This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft File: pNAp8sMhrbWeyl_KV6Hrm99THWo.mft (raw, json) Hash identifier: 2GIG2QXdqZe5Aib6A9mv51A0aQ3OmhTK1PeGugNbF1c= Subject key identifier: EF:75:1B:5B:25:36:B0:9C:AF:0E:64:65:67:D7:30:85:C4:0C:A8:84 Authority key identifier: A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A Certificate issuer: /CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a Certificate serial: 019B4C966768A0792020BB48386D645EB15D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft Manifest number: 178F Signing time: Tue 23 Dec 2025 19:01:23 +0000 Manifest this update: Tue 23 Dec 2025 19:01:23 +0000 Manifest next update: Wed 24 Dec 2025 19:01:23 +0000 Files and hashes: 1: pNAp8sMhrbWeyl_KV6Hrm99THWo.crl (hash: Cpv9W5F/lzVv/bPZ3MAfFrRChJ4ULNRHeq3QjrEOvuY=) 2: yPrWz37IXjB7ODdHPO3TzqpY_oY.roa (hash: 34zVN/3obTpRgYhbmY7ABdm+4sQRJRCWRUdOZLf3tEk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:96:67:68:a0:79:20:20:bb:48:38:6d:64:5e:b1:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a Validity Not Before: Dec 23 19:01:23 2025 GMT Not After : Dec 24 19:01:23 2025 GMT Subject: CN=ef751b5b2536b09caf0e646567d73085c40ca884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:58:c4:fc:80:ef:00:60:f0:3c:5a:6a:53:c5: bb:4f:1a:f9:88:d6:91:e9:46:d8:29:d9:a2:8c:ab: e2:97:84:7c:c7:e5:20:1c:66:9c:71:10:e4:8e:d3: 7a:d9:ea:f0:ed:3b:00:87:11:9d:63:ec:b0:3d:2a: 90:f7:68:dd:f6:35:ed:2b:7f:18:6d:a0:05:e8:98: 51:46:1f:f0:a4:f4:0e:1b:25:6c:b2:0a:9e:7c:af: 39:73:c2:6a:aa:05:2d:c8:76:90:32:3e:b5:7e:4f: 21:fc:4b:92:70:18:1f:34:8a:6c:f8:26:53:75:3d: c5:ca:54:f0:fb:c4:75:1b:d1:98:97:94:72:7b:e4: d0:a3:ec:5c:86:5c:84:b2:16:cd:c3:13:15:db:d8: 71:04:f9:90:55:ab:95:a6:f7:96:6a:d2:39:6d:1a: b3:e5:43:52:08:a7:f2:de:58:a3:d3:8f:4b:88:fd: e4:15:ce:87:a8:0b:cc:fd:d1:bb:dd:5f:30:02:13: 16:10:05:c1:64:a0:af:b2:93:a1:cd:c4:b9:91:09: 4a:80:22:c7:c0:ec:c8:1a:f8:97:56:ec:9d:b3:55: b3:a4:a7:0f:13:69:b6:9b:13:82:a9:2f:1d:cb:ce: f0:01:7d:1f:64:17:34:fa:57:09:73:57:20:00:9b: e4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:75:1B:5B:25:36:B0:9C:AF:0E:64:65:67:D7:30:85:C4:0C:A8:84 X509v3 Authority Key Identifier: keyid:A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:96:26:87:6f:16:33:66:08:2a:8c:79:47:df:5f:55:b4:5a: 44:e4:b9:c9:4b:4b:07:3a:c4:2c:71:6e:cd:4c:a6:41:e7:70: 74:b4:23:f1:b0:47:31:ce:fb:a2:a3:6f:e7:75:47:ed:3d:a5: 50:4a:8d:00:67:73:75:96:37:01:d4:d6:e5:96:bb:45:bb:db: 9f:a8:20:37:3e:da:e9:4b:5b:99:21:5e:b7:99:e9:74:31:e5: 97:38:2c:23:af:14:61:2a:fe:91:bc:21:18:0e:d2:50:d1:54: d8:15:69:d9:af:a3:92:00:66:e5:be:58:e5:0f:50:f8:bd:44: 19:ba:bc:30:ac:c8:03:1a:ab:79:1e:a2:99:ff:0e:10:1e:87: 21:b3:a4:a7:c0:8b:21:b5:df:87:66:0b:05:02:11:8f:58:d0: fa:31:e8:5e:af:97:be:44:38:63:f3:53:b5:80:72:2a:c2:e7: d9:94:a9:da:00:c1:69:1e:89:52:d9:65:77:09:68:05:2a:8b: 5c:22:f1:ea:15:b7:84:6c:12:88:bb:55:8d:78:63:a9:6c:dc: 4c:11:2d:09:70:07:bf:78:40:0e:e5:b2:c2:19:c4:57:8e:f6: 98:00:17:e1:9a:84:cb:46:0c:c3:b2:44:70:1a:a4:c9:39:f3: 62:58:c7:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMlmdooHkgILtIOG1kXrFdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZDAyOWYyYzMyMWFkYjU5ZWNhNWZjYTU3YTFlYjliZGY1 MzFkNmEwHhcNMjUxMjIzMTkwMTIzWhcNMjUxMjI0MTkwMTIzWjAzMTEwLwYDVQQD EyhlZjc1MWI1YjI1MzZiMDljYWYwZTY0NjU2N2Q3MzA4NWM0MGNhODg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FjE/IDvAGDwPFpqU8W7Txr5iNaR 6UbYKdmijKvil4R8x+UgHGaccRDkjtN62erw7TsAhxGdY+ywPSqQ92jd9jXtK38Y baAF6JhRRh/wpPQOGyVssgqefK85c8JqqgUtyHaQMj61fk8h/EuScBgfNIps+CZT dT3FylTw+8R1G9GYl5Rye+TQo+xchlyEshbNwxMV29hxBPmQVauVpveWatI5bRqz 5UNSCKfy3lij049LiP3kFc6HqAvM/dG73V8wAhMWEAXBZKCvspOhzcS5kQlKgCLH wOzIGviXVuyds1WzpKcPE2m2mxOCqS8dy87wAX0fZBc0+lcJc1cgAJvkgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO91G1slNrCcrw5kZWfXMIXEDKiEMB8GA1UdIwQY MBaAFKTQKfLDIa21nspfyleh65vfUx1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE5BcDhzTWhyYldleWxfS1Y2SHJtOTlUSFdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xMjY3NTYtOWE5NC00YTkxLWJmNDct OGFkNmZmYjI2MTdkLzEvcE5BcDhzTWhyYldleWxfS1Y2SHJtOTlUSFdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8xMjY3NTYtOWE5NC00YTkxLWJmNDctOGFkNmZmYjI2MTdk LzEvcE5BcDhzTWhyYldleWxfS1Y2SHJtOTlUSFdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbZYmh28W M2YIKox5R99fVbRaROS5yUtLBzrELHFuzUymQedwdLQj8bBHMc77oqNv53VH7T2l UEqNAGdzdZY3AdTW5Za7Rbvbn6ggNz7a6UtbmSFet5npdDHllzgsI68UYSr+kbwh GA7SUNFU2BVp2a+jkgBm5b5Y5Q9Q+L1EGbq8MKzIAxqreR6imf8OEB6HIbOkp8CL IbXfh2YLBQIRj1jQ+jHoXq+XvkQ4Y/NTtYByKsLn2ZSp2gDBaR6JUtlldwloBSqL XCLx6hW3hGwSiLtVjXhjqWzcTBEtCXAHv3hADuWywhnEV472mAAX4ZqEy0YMw7JE cBqkyTnzYljHqg== -----END CERTIFICATE-----Generated at Tue Dec 23 22:25:03 2025 by rpki-client