This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft File: pCAAxPTsSgPNTTZX4BtwA07CO5c.mft (raw, json) Hash identifier: PH6Xs84c1ct+OvHYTYL0WGtwYRgeT0S7FpR9qJvQlrI= Subject key identifier: B4:48:C7:C7:52:FC:08:BE:4E:4B:E5:E2:CB:C1:A0:56:F3:20:89:13 Authority key identifier: A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97 Certificate issuer: /CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97 Certificate serial: 019AF27696654E182C086B62DE5210DF3704 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 07:00:49 +0000 Manifest this update: Sat 06 Dec 2025 07:00:49 +0000 Manifest next update: Sun 07 Dec 2025 07:00:49 +0000 Files and hashes: 1: 41_o2BIwv76TF64VP1DAdfjTxPo.roa (hash: ZsvXvwGlxNqhMT0bqp079C/5ezKY6fiYSiOoxT1NO2o=) 2: 4mRSyOWbS8hQScfHLulGf4Y6ZgQ.roa (hash: o3JSSVtXNFoFrqvnt6XhA+Y0uItKhtMcyPKqriXcd08=) 3: Qw_MgL0jZxAEcUaQV1xqF4PVe2w.roa (hash: K6DZu82eoM3254ECuNlV9U+0ldDohrzL2NCBM61LLzM=) 4: Zl3HHM0URwuJSk9LlxkNHY3QJSA.roa (hash: Ael3rTKnV/t1wOUc5dyvS7YOaqG/u0QZHukcBegGERg=) 5: pCAAxPTsSgPNTTZX4BtwA07CO5c.crl (hash: Xd588flqevFWScd5K98yrAhVMlzTpf6nx7SiOlmQqA0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:96:65:4e:18:2c:08:6b:62:de:52:10:df:37:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97 Validity Not Before: Dec 6 07:00:49 2025 GMT Not After : Dec 7 07:00:49 2025 GMT Subject: CN=b448c7c752fc08be4e4be5e2cbc1a056f3208913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:74:06:8e:b6:1c:cc:79:cd:e9:88:23:87:88: 03:2c:85:bd:b3:00:d4:70:f9:7c:9c:da:ca:9f:2d: c5:b2:78:8c:9b:0b:ff:0a:38:b7:57:62:aa:72:ca: 86:b3:2a:bd:bf:91:67:83:65:9f:26:e4:4d:9e:f0: 31:ea:f7:f1:82:13:bf:2e:64:bf:9e:61:45:b2:38: 5a:a8:87:33:5c:8d:45:82:7e:6f:40:45:0d:40:c3: 54:52:67:77:bc:68:c8:97:4e:6d:6b:ef:4f:3d:f6: 84:d1:f8:e9:16:ac:75:7e:18:9f:97:a4:d5:77:07: da:9d:3f:e4:12:de:5c:5d:74:00:52:bd:9d:26:b6: a4:1e:61:ab:8d:5d:17:6c:e1:75:4a:e6:dc:f5:75: 51:dc:bc:11:9b:fe:6e:41:4a:ee:65:35:dc:27:5d: 3b:c1:c6:d5:1d:f0:d7:1a:c2:6d:59:9f:63:f6:af: dc:17:6d:3a:19:bd:0f:77:1c:92:34:ff:f3:7d:d2: e4:e7:26:90:2f:a7:e6:74:b0:ca:b0:1e:94:c2:f0: 31:5a:a6:eb:6c:28:aa:e6:07:ff:f9:95:44:9b:b3: 93:bd:e9:5d:98:21:f5:a8:a8:cc:23:f2:4c:61:09: 5e:9d:b7:91:ef:b2:f7:3a:d0:cd:fd:c7:39:f2:3c: 11:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:48:C7:C7:52:FC:08:BE:4E:4B:E5:E2:CB:C1:A0:56:F3:20:89:13 X509v3 Authority Key Identifier: keyid:A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:09:98:89:6d:d4:da:00:fd:40:8b:a4:b6:7a:d0:d6:98:9a: 95:b4:21:7d:03:81:79:71:be:3f:79:b0:cf:78:4d:cb:ea:c6: 54:fd:ea:3f:6c:37:54:cd:0c:22:74:5f:d3:75:76:a7:ee:71: ac:15:75:28:e3:a0:f2:d7:28:1b:67:4b:a2:fb:70:20:ba:0c: e5:5b:31:56:b5:ca:02:09:83:19:cb:f4:36:45:55:c5:17:3a: d9:d6:25:d2:76:8b:3b:3a:44:da:0e:47:33:7e:14:b9:67:fd: 6b:18:af:32:75:f4:03:4b:9d:7a:b4:27:0a:f6:5f:ba:d2:99: 0a:0e:33:48:11:a6:c7:2f:50:70:6a:e5:03:c6:00:f1:59:c3: c7:f5:49:b6:f5:2e:7f:88:dd:c0:1f:19:32:86:32:89:94:89: 6d:a1:9d:a5:69:36:3b:30:14:c8:59:bf:99:0a:5e:2b:92:1a: 94:fd:bf:6a:18:d6:02:f1:3f:b3:a4:c1:ab:bc:12:b8:f4:96: ab:42:82:0a:f8:d1:f2:35:35:de:59:99:42:dd:66:00:7a:54: 52:7a:71:74:65:4d:dd:22:e7:7a:08:09:14:9a:32:51:7c:eb: 05:d6:f4:e4:1f:19:32:86:db:3b:fb:d6:3e:91:ff:9c:6d:2e: d5:22:70:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydpZlThgsCGti3lIQ3zcEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MjAwMGM0ZjRlYzRhMDNjZDRkMzY1N2UwMWI3MDAzNGVj MjNiOTcwHhcNMjUxMjA2MDcwMDQ5WhcNMjUxMjA3MDcwMDQ5WjAzMTEwLwYDVQQD EyhiNDQ4YzdjNzUyZmMwOGJlNGU0YmU1ZTJjYmMxYTA1NmYzMjA4OTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnQGjrYczHnN6Ygjh4gDLIW9swDU cPl8nNrKny3FsniMmwv/Cji3V2KqcsqGsyq9v5Fng2WfJuRNnvAx6vfxghO/LmS/ nmFFsjhaqIczXI1Fgn5vQEUNQMNUUmd3vGjIl05ta+9PPfaE0fjpFqx1fhifl6TV dwfanT/kEt5cXXQAUr2dJrakHmGrjV0XbOF1Subc9XVR3LwRm/5uQUruZTXcJ107 wcbVHfDXGsJtWZ9j9q/cF206Gb0PdxySNP/zfdLk5yaQL6fmdLDKsB6UwvAxWqbr bCiq5gf/+ZVEm7OTveldmCH1qKjMI/JMYQlenbeR77L3OtDN/cc58jwRWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLRIx8dS/Ai+Tkvl4svBoFbzIIkTMB8GA1UdIwQY MBaAFKQgAMT07EoDzU02V+AbcANOwjuXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcENBQXhQVHNTZ1BOVFRaWDRCdHdBMDdDTzVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xNjNkNzctNGZlYS00MTMxLWJlY2It MGYyMmQ4OTY4OWEwLzEvcENBQXhQVHNTZ1BOVFRaWDRCdHdBMDdDTzVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xNjNkNzctNGZlYS00MTMxLWJlY2ItMGYyMmQ4OTY4OWEw LzEvcENBQXhQVHNTZ1BOVFRaWDRCdHdBMDdDTzVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAQmYiW3U 2gD9QIuktnrQ1pialbQhfQOBeXG+P3mwz3hNy+rGVP3qP2w3VM0MInRf03V2p+5x rBV1KOOg8tcoG2dLovtwILoM5VsxVrXKAgmDGcv0NkVVxRc62dYl0naLOzpE2g5H M34UuWf9axivMnX0A0uderQnCvZfutKZCg4zSBGmxy9QcGrlA8YA8VnDx/VJtvUu f4jdwB8ZMoYyiZSJbaGdpWk2OzAUyFm/mQpeK5IalP2/ahjWAvE/s6TBq7wSuPSW q0KCCvjR8jU13lmZQt1mAHpUUnpxdGVN3SLneggJFJoyUXzrBdb05B8ZMobbO/vW PpH/nG0u1SJw+g== -----END CERTIFICATE-----Generated at Sat Dec 6 15:00:53 2025 by rpki-client