This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft File: 00vPISevCy4KJGrkV0MEx653Fek.mft (raw, json) Hash identifier: paej5Q2gY5ky2hUVWboelksXb1kFUvdKPOanVhVLORA= Subject key identifier: 1A:E1:3E:FF:61:1B:50:76:9A:08:8E:3E:A2:02:BA:ED:36:CD:D8:97 Authority key identifier: D3:4B:CF:21:27:AF:0B:2E:0A:24:6A:E4:57:43:04:C7:AE:77:15:E9 Certificate issuer: /CN=d34bcf2127af0b2e0a246ae4574304c7ae7715e9 Certificate serial: 019B3C7E50697DDE8022B630BB060C59A12E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 16:01:09 +0000 Manifest this update: Sat 20 Dec 2025 16:01:09 +0000 Manifest next update: Sun 21 Dec 2025 16:01:09 +0000 Files and hashes: 1: 00vPISevCy4KJGrkV0MEx653Fek.crl (hash: m2ny8s7U1OqssbIMEHxMtherJfNSzoGwMEWkEWcNa/U=) 2: SqjmPfaLrtBpjmBn0-LK2-XYK6E.roa (hash: oP41hXDxiX++ad4HH6tMbCxCouHbTfiMX6JPBOFqfjw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.crl rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:50:69:7d:de:80:22:b6:30:bb:06:0c:59:a1:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d34bcf2127af0b2e0a246ae4574304c7ae7715e9 Validity Not Before: Dec 20 16:01:09 2025 GMT Not After : Dec 21 16:01:09 2025 GMT Subject: CN=1ae13eff611b50769a088e3ea202baed36cdd897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a1:18:93:46:d6:a9:48:8a:d2:28:d2:eb:af: 51:e4:c0:75:90:73:af:83:d1:ba:36:23:aa:59:34: ef:91:7c:ef:3c:ac:89:e3:7c:da:aa:a9:f2:9b:70: ec:a1:e7:59:fd:8b:9b:75:3f:33:0e:5d:4f:75:93: 9f:26:d7:6b:37:e2:2d:63:66:e9:49:64:dd:e8:e3: f8:8d:35:6c:20:e1:73:5b:1d:02:b3:e4:66:ac:37: c9:ac:02:40:95:d5:f5:2c:a2:c1:20:28:b0:b4:2e: eb:73:76:f2:8e:ab:20:a9:d5:c2:48:7c:46:62:e1: 96:65:50:93:2a:7e:9e:79:b4:57:72:a7:4b:e5:d8: cc:7e:96:04:86:9d:e0:f5:de:91:ec:b8:fd:e9:13: bd:e4:2c:c6:4a:3c:7d:d5:a4:2f:3f:64:04:a4:e8: 6b:ee:41:50:ec:f9:64:28:b9:4e:df:b7:8a:7e:0d: 81:3c:b2:ac:d3:1a:d6:b7:ad:37:ec:ef:3b:1f:97: 11:8b:d6:e9:59:58:2f:89:ac:4c:e9:f0:b8:9a:25: d6:94:95:7c:5f:1e:c7:70:df:4a:be:a2:6d:90:90: 5a:6b:c0:90:dc:14:50:7f:5e:2c:a5:5f:a7:59:73: d3:67:74:06:88:2e:32:e7:1d:94:80:92:47:9d:6a: 07:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E1:3E:FF:61:1B:50:76:9A:08:8E:3E:A2:02:BA:ED:36:CD:D8:97 X509v3 Authority Key Identifier: keyid:D3:4B:CF:21:27:AF:0B:2E:0A:24:6A:E4:57:43:04:C7:AE:77:15:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:e3:18:3a:e9:a6:3f:22:22:ff:60:6d:ba:eb:56:3e:8a:63: 17:0f:77:3b:93:82:bd:1d:90:da:e9:bf:3f:65:a9:17:ce:96: be:b0:53:2c:8d:fd:a5:b7:4c:cc:58:33:5b:3a:72:dc:4f:68: 3d:aa:5b:a9:b4:3f:5d:b4:8c:ff:1f:f0:4f:f7:91:0a:37:b2: a0:ce:17:3e:1c:4b:66:f5:99:b6:d1:9a:3c:99:62:62:6b:00: a1:33:f8:89:3e:2a:eb:bb:8b:38:9d:67:68:2c:69:f7:4b:df: 20:4d:be:2e:01:11:fa:8a:a7:1e:73:14:d1:6b:f7:34:7c:59: 0d:73:ac:86:6a:ed:95:40:3e:8c:1a:39:49:57:fa:d5:6c:44: 6b:f8:05:3e:a0:6a:5c:ed:9e:47:fa:70:2a:2f:1d:38:49:b9: 27:6c:b0:92:1d:c3:37:25:33:af:2c:af:0b:66:5d:7a:72:98: e9:ad:40:57:8c:9f:c0:3c:d9:15:7d:0f:c9:94:5d:59:5a:58: b3:b0:df:7e:09:ad:39:78:ae:14:74:14:cc:6c:9c:8d:f4:9c: ac:6f:6f:00:c5:4c:c3:bc:f6:f7:dd:24:8e:a0:47:22:67:57: 8d:90:0f:ed:e2:65:12:90:1c:34:51:f7:73:ce:88:aa:30:7f: ee:f4:3f:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8flBpfd6AIrYwuwYMWaEuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNGJjZjIxMjdhZjBiMmUwYTI0NmFlNDU3NDMwNGM3YWU3 NzE1ZTkwHhcNMjUxMjIwMTYwMTA5WhcNMjUxMjIxMTYwMTA5WjAzMTEwLwYDVQQD EygxYWUxM2VmZjYxMWI1MDc2OWEwODhlM2VhMjAyYmFlZDM2Y2RkODk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaEYk0bWqUiK0ijS669R5MB1kHOv g9G6NiOqWTTvkXzvPKyJ43zaqqnym3DsoedZ/YubdT8zDl1PdZOfJtdrN+ItY2bp SWTd6OP4jTVsIOFzWx0Cs+RmrDfJrAJAldX1LKLBICiwtC7rc3byjqsgqdXCSHxG YuGWZVCTKn6eebRXcqdL5djMfpYEhp3g9d6R7Lj96RO95CzGSjx91aQvP2QEpOhr 7kFQ7PlkKLlO37eKfg2BPLKs0xrWt6037O87H5cRi9bpWVgviaxM6fC4miXWlJV8 Xx7HcN9KvqJtkJBaa8CQ3BRQf14spV+nWXPTZ3QGiC4y5x2UgJJHnWoHiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBrhPv9hG1B2mgiOPqICuu02zdiXMB8GA1UdIwQY MBaAFNNLzyEnrwsuCiRq5FdDBMeudxXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDB2UElTZXZDeTRLSkdya1YwTUV4NjUzRmVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wYTRiYzQtZGE0Yi00ZjE4LWI0YmUt YWZjMWVlNDYxMWExLzEvMDB2UElTZXZDeTRLSkdya1YwTUV4NjUzRmVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8wYTRiYzQtZGE0Yi00ZjE4LWI0YmUtYWZjMWVlNDYxMWEx LzEvMDB2UElTZXZDeTRLSkdya1YwTUV4NjUzRmVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIOMYOumm PyIi/2BtuutWPopjFw93O5OCvR2Q2um/P2WpF86WvrBTLI39pbdMzFgzWzpy3E9o PapbqbQ/XbSM/x/wT/eRCjeyoM4XPhxLZvWZttGaPJliYmsAoTP4iT4q67uLOJ1n aCxp90vfIE2+LgER+oqnHnMU0Wv3NHxZDXOshmrtlUA+jBo5SVf61WxEa/gFPqBq XO2eR/pwKi8dOEm5J2ywkh3DNyUzryyvC2ZdenKY6a1AV4yfwDzZFX0PyZRdWVpY s7DffgmtOXiuFHQUzGycjfScrG9vAMVMw7z2990kjqBHImdXjZAP7eJlEpAcNFH3 c86IqjB/7vQ/Tg== -----END CERTIFICATE-----Generated at Sat Dec 20 20:23:46 2025 by rpki-client