This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft File: pCAAxPTsSgPNTTZX4BtwA07CO5c.mft (raw, json) Hash identifier: j6CxVLJOhEz9b5QrvK2kUt8g3QBc/fGBY23tqzDCHJ8= Subject key identifier: 82:D6:42:0C:E0:2C:9B:92:0B:6A:D4:EB:B7:71:CC:AE:0F:CE:BD:92 Authority key identifier: A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97 Certificate issuer: /CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97 Certificate serial: 019B30435B712183757A0A92D46A11E650E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft Manifest number: 1786 Signing time: Thu 18 Dec 2025 07:01:19 +0000 Manifest this update: Thu 18 Dec 2025 07:01:19 +0000 Manifest next update: Fri 19 Dec 2025 07:01:19 +0000 Files and hashes: 1: 41_o2BIwv76TF64VP1DAdfjTxPo.roa (hash: ZsvXvwGlxNqhMT0bqp079C/5ezKY6fiYSiOoxT1NO2o=) 2: 4mRSyOWbS8hQScfHLulGf4Y6ZgQ.roa (hash: o3JSSVtXNFoFrqvnt6XhA+Y0uItKhtMcyPKqriXcd08=) 3: Qw_MgL0jZxAEcUaQV1xqF4PVe2w.roa (hash: K6DZu82eoM3254ECuNlV9U+0ldDohrzL2NCBM61LLzM=) 4: Zl3HHM0URwuJSk9LlxkNHY3QJSA.roa (hash: Ael3rTKnV/t1wOUc5dyvS7YOaqG/u0QZHukcBegGERg=) 5: pCAAxPTsSgPNTTZX4BtwA07CO5c.crl (hash: /UAKsytUZoaIXkha/Ip4SmlVrKeL57z95hxfhhNL9C0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:43:5b:71:21:83:75:7a:0a:92:d4:6a:11:e6:50:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97 Validity Not Before: Dec 18 07:01:19 2025 GMT Not After : Dec 19 07:01:19 2025 GMT Subject: CN=82d6420ce02c9b920b6ad4ebb771ccae0fcebd92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:05:24:31:1e:a5:dd:c8:f2:b2:a6:c3:e3:45: 48:18:a2:d3:71:f5:30:4e:cd:96:9b:79:e7:8f:be: 61:5d:b6:58:d1:07:c2:e7:12:77:ab:da:4c:e7:20: 5f:92:58:61:1c:9f:cb:18:0b:53:28:e4:95:38:2c: 63:10:8e:64:70:17:97:02:d9:d6:c5:67:9a:f5:df: fa:82:4c:a5:71:70:58:5e:df:4c:02:c9:c6:0d:0d: 81:fc:e7:3c:8f:37:59:eb:84:48:2f:3e:01:34:8e: 95:88:ac:39:a9:5d:b2:69:64:e0:b9:28:d1:09:0f: 04:b6:72:0d:6c:44:5e:f2:59:34:00:10:2f:3e:f0: c7:4c:c4:85:39:28:6b:6f:35:2a:ac:aa:e5:dc:69: 9e:ed:b3:20:63:76:17:60:3d:d5:c0:16:08:05:51: 0d:e6:9c:7b:0c:43:68:fb:6c:e5:79:a2:ee:b7:e4: 7c:3b:33:f4:42:82:a6:cb:d3:e8:7f:1e:30:ac:f9: ed:f5:8d:06:80:c6:80:ac:45:e0:7f:75:3b:ef:7d: 5d:2e:63:1e:36:93:04:dd:8f:4a:0d:75:3b:be:78: 14:c2:3e:c4:62:9d:2b:91:6c:24:bc:7f:63:5e:de: b3:d4:13:28:9b:16:37:c1:65:14:27:a1:c3:e3:4d: 29:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:D6:42:0C:E0:2C:9B:92:0B:6A:D4:EB:B7:71:CC:AE:0F:CE:BD:92 X509v3 Authority Key Identifier: keyid:A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:9b:ed:4a:3e:34:f2:2f:cc:5e:88:c8:70:5a:4f:da:53:c3: ba:91:41:d7:4b:02:a7:a8:46:49:99:4a:6d:81:3e:f7:3b:29: c9:a6:24:9c:53:6b:45:6b:98:ef:7d:e3:e0:76:ef:7e:ea:07: 48:c3:33:62:49:b1:62:77:cb:72:76:de:bb:74:60:c8:3b:25: 15:89:b3:db:38:8a:94:83:31:53:95:51:bb:87:73:5f:6d:86: 9a:2e:cf:0b:8a:38:12:18:86:97:ec:62:32:f4:69:5e:54:2a: a3:1b:49:5e:20:75:44:69:b9:52:62:f3:a2:38:1b:13:4e:52: f1:a4:c3:dc:15:00:dd:6e:29:d2:7a:3e:6d:9a:8b:b3:2a:f0: 4b:53:05:c6:af:d6:47:19:61:5b:f3:02:3e:81:11:cb:e4:76: 34:9f:4e:93:1f:91:d0:2c:96:90:ea:1b:85:af:e6:22:ff:fc: 18:06:1e:8c:30:ed:00:54:83:76:21:12:cc:52:66:09:ed:da: 5a:62:4a:73:65:65:aa:34:38:da:42:11:6d:2a:c6:fd:07:54: 96:fc:33:c1:19:1f:0d:e5:ba:71:59:26:d3:cc:35:61:e6:4e: f5:e0:58:5b:a3:65:d6:a1:b1:d3:ef:72:e9:ff:86:3a:40:e7: 19:e0:c7:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswQ1txIYN1egqS1GoR5lDiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MjAwMGM0ZjRlYzRhMDNjZDRkMzY1N2UwMWI3MDAzNGVj MjNiOTcwHhcNMjUxMjE4MDcwMTE5WhcNMjUxMjE5MDcwMTE5WjAzMTEwLwYDVQQD Eyg4MmQ2NDIwY2UwMmM5YjkyMGI2YWQ0ZWJiNzcxY2NhZTBmY2ViZDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wUkMR6l3cjysqbD40VIGKLTcfUw Ts2Wm3nnj75hXbZY0QfC5xJ3q9pM5yBfklhhHJ/LGAtTKOSVOCxjEI5kcBeXAtnW xWea9d/6gkylcXBYXt9MAsnGDQ2B/Oc8jzdZ64RILz4BNI6ViKw5qV2yaWTguSjR CQ8EtnINbERe8lk0ABAvPvDHTMSFOShrbzUqrKrl3Gme7bMgY3YXYD3VwBYIBVEN 5px7DENo+2zleaLut+R8OzP0QoKmy9Pofx4wrPnt9Y0GgMaArEXgf3U7731dLmMe NpME3Y9KDXU7vngUwj7EYp0rkWwkvH9jXt6z1BMomxY3wWUUJ6HD400pUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFILWQgzgLJuSC2rU67dxzK4Pzr2SMB8GA1UdIwQY MBaAFKQgAMT07EoDzU02V+AbcANOwjuXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcENBQXhQVHNTZ1BOVFRaWDRCdHdBMDdDTzVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xNjNkNzctNGZlYS00MTMxLWJlY2It MGYyMmQ4OTY4OWEwLzEvcENBQXhQVHNTZ1BOVFRaWDRCdHdBMDdDTzVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xNjNkNzctNGZlYS00MTMxLWJlY2ItMGYyMmQ4OTY4OWEw LzEvcENBQXhQVHNTZ1BOVFRaWDRCdHdBMDdDTzVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWZvtSj40 8i/MXojIcFpP2lPDupFB10sCp6hGSZlKbYE+9zspyaYknFNrRWuY733j4HbvfuoH SMMzYkmxYnfLcnbeu3RgyDslFYmz2ziKlIMxU5VRu4dzX22Gmi7PC4o4EhiGl+xi MvRpXlQqoxtJXiB1RGm5UmLzojgbE05S8aTD3BUA3W4p0no+bZqLsyrwS1MFxq/W RxlhW/MCPoERy+R2NJ9Okx+R0CyWkOobha/mIv/8GAYejDDtAFSDdiESzFJmCe3a WmJKc2VlqjQ42kIRbSrG/QdUlvwzwRkfDeW6cVkm08w1YeZO9eBYW6Nl1qGx0+9y 6f+GOkDnGeDHmw== -----END CERTIFICATE-----Generated at Thu Dec 18 14:06:06 2025 by rpki-client