This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft File: pAoIH7qPsz77RiWe-T9oeNcBUOs.mft (raw, json) Hash identifier: 0DMxTFKF4Lfio4/OiNStfPqXs9wwJJbUd6G/hyuqTZs= Subject key identifier: 6E:C4:7D:CD:8D:C1:58:09:83:8E:48:4B:D0:0A:6C:B4:0A:71:E2:39 Authority key identifier: A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB Certificate issuer: /CN=a40a081fba8fb33efb46259ef93f6878d70150eb Certificate serial: 019B3FECA2DF5125CFE81D15DFB95FD954AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft Manifest number: 0CE6 Signing time: Sun 21 Dec 2025 08:00:31 +0000 Manifest this update: Sun 21 Dec 2025 08:00:31 +0000 Manifest next update: Mon 22 Dec 2025 08:00:31 +0000 Files and hashes: 1: YA2knZBu4eCfckA4blXB6sNuHgY.roa (hash: shDh2slGwfDF1H72vnxsQTQ+XE9meHhIbU3+zi7hhrg=) 2: da6BAAfAoBTasYkztEyeFbO3dYM.roa (hash: svpwmdWuctN25b8D5PcCmhJa0TO40FFmvswQDucJFfQ=) 3: pAoIH7qPsz77RiWe-T9oeNcBUOs.crl (hash: +wxK0t/qCV2Xt6BzKFJlEOiKed2lro2eqZUSIr9Kyuw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 08:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ec:a2:df:51:25:cf:e8:1d:15:df:b9:5f:d9:54:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a40a081fba8fb33efb46259ef93f6878d70150eb Validity Not Before: Dec 21 08:00:31 2025 GMT Not After : Dec 22 08:00:31 2025 GMT Subject: CN=6ec47dcd8dc15809838e484bd00a6cb40a71e239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6c:23:5e:ea:47:f4:4f:38:7d:0a:f5:31:b9: 0e:e4:03:6a:d9:ea:f4:85:70:e2:69:72:35:a9:f5: 9c:8f:41:86:14:e4:3c:4f:23:a0:30:df:7a:8a:2b: 7f:36:88:8f:47:e8:91:e0:dd:f4:84:7b:22:92:68: 9c:72:9d:83:fa:d6:b5:05:f1:df:43:78:76:21:41: 95:4a:49:2a:0f:53:c5:9a:ba:6f:44:c1:49:92:77: cb:49:3c:7f:21:c2:a9:95:74:44:a7:4e:88:5f:55: ca:b6:55:17:e2:73:27:f4:bb:ba:34:93:d3:d5:06: 0c:91:c6:5b:66:52:b0:91:29:18:bc:96:aa:bb:87: 15:c0:15:f1:9b:e9:66:cd:40:dd:ef:80:f1:2d:96: 56:4d:85:a8:b7:54:b8:aa:8f:3e:b8:42:1b:14:7f: ba:27:ba:be:fd:54:8f:97:6a:75:7e:84:eb:78:0a: 71:4e:a3:3c:85:6f:e9:a9:52:00:7e:44:73:46:7a: b5:88:db:e8:27:3d:f0:02:f4:33:27:16:b7:87:2d: 27:d0:13:55:b6:4f:95:e4:7d:1d:e6:4a:90:f4:b9: a6:54:b7:cd:c5:c3:85:0a:b5:9b:a0:d3:d8:8b:55: c9:03:80:55:01:08:5b:fb:45:06:56:c7:85:0b:e9: fe:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:C4:7D:CD:8D:C1:58:09:83:8E:48:4B:D0:0A:6C:B4:0A:71:E2:39 X509v3 Authority Key Identifier: keyid:A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:51:4a:3c:01:cd:f9:cf:fa:56:6a:81:1d:cd:ae:dd:8a:1d: ea:b3:ba:6b:6e:50:20:1a:cc:b0:72:15:00:45:e2:d5:c4:1a: 1b:5f:70:2c:33:4e:a6:cf:b8:cc:10:dc:a3:95:e1:77:bb:bc: 9a:51:31:bc:25:28:01:7f:05:d1:41:a4:e1:11:50:96:e8:e3: e5:6f:13:23:71:c5:44:49:e2:fd:b7:b1:1f:14:aa:7e:52:52: 80:ea:05:2b:be:a2:9e:25:23:80:27:6f:2d:d1:7c:8b:2a:fe: 14:ec:de:e3:74:9b:7b:73:ee:86:6c:6f:e9:f2:32:91:09:45: 44:d0:79:27:a5:e8:d9:c5:bc:ad:79:ca:1f:96:0e:7f:97:2e: 1b:10:90:f5:02:1a:41:c7:93:1c:95:37:7a:7c:c8:ab:ba:02: 6b:9f:b2:2e:94:27:d7:64:a9:3a:8a:ca:7e:cd:b7:50:ac:dd: 90:4f:58:f3:a0:a7:5e:c8:f2:41:a3:57:91:0b:30:6e:de:ae: 6c:33:32:cc:73:53:75:6f:be:2a:9b:9c:af:a1:d1:bc:a4:93: c9:13:55:de:68:fb:ef:52:cb:5f:b9:79:e0:a4:99:c1:2a:d3: 7c:ff:cb:66:7c:5e:8a:dc:a3:2d:24:60:6b:c6:f8:15:84:69: 46:33:01:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7KLfUSXP6B0V37lf2VSuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MGEwODFmYmE4ZmIzM2VmYjQ2MjU5ZWY5M2Y2ODc4ZDcw MTUwZWIwHhcNMjUxMjIxMDgwMDMxWhcNMjUxMjIyMDgwMDMxWjAzMTEwLwYDVQQD Eyg2ZWM0N2RjZDhkYzE1ODA5ODM4ZTQ4NGJkMDBhNmNiNDBhNzFlMjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2wjXupH9E84fQr1MbkO5ANq2er0 hXDiaXI1qfWcj0GGFOQ8TyOgMN96iit/NoiPR+iR4N30hHsikmiccp2D+ta1BfHf Q3h2IUGVSkkqD1PFmrpvRMFJknfLSTx/IcKplXREp06IX1XKtlUX4nMn9Lu6NJPT 1QYMkcZbZlKwkSkYvJaqu4cVwBXxm+lmzUDd74DxLZZWTYWot1S4qo8+uEIbFH+6 J7q+/VSPl2p1foTreApxTqM8hW/pqVIAfkRzRnq1iNvoJz3wAvQzJxa3hy0n0BNV tk+V5H0d5kqQ9LmmVLfNxcOFCrWboNPYi1XJA4BVAQhb+0UGVseFC+n+ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG7Efc2NwVgJg45IS9AKbLQKceI5MB8GA1UdIwQY MBaAFKQKCB+6j7M++0Ylnvk/aHjXAVDrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEFvSUg3cVBzejc3UmlXZS1UOW9lTmNCVU9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9jYjI3YTAtOTRkMi00OWFhLTg1ZWEt YWU5MWU0NjYyZDkzLzEvcEFvSUg3cVBzejc3UmlXZS1UOW9lTmNCVU9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9jYjI3YTAtOTRkMi00OWFhLTg1ZWEtYWU5MWU0NjYyZDkz LzEvcEFvSUg3cVBzejc3UmlXZS1UOW9lTmNCVU9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVVFKPAHN +c/6VmqBHc2u3Yod6rO6a25QIBrMsHIVAEXi1cQaG19wLDNOps+4zBDco5Xhd7u8 mlExvCUoAX8F0UGk4RFQlujj5W8TI3HFREni/bexHxSqflJSgOoFK76iniUjgCdv LdF8iyr+FOze43Sbe3Puhmxv6fIykQlFRNB5J6Xo2cW8rXnKH5YOf5cuGxCQ9QIa QceTHJU3enzIq7oCa5+yLpQn12SpOorKfs23UKzdkE9Y86CnXsjyQaNXkQswbt6u bDMyzHNTdW++Kpucr6HRvKSTyRNV3mj771LLX7l54KSZwSrTfP/LZnxeityjLSRg a8b4FYRpRjMBsw== -----END CERTIFICATE-----Generated at Sun Dec 21 17:26:01 2025 by rpki-client