This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft File: pAoIH7qPsz77RiWe-T9oeNcBUOs.mft (raw, json) Hash identifier: t+03U59JNJ4A2grBlQVvT7XfEXcivHNyZrP47RF5SdE= Subject key identifier: 0A:90:7D:3E:DD:1D:0F:B5:CF:9C:F6:C6:2D:0F:78:F8:C0:7A:0B:0E Authority key identifier: A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB Certificate issuer: /CN=a40a081fba8fb33efb46259ef93f6878d70150eb Certificate serial: 019AF2AD4F65E79CB5CC7C6D5EC47253D152 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft Manifest number: 0CBE Signing time: Sat 06 Dec 2025 08:00:35 +0000 Manifest this update: Sat 06 Dec 2025 08:00:35 +0000 Manifest next update: Sun 07 Dec 2025 08:00:35 +0000 Files and hashes: 1: YA2knZBu4eCfckA4blXB6sNuHgY.roa (hash: shDh2slGwfDF1H72vnxsQTQ+XE9meHhIbU3+zi7hhrg=) 2: da6BAAfAoBTasYkztEyeFbO3dYM.roa (hash: svpwmdWuctN25b8D5PcCmhJa0TO40FFmvswQDucJFfQ=) 3: pAoIH7qPsz77RiWe-T9oeNcBUOs.crl (hash: RZKzVmT/SX0YFjRsg8EGZm7oNXf35H8z5MRLWTEFm8g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:4f:65:e7:9c:b5:cc:7c:6d:5e:c4:72:53:d1:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a40a081fba8fb33efb46259ef93f6878d70150eb Validity Not Before: Dec 6 08:00:35 2025 GMT Not After : Dec 7 08:00:35 2025 GMT Subject: CN=0a907d3edd1d0fb5cf9cf6c62d0f78f8c07a0b0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e6:4f:69:4f:61:eb:64:03:9d:00:80:58:81: cf:17:97:ee:fa:cc:79:bd:0c:1e:b4:a4:9f:18:e1: 50:22:71:32:b5:8a:b3:8a:79:9d:66:0b:11:3c:cb: 98:5a:2c:1b:79:a6:25:5d:8c:7a:0d:07:77:d5:61: 73:53:2e:62:ed:8c:41:59:9f:5d:b0:ac:6f:04:66: 80:c3:d8:3f:13:00:ba:ac:05:b3:83:2b:ed:5c:af: 4c:01:7e:8a:5f:21:28:d0:e1:77:7b:2f:42:82:3b: 92:c2:0e:d1:39:fb:b8:2d:96:d4:2c:5e:6e:9f:7f: dd:84:e3:b1:b3:17:f9:64:3a:28:31:01:15:81:ce: c9:2e:fb:93:7b:1e:53:7d:c5:5a:72:28:c1:a1:07: a7:28:2c:7a:cd:0b:20:5e:e2:23:a4:b0:7e:3c:4d: 0f:d4:b5:aa:d8:59:59:5f:0b:46:b3:6e:52:4c:3b: 39:2a:3a:ce:da:8e:11:0e:a6:5e:10:82:78:22:af: 68:b3:cb:b0:6b:c5:40:64:4a:d5:d9:34:29:5c:19: 23:56:f3:68:19:f6:ff:1c:4b:52:10:f9:c8:40:3d: b6:f8:13:60:2e:56:e8:da:59:95:c2:ef:3f:3b:e9: c6:91:3e:48:bf:a8:48:91:f9:72:59:96:79:75:52: a0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:90:7D:3E:DD:1D:0F:B5:CF:9C:F6:C6:2D:0F:78:F8:C0:7A:0B:0E X509v3 Authority Key Identifier: keyid:A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:2c:df:6e:53:bd:cf:90:f5:f9:e0:50:9d:94:79:ac:e0:78: 8d:a8:a5:78:35:92:b0:77:7c:07:ad:a1:c0:0e:3a:7d:12:27: a0:48:89:5c:e0:6e:59:8a:62:23:97:34:c1:30:a4:c0:88:1b: d9:ab:36:c6:c9:c8:0f:8a:1e:89:c5:2e:39:81:5d:b3:b2:e6: 46:63:d2:15:44:a2:18:6c:84:eb:cd:77:d8:a9:7a:c7:f2:f4: d6:48:c6:a5:cd:54:64:c6:94:4a:48:22:7d:f7:3e:cb:d1:cf: 40:51:cd:32:a8:be:8f:87:71:83:15:c5:6b:17:92:2f:dc:bd: 22:a8:fc:25:6d:13:d1:97:4e:70:a4:38:a8:84:47:97:ac:18: 8d:04:bc:d3:8e:18:52:24:1d:63:1f:22:93:bf:a5:0b:57:05: 0e:73:ab:2a:18:16:5f:c9:4a:70:cb:16:0c:3c:e8:cf:67:2b: 04:5b:ae:43:3e:60:2e:dd:87:47:f5:3e:5f:2b:7d:44:23:4f: 4c:00:d5:5f:43:e0:68:20:77:93:6d:06:88:a2:26:27:d7:1b: ed:57:92:5f:38:5d:23:4e:08:54:fd:ad:a9:eb:8c:ea:a5:68: fe:3c:7f:36:55:f6:ca:1d:08:bf:d2:9a:ae:76:6c:98:a8:95: 47:46:c3:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrU9l55y1zHxtXsRyU9FSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MGEwODFmYmE4ZmIzM2VmYjQ2MjU5ZWY5M2Y2ODc4ZDcw MTUwZWIwHhcNMjUxMjA2MDgwMDM1WhcNMjUxMjA3MDgwMDM1WjAzMTEwLwYDVQQD EygwYTkwN2QzZWRkMWQwZmI1Y2Y5Y2Y2YzYyZDBmNzhmOGMwN2EwYjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOZPaU9h62QDnQCAWIHPF5fu+sx5 vQwetKSfGOFQInEytYqzinmdZgsRPMuYWiwbeaYlXYx6DQd31WFzUy5i7YxBWZ9d sKxvBGaAw9g/EwC6rAWzgyvtXK9MAX6KXyEo0OF3ey9CgjuSwg7ROfu4LZbULF5u n3/dhOOxsxf5ZDooMQEVgc7JLvuTex5TfcVacijBoQenKCx6zQsgXuIjpLB+PE0P 1LWq2FlZXwtGs25STDs5KjrO2o4RDqZeEIJ4Iq9os8uwa8VAZErV2TQpXBkjVvNo Gfb/HEtSEPnIQD22+BNgLlbo2lmVwu8/O+nGkT5Iv6hIkflyWZZ5dVKgSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAqQfT7dHQ+1z5z2xi0PePjAegsOMB8GA1UdIwQY MBaAFKQKCB+6j7M++0Ylnvk/aHjXAVDrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEFvSUg3cVBzejc3UmlXZS1UOW9lTmNCVU9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9jYjI3YTAtOTRkMi00OWFhLTg1ZWEt YWU5MWU0NjYyZDkzLzEvcEFvSUg3cVBzejc3UmlXZS1UOW9lTmNCVU9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9jYjI3YTAtOTRkMi00OWFhLTg1ZWEtYWU5MWU0NjYyZDkz LzEvcEFvSUg3cVBzejc3UmlXZS1UOW9lTmNCVU9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARyzfblO9 z5D1+eBQnZR5rOB4jaileDWSsHd8B62hwA46fRInoEiJXOBuWYpiI5c0wTCkwIgb 2as2xsnID4oeicUuOYFds7LmRmPSFUSiGGyE68132Kl6x/L01kjGpc1UZMaUSkgi ffc+y9HPQFHNMqi+j4dxgxXFaxeSL9y9Iqj8JW0T0ZdOcKQ4qIRHl6wYjQS8044Y UiQdYx8ik7+lC1cFDnOrKhgWX8lKcMsWDDzoz2crBFuuQz5gLt2HR/U+Xyt9RCNP TADVX0PgaCB3k20GiKImJ9cb7VeSXzhdI04IVP2tqeuM6qVo/jx/NlX2yh0Iv9Ka rnZsmKiVR0bD+A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:09 2025 by rpki-client