This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft File: pvE9aAzkgFkb-LN93KD66zu-dE4.mft (raw, json) Hash identifier: LvR0SdtNsnEzf31Ulo9wRdAtU5KWDo7oCO28/mRs/Ng= Subject key identifier: 98:4A:12:0C:1F:EC:F3:62:40:C7:14:A0:C6:29:C4:AA:1B:70:75:59 Authority key identifier: A6:F1:3D:68:0C:E4:80:59:1B:F8:B3:7D:DC:A0:FA:EB:3B:BE:74:4E Certificate issuer: /CN=a6f13d680ce480591bf8b37ddca0faeb3bbe744e Certificate serial: 019B3BA2BDA14EC8B3F9AF2D10B73EFCC609 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pvE9aAzkgFkb-LN93KD66zu-dE4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft Manifest number: 178E Signing time: Sat 20 Dec 2025 12:01:19 +0000 Manifest this update: Sat 20 Dec 2025 12:01:19 +0000 Manifest next update: Sun 21 Dec 2025 12:01:19 +0000 Files and hashes: 1: OpKyWUUF45asysnRnTgjMvj5UEo.roa (hash: dG/NrnY4NueXZeuAaFWy5reT48MCWKXtWJgALxpo6BI=) 2: pvE9aAzkgFkb-LN93KD66zu-dE4.crl (hash: bxQ/H+elbFGnj0YJ2IP+eL6FxewMdCUPhIYCaTGEvdE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft rsync://rpki.ripe.net/repository/DEFAULT/pvE9aAzkgFkb-LN93KD66zu-dE4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:bd:a1:4e:c8:b3:f9:af:2d:10:b7:3e:fc:c6:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6f13d680ce480591bf8b37ddca0faeb3bbe744e Validity Not Before: Dec 20 12:01:19 2025 GMT Not After : Dec 21 12:01:19 2025 GMT Subject: CN=984a120c1fecf36240c714a0c629c4aa1b707559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ec:9e:d1:e2:ad:94:c8:3a:92:e3:16:dc:01: 63:25:07:7a:50:13:4f:08:54:1c:c6:a8:d8:93:04: 2c:2d:f9:61:9f:b1:84:16:46:7d:20:fa:9e:55:63: 6e:ba:50:1b:1d:01:a9:ba:bf:2c:64:3d:ce:06:07: e0:58:29:f6:f9:1d:03:ca:f0:64:72:a6:40:bb:da: 57:16:77:6d:91:08:bb:fd:2d:2d:2f:ca:bd:22:1a: 08:83:31:74:52:49:7f:6c:87:99:20:46:12:1d:e6: 99:5e:e7:83:57:f7:b8:e6:c6:51:e7:f0:86:38:62: 1b:11:5d:fd:03:65:c3:15:01:93:9c:8a:76:60:f2: c4:67:63:2b:41:15:80:65:00:7b:c3:fa:77:94:c5: 9d:ae:f3:84:0f:e1:a5:6b:6f:66:f2:f8:61:82:f8: 56:76:f2:6d:fb:13:b3:e5:20:44:fa:7d:82:24:e2: 79:82:03:69:2e:f6:2f:dc:82:8f:f0:26:55:99:19: 47:fd:8c:74:76:2c:f4:70:9a:c7:66:5d:26:44:c8: bc:02:78:ff:a9:09:d2:5c:34:2d:e0:df:02:70:35: f6:1f:6e:4b:25:4c:12:7e:64:6e:a3:0c:26:2a:6f: 3f:6a:bf:70:10:3f:59:d1:e3:e2:38:37:46:40:73: 15:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:4A:12:0C:1F:EC:F3:62:40:C7:14:A0:C6:29:C4:AA:1B:70:75:59 X509v3 Authority Key Identifier: keyid:A6:F1:3D:68:0C:E4:80:59:1B:F8:B3:7D:DC:A0:FA:EB:3B:BE:74:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pvE9aAzkgFkb-LN93KD66zu-dE4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:11:58:5b:ae:33:ea:8f:cd:48:a8:86:1b:c9:39:72:08:fd: 4e:a7:b7:da:89:46:f3:b3:e9:77:50:8f:41:a3:d3:c3:1b:85: 23:02:67:f6:21:43:65:ac:82:f1:57:94:fd:38:2d:ff:d5:b0: aa:85:fe:8a:d0:6b:ac:13:b0:0c:ef:f0:dd:cd:2c:2e:5d:cd: 70:24:07:9c:08:7e:46:3c:39:0e:41:a1:60:91:23:ee:de:04: a3:0e:bb:1c:05:1c:a2:8c:1b:55:52:c6:ce:de:aa:42:f6:a3: f2:8b:81:e7:07:f6:ec:69:3b:48:2f:0b:dd:fb:ca:65:6a:6a: b1:cb:cb:e8:11:54:bf:87:a5:34:74:6a:c5:64:61:e5:ae:cf: 3f:17:86:82:50:58:64:96:c6:f0:e2:08:b9:75:d3:db:c7:f3: 41:70:3c:39:88:5f:b5:33:1b:20:7d:b6:61:17:cb:8b:24:18: 06:d8:f0:e6:36:95:b3:a7:da:f1:8e:a5:9d:ad:7a:3c:77:e9: aa:f3:ee:ef:59:9d:a8:13:45:e0:37:12:33:fd:de:66:f9:d7: 0e:d6:3f:6c:20:1d:69:e9:f3:63:b0:42:6e:47:a6:d6:1b:f5: 79:63:97:9d:45:84:f4:aa:8d:da:70:84:c4:ab:b7:1d:09:f3: 05:e8:57:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7or2hTsiz+a8tELc+/MYJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2ZjEzZDY4MGNlNDgwNTkxYmY4YjM3ZGRjYTBmYWViM2Ji ZTc0NGUwHhcNMjUxMjIwMTIwMTE5WhcNMjUxMjIxMTIwMTE5WjAzMTEwLwYDVQQD Eyg5ODRhMTIwYzFmZWNmMzYyNDBjNzE0YTBjNjI5YzRhYTFiNzA3NTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOye0eKtlMg6kuMW3AFjJQd6UBNP CFQcxqjYkwQsLflhn7GEFkZ9IPqeVWNuulAbHQGpur8sZD3OBgfgWCn2+R0DyvBk cqZAu9pXFndtkQi7/S0tL8q9IhoIgzF0Ukl/bIeZIEYSHeaZXueDV/e45sZR5/CG OGIbEV39A2XDFQGTnIp2YPLEZ2MrQRWAZQB7w/p3lMWdrvOED+Gla29m8vhhgvhW dvJt+xOz5SBE+n2CJOJ5ggNpLvYv3IKP8CZVmRlH/Yx0diz0cJrHZl0mRMi8Anj/ qQnSXDQt4N8CcDX2H25LJUwSfmRuowwmKm8/ar9wED9Z0ePiODdGQHMV5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJhKEgwf7PNiQMcUoMYpxKobcHVZMB8GA1UdIwQY MBaAFKbxPWgM5IBZG/izfdyg+us7vnROMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHZFOWFBemtnRmtiLUxOOTNLRDY2enUtZEU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ZDFiMDItYjBmOS00ZTBlLWE0NTct MzBiZGI0OGRhNTIxLzEvcHZFOWFBemtnRmtiLUxOOTNLRDY2enUtZEU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ZDFiMDItYjBmOS00ZTBlLWE0NTctMzBiZGI0OGRhNTIx LzEvcHZFOWFBemtnRmtiLUxOOTNLRDY2enUtZEU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiRFYW64z 6o/NSKiGG8k5cgj9Tqe32olG87Ppd1CPQaPTwxuFIwJn9iFDZayC8VeU/Tgt/9Ww qoX+itBrrBOwDO/w3c0sLl3NcCQHnAh+Rjw5DkGhYJEj7t4Eow67HAUcoowbVVLG zt6qQvaj8ouB5wf27Gk7SC8L3fvKZWpqscvL6BFUv4elNHRqxWRh5a7PPxeGglBY ZJbG8OIIuXXT28fzQXA8OYhftTMbIH22YRfLiyQYBtjw5jaVs6fa8Y6lna16PHfp qvPu71mdqBNF4DcSM/3eZvnXDtY/bCAdaenzY7BCbkem1hv1eWOXnUWE9KqN2nCE xKu3HQnzBehXCA== -----END CERTIFICATE-----Generated at Sat Dec 20 14:37:54 2025 by rpki-client