This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft File: pnhXc98xO5FxG_a8WxSezCRrnok.mft (raw, json) Hash identifier: Md4NU9TIVZw0Kl682ucGoMjcYXR+jMB0F78W6BhZYQo= Subject key identifier: 82:71:8C:B1:22:D4:A6:55:23:D8:BF:85:00:D9:19:19:64:5E:76:A0 Authority key identifier: A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89 Certificate issuer: /CN=a6785773df313b91711bf6bc5b149ecc246b9e89 Certificate serial: 019B4DDFC50D9624F4D13623935E4DA3D73C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft Manifest number: 155A Signing time: Wed 24 Dec 2025 01:01:09 +0000 Manifest this update: Wed 24 Dec 2025 01:01:09 +0000 Manifest next update: Thu 25 Dec 2025 01:01:09 +0000 Files and hashes: 1: 4_O_iIpyAI9RehObq-pOpadb0Oc.roa (hash: yk0faU3G873g+gLSQoGVoe7NYYyCWEaHzHI6ZIk9UdY=) 2: 7loUqY3SMQ476AvW8cBj_oE5D0w.roa (hash: 9ZWiK7Ya0oQoJXKuXssFNZZZ1jcO9WaxjH/2eSSyYlw=) 3: 9qXJnie35SdfH2J2EgodKBngTzA.roa (hash: jwDaD5ZgcucjZdcdoISWLpA3Zdrcncz7G1jWAlDHN4k=) 4: _K6pKy4r_yxn6KKjdedN6hKQIRc.roa (hash: Fa8PiwPRQ/Nbg/tMa4sLtAZckTKFYG8hQ2oLAm3z+YE=) 5: eeGo9wragRSvkLaXijzUVv6g1UQ.roa (hash: f0fCuBwmYqh4E9JpX2SXK0IGaTdlCqkrpCwPLzLM7U8=) 6: f_BAmJDU6YD_W-jGGFTEv2Fs7Ak.roa (hash: PaLYZLAv0TrU+Bsc9bxTmK6PnOfA5lCBIqcJSl9Ay7o=) 7: h0Rq-64YdH2Rhgx8VqQPxecaOJk.roa (hash: +OMPPDfPiGbQBs5xm10WtKzO2XvkhzUC6VL8TFg0R8M=) 8: p7CrYRPqjfqg5-SpOOWgZYcH7pg.roa (hash: VxeYJO6+oO8JTtkcjhdpm2dOlDG12rU/cm/baKhjYqs=) 9: pnhXc98xO5FxG_a8WxSezCRrnok.crl (hash: keTAghp1xEeuGkKWqKRVlcrBl4zfiyiAEawHw6uKbhw=) 10: vm5i6AVzmYzAz9qPwbnD4VrLfVA.roa (hash: VDQ8oeDiLzJU7KaKEM2DHEI37PMjg/GP0JQI1knZDEc=) 11: yj9vr2VnE10QnxtDsz-n2QVr0i4.roa (hash: oY4OEejijqth0Kn/mWSI257F9MR4bW3yyLCjseFCr/g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 01:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:df:c5:0d:96:24:f4:d1:36:23:93:5e:4d:a3:d7:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6785773df313b91711bf6bc5b149ecc246b9e89 Validity Not Before: Dec 24 01:01:09 2025 GMT Not After : Dec 25 01:01:09 2025 GMT Subject: CN=82718cb122d4a65523d8bf8500d91919645e76a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9c:92:ec:60:7b:ab:63:a5:01:d7:37:87:22: ea:e0:08:2d:f3:31:94:62:4a:42:5d:95:a3:45:65: d2:6e:60:1c:11:4d:3a:9b:c8:4e:45:6c:0e:f9:89: cc:33:9a:af:c1:e2:3a:43:1e:14:d2:19:86:71:a9: 75:6d:63:de:a9:95:2d:57:9f:38:3f:47:0e:16:c0: 4d:ba:ac:99:f9:c3:8b:6e:5d:4e:1a:ea:c3:d3:37: 85:93:b5:d7:72:2d:5d:77:32:9b:4b:7a:f8:17:25: 3a:fd:46:52:d8:2e:c4:62:08:3c:fb:7f:3e:55:58: 29:54:c9:f5:8c:71:86:5c:45:b1:44:89:cd:e0:2a: e2:88:c4:37:f0:27:4f:2c:73:55:ea:be:f2:80:da: 92:aa:fc:37:ae:e6:1c:c4:cf:f2:5f:80:81:b0:17: ed:62:69:c5:78:50:72:3b:bf:cf:b0:ae:69:ae:c2: 0f:48:4b:48:e8:c6:a7:62:c4:dc:65:2d:75:ac:66: 6d:93:c7:1e:21:dd:c1:b6:eb:22:a2:a1:2c:bb:88: c5:bd:14:f0:9f:1d:64:54:40:f8:bb:ca:14:78:80: 21:92:20:a3:a0:48:c5:ed:d1:61:bf:ab:ec:ee:c7: 9b:f9:fd:29:88:64:7f:66:9d:ec:bd:07:d1:0b:76: b5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:71:8C:B1:22:D4:A6:55:23:D8:BF:85:00:D9:19:19:64:5E:76:A0 X509v3 Authority Key Identifier: keyid:A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:48:ae:15:ac:85:d1:08:a9:f3:14:d0:73:58:b0:58:44:c6: 12:ab:c7:48:8f:13:69:ac:9d:f6:dc:ad:f2:d5:d0:cd:32:6c: ba:e6:7f:91:44:de:70:5d:85:54:0e:e3:5a:5d:96:90:3a:dc: 7b:2b:2a:29:e4:36:78:26:1f:85:43:6f:b5:0e:98:de:71:94: de:94:26:15:45:7b:34:34:e7:19:60:e2:e7:ad:ae:dd:52:74: bf:1c:71:f8:40:12:c9:54:de:37:fd:0d:91:97:bb:5c:04:83: bc:59:85:e9:fb:f0:61:0e:e3:cb:48:fc:9d:71:1c:78:5b:7d: 24:45:40:9a:cf:6f:5a:f1:b1:42:e5:0d:a3:ae:ce:c2:7f:c7: 2b:8e:6b:37:20:93:da:b3:75:93:f9:b0:7c:c5:f1:15:15:3f: 25:16:cb:dd:48:30:46:6a:c2:81:be:be:0d:b1:7a:99:bb:ff: c4:06:74:b1:ff:e1:89:ea:08:e7:6d:fe:a7:79:ee:f3:18:7e: 8c:85:9e:7d:87:bd:68:bf:d6:33:89:fc:3e:23:9b:8f:fd:13: da:53:e8:1a:63:c1:0d:90:cc:bd:89:2c:6d:95:d3:3a:59:c7: 9d:50:eb:65:1c:a5:06:f0:9b:a1:8d:a1:97:5d:c7:f5:fe:41: e9:29:7b:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN38UNliT00TYjk15No9c8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2Nzg1NzczZGYzMTNiOTE3MTFiZjZiYzViMTQ5ZWNjMjQ2 YjllODkwHhcNMjUxMjI0MDEwMTA5WhcNMjUxMjI1MDEwMTA5WjAzMTEwLwYDVQQD Eyg4MjcxOGNiMTIyZDRhNjU1MjNkOGJmODUwMGQ5MTkxOTY0NWU3NmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpyS7GB7q2OlAdc3hyLq4Agt8zGU YkpCXZWjRWXSbmAcEU06m8hORWwO+YnMM5qvweI6Qx4U0hmGcal1bWPeqZUtV584 P0cOFsBNuqyZ+cOLbl1OGurD0zeFk7XXci1ddzKbS3r4FyU6/UZS2C7EYgg8+38+ VVgpVMn1jHGGXEWxRInN4CriiMQ38CdPLHNV6r7ygNqSqvw3ruYcxM/yX4CBsBft YmnFeFByO7/PsK5prsIPSEtI6ManYsTcZS11rGZtk8ceId3BtusioqEsu4jFvRTw nx1kVED4u8oUeIAhkiCjoEjF7dFhv6vs7seb+f0piGR/Zp3svQfRC3a1rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIJxjLEi1KZVI9i/hQDZGRlkXnagMB8GA1UdIwQY MBaAFKZ4V3PfMTuRcRv2vFsUnswka56JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hZTkyMTEtYzUyZC00ODBkLWE1OTEt ZDc1ODY5YzBjNzFlLzEvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9hZTkyMTEtYzUyZC00ODBkLWE1OTEtZDc1ODY5YzBjNzFl LzEvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD0iuFayF 0Qip8xTQc1iwWETGEqvHSI8Taayd9tyt8tXQzTJsuuZ/kUTecF2FVA7jWl2WkDrc eysqKeQ2eCYfhUNvtQ6Y3nGU3pQmFUV7NDTnGWDi562u3VJ0vxxx+EASyVTeN/0N kZe7XASDvFmF6fvwYQ7jy0j8nXEceFt9JEVAms9vWvGxQuUNo67Own/HK45rNyCT 2rN1k/mwfMXxFRU/JRbL3UgwRmrCgb6+DbF6mbv/xAZ0sf/hieoI523+p3nu8xh+ jIWefYe9aL/WM4n8PiObj/0T2lPoGmPBDZDMvYksbZXTOlnHnVDrZRylBvCboY2h l13H9f5B6Sl75w== -----END CERTIFICATE-----Generated at Wed Dec 24 11:31:08 2025 by rpki-client