This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft File: paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft (raw, json) Hash identifier: YR1qJCKNhkUF/2Ik33UIg4rbIDlfyowIbNB6zVMH1vY= Subject key identifier: 35:22:0A:3E:E6:77:F7:2C:24:35:54:C9:3C:10:41:C6:11:2D:69:52 Authority key identifier: A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D Certificate issuer: /CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d Certificate serial: 019B4CCCC07BE745A7EF2ED8F37A0A02FAAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft Manifest number: 1793 Signing time: Tue 23 Dec 2025 20:00:45 +0000 Manifest this update: Tue 23 Dec 2025 20:00:45 +0000 Manifest next update: Wed 24 Dec 2025 20:00:45 +0000 Files and hashes: 1: Ef4jdp4ch3bGe_Ka3GRq8dFNRyA.roa (hash: 0HcHv8IPsRtMKEw7Kx2nplJJT6BUJZOb81lct/uUUeg=) 2: NH2BjpUAouOhcpZouA1RZzjRVTY.roa (hash: 24a7YxtpdykxCsVljEKHdP+oA0xGv3G4hBA1X06gGy8=) 3: paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl (hash: On2q+5tDhLW/b/rjxvNYd+CQuvxtkfdi9CZ7h8g6fmg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:cc:c0:7b:e7:45:a7:ef:2e:d8:f3:7a:0a:02:fa:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d Validity Not Before: Dec 23 20:00:45 2025 GMT Not After : Dec 24 20:00:45 2025 GMT Subject: CN=35220a3ee677f72c243554c93c1041c6112d6952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cf:a2:8b:79:c0:bf:1f:40:62:4f:8d:56:ba: db:0c:3b:72:67:79:27:dc:df:1a:a8:c0:e0:b6:fc: 6e:be:91:71:a6:81:c8:70:f2:bc:25:7e:b9:76:a6: 6a:85:63:d1:fa:8e:05:67:8e:a0:c2:c0:58:f0:83: 77:86:97:96:88:d3:ce:0f:13:16:74:21:20:79:88: 22:96:65:85:af:0c:21:91:06:f6:13:57:1c:8e:af: 3e:8e:02:95:40:b9:4f:97:c1:ea:c2:30:c4:3b:f0: b3:52:40:83:f5:b8:e0:6d:a6:12:f6:06:be:53:d7: e5:33:a5:a6:fe:6e:12:dd:b1:33:2c:ca:49:d7:87: 9e:da:fd:7f:5d:c6:81:a9:86:2f:33:ac:2d:2c:37: c4:05:09:0d:9a:83:44:bc:a1:4d:23:44:14:d2:8a: 8c:e2:5a:f4:73:c9:86:8c:7d:1f:0b:e6:bd:9e:b3: e7:16:b2:a1:81:7f:01:71:39:a0:ba:e2:01:2d:73: 8e:75:39:13:75:a7:8d:30:26:b4:80:85:df:56:7b: da:74:bf:cd:ea:f3:af:ad:bf:76:b0:88:62:c7:d8: b7:5e:ff:b9:02:c9:c6:19:a0:65:0c:63:de:db:40: e6:29:21:91:c1:0d:ed:b5:52:53:3a:4c:09:ed:aa: c3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:22:0A:3E:E6:77:F7:2C:24:35:54:C9:3C:10:41:C6:11:2D:69:52 X509v3 Authority Key Identifier: keyid:A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:5e:3f:26:95:e1:0c:c8:1a:02:71:9a:c2:7f:79:79:9b:63: 15:e7:67:ad:a8:f7:e5:c1:2e:dc:50:54:8c:95:d4:fe:6c:21: cc:e7:31:87:00:94:91:27:fe:05:9c:2d:3a:f8:3d:01:6d:29: a0:e7:c0:79:e4:47:de:6d:29:46:93:a3:e6:0b:ac:c8:b1:9d: 15:9d:23:63:e6:44:6f:ee:b9:f6:18:f2:8b:b7:20:6c:c1:d5: 8b:c6:a9:59:86:bd:1e:f3:bc:e5:0c:56:b9:3c:e2:aa:b3:46: cf:99:2f:38:9c:34:40:b6:89:4b:18:6c:1d:c5:b6:82:3d:86: de:43:72:53:e9:48:da:94:51:27:d7:55:9a:61:24:fa:cb:cb: ad:64:39:6d:a2:e5:d4:83:09:9d:36:be:14:59:7f:f7:eb:f6: f3:44:3a:45:ac:b8:ed:0d:48:ab:b7:72:b3:f7:35:6e:84:d5: 08:05:74:36:e5:6f:98:bf:b7:7c:bd:e7:e0:8f:59:70:8d:88: 38:bc:ef:c4:03:15:88:08:5a:14:d8:59:c1:4b:5b:5b:6e:50: f2:e2:95:ed:3d:25:d4:d0:37:29:38:cc:e2:2a:75:39:28:e5: 33:26:f0:11:8b:68:a9:15:74:bb:e9:2a:69:fc:a0:6f:d4:1f: 76:46:9b:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMzMB750Wn7y7Y83oKAvqtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YTQyZDI2MGQ1ZWNkYzJmYTJiMGI1ZGJmNjAzYjkwZDcx NTQ0NGQwHhcNMjUxMjIzMjAwMDQ1WhcNMjUxMjI0MjAwMDQ1WjAzMTEwLwYDVQQD EygzNTIyMGEzZWU2NzdmNzJjMjQzNTU0YzkzYzEwNDFjNjExMmQ2OTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8+ii3nAvx9AYk+NVrrbDDtyZ3kn 3N8aqMDgtvxuvpFxpoHIcPK8JX65dqZqhWPR+o4FZ46gwsBY8IN3hpeWiNPODxMW dCEgeYgilmWFrwwhkQb2E1ccjq8+jgKVQLlPl8HqwjDEO/CzUkCD9bjgbaYS9ga+ U9flM6Wm/m4S3bEzLMpJ14ee2v1/XcaBqYYvM6wtLDfEBQkNmoNEvKFNI0QU0oqM 4lr0c8mGjH0fC+a9nrPnFrKhgX8BcTmguuIBLXOOdTkTdaeNMCa0gIXfVnvadL/N 6vOvrb92sIhix9i3Xv+5AsnGGaBlDGPe20DmKSGRwQ3ttVJTOkwJ7arDnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDUiCj7md/csJDVUyTwQQcYRLWlSMB8GA1UdIwQY MBaAFKWkLSYNXs3C+isLXb9gO5DXFURNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGFRdEpnMWV6Y0w2S3d0ZHYyQTdrTmNWUkUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9jMzkyZDctMGE5OS00MWM5LWEyY2Qt ZjBkMmI5NDNjYjUzLzEvcGFRdEpnMWV6Y0w2S3d0ZHYyQTdrTmNWUkUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9jMzkyZDctMGE5OS00MWM5LWEyY2QtZjBkMmI5NDNjYjUz LzEvcGFRdEpnMWV6Y0w2S3d0ZHYyQTdrTmNWUkUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfF4/JpXh DMgaAnGawn95eZtjFednraj35cEu3FBUjJXU/mwhzOcxhwCUkSf+BZwtOvg9AW0p oOfAeeRH3m0pRpOj5gusyLGdFZ0jY+ZEb+659hjyi7cgbMHVi8apWYa9HvO85QxW uTziqrNGz5kvOJw0QLaJSxhsHcW2gj2G3kNyU+lI2pRRJ9dVmmEk+svLrWQ5baLl 1IMJnTa+FFl/9+v280Q6Ray47Q1Iq7dys/c1boTVCAV0NuVvmL+3fL3n4I9ZcI2I OLzvxAMViAhaFNhZwUtbW25Q8uKV7T0l1NA3KTjM4ip1OSjlMybwEYtoqRV0u+kq afygb9QfdkabPw== -----END CERTIFICATE-----Generated at Wed Dec 24 04:48:55 2025 by rpki-client