This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft File: pavEOvztcvuSd4covuVxxnj1OFM.mft (raw, json) Hash identifier: IUVBqPrew7Iw1eVUPOBoLeRvdWTCOHJ3K2kRxQ49Hi4= Subject key identifier: 45:8F:B0:3A:72:A2:70:B2:1D:76:12:CA:D5:3D:DC:93:D8:BF:0F:F0 Authority key identifier: A5:AB:C4:3A:FC:ED:72:FB:92:77:87:28:BE:E5:71:C6:78:F5:38:53 Certificate issuer: /CN=a5abc43afced72fb92778728bee571c678f53853 Certificate serial: 019B3DFE53C29AD5B773530D947A7E72C933 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 23:00:36 +0000 Manifest this update: Sat 20 Dec 2025 23:00:36 +0000 Manifest next update: Sun 21 Dec 2025 23:00:36 +0000 Files and hashes: 1: XTYDavgtknOlnwhLwE8YM7gzGNo.roa (hash: PldFwC0OKAPE16YsYJiSJ7/6hQNZV4y5TLuWK0kyNJ0=) 2: pavEOvztcvuSd4covuVxxnj1OFM.crl (hash: SMgm+UDktoARn3RY4+rioITILSD710Yr26efewxb3+k=) 3: sSPz7KsWNIMKyyRHlSkiZwosgKw.roa (hash: wjM7pq8MRvpOQBEJDje34R/IkWbdszEvqnHRsuBbId4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:53:c2:9a:d5:b7:73:53:0d:94:7a:7e:72:c9:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5abc43afced72fb92778728bee571c678f53853 Validity Not Before: Dec 20 23:00:36 2025 GMT Not After : Dec 21 23:00:36 2025 GMT Subject: CN=458fb03a72a270b21d7612cad53ddc93d8bf0ff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:09:51:db:86:5f:f2:e2:3e:46:34:c4:d4:57: 02:e3:dd:e8:73:8a:05:8e:73:3e:91:a8:96:a9:37: 22:16:36:cf:c7:0b:b8:74:e2:29:4b:97:7d:6b:9b: cf:28:60:e1:ba:cd:d3:d9:0c:ab:9d:c2:d7:17:2c: e8:8f:42:a7:4b:ef:40:30:d3:2f:b6:a0:7f:2c:c9: 2e:97:7d:53:ec:25:3c:70:ec:c3:db:ff:51:2b:bf: f3:d1:c2:10:6a:e4:7b:f0:03:7f:59:dd:87:0b:40: ee:70:4a:50:2d:36:25:c0:d7:0c:39:3f:cd:a4:b0: c5:e4:0c:b7:8b:99:f0:7f:84:26:50:3e:ae:de:e0: af:51:2a:1e:70:be:cc:ab:4e:96:d5:6a:36:ea:a2: 4e:6e:e7:12:c4:66:11:e8:5a:8b:64:6a:d8:87:6a: 89:1a:c2:2f:f7:a3:42:fc:51:20:e6:1c:c6:4b:2e: a5:b2:9e:d4:31:c0:01:5d:fc:ca:13:7d:15:df:87: b8:c8:23:36:d0:70:c2:dc:ff:cd:c1:37:d8:de:6b: 43:a8:e1:91:9d:bb:f8:77:cc:73:88:9f:34:b3:5d: 1d:1b:bc:07:bd:5e:ef:8c:f3:eb:0c:78:e3:18:6f: 5a:2f:f7:26:3b:bc:ab:42:8f:54:9f:c9:ef:98:9d: 4e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:8F:B0:3A:72:A2:70:B2:1D:76:12:CA:D5:3D:DC:93:D8:BF:0F:F0 X509v3 Authority Key Identifier: keyid:A5:AB:C4:3A:FC:ED:72:FB:92:77:87:28:BE:E5:71:C6:78:F5:38:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:46:2f:5c:c3:ab:b4:d6:40:ec:60:a2:6d:68:cf:f0:0b:54: 68:27:02:50:d1:f2:46:1b:ad:fa:15:a8:fb:c9:60:1d:9d:10: 3c:6b:b2:a3:fe:c0:63:52:eb:d1:73:c7:0e:cf:6e:44:00:a8: 60:e8:69:61:41:2c:d2:e0:78:11:a7:2b:79:84:1e:d7:23:c0: 6b:81:54:91:f2:57:df:e4:b3:fb:2e:8d:6b:dd:dd:b9:84:2c: f6:b1:2b:77:63:13:2c:1b:c2:cb:b6:5b:9e:b6:6b:9f:ba:83: 07:88:83:61:1b:36:24:08:e0:e9:31:fd:d1:fe:18:bd:d2:1a: fb:c1:b2:56:c1:ac:c2:8d:a4:ae:25:69:83:bb:16:35:2b:da: 44:fe:a6:13:d1:20:cd:27:b8:98:24:76:89:47:1d:98:3a:b6: 45:58:9b:1b:56:b5:42:1a:40:00:66:f9:43:d8:1a:db:0b:1e: ac:63:1d:eb:ac:86:6f:76:86:79:a0:55:07:b8:f5:15:ca:46: 5c:58:f2:73:62:6a:75:e1:d0:49:e1:77:e8:09:4b:f8:2b:1e: 75:9d:9b:1d:1e:bc:1e:db:51:4c:6c:ad:bf:48:c0:51:90:c5: cc:01:3c:fa:e6:46:0f:d9:78:0b:73:b0:d2:e9:da:a8:e8:f0: 31:22:b4:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/lPCmtW3c1MNlHp+cskzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YWJjNDNhZmNlZDcyZmI5Mjc3ODcyOGJlZTU3MWM2Nzhm NTM4NTMwHhcNMjUxMjIwMjMwMDM2WhcNMjUxMjIxMjMwMDM2WjAzMTEwLwYDVQQD Eyg0NThmYjAzYTcyYTI3MGIyMWQ3NjEyY2FkNTNkZGM5M2Q4YmYwZmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3glR24Zf8uI+RjTE1FcC493oc4oF jnM+kaiWqTciFjbPxwu4dOIpS5d9a5vPKGDhus3T2QyrncLXFyzoj0KnS+9AMNMv tqB/LMkul31T7CU8cOzD2/9RK7/z0cIQauR78AN/Wd2HC0DucEpQLTYlwNcMOT/N pLDF5Ay3i5nwf4QmUD6u3uCvUSoecL7Mq06W1Wo26qJObucSxGYR6FqLZGrYh2qJ GsIv96NC/FEg5hzGSy6lsp7UMcABXfzKE30V34e4yCM20HDC3P/NwTfY3mtDqOGR nbv4d8xziJ80s10dG7wHvV7vjPPrDHjjGG9aL/cmO7yrQo9Un8nvmJ1OMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEWPsDpyonCyHXYSytU93JPYvw/wMB8GA1UdIwQY MBaAFKWrxDr87XL7kneHKL7lccZ49ThTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGF2RU92enRjdnVTZDRjb3Z1Vnh4bmoxT0ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9lOWI3NmEtMTBiMy00N2MwLWE1MTct YjVlOTFmYzY1MDUxLzEvcGF2RU92enRjdnVTZDRjb3Z1Vnh4bmoxT0ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9lOWI3NmEtMTBiMy00N2MwLWE1MTctYjVlOTFmYzY1MDUx LzEvcGF2RU92enRjdnVTZDRjb3Z1Vnh4bmoxT0ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY0YvXMOr tNZA7GCibWjP8AtUaCcCUNHyRhut+hWo+8lgHZ0QPGuyo/7AY1Lr0XPHDs9uRACo YOhpYUEs0uB4EacreYQe1yPAa4FUkfJX3+Sz+y6Na93duYQs9rErd2MTLBvCy7Zb nrZrn7qDB4iDYRs2JAjg6TH90f4YvdIa+8GyVsGswo2kriVpg7sWNSvaRP6mE9Eg zSe4mCR2iUcdmDq2RVibG1a1QhpAAGb5Q9ga2wserGMd66yGb3aGeaBVB7j1FcpG XFjyc2JqdeHQSeF36AlL+CsedZ2bHR68HttRTGytv0jAUZDFzAE8+uZGD9l4C3Ow 0unaqOjwMSK0DA== -----END CERTIFICATE-----Generated at Sun Dec 21 03:55:56 2025 by rpki-client