This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft File: PaIT8CpnCwU3DFXszOkP4a1wxJs.mft (raw, json) Hash identifier: iQHkj41Ks1BoMQPmYrdMZDDX0LDXu1NEqN23tgICBQg= Subject key identifier: 8B:86:5B:00:D4:19:DC:99:6A:48:F7:F5:BB:91:31:EF:34:82:C7:63 Authority key identifier: 3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B Certificate issuer: /CN=3da213f02a670b05370c55eccce90fe1ad70c49b Certificate serial: 019B5BD29A5735431A4B2B2129DBAF2B1DD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft Manifest number: 1796 Signing time: Fri 26 Dec 2025 18:01:27 +0000 Manifest this update: Fri 26 Dec 2025 18:01:27 +0000 Manifest next update: Sat 27 Dec 2025 18:01:27 +0000 Files and hashes: 1: PaIT8CpnCwU3DFXszOkP4a1wxJs.crl (hash: L10pl0NUGUWkVFYrjcNKcE7KBlBdLEEFL1fsaiCAw2g=) 2: YwjVQrwYeFZPTMiqnnut8eO8rkw.roa (hash: o942C1AhbUgPtgCYdOmXc46V0WMZFJ062pG0YGycwpc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:d2:9a:57:35:43:1a:4b:2b:21:29:db:af:2b:1d:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3da213f02a670b05370c55eccce90fe1ad70c49b Validity Not Before: Dec 26 18:01:27 2025 GMT Not After : Dec 27 18:01:27 2025 GMT Subject: CN=8b865b00d419dc996a48f7f5bb9131ef3482c763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:10:7c:fe:c0:5d:e4:b7:35:00:b7:fd:8e:40: 8a:5f:7d:9b:3a:e9:2a:0e:dc:71:1d:86:c4:19:65: 66:66:17:8a:c9:75:ec:82:86:f5:ec:db:6e:cf:a2: 5e:66:cf:bc:3f:a9:17:42:c6:58:09:39:45:d8:d3: 4b:6b:14:9a:00:98:ad:d8:45:31:87:bb:eb:e7:86: f5:69:14:cc:2c:6e:42:82:8d:fb:58:22:95:73:ca: 62:6b:d0:1c:ec:96:42:5f:d9:32:28:d2:e5:30:46: ec:8a:66:98:ed:ea:85:7b:41:64:56:26:88:f9:2e: eb:0c:f9:2a:1b:e3:f4:91:9f:69:4a:b3:69:68:0a: bd:00:9c:a0:06:d6:65:6f:c8:cc:da:c5:50:65:58: fc:df:be:85:7a:b5:ce:63:8d:29:cc:e1:dc:d2:90: a8:d7:5c:03:a9:f6:34:4f:2c:3d:61:69:0a:ec:a5: 58:f4:58:5b:a0:bd:75:3f:bb:37:77:68:a5:59:61: 57:bb:52:c4:15:b8:ab:97:f6:79:54:42:51:ae:b4: 4c:5a:7e:b9:8c:72:e8:3f:96:6b:b1:a0:ad:0e:6c: 6c:86:64:16:23:63:2c:9e:d8:b1:e1:e6:cd:c3:f1: 34:00:c5:7b:ec:89:d9:1e:fa:33:32:87:d5:02:6a: bc:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:86:5B:00:D4:19:DC:99:6A:48:F7:F5:BB:91:31:EF:34:82:C7:63 X509v3 Authority Key Identifier: keyid:3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:82:d5:e6:ba:27:33:b5:b3:a6:3e:fe:56:5f:0d:0e:07:2f: 6a:2f:0d:4b:f7:a8:8b:98:0c:fd:05:a6:88:e2:d1:15:3e:da: d4:0b:ec:d5:42:dc:c5:45:1d:61:59:2f:e6:3d:70:10:82:d9: 7b:16:e0:b4:20:74:a8:25:95:c9:32:41:a1:c9:c3:7f:c3:69: 58:4a:9b:70:0a:64:0e:dd:a7:6e:7b:cb:5d:a1:2c:6f:58:ea: 6c:fb:91:f4:4e:71:f8:a8:4f:6a:fd:e6:cf:bf:0c:a4:35:73: a9:b9:3c:0f:44:a5:21:89:3e:2c:b0:f2:fe:b8:6b:e4:16:7e: af:3e:97:ab:e9:cf:ef:cd:c8:69:e3:da:c3:ec:c4:2a:ab:22: 97:2a:48:46:7d:03:67:c5:bb:20:a1:7f:a6:c5:d5:45:77:0e: 9f:bb:0a:e2:40:7f:a7:06:1c:69:d4:3a:63:ed:ad:3d:92:70: 1c:ed:7b:9b:18:c9:ad:ef:76:b8:bb:cf:32:47:59:c6:ca:1b: d4:7c:12:e5:fa:88:7c:c3:81:82:7b:b6:fc:2e:84:d6:a7:ed: 4e:bf:6e:fd:73:7a:a4:57:1f:3b:6e:d7:d3:7c:5a:84:30:62: 2c:04:ae:51:70:3e:f1:6f:4c:22:46:0c:58:d3:98:a2:38:2b: 68:5d:dd:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtb0ppXNUMaSyshKduvKx3QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkYTIxM2YwMmE2NzBiMDUzNzBjNTVlY2NjZTkwZmUxYWQ3 MGM0OWIwHhcNMjUxMjI2MTgwMTI3WhcNMjUxMjI3MTgwMTI3WjAzMTEwLwYDVQQD Eyg4Yjg2NWIwMGQ0MTlkYzk5NmE0OGY3ZjViYjkxMzFlZjM0ODJjNzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hB8/sBd5Lc1ALf9jkCKX32bOukq DtxxHYbEGWVmZheKyXXsgob17Ntuz6JeZs+8P6kXQsZYCTlF2NNLaxSaAJit2EUx h7vr54b1aRTMLG5Cgo37WCKVc8pia9Ac7JZCX9kyKNLlMEbsimaY7eqFe0FkViaI +S7rDPkqG+P0kZ9pSrNpaAq9AJygBtZlb8jM2sVQZVj8376FerXOY40pzOHc0pCo 11wDqfY0Tyw9YWkK7KVY9FhboL11P7s3d2ilWWFXu1LEFbirl/Z5VEJRrrRMWn65 jHLoP5ZrsaCtDmxshmQWI2Msntix4ebNw/E0AMV77InZHvozMofVAmq8dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIuGWwDUGdyZakj39buRMe80gsdjMB8GA1UdIwQY MBaAFD2iE/AqZwsFNwxV7MzpD+GtcMSbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGFJVDhDcG5Dd1UzREZYc3pPa1A0YTF3eEpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9lN2Y2YWEtNmVlNC00YjRjLTg2ODEt N2RiOGViYTc5ZWYxLzEvUGFJVDhDcG5Dd1UzREZYc3pPa1A0YTF3eEpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9lN2Y2YWEtNmVlNC00YjRjLTg2ODEtN2RiOGViYTc5ZWYx LzEvUGFJVDhDcG5Dd1UzREZYc3pPa1A0YTF3eEpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAboLV5ron M7Wzpj7+Vl8NDgcvai8NS/eoi5gM/QWmiOLRFT7a1Avs1ULcxUUdYVkv5j1wEILZ exbgtCB0qCWVyTJBocnDf8NpWEqbcApkDt2nbnvLXaEsb1jqbPuR9E5x+KhPav3m z78MpDVzqbk8D0SlIYk+LLDy/rhr5BZ+rz6Xq+nP783IaePaw+zEKqsilypIRn0D Z8W7IKF/psXVRXcOn7sK4kB/pwYcadQ6Y+2tPZJwHO17mxjJre92uLvPMkdZxsob 1HwS5fqIfMOBgnu2/C6E1qftTr9u/XN6pFcfO27X03xahDBiLASuUXA+8W9MIkYM WNOYojgraF3daQ== -----END CERTIFICATE-----Generated at Fri Dec 26 23:02:56 2025 by rpki-client