This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft File: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft (raw, json) Hash identifier: PMotDHbamF5tEB4HEYE88OT36DK8pGp7MI8/GSJylPU= Subject key identifier: D0:5C:2C:89:39:EC:A1:02:23:90:D5:9A:BC:24:41:02:63:D3:33:13 Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Certificate serial: 019B28F711D75EC444988B65430850BDF58E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft Manifest number: 1458 Signing time: Tue 16 Dec 2025 21:00:38 +0000 Manifest this update: Tue 16 Dec 2025 21:00:38 +0000 Manifest next update: Wed 17 Dec 2025 21:00:38 +0000 Files and hashes: 1: 3MQ1Zm2jB8qgOjCAc_a0v-3nM_o.roa (hash: T4pVm2mU2N5el1g2HcnlglhN57e23NLVS7ny7NzSBL0=) 2: 4SEUaFHVUAL3abRJwnhpLcw21dk.roa (hash: Nz767QGxnFH79p/BW/8MOsNM3RviNN1Kvy4GgZgMyGs=) 3: FCFfx3p7hHCFHlKPZobVJyLJ5MI.roa (hash: 6JV0xEEqdwivRbZdMI4zo4Wpa9PWQK4gKoasAD6odWU=) 4: IYmUJK1vApyWT119wps-ukf2n9E.roa (hash: w1dWdBHD/FLi3tR98pk3iJlbhc1nR22X1Pwn/kqhO/0=) 5: KcuMI0SBvL5BPuYJm6BH3vJKAQ0.roa (hash: s0e2eWUrZQW14pJCqfjgMZ+ViTFNuU9345bizVg0sKY=) 6: MSrSUIwYGP5OzMFaA9dwr3mO4jY.roa (hash: OHzV5kP6uhO1eFoIB7t+WKfJjHs90j+a/iXQqOXuv30=) 7: N7C2a3H5ML3ydyNI5IDIoJ6m-6U.roa (hash: FJm0Nzs6ME/1+LojcQZMLdUu/cBqlxKE16Bs75fFFLw=) 8: Nf1rHETWcCnhWhR_uM_9B2P3jb8.roa (hash: pBdKIUwSvvQqLJChVbTbSEDRXa+Ll262+ax9ivbZD0o=) 9: OFTgwkdKspRJ_TvSv6vgx_ckdLQ.roa (hash: b7UPAbBCKcuRworqLaxy25e9Gx9nfc4PaZocWvp2h84=) 10: P7ti_IIQ8gSBeG-YTlNJsuFqQ_I.roa (hash: KrffniQ2i0hPMizjKFAUVE1GuQq0ig8NP7gMfdrW5so=) 11: RzvDJbgMFFQ3RXZZowAtkGpvaYQ.roa (hash: pXgfU5zLGpdaPENK8y9IOVL5xtiIt9Fk8RRzx12JQUw=) 12: WToItz8al9Sw1IRtEOUm1ku1TzY.roa (hash: cD3Nf3okXGtPiYuFOkPnzfMJHgIYmW52aVmaOwxOEN0=) 13: dcAEUZ_ghRVpaUYo3WWA9zUPe9U.roa (hash: AsvsdGamYH2cSArWOQT5cvLOD/2t8gp5MEnt/aWjLII=) 14: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl (hash: OLnhrPk7eYolasttl9UjU7mcXoNetO9V1fCw8GzHsbw=) 15: sVCQlL9zy4ci5k4im_qh1UgQSao.roa (hash: tXiv/i4AXQDYnVQqrjLO82vwz0zcYS5lORUFrc1ytqg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:f7:11:d7:5e:c4:44:98:8b:65:43:08:50:bd:f5:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Validity Not Before: Dec 16 21:00:38 2025 GMT Not After : Dec 17 21:00:38 2025 GMT Subject: CN=d05c2c8939eca1022390d59abc24410263d33313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:31:22:7f:b6:9e:f4:a4:62:56:67:70:4a:a8: 05:b7:45:1b:26:d1:c0:b1:2d:e5:c1:41:2d:2f:20: cc:c7:1d:33:9b:69:f1:75:2c:54:92:be:2b:52:8e: 66:6b:c3:8e:f8:da:58:f8:27:71:13:5f:68:a9:9e: 9f:20:be:32:12:0a:a6:b4:2a:ba:74:1e:39:86:b4: 2c:b6:13:67:82:ce:ba:78:b0:b1:57:c3:fb:12:03: 5f:68:33:85:58:dd:66:05:7c:43:30:74:33:ef:f9: c5:be:77:03:de:81:50:77:91:e7:72:b2:68:45:14: f6:46:97:1a:57:19:d7:e9:25:11:f5:53:ed:82:d3: e6:48:d5:28:41:7b:73:4b:28:40:a4:7d:3d:b9:a3: 01:b5:b6:5e:96:a4:ae:57:6d:48:88:01:b1:21:9f: d6:21:a1:78:eb:b2:01:7f:47:2b:1f:54:20:a8:70: a6:40:fb:e9:db:a0:ed:af:1d:07:79:de:07:d9:9d: da:29:06:d8:27:6d:e0:9e:4d:b0:65:65:89:6a:1a: 44:84:d4:be:6e:06:9d:d9:18:6d:1d:0c:d6:71:a4: df:2d:9b:e1:7b:3f:74:50:32:c5:37:f0:e8:df:e6: 1e:cd:8e:6a:f4:b8:a2:a2:cc:83:7f:2a:96:38:65: 58:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:5C:2C:89:39:EC:A1:02:23:90:D5:9A:BC:24:41:02:63:D3:33:13 X509v3 Authority Key Identifier: keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:d6:17:9b:a4:6c:57:9a:a8:63:a4:71:d6:32:8d:19:91:82: 57:7d:d2:2a:f9:48:3e:0c:4b:25:bc:db:84:01:56:1e:27:36: ca:25:f7:54:f6:30:22:dc:3b:d0:d9:03:f6:d6:b7:ff:2f:48: 76:aa:11:a8:77:54:2f:b2:32:ea:4e:ee:6a:a0:73:28:0d:51: 42:47:11:3b:3d:67:2a:6c:c9:c8:7a:a8:44:03:d8:d0:af:12: 14:8b:53:4d:b6:a9:8a:30:e9:28:4d:62:0c:d7:41:b7:89:db: bd:68:b8:71:ed:2c:3b:13:58:1d:ec:2a:59:ac:cf:a9:dc:4c: d0:ef:69:aa:b7:1f:7a:f3:eb:58:0b:72:fe:e5:1c:ef:5a:8c: 86:b6:8c:da:6e:2e:88:65:86:63:79:c5:24:db:54:a9:be:7a: 2d:25:c2:80:00:89:00:b7:52:2f:bc:f7:79:76:81:8d:ca:9d: 3e:0b:7d:f3:56:f5:4a:38:b1:00:44:22:b6:c3:dd:02:35:b4: 7c:77:64:56:b1:2f:3d:43:7c:01:c6:75:ed:b7:3b:dd:ca:ff: f2:41:ef:41:2b:f6:c3:36:2d:48:eb:a8:2e:b9:fd:72:5a:36: ba:0f:2d:e7:10:e3:fb:23:cd:84:c6:ed:6c:75:92:5c:11:9a: a9:bd:50:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZso9xHXXsREmItlQwhQvfWOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0Y2U5NjQwYTNlZjJmZWExOTM3NGFkOGY5OWY0MjNkN2Fh N2M3NmIwHhcNMjUxMjE2MjEwMDM4WhcNMjUxMjE3MjEwMDM4WjAzMTEwLwYDVQQD EyhkMDVjMmM4OTM5ZWNhMTAyMjM5MGQ1OWFiYzI0NDEwMjYzZDMzMzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDEif7ae9KRiVmdwSqgFt0UbJtHA sS3lwUEtLyDMxx0zm2nxdSxUkr4rUo5ma8OO+NpY+CdxE19oqZ6fIL4yEgqmtCq6 dB45hrQsthNngs66eLCxV8P7EgNfaDOFWN1mBXxDMHQz7/nFvncD3oFQd5HncrJo RRT2RpcaVxnX6SUR9VPtgtPmSNUoQXtzSyhApH09uaMBtbZelqSuV21IiAGxIZ/W IaF467IBf0crH1QgqHCmQPvp26Dtrx0Hed4H2Z3aKQbYJ23gnk2wZWWJahpEhNS+ bgad2RhtHQzWcaTfLZvhez90UDLFN/Do3+YezY5q9LiiosyDfyqWOGVY3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNBcLIk57KECI5DVmrwkQQJj0zMTMB8GA1UdIwQY MBaAFKTOlkCj7y/qGTdK2PmfQj16p8drMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQt MjgzZmU1NGE2ZjJmLzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQtMjgzZmU1NGE2ZjJm LzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb9YXm6Rs V5qoY6Rx1jKNGZGCV33SKvlIPgxLJbzbhAFWHic2yiX3VPYwItw70NkD9ta3/y9I dqoRqHdUL7Iy6k7uaqBzKA1RQkcROz1nKmzJyHqoRAPY0K8SFItTTbapijDpKE1i DNdBt4nbvWi4ce0sOxNYHewqWazPqdxM0O9pqrcfevPrWAty/uUc71qMhraM2m4u iGWGY3nFJNtUqb56LSXCgACJALdSL7z3eXaBjcqdPgt981b1SjixAEQitsPdAjW0 fHdkVrEvPUN8AcZ17bc73cr/8kHvQSv2wzYtSOuoLrn9clo2ug8t5xDj+yPNhMbt bHWSXBGaqb1QVQ== -----END CERTIFICATE-----Generated at Tue Dec 16 22:33:32 2025 by rpki-client