This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft File: paVuvwHgA0n2cwGRgFYMmjGuqHE.mft (raw, json) Hash identifier: 8frFQo4qxQU4Kbofzfn6h1l+MqoSS32WMyJUDvkiWuM= Subject key identifier: 91:B5:FA:E7:5A:F0:CF:2A:8D:0D:CE:5A:54:6B:D9:B0:81:CE:B1:D4 Authority key identifier: A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71 Certificate issuer: /CN=a5a56ebf01e00349f673019180560c9a31aea871 Certificate serial: 019B4091A23962EA5765AE01823689CDDEA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft Manifest number: 0E8D Signing time: Sun 21 Dec 2025 11:00:44 +0000 Manifest this update: Sun 21 Dec 2025 11:00:44 +0000 Manifest next update: Mon 22 Dec 2025 11:00:44 +0000 Files and hashes: 1: Up1DgVu6Rzl8j-xWcnRJPbc9w5c.roa (hash: S1Y+h0243/EB07fB0dXlduT0obEhbg3cgY40o4HTbzQ=) 2: paVuvwHgA0n2cwGRgFYMmjGuqHE.crl (hash: sbWskFeOxn1yPjTfImXLaIedvz8lkYxyAEP2KTI2Msw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:a2:39:62:ea:57:65:ae:01:82:36:89:cd:de:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5a56ebf01e00349f673019180560c9a31aea871 Validity Not Before: Dec 21 11:00:44 2025 GMT Not After : Dec 22 11:00:44 2025 GMT Subject: CN=91b5fae75af0cf2a8d0dce5a546bd9b081ceb1d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ec:76:fb:18:3c:30:d6:da:f8:f6:a2:86:b2: cb:2a:7b:e1:1e:d9:72:ec:a5:bc:33:33:9b:b9:39: de:13:4f:7f:36:fc:9b:4d:ad:83:34:22:c5:6f:f9: 33:4d:c7:ac:0c:87:62:e5:31:fc:a8:03:2c:de:dc: 18:09:57:09:1f:bc:3e:56:8c:9c:c2:fb:74:9e:ef: 07:9f:a2:73:ed:a8:6e:e1:fd:63:3a:60:4b:e0:75: d8:eb:5b:4d:97:57:85:4c:89:24:27:a0:ed:bb:0a: 67:de:b3:31:60:1d:6e:bb:33:bd:26:ab:08:07:14: 10:55:fc:ef:3c:1e:14:06:3d:04:f9:b9:35:9f:ea: 28:81:cb:7d:2a:2c:0d:55:62:20:8c:16:a6:2f:9a: 5a:01:2a:f4:25:c4:b8:8f:ae:28:6b:a4:28:b0:75: 59:30:22:db:0b:87:e2:bc:87:66:67:6a:be:a4:33: c5:c0:13:91:c0:ac:f9:4f:12:86:34:cd:dc:94:46: 49:ba:c3:47:b7:ab:38:4d:cc:be:b7:3c:03:c8:ab: a4:5a:56:93:05:5a:24:6a:3b:2c:59:de:86:2f:ed: bc:e3:0f:a8:ff:9e:14:25:de:af:43:32:1d:85:b1: 1d:eb:e1:4c:f1:cc:fa:2b:fc:41:f2:87:2b:dc:7b: 65:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B5:FA:E7:5A:F0:CF:2A:8D:0D:CE:5A:54:6B:D9:B0:81:CE:B1:D4 X509v3 Authority Key Identifier: keyid:A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:a9:f1:77:fc:22:1f:84:50:a2:a0:3f:e7:1e:05:1f:2c:a8: 4f:e0:38:f4:ce:b9:48:18:2a:d7:ba:9e:e7:0e:e3:67:74:45: ab:c1:73:29:95:7c:c0:0c:35:07:c8:07:9d:04:a3:d8:85:c0: af:e1:19:9b:97:75:0e:36:7f:43:40:75:78:36:08:11:75:82: f8:06:f6:03:d4:b0:eb:81:36:d4:f1:e1:09:7e:f6:79:34:2c: 34:ad:30:ac:6f:d3:a8:62:8b:09:17:47:3e:7e:b7:29:cd:94: 8a:30:23:a3:29:f6:51:f8:68:95:23:6c:4c:b9:2f:66:0f:b6: 5a:c2:02:03:fc:f8:da:dc:24:18:4e:58:c4:c3:74:9e:45:7d: fd:b6:47:f0:de:2d:ea:40:82:3c:4c:9c:b0:74:32:cf:87:ce: 2e:bc:a3:34:f9:f9:34:31:cb:1e:b3:c9:34:4f:1d:b2:70:b8: 87:20:66:59:83:2f:6c:76:43:65:e2:39:93:fa:d0:53:56:40: af:eb:d1:2f:d5:c3:8a:38:c7:8b:cc:08:3d:e2:c4:41:1e:d4: 7f:5b:04:59:cb:9f:0b:55:57:69:9e:e7:a1:f7:66:f0:e5:4e: a0:97:7b:a8:78:e1:14:f0:a9:86:22:09:2a:ee:fd:73:b8:06: ba:26:70:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkaI5YupXZa4BgjaJzd6mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YTU2ZWJmMDFlMDAzNDlmNjczMDE5MTgwNTYwYzlhMzFh ZWE4NzEwHhcNMjUxMjIxMTEwMDQ0WhcNMjUxMjIyMTEwMDQ0WjAzMTEwLwYDVQQD Eyg5MWI1ZmFlNzVhZjBjZjJhOGQwZGNlNWE1NDZiZDliMDgxY2ViMWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+x2+xg8MNba+PaihrLLKnvhHtly 7KW8MzObuTneE09/NvybTa2DNCLFb/kzTcesDIdi5TH8qAMs3twYCVcJH7w+Voyc wvt0nu8Hn6Jz7ahu4f1jOmBL4HXY61tNl1eFTIkkJ6Dtuwpn3rMxYB1uuzO9JqsI BxQQVfzvPB4UBj0E+bk1n+oogct9KiwNVWIgjBamL5paASr0JcS4j64oa6QosHVZ MCLbC4fivIdmZ2q+pDPFwBORwKz5TxKGNM3clEZJusNHt6s4Tcy+tzwDyKukWlaT BVokajssWd6GL+284w+o/54UJd6vQzIdhbEd6+FM8cz6K/xB8ocr3HtlZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJG1+uda8M8qjQ3OWlRr2bCBzrHUMB8GA1UdIwQY MBaAFKWlbr8B4ANJ9nMBkYBWDJoxrqhxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGFWdXZ3SGdBMG4yY3dHUmdGWU1takd1cUhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81NTRjMzUtYTgzYy00MzI5LWEwOGQt MmQ0NmQzMGRhY2JmLzEvcGFWdXZ3SGdBMG4yY3dHUmdGWU1takd1cUhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS81NTRjMzUtYTgzYy00MzI5LWEwOGQtMmQ0NmQzMGRhY2Jm LzEvcGFWdXZ3SGdBMG4yY3dHUmdGWU1takd1cUhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsqnxd/wi H4RQoqA/5x4FHyyoT+A49M65SBgq17qe5w7jZ3RFq8FzKZV8wAw1B8gHnQSj2IXA r+EZm5d1DjZ/Q0B1eDYIEXWC+Ab2A9Sw64E21PHhCX72eTQsNK0wrG/TqGKLCRdH Pn63Kc2UijAjoyn2UfholSNsTLkvZg+2WsICA/z42twkGE5YxMN0nkV9/bZH8N4t 6kCCPEycsHQyz4fOLryjNPn5NDHLHrPJNE8dsnC4hyBmWYMvbHZDZeI5k/rQU1ZA r+vRL9XDijjHi8wIPeLEQR7Uf1sEWcufC1VXaZ7nofdm8OVOoJd7qHjhFPCphiIJ Ku79c7gGuiZwLA== -----END CERTIFICATE-----Generated at Sun Dec 21 13:36:58 2025 by rpki-client