This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft File: pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft (raw, json) Hash identifier: 7y2MPGSfXsLzP2a7wh+UOTFe2CJ0HXpZq5kpEvzxBt0= Subject key identifier: C6:AE:78:B8:37:A9:65:94:00:13:53:53:B0:76:83:D8:58:C2:F6:46 Authority key identifier: A6:7F:1C:F2:74:26:07:0A:ED:A7:B2:60:53:45:3C:28:3F:DF:75:37 Certificate issuer: /CN=a67f1cf27426070aeda7b26053453c283fdf7537 Certificate serial: 019B3D59E274E9269D1DAF269C52310D8E1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft Manifest number: 0A15 Signing time: Sat 20 Dec 2025 20:00:59 +0000 Manifest this update: Sat 20 Dec 2025 20:00:59 +0000 Manifest next update: Sun 21 Dec 2025 20:00:59 +0000 Files and hashes: 1: pGhFSYKZpUat85kiXiiCd2_IqX0.roa (hash: rRFD7qwRqqnJAuhQ1luySoQoJ9GoQlnTCcam7ZPbXJk=) 2: pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl (hash: PWO/zKe7Mc/p0nMCN7OAafyY9DghUz+Gi0586+2robE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:e2:74:e9:26:9d:1d:af:26:9c:52:31:0d:8e:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a67f1cf27426070aeda7b26053453c283fdf7537 Validity Not Before: Dec 20 20:00:59 2025 GMT Not After : Dec 21 20:00:59 2025 GMT Subject: CN=c6ae78b837a9659400135353b07683d858c2f646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d2:3e:19:4c:2d:b0:51:15:06:57:86:e1:29: 0e:e9:4e:c5:ac:a6:46:d3:16:83:51:dc:55:ab:5f: 4a:91:3f:c6:df:07:48:2a:83:8f:55:f2:ec:af:88: aa:37:5c:83:79:3b:de:e5:5b:8d:0d:97:82:03:94: cd:c1:8e:58:74:8f:08:02:e0:cb:fd:c8:ba:ff:c3: f1:66:a1:18:4b:39:84:6b:a2:29:79:d3:b9:7c:64: ee:80:be:9c:d1:fe:11:e3:81:e4:6e:13:41:9a:26: e6:31:6e:be:e3:64:e7:c0:96:11:9f:ee:d4:57:a5: 66:0b:8c:c8:74:05:a5:a0:06:6c:a0:ac:14:ab:8e: d6:13:5b:ca:ee:c9:f5:a2:13:82:25:01:e6:c6:b2: 2a:dd:e6:7a:fe:5d:37:e8:67:27:db:83:8b:7c:65: 01:ed:63:ed:99:b1:d3:73:68:dd:6b:ab:92:ca:0f: 3f:84:2c:c0:f4:e4:e6:4c:77:ad:06:7d:d3:f8:35: 13:0f:43:11:19:59:e5:5d:07:98:1f:10:ec:cf:f1: c3:86:36:83:bb:c4:37:d3:3d:a1:f8:ad:1f:57:5a: 33:61:fa:31:bf:6b:8a:a5:53:27:36:da:00:ef:89: 64:49:a6:c9:53:72:8b:cb:5b:e8:1c:82:8a:90:7e: 69:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:AE:78:B8:37:A9:65:94:00:13:53:53:B0:76:83:D8:58:C2:F6:46 X509v3 Authority Key Identifier: keyid:A6:7F:1C:F2:74:26:07:0A:ED:A7:B2:60:53:45:3C:28:3F:DF:75:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:f2:33:a2:ac:ee:4b:3d:88:99:2c:33:0f:4c:f1:d3:af:08: da:23:54:b7:2a:61:14:04:2d:07:e5:93:93:1a:bf:4a:e3:1c: 4c:87:05:1b:42:21:95:c8:4c:44:6b:01:e1:40:68:ed:54:53: 0b:b2:0b:d8:3e:d9:2e:93:af:37:75:d8:ba:65:64:fa:b2:70: 34:44:53:c6:a3:33:6a:47:6d:b9:98:57:78:1c:78:fa:35:3a: e9:d5:ae:1d:13:fd:fb:97:c2:ba:93:d9:de:c0:63:98:13:83: ca:f4:97:0c:95:11:34:68:cf:5c:32:2a:26:cd:cf:3a:a0:47: 20:e9:5b:37:d7:d8:96:32:4a:21:6d:84:2b:7d:87:37:45:d8: f1:c5:72:64:62:c6:38:6f:14:4a:98:c2:39:73:52:fb:2d:cf: 7c:aa:c2:7f:ff:4d:c0:80:f8:ad:9b:3d:53:7b:5f:40:31:e6: 1f:8b:aa:57:fd:d8:cd:be:f8:03:b9:84:83:d2:80:e8:60:d8: a8:c7:e5:2b:69:f6:a4:71:60:a9:5b:23:1b:a1:e1:e0:e3:a4: 16:dc:da:33:de:db:7a:98:9d:af:da:6e:31:07:75:e8:aa:92: a9:46:ef:7f:fc:80:fe:92:06:fb:db:c6:6d:82:a2:4d:70:78: 82:6b:13:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WeJ06SadHa8mnFIxDY4aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2N2YxY2YyNzQyNjA3MGFlZGE3YjI2MDUzNDUzYzI4M2Zk Zjc1MzcwHhcNMjUxMjIwMjAwMDU5WhcNMjUxMjIxMjAwMDU5WjAzMTEwLwYDVQQD EyhjNmFlNzhiODM3YTk2NTk0MDAxMzUzNTNiMDc2ODNkODU4YzJmNjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9I+GUwtsFEVBleG4SkO6U7FrKZG 0xaDUdxVq19KkT/G3wdIKoOPVfLsr4iqN1yDeTve5VuNDZeCA5TNwY5YdI8IAuDL /ci6/8PxZqEYSzmEa6IpedO5fGTugL6c0f4R44HkbhNBmibmMW6+42TnwJYRn+7U V6VmC4zIdAWloAZsoKwUq47WE1vK7sn1ohOCJQHmxrIq3eZ6/l036Gcn24OLfGUB 7WPtmbHTc2jda6uSyg8/hCzA9OTmTHetBn3T+DUTD0MRGVnlXQeYHxDsz/HDhjaD u8Q30z2h+K0fV1ozYfoxv2uKpVMnNtoA74lkSabJU3KLy1voHIKKkH5pjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMaueLg3qWWUABNTU7B2g9hYwvZGMB8GA1UdIwQY MBaAFKZ/HPJ0JgcK7aeyYFNFPCg/33U3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcG44YzhuUW1Cd3J0cDdKZ1UwVThLRF9mZFRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8xMmUyYzQtMjQzZC00NGRmLWIwZGMt YjlkNjY4ZjA1MWRlLzEvcG44YzhuUW1Cd3J0cDdKZ1UwVThLRF9mZFRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8xMmUyYzQtMjQzZC00NGRmLWIwZGMtYjlkNjY4ZjA1MWRl LzEvcG44YzhuUW1Cd3J0cDdKZ1UwVThLRF9mZFRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp/Izoqzu Sz2ImSwzD0zx068I2iNUtyphFAQtB+WTkxq/SuMcTIcFG0IhlchMRGsB4UBo7VRT C7IL2D7ZLpOvN3XYumVk+rJwNERTxqMzakdtuZhXeBx4+jU66dWuHRP9+5fCupPZ 3sBjmBODyvSXDJURNGjPXDIqJs3POqBHIOlbN9fYljJKIW2EK32HN0XY8cVyZGLG OG8USpjCOXNS+y3PfKrCf/9NwID4rZs9U3tfQDHmH4uqV/3Yzb74A7mEg9KA6GDY qMflK2n2pHFgqVsjG6Hh4OOkFtzaM97bepidr9puMQd16KqSqUbvf/yA/pIG+9vG bYKiTXB4gmsTGg== -----END CERTIFICATE-----Generated at Sun Dec 21 03:51:44 2025 by rpki-client