This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.mft File: pRA1bcClIYlc5h-FSV4G2vehKzs.mft (raw, json) Hash identifier: OBrpeXQgVdSLxnhspPp5+WsCOeyGvZQzAM0m0yNS9cQ= Subject key identifier: 0A:86:31:48:80:0F:F3:FB:75:A4:21:0F:0F:9E:3A:09:AA:90:CA:3D Authority key identifier: A5:10:35:6D:C0:A5:21:89:5C:E6:1F:85:49:5E:06:DA:F7:A1:2B:3B Certificate issuer: /CN=a510356dc0a521895ce61f85495e06daf7a12b3b Certificate serial: 019B3D59B96F6154DFD27C162C0871DCAFEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pRA1bcClIYlc5h-FSV4G2vehKzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 20:00:48 +0000 Manifest this update: Sat 20 Dec 2025 20:00:48 +0000 Manifest next update: Sun 21 Dec 2025 20:00:48 +0000 Files and hashes: 1: DZzf4gixVG1v_XBOTEdiJTCnpgc.roa (hash: EKgVMjgzgQW/dE4uPulEkrnDhBOvFfmwxhJ1zs6dJk4=) 2: PyDzr8WmYcRo05FGb5UzcWZdKls.roa (hash: IYIt11a1r2unTfjZQuVOMhykI3XsxsOfurke5JUMHZc=) 3: pRA1bcClIYlc5h-FSV4G2vehKzs.crl (hash: X0Fw0H6dzOjfA/mVzT9OjvrFD3ySqFI1o6CDqQ9JSDo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.crl rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.mft rsync://rpki.ripe.net/repository/DEFAULT/pRA1bcClIYlc5h-FSV4G2vehKzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:b9:6f:61:54:df:d2:7c:16:2c:08:71:dc:af:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a510356dc0a521895ce61f85495e06daf7a12b3b Validity Not Before: Dec 20 20:00:48 2025 GMT Not After : Dec 21 20:00:48 2025 GMT Subject: CN=0a863148800ff3fb75a4210f0f9e3a09aa90ca3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cd:67:48:a1:0f:56:90:3c:13:e4:e9:95:80: 35:b0:c5:a6:a6:88:4a:a9:63:3b:0d:21:e2:c3:dc: c8:0b:71:d4:f4:7f:f3:15:22:b7:a5:fb:21:74:7c: a5:b1:e8:bf:e5:e5:8a:f2:bb:b2:ed:80:56:df:4a: 6d:67:6e:58:69:54:2c:dc:f4:b4:69:fc:a6:a8:8f: ce:e0:24:8b:2a:07:4f:72:c4:e7:93:07:8a:54:6e: 72:c2:2f:8d:ca:30:c5:6a:29:93:dc:91:68:8b:e7: e0:86:07:bb:e1:c7:88:0f:d9:f7:82:51:03:5f:6e: 70:a3:f9:1c:8b:f3:b9:7c:e5:68:0e:b3:7e:ad:b8: c8:cb:eb:ed:a2:61:72:0f:df:44:a1:08:4d:91:03: 49:62:32:99:d6:c2:ae:ce:0b:dc:49:e8:1b:cf:a6: 43:bd:b0:40:38:20:64:fb:0e:71:fd:33:85:14:0c: b5:e4:a7:c1:2d:2e:ff:db:d0:c7:c6:8e:b4:1c:45: 66:98:94:47:d4:cb:3d:0f:0f:4e:c7:04:67:48:81: bc:6e:73:42:ab:d1:91:a5:60:03:28:86:ac:35:41: 01:9a:45:b9:f4:67:c8:62:a4:4c:0e:c7:36:24:e2: 59:80:9d:f8:34:5b:6b:a4:68:bf:c4:b4:38:82:2d: 55:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:86:31:48:80:0F:F3:FB:75:A4:21:0F:0F:9E:3A:09:AA:90:CA:3D X509v3 Authority Key Identifier: keyid:A5:10:35:6D:C0:A5:21:89:5C:E6:1F:85:49:5E:06:DA:F7:A1:2B:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pRA1bcClIYlc5h-FSV4G2vehKzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:21:8d:33:ee:51:0e:eb:38:e1:84:c2:45:ab:57:17:9b:fe: d7:f1:9f:c9:bf:2c:f3:a1:d1:69:11:e3:12:6a:b7:26:25:60: eb:fa:a8:d9:3d:65:47:a8:f8:1d:fb:6b:71:d8:d8:71:5c:0c: 9e:47:f4:18:15:28:86:61:fe:7b:09:4a:ba:7a:c8:38:e6:d4: 35:1e:af:5d:6c:2a:69:0a:7a:e2:3d:82:2e:a5:8b:1e:68:76: 27:d3:66:fc:af:c8:39:63:6a:4d:02:3f:81:3c:08:da:9d:ec: c1:27:98:0d:63:ed:f7:dc:7f:ec:4e:41:1e:92:f6:c4:7c:9c: eb:f4:45:84:21:32:ce:64:1f:68:6f:82:26:90:36:8e:85:df: 52:b4:f0:9a:8c:b0:55:93:24:44:4d:c3:21:90:d0:2d:f2:4d: 49:3f:5d:4b:5d:31:2b:56:90:dd:74:43:dd:12:50:f7:2a:5b: f6:a8:9c:bb:27:d2:f6:97:f4:89:6d:fd:2a:e3:c0:68:cf:57: 46:c0:b5:b4:2a:ef:9b:3a:b8:26:87:55:46:7b:44:df:02:bb: cd:2f:39:cd:8f:51:11:fd:29:9f:02:4a:28:fa:97:dd:78:ac: 63:30:50:64:e8:20:5c:d8:0e:e1:a2:53:b7:06:78:dd:34:b6: 9a:5e:77:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WblvYVTf0nwWLAhx3K/vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MTAzNTZkYzBhNTIxODk1Y2U2MWY4NTQ5NWUwNmRhZjdh MTJiM2IwHhcNMjUxMjIwMjAwMDQ4WhcNMjUxMjIxMjAwMDQ4WjAzMTEwLwYDVQQD EygwYTg2MzE0ODgwMGZmM2ZiNzVhNDIxMGYwZjllM2EwOWFhOTBjYTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn81nSKEPVpA8E+TplYA1sMWmpohK qWM7DSHiw9zIC3HU9H/zFSK3pfshdHylsei/5eWK8ruy7YBW30ptZ25YaVQs3PS0 afymqI/O4CSLKgdPcsTnkweKVG5ywi+NyjDFaimT3JFoi+fghge74ceID9n3glED X25wo/kci/O5fOVoDrN+rbjIy+vtomFyD99EoQhNkQNJYjKZ1sKuzgvcSegbz6ZD vbBAOCBk+w5x/TOFFAy15KfBLS7/29DHxo60HEVmmJRH1Ms9Dw9OxwRnSIG8bnNC q9GRpWADKIasNUEBmkW59GfIYqRMDsc2JOJZgJ34NFtrpGi/xLQ4gi1VJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAqGMUiAD/P7daQhDw+eOgmqkMo9MB8GA1UdIwQY MBaAFKUQNW3ApSGJXOYfhUleBtr3oSs7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFJBMWJjQ2xJWWxjNWgtRlNWNEcydmVoS3pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zYzdjN2MtNDMyNi00MTg0LTgzNTYt MDExODJmODQwNzg5LzEvcFJBMWJjQ2xJWWxjNWgtRlNWNEcydmVoS3pzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8zYzdjN2MtNDMyNi00MTg0LTgzNTYtMDExODJmODQwNzg5 LzEvcFJBMWJjQ2xJWWxjNWgtRlNWNEcydmVoS3pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFyGNM+5R Dus44YTCRatXF5v+1/Gfyb8s86HRaRHjEmq3JiVg6/qo2T1lR6j4HftrcdjYcVwM nkf0GBUohmH+ewlKunrIOObUNR6vXWwqaQp64j2CLqWLHmh2J9Nm/K/IOWNqTQI/ gTwI2p3swSeYDWPt99x/7E5BHpL2xHyc6/RFhCEyzmQfaG+CJpA2joXfUrTwmoyw VZMkRE3DIZDQLfJNST9dS10xK1aQ3XRD3RJQ9ypb9qicuyfS9pf0iW39KuPAaM9X RsC1tCrvmzq4JodVRntE3wK7zS85zY9REf0pnwJKKPqX3XisYzBQZOggXNgO4aJT twZ43TS2ml53SQ== -----END CERTIFICATE-----Generated at Sun Dec 21 00:12:07 2025 by rpki-client