This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft File: 0pigcUzBvyWsfH8c9sKIbIxhkqM.mft (raw, json) Hash identifier: chXfJDPxnqxWu7GagWAMYJNCM1RvFyy/kUi3eZ4JKxI= Subject key identifier: 61:A8:46:A5:9F:BC:BF:5D:DA:BA:B6:1B:EE:7D:49:59:35:83:F5:7B Authority key identifier: D2:98:A0:71:4C:C1:BF:25:AC:7C:7F:1C:F6:C2:88:6C:8C:61:92:A3 Certificate issuer: /CN=d298a0714cc1bf25ac7c7f1cf6c2886c8c6192a3 Certificate serial: 019B6B0DCF770F0DBEE1593A8B814CE0C589 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft Manifest number: 051B Signing time: Mon 29 Dec 2025 17:00:25 +0000 Manifest this update: Mon 29 Dec 2025 17:00:25 +0000 Manifest next update: Tue 30 Dec 2025 17:00:25 +0000 Files and hashes: 1: 0pigcUzBvyWsfH8c9sKIbIxhkqM.crl (hash: SFI8k+CuSMCJfh47OryMbStenjI7vdi3XWhPsxKPekc=) 2: eBrn60Df7uG_ub_L-IV105lzs58.roa (hash: O8+G2XvuPwR1yEXnK+zmEZeJLzoyxFForxI59j5WNAY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.crl rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:0d:cf:77:0f:0d:be:e1:59:3a:8b:81:4c:e0:c5:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d298a0714cc1bf25ac7c7f1cf6c2886c8c6192a3 Validity Not Before: Dec 29 17:00:25 2025 GMT Not After : Dec 30 17:00:25 2025 GMT Subject: CN=61a846a59fbcbf5ddabab61bee7d49593583f57b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d9:0f:b0:2c:7b:d5:94:72:52:89:b2:40:98: 57:a1:25:49:8a:71:f7:b8:31:45:52:60:8f:39:f7: 45:79:b5:a8:b5:9b:ba:06:fa:24:08:51:52:66:42: 13:83:c7:51:3a:1b:01:a1:93:57:16:18:5d:01:a0: 63:ac:9c:34:11:1b:8e:36:74:b6:08:66:b1:7c:1f: 8d:68:f3:e8:b8:b0:22:54:bb:ac:05:58:9d:b7:b8: cf:57:a0:ed:62:94:d5:f6:b6:e8:fb:5f:ad:6e:72: a1:09:fd:e0:d2:e8:90:9c:56:7c:fa:40:80:3b:a2: 9b:d6:c8:6b:38:c8:b1:46:4d:25:59:32:5a:4b:f8: 62:ae:4e:65:11:75:46:a7:61:83:de:b3:07:10:b6: 3f:40:a0:38:ae:f6:f6:3f:72:de:52:fb:c3:cb:ec: ae:9e:b2:f1:61:1a:6b:ba:34:59:bf:d9:70:7e:dc: fd:63:8d:5a:ea:cd:5f:53:c4:2a:49:e3:b6:2f:56: c6:bf:2f:20:d5:8d:dd:3b:0a:e8:ab:c2:e7:10:f1: 41:c4:dd:a4:95:5b:71:52:a2:bf:4c:91:22:9e:56: 89:d8:5c:0a:f5:19:39:5e:56:9e:a8:45:02:d3:a0: fb:ce:5a:0a:6d:b3:6b:07:24:39:ed:96:95:d7:80: f6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:A8:46:A5:9F:BC:BF:5D:DA:BA:B6:1B:EE:7D:49:59:35:83:F5:7B X509v3 Authority Key Identifier: keyid:D2:98:A0:71:4C:C1:BF:25:AC:7C:7F:1C:F6:C2:88:6C:8C:61:92:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:e2:fe:3f:e7:5a:eb:c5:4b:e9:d4:86:37:73:92:7b:68:b0: 31:b8:11:ae:85:3d:da:f5:36:6e:45:38:25:a6:d7:fc:63:a0: 04:00:3b:59:95:41:e8:34:68:e7:03:1d:97:db:a7:b0:d5:11: a8:0f:de:ac:c8:29:4f:36:a3:19:52:e7:53:13:e2:00:86:fe: 3c:bc:0b:d6:5e:0f:5d:b1:6f:5f:8a:e8:a2:06:dc:d2:a2:63: 32:b9:a9:9f:bb:62:97:8f:53:89:bf:6a:36:ff:78:5e:5c:f9: 46:e1:2e:98:32:15:98:93:2c:72:5c:29:6e:d2:f0:8a:94:7d: a5:63:a1:05:fc:90:02:cb:a6:e1:c1:96:16:ba:e4:51:15:ce: 45:e6:e8:0b:6f:1f:e4:4d:ae:10:63:80:58:08:0e:20:da:aa: 57:41:ad:a5:3a:df:c6:7f:47:f0:f5:e6:ab:fd:b8:2d:1c:d2: 38:4a:3a:b5:5b:a4:f2:d4:1c:24:6f:92:11:57:7e:23:8b:04: 58:b4:15:6a:d4:84:c9:06:ec:a6:94:27:ab:69:26:a5:73:e2: 41:2a:81:47:11:bd:7f:ec:f3:69:5c:f8:ae:19:b5:c8:32:2a: 92:5b:a4:64:9f:43:43:e1:3b:1b:2a:d8:27:26:2c:0a:73:86: 5e:60:b4:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtrDc93Dw2+4Vk6i4FM4MWJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyOThhMDcxNGNjMWJmMjVhYzdjN2YxY2Y2YzI4ODZjOGM2 MTkyYTMwHhcNMjUxMjI5MTcwMDI1WhcNMjUxMjMwMTcwMDI1WjAzMTEwLwYDVQQD Eyg2MWE4NDZhNTlmYmNiZjVkZGFiYWI2MWJlZTdkNDk1OTM1ODNmNTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotkPsCx71ZRyUomyQJhXoSVJinH3 uDFFUmCPOfdFebWotZu6BvokCFFSZkITg8dROhsBoZNXFhhdAaBjrJw0ERuONnS2 CGaxfB+NaPPouLAiVLusBVidt7jPV6DtYpTV9rbo+1+tbnKhCf3g0uiQnFZ8+kCA O6Kb1shrOMixRk0lWTJaS/hirk5lEXVGp2GD3rMHELY/QKA4rvb2P3LeUvvDy+yu nrLxYRprujRZv9lwftz9Y41a6s1fU8QqSeO2L1bGvy8g1Y3dOwroq8LnEPFBxN2k lVtxUqK/TJEinlaJ2FwK9Rk5XlaeqEUC06D7zloKbbNrByQ57ZaV14D22QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGGoRqWfvL9d2rq2G+59SVk1g/V7MB8GA1UdIwQY MBaAFNKYoHFMwb8lrHx/HPbCiGyMYZKjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHBpZ2NVekJ2eVdzZkg4YzlzS0liSXhoa3FNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kOTdhZWEtZmEzMi00NmRhLTg1MWUt NzVhNDcyNWFhNmZkLzEvMHBpZ2NVekJ2eVdzZkg4YzlzS0liSXhoa3FNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9kOTdhZWEtZmEzMi00NmRhLTg1MWUtNzVhNDcyNWFhNmZk LzEvMHBpZ2NVekJ2eVdzZkg4YzlzS0liSXhoa3FNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjeL+P+da 68VL6dSGN3OSe2iwMbgRroU92vU2bkU4JabX/GOgBAA7WZVB6DRo5wMdl9unsNUR qA/erMgpTzajGVLnUxPiAIb+PLwL1l4PXbFvX4roogbc0qJjMrmpn7til49Tib9q Nv94Xlz5RuEumDIVmJMsclwpbtLwipR9pWOhBfyQAsum4cGWFrrkURXOReboC28f 5E2uEGOAWAgOINqqV0GtpTrfxn9H8PXmq/24LRzSOEo6tVuk8tQcJG+SEVd+I4sE WLQVatSEyQbsppQnq2kmpXPiQSqBRxG9f+zzaVz4rhm1yDIqklukZJ9DQ+E7GyrY JyYsCnOGXmC0sg== -----END CERTIFICATE-----Generated at Mon Dec 29 23:46:10 2025 by rpki-client