This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft File: 0pigcUzBvyWsfH8c9sKIbIxhkqM.mft (raw, json) Hash identifier: zpYImbCtwPywenyikJ4hCqVjsrCg8Hm+1VHlr/cLmew= Subject key identifier: 33:41:5D:00:31:F7:D2:8F:01:41:75:DA:F7:15:57:DB:EA:7A:54:03 Authority key identifier: D2:98:A0:71:4C:C1:BF:25:AC:7C:7F:1C:F6:C2:88:6C:8C:61:92:A3 Certificate issuer: /CN=d298a0714cc1bf25ac7c7f1cf6c2886c8c6192a3 Certificate serial: 019B3CB5325B2E2FD8C28A62B326945876E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft Manifest number: 0503 Signing time: Sat 20 Dec 2025 17:01:06 +0000 Manifest this update: Sat 20 Dec 2025 17:01:06 +0000 Manifest next update: Sun 21 Dec 2025 17:01:06 +0000 Files and hashes: 1: 0pigcUzBvyWsfH8c9sKIbIxhkqM.crl (hash: nY0xk2PPArQHBs+d8gQ2udMcPwaoP6wVr8FYyC9rZzk=) 2: eBrn60Df7uG_ub_L-IV105lzs58.roa (hash: O8+G2XvuPwR1yEXnK+zmEZeJLzoyxFForxI59j5WNAY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.crl rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:32:5b:2e:2f:d8:c2:8a:62:b3:26:94:58:76:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d298a0714cc1bf25ac7c7f1cf6c2886c8c6192a3 Validity Not Before: Dec 20 17:01:06 2025 GMT Not After : Dec 21 17:01:06 2025 GMT Subject: CN=33415d0031f7d28f014175daf71557dbea7a5403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:40:40:40:83:81:33:f5:91:3e:a6:6f:33:0d: 73:00:66:5c:14:e7:61:fd:27:dd:b7:a5:01:d9:0b: 77:9a:fd:ce:d7:f3:56:d1:27:b5:14:6f:36:b2:b8: 0c:7b:28:34:10:83:61:00:eb:06:d0:65:8c:70:6d: e5:ec:69:d7:2b:1f:a5:a0:72:5a:9a:7c:5d:3a:e9: 35:b9:96:c5:6f:29:20:11:a7:09:7f:3b:0a:e0:14: 04:3b:62:d5:be:c9:11:7a:a9:70:19:0c:b2:68:30: 48:4a:df:d3:7f:99:96:d1:7a:c8:50:fe:1b:ae:55: 17:0d:c9:c4:39:74:30:53:fb:2c:c5:13:dc:77:7c: 5a:d8:70:1c:0b:07:ad:64:fa:1f:71:9d:dc:ad:1a: 40:a1:fb:c2:66:78:41:b4:7d:af:ad:b8:1a:4c:45: 55:7e:e4:a9:87:4b:fe:6f:4c:09:4f:8b:56:f7:67: 8c:4f:81:ec:bd:55:c5:c1:b9:82:37:f2:5d:87:3c: 2f:8e:5c:0d:86:1c:93:13:c4:e6:82:4e:bd:c4:73: dc:50:64:4a:7e:09:99:bc:e2:2d:01:34:c1:7a:27: 29:36:98:83:03:d5:cd:0a:9d:da:37:d6:15:ca:e5: 5d:e6:fb:7c:68:d5:b4:80:f7:62:f9:c6:ea:6d:1a: fd:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:41:5D:00:31:F7:D2:8F:01:41:75:DA:F7:15:57:DB:EA:7A:54:03 X509v3 Authority Key Identifier: keyid:D2:98:A0:71:4C:C1:BF:25:AC:7C:7F:1C:F6:C2:88:6C:8C:61:92:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:66:be:cd:c5:65:91:a0:77:06:49:f6:9e:40:ab:1f:13:05: c7:99:25:d5:d7:92:e4:62:71:9a:9c:5e:cb:ab:19:c5:58:7a: 0c:3a:6d:7b:70:4a:73:45:73:81:5f:8b:ee:17:08:a0:6a:91: 76:b7:8b:9c:36:d8:57:e6:36:1a:c5:46:28:ec:29:76:f2:19: 6e:6c:93:af:48:ea:e1:4c:6a:89:ed:66:c5:b0:b9:61:b4:f0: 73:df:38:a5:41:4c:87:70:d9:8c:aa:0b:40:8d:f8:77:75:bb: 47:84:86:51:68:81:72:03:0f:d7:5a:c4:d3:37:a1:57:47:7d: 00:1b:56:b4:4a:09:a0:70:0d:6f:e0:18:eb:68:6c:fa:bc:7e: 0e:98:9c:29:a5:e9:53:be:af:03:29:e8:7b:ac:31:d6:e9:63: 40:46:0a:79:34:31:9c:ea:d6:d5:34:06:dc:dc:3a:8b:f4:93: 6b:d5:1c:2e:72:f1:71:cf:3f:e0:2b:ea:66:60:75:3d:64:1b: 13:6d:22:11:e4:e4:04:35:39:fc:d9:46:49:84:77:ad:11:34: 9d:1c:89:12:f6:aa:59:b9:2c:f9:ff:09:25:11:e6:c2:f2:02: 08:1b:ab:dd:96:d7:ee:92:6c:1d:43:bb:49:ae:ae:03:71:37: ae:8a:17:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tTJbLi/YwopisyaUWHboMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyOThhMDcxNGNjMWJmMjVhYzdjN2YxY2Y2YzI4ODZjOGM2 MTkyYTMwHhcNMjUxMjIwMTcwMTA2WhcNMjUxMjIxMTcwMTA2WjAzMTEwLwYDVQQD EygzMzQxNWQwMDMxZjdkMjhmMDE0MTc1ZGFmNzE1NTdkYmVhN2E1NDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEBAQIOBM/WRPqZvMw1zAGZcFOdh /Sfdt6UB2Qt3mv3O1/NW0Se1FG82srgMeyg0EINhAOsG0GWMcG3l7GnXKx+loHJa mnxdOuk1uZbFbykgEacJfzsK4BQEO2LVvskReqlwGQyyaDBISt/Tf5mW0XrIUP4b rlUXDcnEOXQwU/ssxRPcd3xa2HAcCwetZPofcZ3crRpAofvCZnhBtH2vrbgaTEVV fuSph0v+b0wJT4tW92eMT4HsvVXFwbmCN/JdhzwvjlwNhhyTE8Tmgk69xHPcUGRK fgmZvOItATTBeicpNpiDA9XNCp3aN9YVyuVd5vt8aNW0gPdi+cbqbRr9lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDNBXQAx99KPAUF12vcVV9vqelQDMB8GA1UdIwQY MBaAFNKYoHFMwb8lrHx/HPbCiGyMYZKjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHBpZ2NVekJ2eVdzZkg4YzlzS0liSXhoa3FNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kOTdhZWEtZmEzMi00NmRhLTg1MWUt NzVhNDcyNWFhNmZkLzEvMHBpZ2NVekJ2eVdzZkg4YzlzS0liSXhoa3FNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9kOTdhZWEtZmEzMi00NmRhLTg1MWUtNzVhNDcyNWFhNmZk LzEvMHBpZ2NVekJ2eVdzZkg4YzlzS0liSXhoa3FNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvWa+zcVl kaB3Bkn2nkCrHxMFx5kl1deS5GJxmpxey6sZxVh6DDpte3BKc0VzgV+L7hcIoGqR dreLnDbYV+Y2GsVGKOwpdvIZbmyTr0jq4Uxqie1mxbC5YbTwc984pUFMh3DZjKoL QI34d3W7R4SGUWiBcgMP11rE0zehV0d9ABtWtEoJoHANb+AY62hs+rx+DpicKaXp U76vAynoe6wx1uljQEYKeTQxnOrW1TQG3Nw6i/STa9UcLnLxcc8/4CvqZmB1PWQb E20iEeTkBDU5/NlGSYR3rRE0nRyJEvaqWbks+f8JJRHmwvICCBur3ZbX7pJsHUO7 Sa6uA3E3rooX1A== -----END CERTIFICATE-----Generated at Sun Dec 21 01:12:21 2025 by rpki-client