This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/pAV70TnJ_S0FGLcgOcPe_NEBpVs.mft File: pAV70TnJ_S0FGLcgOcPe_NEBpVs.mft (raw, json) Hash identifier: 9NdIxbLaPXyhmWxYeiur3w38CZgd5k4TIUHJsaGMGck= Subject key identifier: 05:F3:72:1F:7E:00:D2:B2:5E:D8:20:2A:6A:31:AA:C4:69:64:8B:2B Authority key identifier: A4:05:7B:D1:39:C9:FD:2D:05:18:B7:20:39:C3:DE:FC:D1:01:A5:5B Certificate issuer: /CN=a4057bd139c9fd2d0518b72039c3defcd101a55b Certificate serial: 019B3F487D77D41EB1C8BDD5B6DAD825971A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAV70TnJ_S0FGLcgOcPe_NEBpVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/pAV70TnJ_S0FGLcgOcPe_NEBpVs.mft Manifest number: 0B97 Signing time: Sun 21 Dec 2025 05:01:13 +0000 Manifest this update: Sun 21 Dec 2025 05:01:13 +0000 Manifest next update: Mon 22 Dec 2025 05:01:13 +0000 Files and hashes: 1: Zul1tgj5h7XyL00R81W1mi6g1V0.roa (hash: JA2Lp3OQPetYYVSiRbEJs9OwBpQrX9gJ6sScomlZ4Xo=) 2: pAV70TnJ_S0FGLcgOcPe_NEBpVs.crl (hash: 1jD1wXsaM8Tv4RcOfnKqgPGLw5TWllF8rrrLoLP9Htw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/pAV70TnJ_S0FGLcgOcPe_NEBpVs.crl rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/pAV70TnJ_S0FGLcgOcPe_NEBpVs.mft rsync://rpki.ripe.net/repository/DEFAULT/pAV70TnJ_S0FGLcgOcPe_NEBpVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:7d:77:d4:1e:b1:c8:bd:d5:b6:da:d8:25:97:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4057bd139c9fd2d0518b72039c3defcd101a55b Validity Not Before: Dec 21 05:01:13 2025 GMT Not After : Dec 22 05:01:13 2025 GMT Subject: CN=05f3721f7e00d2b25ed8202a6a31aac469648b2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5d:4f:e1:d9:05:13:71:86:76:a8:82:7d:17: af:5c:28:12:2a:c1:3c:65:44:b0:e6:ec:e4:c4:ec: 4c:bc:58:f1:71:23:b6:45:9c:c8:21:37:63:7a:b6: fd:fa:37:21:b3:34:2b:a5:72:ba:78:41:7e:1e:2d: d4:30:e2:bc:38:be:8a:c1:16:4d:6a:12:4b:70:15: 83:bf:fc:00:ec:7d:f4:e5:35:a7:84:19:bb:84:38: 3b:10:f2:13:7c:bc:da:54:3d:d2:dd:bb:cb:9c:ea: e3:5c:5f:45:68:83:bf:14:e9:6a:93:79:6a:89:2c: f8:5f:a5:04:9b:77:5e:0e:f9:77:14:05:16:83:ad: 02:30:32:1c:e3:6b:91:85:85:7f:b0:6b:ab:d8:50: 56:19:6b:be:08:cb:20:70:01:59:45:9f:ee:19:e5: e1:9a:8c:54:02:50:c5:b5:71:9c:c6:db:d2:ce:4f: 56:74:7e:a2:28:d0:c0:4e:41:79:54:20:17:de:c9: b5:38:88:85:8d:0f:62:c4:5b:51:e2:b3:3e:27:f6: 1e:e1:6a:0c:ab:c6:1e:cc:68:64:41:71:0b:b0:ee: dc:a0:70:3d:fd:0b:55:c1:d8:47:fb:69:87:a7:e2: 30:dc:89:8e:33:9f:43:7b:97:63:cf:14:38:c0:f3: 15:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:F3:72:1F:7E:00:D2:B2:5E:D8:20:2A:6A:31:AA:C4:69:64:8B:2B X509v3 Authority Key Identifier: keyid:A4:05:7B:D1:39:C9:FD:2D:05:18:B7:20:39:C3:DE:FC:D1:01:A5:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAV70TnJ_S0FGLcgOcPe_NEBpVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/pAV70TnJ_S0FGLcgOcPe_NEBpVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/pAV70TnJ_S0FGLcgOcPe_NEBpVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:78:3c:84:67:54:a5:f9:5b:cb:b9:f9:18:c6:9f:d9:24:cc: be:34:c5:d1:42:56:c5:59:ef:fa:e5:7e:e6:e3:e7:65:dd:a5: 83:be:3c:5e:bc:52:1a:3b:58:19:98:79:fa:7e:c9:1b:c0:42: 56:01:5a:3f:c7:e6:45:63:c4:ea:55:ca:80:c7:5c:ea:96:6b: 1d:00:a8:57:9e:4e:00:f2:ad:36:f2:33:ad:54:01:79:8c:f7: 53:8b:1b:9f:2f:68:31:57:62:f0:ea:f9:7b:08:39:02:a3:e7: 93:10:e4:98:63:11:a6:39:5e:be:d8:36:bb:91:3f:09:58:b5: d8:03:c2:f6:57:06:ea:d4:c0:7c:0c:47:15:d0:1c:80:16:3c: e8:c1:c0:25:b7:4d:a1:3c:08:5d:fd:36:00:44:8d:ed:85:41: a1:b7:c5:fb:27:e8:9f:72:cf:24:3d:00:87:bb:33:6e:57:0c: 0e:d4:a8:b7:f0:ff:c4:9e:17:f1:8b:f3:e4:b3:8c:8d:13:84: 28:9f:5d:20:b9:5e:1f:e8:d6:f2:91:7e:6c:ef:9c:2a:50:92: 58:3e:38:85:42:e1:7a:b4:24:5c:48:6a:b8:26:9b:55:19:f3: 17:0f:8c:8b:fc:95:9a:3d:67:40:d3:2f:b7:32:7a:0d:75:d6: d7:07:70:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SH131B6xyL3VttrYJZcaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MDU3YmQxMzljOWZkMmQwNTE4YjcyMDM5YzNkZWZjZDEw MWE1NWIwHhcNMjUxMjIxMDUwMTEzWhcNMjUxMjIyMDUwMTEzWjAzMTEwLwYDVQQD EygwNWYzNzIxZjdlMDBkMmIyNWVkODIwMmE2YTMxYWFjNDY5NjQ4YjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvF1P4dkFE3GGdqiCfRevXCgSKsE8 ZUSw5uzkxOxMvFjxcSO2RZzIITdjerb9+jchszQrpXK6eEF+Hi3UMOK8OL6KwRZN ahJLcBWDv/wA7H305TWnhBm7hDg7EPITfLzaVD3S3bvLnOrjXF9FaIO/FOlqk3lq iSz4X6UEm3deDvl3FAUWg60CMDIc42uRhYV/sGur2FBWGWu+CMsgcAFZRZ/uGeXh moxUAlDFtXGcxtvSzk9WdH6iKNDATkF5VCAX3sm1OIiFjQ9ixFtR4rM+J/Ye4WoM q8YezGhkQXELsO7coHA9/QtVwdhH+2mHp+Iw3ImOM59De5djzxQ4wPMVvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAXzch9+ANKyXtggKmoxqsRpZIsrMB8GA1UdIwQY MBaAFKQFe9E5yf0tBRi3IDnD3vzRAaVbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEFWNzBUbkpfUzBGR0xjZ09jUGVfTkVCcFZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC82M2ViNTAtMTUwZi00MDFkLTkyY2Qt MTYyZDcyM2I1MTBhLzEvcEFWNzBUbkpfUzBGR0xjZ09jUGVfTkVCcFZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC82M2ViNTAtMTUwZi00MDFkLTkyY2QtMTYyZDcyM2I1MTBh LzEvcEFWNzBUbkpfUzBGR0xjZ09jUGVfTkVCcFZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHng8hGdU pflby7n5GMaf2STMvjTF0UJWxVnv+uV+5uPnZd2lg748XrxSGjtYGZh5+n7JG8BC VgFaP8fmRWPE6lXKgMdc6pZrHQCoV55OAPKtNvIzrVQBeYz3U4sbny9oMVdi8Or5 ewg5AqPnkxDkmGMRpjlevtg2u5E/CVi12APC9lcG6tTAfAxHFdAcgBY86MHAJbdN oTwIXf02AESN7YVBobfF+yfon3LPJD0Ah7szblcMDtSot/D/xJ4X8Yvz5LOMjROE KJ9dILleH+jW8pF+bO+cKlCSWD44hULherQkXEhquCabVRnzFw+Mi/yVmj1nQNMv tzJ6DXXW1wdwVA== -----END CERTIFICATE-----Generated at Sun Dec 21 09:32:25 2025 by rpki-client