This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft File: pat5hX5owCBczi8RpTh6avofiJU.mft (raw, json) Hash identifier: IKr1BOS+NFW6+CdKriVQMqpnfwW7qs+SMO8fSYqbuas= Subject key identifier: 2D:93:29:E3:E5:FC:F9:27:5A:EC:ED:B9:8C:A6:AC:84:EE:8D:10:E4 Authority key identifier: A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95 Certificate issuer: /CN=a5ab79857e68c0205cce2f11a5387a6afa1f8895 Certificate serial: 019B4B838340095136F129A0735011DCA9F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft Manifest number: 1793 Signing time: Tue 23 Dec 2025 14:01:08 +0000 Manifest this update: Tue 23 Dec 2025 14:01:08 +0000 Manifest next update: Wed 24 Dec 2025 14:01:08 +0000 Files and hashes: 1: RJc6jzAyS3uWboc6tEy0sbhbczk.roa (hash: Tl0N+n4FID6GW+L+lL7UDQWc6s/Qw80QVfgROFxq4Tw=) 2: lGQ5oAC4DvbrVczVYtetvVMraGI.roa (hash: RPF4xGL/jJtG/0h2vD9Z4Pt0zkSh8uypUluux6hYGEQ=) 3: pat5hX5owCBczi8RpTh6avofiJU.crl (hash: MNqLZAmd5480eSR0H+nCb7IyqTwUL/FwThXonwWZAsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 14:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:83:83:40:09:51:36:f1:29:a0:73:50:11:dc:a9:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5ab79857e68c0205cce2f11a5387a6afa1f8895 Validity Not Before: Dec 23 14:01:08 2025 GMT Not After : Dec 24 14:01:08 2025 GMT Subject: CN=2d9329e3e5fcf9275aecedb98ca6ac84ee8d10e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:05:e3:63:03:ff:36:58:ba:9e:64:27:81:e1: 98:0c:94:21:35:aa:3a:72:f0:e1:23:f6:d3:12:44: c8:d5:92:02:27:d8:49:d9:13:cd:8f:61:bf:be:2f: 01:ce:bf:d3:58:8d:8d:e9:19:14:d6:29:9e:8d:ba: 09:e7:bc:34:05:63:a8:e8:6c:db:49:e4:6e:31:0f: e7:de:10:9f:d5:5f:f8:44:a2:78:1d:a3:9d:8f:13: 69:9f:76:ad:ad:63:b4:1f:83:5d:6a:34:3d:a3:85: 46:12:71:8a:2a:aa:66:7d:f8:1d:d1:22:1a:43:1f: 9e:32:1b:b9:5c:9e:cc:f7:7c:50:fd:a5:0f:88:27: 99:8f:e2:b7:18:1a:64:d4:ab:da:d9:f7:0d:c4:ca: 5c:3e:03:2e:61:7f:11:f3:67:e0:47:73:92:cd:4b: 19:6b:53:2e:0f:89:d6:1f:de:74:0b:53:57:0a:27: ca:1a:f5:2e:e2:ac:28:43:ac:f4:63:2d:46:90:4c: 45:d2:72:93:5e:11:97:56:e0:49:52:f8:6f:3e:ee: 72:e1:54:ea:d8:3b:24:7d:9c:78:da:5e:3f:da:3c: ff:2f:5e:20:ff:3d:5c:bf:bb:b4:d6:ca:4c:9f:cf: e0:2f:26:89:89:33:23:ab:31:f0:77:7d:77:fd:f7: 58:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:93:29:E3:E5:FC:F9:27:5A:EC:ED:B9:8C:A6:AC:84:EE:8D:10:E4 X509v3 Authority Key Identifier: keyid:A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:db:c1:f0:f9:7e:8a:f6:87:68:d6:9c:88:cb:c5:a7:1a:e2: 25:2b:1d:df:54:34:77:43:98:24:cb:0c:ef:6d:7d:3e:bd:3a: 2f:2c:d6:93:6a:3e:e6:b3:84:66:c1:3d:5d:c1:13:e2:d0:20: a9:36:99:fc:8a:9c:b4:41:fb:58:ef:08:b2:bb:fb:d3:24:32: 4f:a2:25:8b:54:34:26:27:bd:bf:15:cc:93:8e:54:e1:77:88: 27:60:0e:b8:61:e6:28:56:55:4b:c7:f9:90:75:64:aa:d2:4b: d8:b6:98:94:05:ad:38:06:0c:57:b6:1e:f6:ec:97:ff:ce:11: f8:cb:98:da:55:dc:96:30:d0:64:89:0d:e8:23:ac:a2:d8:49: fc:82:22:88:6e:7b:cc:3c:77:70:ce:75:7f:31:05:8c:bf:72: 64:79:30:fd:f6:70:24:be:18:75:d8:78:3c:3c:78:a0:9c:b4: 9b:00:05:23:5d:6d:2a:ca:45:96:72:cb:c7:6f:de:10:7c:0c: 50:7d:f7:e4:fc:cb:19:4e:ba:32:0b:32:ac:a5:1b:b4:ba:f9: 4a:31:06:f0:f5:ac:59:9b:3c:44:eb:ff:54:e8:6c:0b:d2:00: 36:41:4c:22:9f:e6:ce:4c:b8:17:fe:23:1f:15:6f:fd:0d:57: a7:92:49:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLg4NACVE28Smgc1AR3Kn0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YWI3OTg1N2U2OGMwMjA1Y2NlMmYxMWE1Mzg3YTZhZmEx Zjg4OTUwHhcNMjUxMjIzMTQwMTA4WhcNMjUxMjI0MTQwMTA4WjAzMTEwLwYDVQQD EygyZDkzMjllM2U1ZmNmOTI3NWFlY2VkYjk4Y2E2YWM4NGVlOGQxMGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQXjYwP/Nli6nmQngeGYDJQhNao6 cvDhI/bTEkTI1ZICJ9hJ2RPNj2G/vi8Bzr/TWI2N6RkU1imejboJ57w0BWOo6Gzb SeRuMQ/n3hCf1V/4RKJ4HaOdjxNpn3atrWO0H4NdajQ9o4VGEnGKKqpmffgd0SIa Qx+eMhu5XJ7M93xQ/aUPiCeZj+K3GBpk1Kva2fcNxMpcPgMuYX8R82fgR3OSzUsZ a1MuD4nWH950C1NXCifKGvUu4qwoQ6z0Yy1GkExF0nKTXhGXVuBJUvhvPu5y4VTq 2DskfZx42l4/2jz/L14g/z1cv7u01spMn8/gLyaJiTMjqzHwd313/fdY7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC2TKePl/PknWuztuYymrITujRDkMB8GA1UdIwQY MBaAFKWreYV+aMAgXM4vEaU4emr6H4iVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGF0NWhYNW93Q0Jjemk4UnBUaDZhdm9maUpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9lMmE1NWMtYjVlNi00OTlhLWI3Mjkt MWU1OGFjODc5MjRhLzEvcGF0NWhYNW93Q0Jjemk4UnBUaDZhdm9maUpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9lMmE1NWMtYjVlNi00OTlhLWI3MjktMWU1OGFjODc5MjRh LzEvcGF0NWhYNW93Q0Jjemk4UnBUaDZhdm9maUpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAndvB8Pl+ ivaHaNaciMvFpxriJSsd31Q0d0OYJMsM7219Pr06LyzWk2o+5rOEZsE9XcET4tAg qTaZ/IqctEH7WO8Isrv70yQyT6Ili1Q0Jie9vxXMk45U4XeIJ2AOuGHmKFZVS8f5 kHVkqtJL2LaYlAWtOAYMV7Ye9uyX/84R+MuY2lXcljDQZIkN6COsothJ/IIiiG57 zDx3cM51fzEFjL9yZHkw/fZwJL4Yddh4PDx4oJy0mwAFI11tKspFlnLLx2/eEHwM UH335PzLGU66MgsyrKUbtLr5SjEG8PWsWZs8ROv/VOhsC9IANkFMIp/mzky4F/4j HxVv/Q1Xp5JJyQ== -----END CERTIFICATE-----Generated at Tue Dec 23 18:34:02 2025 by rpki-client