc:1e:39:71:98:ce:9d:77:e0: be:10:95:95:93:28:2e:94:d1:63:05:ab:f4:49:de:0c:aa:04: 8d:0f:43:88:6e:40:2b:12:39:ff:6b:25:1d:4d:33:c3:8e:78: cd:60:74:47:18:57:d5:16:0f:98:28:13:6a:e3:c1:06:69:bb: e8:3e:dc:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0anQ0Oby9aDxF2WHQ/QdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YTFlYWJhZmUyZGU3MDM4MjI3YTg1OTNhN2FjNWNjMzky ZjM3NGUwHhcNMjUxMjA2MDQwMDQwWhcNMjUxMjA3MDQwMDQwWjAzMTEwLwYDVQQD Eyg5ODQ1ZGZhMzU2OTA5NTNkMWE3NGNkNzE4OGNlNDc2NjcwYzdhMjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0Zc5mSFQA3ltam+GnmO4axpZT4k QIh08cKA/bOqXseXXGBINhpQWR3wZEiiO22Azxu3mUwrf7wCs3O2OZcXqIh7r6Sd 1N4gRlnVHECUMo//fyggKlnvYfGbdjH8/glBDE4TNj8h8YEXegwvM53zpSEQkdFO GEL5+8tvQ4oQh0OCN9DwekSRJCEX2YoaJDgeGyP2sLVNtjHMoal2n5rzFz7i6jWv zlReJPIBFrwnHmdWfY8RN319JYDWpNHFus36pJSEYS1d8lTJEVWUQFv9wJdcOXhA lKqgZdz8ps3CZdSy71MayQn6o0Kpne+7WnGm3jB6QZIPSbmKtsloSnv4+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJhF36NWkJU9GnTNcYjOR2Zwx6JEMB8GA1UdIwQY MBaAFKWh6rr+LecDgieoWTp6xcw5LzdOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGFIcXV2NHQ1d09DSjZoWk9uckZ6RGt2TjA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC80ZjRiNGUtMjNjYy00YzNhLTkwYWYt NGVmMzk1MTRhYTQzLzEvcGFIcXV2NHQ1d09DSjZoWk9uckZ6RGt2TjA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC80ZjRiNGUtMjNjYy00YzNhLTkwYWYtNGVmMzk1MTRhYTQz LzEvcGFIcXV2NHQ1d09DSjZoWk9uckZ6RGt2TjA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoi66Msg8 Bfop8E0BaTb8nCqQzmSJ0Id6Nsp8fNS7wh8fIT7TnL1sV8pRDGHq8WGc6p4uVCj2 Aj7FaZ/T2MxK7kn9GKDZpQfhPh6Z66OpfTPemUeErsqTSsQuuuNF8+lkaAerqky0 WesXbdVqsg7jYTqJLXoGSXLnCMIDpR4XsBjhM2bMnWD3SawufDsA+0MNf6znOg5w Q8zaYWRTPo/9f1Ke/yuTC/MY15D57MuN/8hWlpHFZ1pDaVvwZJUAzB45cZjOnXfg vhCVlZMoLpTRYwWr9EneDKoEjQ9DiG5AKxI5/2slHU0zw454zWB0RxhX1RYPmCgT auPBBmm76D7c1A== -----END CERTIFICATE-----Generated at Sat Dec 6 12:57:04 2025 by rpki-client