This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft File: pNAp8sMhrbWeyl_KV6Hrm99THWo.mft (raw, json) Hash identifier: mWmBIjomXhSEBv1yAU7/bvKUxrRFBoRFpzV95tsGfU0= Subject key identifier: 42:9D:FA:96:CF:22:9C:D2:BF:93:2D:CD:B7:AF:8B:B6:41:D1:C6:52 Authority key identifier: A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A Certificate issuer: /CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a Certificate serial: 019B337B0D7E4F1DD01F040265DF59B93E2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 22:01:00 +0000 Manifest this update: Thu 18 Dec 2025 22:01:00 +0000 Manifest next update: Fri 19 Dec 2025 22:01:00 +0000 Files and hashes: 1: pNAp8sMhrbWeyl_KV6Hrm99THWo.crl (hash: cz1kC4udazqIMfmPTI7HC9OqI6lyE1QHHYk+4jVG5WU=) 2: yPrWz37IXjB7ODdHPO3TzqpY_oY.roa (hash: 34zVN/3obTpRgYhbmY7ABdm+4sQRJRCWRUdOZLf3tEk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:0d:7e:4f:1d:d0:1f:04:02:65:df:59:b9:3e:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a Validity Not Before: Dec 18 22:01:00 2025 GMT Not After : Dec 19 22:01:00 2025 GMT Subject: CN=429dfa96cf229cd2bf932dcdb7af8bb641d1c652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ed:d9:7c:25:a6:66:ba:bc:27:a3:df:83:66: 72:61:61:49:9d:d8:58:62:50:af:f1:6e:da:e4:1a: c9:6a:ee:c2:ea:9a:9d:f1:86:1d:b2:df:cf:5f:b2: e9:df:87:22:57:e8:59:86:c2:59:6e:eb:7b:e5:8d: fb:ac:b6:aa:4c:73:69:65:da:34:18:67:cc:87:fc: e0:14:27:e3:98:a9:df:5a:21:c3:cb:e8:c2:07:a8: 9e:37:20:7e:e1:c1:2c:23:4f:67:62:49:a6:c8:53: da:70:a5:2e:b7:d6:8e:6a:ae:07:7f:58:9c:ba:39: 65:67:29:8e:fa:89:92:fb:f4:95:b8:60:63:67:c3: 5d:6b:e0:e0:bc:b9:87:60:a5:6c:a8:1f:0e:b4:da: 2e:5f:41:d5:4f:2e:56:fb:77:90:17:5e:d9:21:71: e8:b1:82:6a:f9:1d:c9:62:2b:22:da:79:49:b3:49: 34:3f:4a:b8:1b:93:cd:79:82:71:7e:80:c0:04:5e: f3:1b:3e:a7:d5:34:a2:b5:24:94:4e:7b:c7:5a:11: 27:ab:c1:7b:cf:80:3a:5d:90:93:e6:3c:a0:7d:c5: 43:6e:ef:b9:d6:16:eb:bf:80:c4:ac:b0:63:69:f7: 45:32:23:d9:bc:51:37:00:7b:dc:a3:be:d8:6a:6f: ea:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:9D:FA:96:CF:22:9C:D2:BF:93:2D:CD:B7:AF:8B:B6:41:D1:C6:52 X509v3 Authority Key Identifier: keyid:A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:91:00:9a:c5:f0:c9:c6:e4:d4:5d:90:de:93:e2:d1:e5:14: 6f:45:a6:8a:0c:cf:bb:31:fb:5f:38:26:ac:25:b3:fe:0d:8a: 66:fe:c6:12:49:c1:32:62:29:ea:30:0d:8f:a3:ec:01:4b:a7: 27:ba:3c:34:e9:57:ae:55:fe:41:f7:0e:5d:dd:23:79:da:c5: c4:52:12:21:3e:bc:bb:e2:0f:f6:96:9e:5b:0c:fe:f0:ab:5d: 9f:f2:bd:09:36:36:dc:a1:d2:bd:32:02:18:c7:71:9d:a9:68: e2:09:66:f5:d9:9b:db:d1:dd:4f:2d:96:4c:46:15:89:76:33: 2d:e3:cb:ee:32:3c:05:ce:e9:74:9a:0b:a8:a8:4c:34:91:a7: 65:d3:cc:88:2f:10:1c:e1:54:4f:a2:bc:ce:83:40:50:ab:0e: be:b1:49:75:98:e8:5d:f2:81:90:53:fc:96:04:1f:22:87:38: 89:3a:6b:aa:a2:61:c1:40:ea:74:e4:63:55:4e:af:59:50:33: c8:91:7f:18:aa:2c:f7:86:56:03:93:d4:de:e5:22:1f:0d:ef: e6:e7:67:ee:96:76:1e:1e:c0:67:2a:70:8f:3e:16:81:a8:c7: 19:e3:55:01:7c:49:b0:41:6d:ce:92:9a:ab:1a:3f:56:a8:48: 2b:aa:4f:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszew1+Tx3QHwQCZd9ZuT4sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZDAyOWYyYzMyMWFkYjU5ZWNhNWZjYTU3YTFlYjliZGY1 MzFkNmEwHhcNMjUxMjE4MjIwMTAwWhcNMjUxMjE5MjIwMTAwWjAzMTEwLwYDVQQD Eyg0MjlkZmE5NmNmMjI5Y2QyYmY5MzJkY2RiN2FmOGJiNjQxZDFjNjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+3ZfCWmZrq8J6Pfg2ZyYWFJndhY YlCv8W7a5BrJau7C6pqd8YYdst/PX7Lp34ciV+hZhsJZbut75Y37rLaqTHNpZdo0 GGfMh/zgFCfjmKnfWiHDy+jCB6ieNyB+4cEsI09nYkmmyFPacKUut9aOaq4Hf1ic ujllZymO+omS+/SVuGBjZ8Nda+DgvLmHYKVsqB8OtNouX0HVTy5W+3eQF17ZIXHo sYJq+R3JYisi2nlJs0k0P0q4G5PNeYJxfoDABF7zGz6n1TSitSSUTnvHWhEnq8F7 z4A6XZCT5jygfcVDbu+51hbrv4DErLBjafdFMiPZvFE3AHvco77Yam/qFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEKd+pbPIpzSv5Mtzbevi7ZB0cZSMB8GA1UdIwQY MBaAFKTQKfLDIa21nspfyleh65vfUx1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE5BcDhzTWhyYldleWxfS1Y2SHJtOTlUSFdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xMjY3NTYtOWE5NC00YTkxLWJmNDct OGFkNmZmYjI2MTdkLzEvcE5BcDhzTWhyYldleWxfS1Y2SHJtOTlUSFdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8xMjY3NTYtOWE5NC00YTkxLWJmNDctOGFkNmZmYjI2MTdk LzEvcE5BcDhzTWhyYldleWxfS1Y2SHJtOTlUSFdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgpEAmsXw ycbk1F2Q3pPi0eUUb0WmigzPuzH7XzgmrCWz/g2KZv7GEknBMmIp6jANj6PsAUun J7o8NOlXrlX+QfcOXd0jedrFxFISIT68u+IP9paeWwz+8Ktdn/K9CTY23KHSvTIC GMdxnalo4glm9dmb29HdTy2WTEYViXYzLePL7jI8Bc7pdJoLqKhMNJGnZdPMiC8Q HOFUT6K8zoNAUKsOvrFJdZjoXfKBkFP8lgQfIoc4iTprqqJhwUDqdORjVU6vWVAz yJF/GKos94ZWA5PU3uUiHw3v5udn7pZ2Hh7AZypwjz4WgajHGeNVAXxJsEFtzpKa qxo/VqhIK6pPag== -----END CERTIFICATE-----Generated at Fri Dec 19 01:56:33 2025 by rpki-client