This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft File: pAoIH7qPsz77RiWe-T9oeNcBUOs.mft (raw, json) Hash identifier: mqctBoGnFU1CdOpdRP3oa7a49Y8pfuGfbs2JyxxsxgA= Subject key identifier: 9B:B8:D6:AE:D4:76:07:90:E1:01:60:3C:99:A6:6C:4C:3F:39:08:BE Authority key identifier: A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB Certificate issuer: /CN=a40a081fba8fb33efb46259ef93f6878d70150eb Certificate serial: 019B3A2181868EBDEC7606EE76A377816B21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft Manifest number: 0CE3 Signing time: Sat 20 Dec 2025 05:00:32 +0000 Manifest this update: Sat 20 Dec 2025 05:00:32 +0000 Manifest next update: Sun 21 Dec 2025 05:00:32 +0000 Files and hashes: 1: YA2knZBu4eCfckA4blXB6sNuHgY.roa (hash: shDh2slGwfDF1H72vnxsQTQ+XE9meHhIbU3+zi7hhrg=) 2: da6BAAfAoBTasYkztEyeFbO3dYM.roa (hash: svpwmdWuctN25b8D5PcCmhJa0TO40FFmvswQDucJFfQ=) 3: pAoIH7qPsz77RiWe-T9oeNcBUOs.crl (hash: cR90BEhmbdjQlIVs2f+88oLILiwfIc1nA60oPFDOrTM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:81:86:8e:bd:ec:76:06:ee:76:a3:77:81:6b:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a40a081fba8fb33efb46259ef93f6878d70150eb Validity Not Before: Dec 20 05:00:32 2025 GMT Not After : Dec 21 05:00:32 2025 GMT Subject: CN=9bb8d6aed4760790e101603c99a66c4c3f3908be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a6:e4:53:60:2d:c0:ec:de:c0:4d:80:e5:96: 88:73:aa:d7:61:a6:79:a9:81:68:4c:66:59:f3:ea: db:64:66:23:f4:67:87:9e:a2:8e:3c:b4:af:49:b9: 52:95:8d:62:0c:cf:55:ad:c3:09:a3:f6:68:ab:87: 1e:12:55:cc:32:e8:62:f8:d0:47:29:16:47:87:d1: d2:3c:e7:a3:6e:ca:53:52:51:7b:d0:3f:49:7a:81: 69:82:27:be:d4:3f:5b:88:23:25:3b:14:d5:d3:2a: d4:b9:a8:01:69:d1:94:61:23:34:48:3d:22:5e:54: f7:88:3c:47:fe:07:a6:0e:89:4c:09:a2:2d:43:cb: dc:bc:ff:28:3c:45:fc:22:1d:ce:b4:ca:0a:d8:53: c9:40:7e:b8:11:48:67:db:b4:84:cf:ab:97:49:1d: 66:70:bc:19:0e:a8:73:ec:ad:60:a6:02:c4:34:85: d2:1f:db:2e:9a:48:e6:86:62:56:e0:7d:4b:17:12: ce:33:cd:d2:9d:85:36:09:75:aa:cb:15:c7:97:ee: 45:11:6c:eb:2b:34:da:3e:f5:64:6e:c7:f3:d1:96: 7e:56:f6:db:37:c7:c3:87:62:d8:f1:7e:35:87:e2: 56:f3:ba:26:43:33:ee:7d:6e:54:88:5e:83:68:63: eb:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B8:D6:AE:D4:76:07:90:E1:01:60:3C:99:A6:6C:4C:3F:39:08:BE X509v3 Authority Key Identifier: keyid:A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:d1:36:db:5c:09:78:07:bb:d5:ac:20:17:a7:72:aa:5f:78: 83:f9:ba:37:86:ca:83:97:56:d6:32:f8:d2:98:48:52:e8:c9: 32:33:96:f4:d2:7b:ea:f9:f3:61:e1:fd:77:d2:94:06:ac:89: 4e:af:12:b7:8c:bd:71:04:a7:a5:6e:89:bf:06:70:6c:9d:d6: 99:ae:ee:4e:03:f6:20:72:ce:db:8f:fd:d0:5c:7b:07:a0:ae: 14:56:b3:b0:7a:28:3f:63:1e:04:d1:6e:4b:10:ce:0f:59:97: 8b:26:61:38:a5:ce:d5:0f:50:8b:c2:78:db:98:7e:17:76:cd: 94:ad:bb:2b:49:0b:51:dd:1d:b3:f3:28:76:28:7c:14:26:e1: b9:14:3b:97:03:93:c6:19:75:69:cb:50:68:43:e7:b0:cf:d6: 68:1f:b1:51:70:ca:e7:b5:bf:f0:e1:e2:10:29:0e:0e:6e:6e: aa:f1:df:e4:4e:5e:13:4d:34:2b:dd:67:e7:1a:52:b4:cd:5c: cc:55:e4:c4:04:bf:6f:cd:a3:a0:f7:f6:95:f4:5c:1d:26:1b: 18:ba:10:ec:f0:8a:6d:16:82:7d:ed:f4:32:5b:b4:d0:c6:8e: 8a:e8:75:a5:26:61:40:50:8b:f3:c1:68:77:f9:72:0a:fc:36: 72:fb:6f:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IYGGjr3sdgbudqN3gWshMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MGEwODFmYmE4ZmIzM2VmYjQ2MjU5ZWY5M2Y2ODc4ZDcw MTUwZWIwHhcNMjUxMjIwMDUwMDMyWhcNMjUxMjIxMDUwMDMyWjAzMTEwLwYDVQQD Eyg5YmI4ZDZhZWQ0NzYwNzkwZTEwMTYwM2M5OWE2NmM0YzNmMzkwOGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKbkU2AtwOzewE2A5ZaIc6rXYaZ5 qYFoTGZZ8+rbZGYj9GeHnqKOPLSvSblSlY1iDM9VrcMJo/Zoq4ceElXMMuhi+NBH KRZHh9HSPOejbspTUlF70D9JeoFpgie+1D9biCMlOxTV0yrUuagBadGUYSM0SD0i XlT3iDxH/gemDolMCaItQ8vcvP8oPEX8Ih3OtMoK2FPJQH64EUhn27SEz6uXSR1m cLwZDqhz7K1gpgLENIXSH9sumkjmhmJW4H1LFxLOM83SnYU2CXWqyxXHl+5FEWzr KzTaPvVkbsfz0ZZ+VvbbN8fDh2LY8X41h+JW87omQzPufW5UiF6DaGPrMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJu41q7UdgeQ4QFgPJmmbEw/OQi+MB8GA1UdIwQY MBaAFKQKCB+6j7M++0Ylnvk/aHjXAVDrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEFvSUg3cVBzejc3UmlXZS1UOW9lTmNCVU9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9jYjI3YTAtOTRkMi00OWFhLTg1ZWEt YWU5MWU0NjYyZDkzLzEvcEFvSUg3cVBzejc3UmlXZS1UOW9lTmNCVU9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9jYjI3YTAtOTRkMi00OWFhLTg1ZWEtYWU5MWU0NjYyZDkz LzEvcEFvSUg3cVBzejc3UmlXZS1UOW9lTmNCVU9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASdE221wJ eAe71awgF6dyql94g/m6N4bKg5dW1jL40phIUujJMjOW9NJ76vnzYeH9d9KUBqyJ Tq8St4y9cQSnpW6JvwZwbJ3Wma7uTgP2IHLO24/90Fx7B6CuFFazsHooP2MeBNFu SxDOD1mXiyZhOKXO1Q9Qi8J425h+F3bNlK27K0kLUd0ds/Modih8FCbhuRQ7lwOT xhl1actQaEPnsM/WaB+xUXDK57W/8OHiECkODm5uqvHf5E5eE000K91n5xpStM1c zFXkxAS/b82joPf2lfRcHSYbGLoQ7PCKbRaCfe30Mlu00MaOiuh1pSZhQFCL88Fo d/lyCvw2cvtvZQ== -----END CERTIFICATE-----Generated at Sat Dec 20 11:21:16 2025 by rpki-client