This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft File: paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft (raw, json) Hash identifier: 5BAF21432PYB4zHwT/8WPb2bKl592pNyCGRhr2wU8aM= Subject key identifier: 44:0E:08:22:84:AC:B7:1F:36:DF:0A:23:01:29:CF:4D:64:88:63:65 Authority key identifier: A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D Certificate issuer: /CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d Certificate serial: 019B3D59C7D26F0E48211E9ADEDF579D5618 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 20:00:52 +0000 Manifest this update: Sat 20 Dec 2025 20:00:52 +0000 Manifest next update: Sun 21 Dec 2025 20:00:52 +0000 Files and hashes: 1: Ef4jdp4ch3bGe_Ka3GRq8dFNRyA.roa (hash: 0HcHv8IPsRtMKEw7Kx2nplJJT6BUJZOb81lct/uUUeg=) 2: NH2BjpUAouOhcpZouA1RZzjRVTY.roa (hash: 24a7YxtpdykxCsVljEKHdP+oA0xGv3G4hBA1X06gGy8=) 3: paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl (hash: G2WrQcGjypZaX9w+nAYCT67aA6NmaP4fl1npu3Yo/no=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:c7:d2:6f:0e:48:21:1e:9a:de:df:57:9d:56:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d Validity Not Before: Dec 20 20:00:52 2025 GMT Not After : Dec 21 20:00:52 2025 GMT Subject: CN=440e082284acb71f36df0a230129cf4d64886365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:23:ae:ef:23:0d:84:df:4e:48:c9:e0:62:bc: c9:d9:ca:da:69:2c:43:c2:f2:d6:86:9e:8a:f8:fa: a8:20:51:81:6f:56:c1:f9:1f:8c:85:d6:c4:d7:56: fb:28:e4:0d:d7:75:c6:23:5a:c3:98:74:37:0c:f6: 85:45:4a:d1:76:de:43:a2:34:a4:07:c6:0d:0f:b4: 87:3d:1c:21:b3:32:c3:ae:5b:36:7f:74:46:56:19: 72:0d:31:80:5e:9a:eb:9d:8d:80:eb:e8:92:2c:5b: 48:82:b2:de:4a:97:b4:32:60:48:02:fe:d6:8b:8c: ee:ed:59:bc:de:61:88:88:19:bc:bf:d5:95:3e:45: aa:42:bd:3b:77:31:40:7d:23:9b:92:21:fb:a3:83: 43:fb:69:09:62:61:8a:0f:d8:1a:f8:df:4d:75:68: 32:73:01:7e:25:e4:97:7e:1e:f3:0f:76:c1:4e:75: 52:37:a7:24:91:9b:cf:15:95:01:15:55:a6:eb:a1: 79:45:43:6a:9d:db:a4:9f:d9:e5:30:9f:ca:de:2a: b1:6b:b8:8b:38:88:32:26:da:1e:25:43:d1:3c:a4: 9a:f6:6a:e4:7b:70:59:5a:13:7f:d1:4f:8d:70:0c: d8:be:ee:ec:57:1c:28:f9:2b:9f:2b:28:e4:bf:2e: fd:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:0E:08:22:84:AC:B7:1F:36:DF:0A:23:01:29:CF:4D:64:88:63:65 X509v3 Authority Key Identifier: keyid:A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:15:47:ec:6a:2c:52:6e:5d:50:15:56:6d:9b:49:08:21:97: b9:5f:27:a0:16:a5:b3:8f:8a:eb:b7:01:a4:9b:a6:d3:c8:16: 1d:c5:05:f4:70:08:42:0c:35:68:d3:8e:06:2d:a1:3f:1d:91: 9c:73:c8:cc:74:12:07:ce:61:44:52:00:0a:8b:c3:83:26:f4: 16:c2:f0:f5:55:00:26:47:16:f0:8f:9c:b1:8c:57:29:9d:26: ee:82:93:50:ec:f5:1a:0f:8c:fa:9d:3a:84:1e:c4:05:4f:ae: 02:f5:40:dc:74:0b:b1:d0:87:53:7b:9a:61:a9:ba:78:c7:ce: 69:20:a1:3e:5e:e1:2f:7d:27:27:61:06:ba:da:bc:67:ba:9f: 8f:6a:33:e9:5f:eb:a9:0e:df:ce:a7:2e:85:1f:df:e9:0a:25: 31:a2:86:f9:b6:e0:0d:03:78:78:19:22:58:b3:c7:07:d8:29: 95:1d:ba:11:b0:ff:ab:67:ea:33:64:e6:c2:6a:22:84:b8:4d: c0:3c:7c:f2:c1:94:3f:f7:16:18:63:84:5a:e4:03:e4:57:b6: c4:cd:7b:6c:60:c1:a3:7e:71:4a:ea:08:cd:0e:34:3b:5e:a1: b3:a1:8b:d4:e8:8b:93:ff:fe:57:10:07:c0:02:bd:4a:81:43: c7:2d:b8:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WcfSbw5IIR6a3t9XnVYYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YTQyZDI2MGQ1ZWNkYzJmYTJiMGI1ZGJmNjAzYjkwZDcx NTQ0NGQwHhcNMjUxMjIwMjAwMDUyWhcNMjUxMjIxMjAwMDUyWjAzMTEwLwYDVQQD Eyg0NDBlMDgyMjg0YWNiNzFmMzZkZjBhMjMwMTI5Y2Y0ZDY0ODg2MzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1COu7yMNhN9OSMngYrzJ2craaSxD wvLWhp6K+PqoIFGBb1bB+R+MhdbE11b7KOQN13XGI1rDmHQ3DPaFRUrRdt5DojSk B8YND7SHPRwhszLDrls2f3RGVhlyDTGAXprrnY2A6+iSLFtIgrLeSpe0MmBIAv7W i4zu7Vm83mGIiBm8v9WVPkWqQr07dzFAfSObkiH7o4ND+2kJYmGKD9ga+N9NdWgy cwF+JeSXfh7zD3bBTnVSN6ckkZvPFZUBFVWm66F5RUNqndukn9nlMJ/K3iqxa7iL OIgyJtoeJUPRPKSa9mrke3BZWhN/0U+NcAzYvu7sVxwo+SufKyjkvy79WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEQOCCKErLcfNt8KIwEpz01kiGNlMB8GA1UdIwQY MBaAFKWkLSYNXs3C+isLXb9gO5DXFURNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGFRdEpnMWV6Y0w2S3d0ZHYyQTdrTmNWUkUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9jMzkyZDctMGE5OS00MWM5LWEyY2Qt ZjBkMmI5NDNjYjUzLzEvcGFRdEpnMWV6Y0w2S3d0ZHYyQTdrTmNWUkUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9jMzkyZDctMGE5OS00MWM5LWEyY2QtZjBkMmI5NDNjYjUz LzEvcGFRdEpnMWV6Y0w2S3d0ZHYyQTdrTmNWUkUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAihVH7Gos Um5dUBVWbZtJCCGXuV8noBals4+K67cBpJum08gWHcUF9HAIQgw1aNOOBi2hPx2R nHPIzHQSB85hRFIACovDgyb0FsLw9VUAJkcW8I+csYxXKZ0m7oKTUOz1Gg+M+p06 hB7EBU+uAvVA3HQLsdCHU3uaYam6eMfOaSChPl7hL30nJ2EGutq8Z7qfj2oz6V/r qQ7fzqcuhR/f6QolMaKG+bbgDQN4eBkiWLPHB9gplR26EbD/q2fqM2TmwmoihLhN wDx88sGUP/cWGGOEWuQD5Fe2xM17bGDBo35xSuoIzQ40O16hs6GL1OiLk//+VxAH wAK9SoFDxy247w== -----END CERTIFICATE-----Generated at Sun Dec 21 06:03:39 2025 by rpki-client