This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft File: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft (raw, json) Hash identifier: ZZoTLQr8NhRJTi6/i4Z5ql02P/XdGQFP/fxJ80pJKYE= Subject key identifier: 03:AB:CA:CC:AB:E8:3E:2B:38:41:E9:29:72:A4:FC:87:91:7B:19:C3 Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Certificate serial: 019AFA9DBB4321CF31AC5803450C01CECDD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft Manifest number: 1440 Signing time: Sun 07 Dec 2025 21:00:32 +0000 Manifest this update: Sun 07 Dec 2025 21:00:32 +0000 Manifest next update: Mon 08 Dec 2025 21:00:32 +0000 Files and hashes: 1: 3MQ1Zm2jB8qgOjCAc_a0v-3nM_o.roa (hash: T4pVm2mU2N5el1g2HcnlglhN57e23NLVS7ny7NzSBL0=) 2: 4SEUaFHVUAL3abRJwnhpLcw21dk.roa (hash: Nz767QGxnFH79p/BW/8MOsNM3RviNN1Kvy4GgZgMyGs=) 3: FCFfx3p7hHCFHlKPZobVJyLJ5MI.roa (hash: 6JV0xEEqdwivRbZdMI4zo4Wpa9PWQK4gKoasAD6odWU=) 4: IYmUJK1vApyWT119wps-ukf2n9E.roa (hash: w1dWdBHD/FLi3tR98pk3iJlbhc1nR22X1Pwn/kqhO/0=) 5: KcuMI0SBvL5BPuYJm6BH3vJKAQ0.roa (hash: s0e2eWUrZQW14pJCqfjgMZ+ViTFNuU9345bizVg0sKY=) 6: MSrSUIwYGP5OzMFaA9dwr3mO4jY.roa (hash: OHzV5kP6uhO1eFoIB7t+WKfJjHs90j+a/iXQqOXuv30=) 7: N7C2a3H5ML3ydyNI5IDIoJ6m-6U.roa (hash: FJm0Nzs6ME/1+LojcQZMLdUu/cBqlxKE16Bs75fFFLw=) 8: Nf1rHETWcCnhWhR_uM_9B2P3jb8.roa (hash: pBdKIUwSvvQqLJChVbTbSEDRXa+Ll262+ax9ivbZD0o=) 9: OFTgwkdKspRJ_TvSv6vgx_ckdLQ.roa (hash: b7UPAbBCKcuRworqLaxy25e9Gx9nfc4PaZocWvp2h84=) 10: P7ti_IIQ8gSBeG-YTlNJsuFqQ_I.roa (hash: KrffniQ2i0hPMizjKFAUVE1GuQq0ig8NP7gMfdrW5so=) 11: RzvDJbgMFFQ3RXZZowAtkGpvaYQ.roa (hash: pXgfU5zLGpdaPENK8y9IOVL5xtiIt9Fk8RRzx12JQUw=) 12: WToItz8al9Sw1IRtEOUm1ku1TzY.roa (hash: cD3Nf3okXGtPiYuFOkPnzfMJHgIYmW52aVmaOwxOEN0=) 13: dcAEUZ_ghRVpaUYo3WWA9zUPe9U.roa (hash: AsvsdGamYH2cSArWOQT5cvLOD/2t8gp5MEnt/aWjLII=) 14: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl (hash: V8Y+OExMaE8X7p5WduoSiRiLm/k+BxZFtraZ9REjv9w=) 15: sVCQlL9zy4ci5k4im_qh1UgQSao.roa (hash: tXiv/i4AXQDYnVQqrjLO82vwz0zcYS5lORUFrc1ytqg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fa:9d:bb:43:21:cf:31:ac:58:03:45:0c:01:ce:cd:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Validity Not Before: Dec 7 21:00:32 2025 GMT Not After : Dec 8 21:00:32 2025 GMT Subject: CN=03abcaccabe83e2b3841e92972a4fc87917b19c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fc:ad:cf:17:d0:18:88:75:79:33:e5:53:44: 65:53:e4:77:43:e3:a6:9c:95:d5:b6:76:2e:2a:2e: d7:40:1c:b5:4d:02:7e:c9:66:ae:df:98:bf:3a:76: fc:90:f3:21:70:9e:da:08:43:92:87:e6:b4:bd:b0: bd:3f:d0:a8:a4:db:b9:84:c1:2e:63:3f:07:b6:0b: ca:1b:57:ca:56:af:ff:1e:51:3f:b2:33:fa:e3:cb: cc:0e:20:a6:1d:70:04:b6:3d:a5:32:08:4d:e0:d2: 68:13:de:4f:65:80:ed:21:b3:22:d1:d7:e0:cd:14: 28:37:f0:4a:d0:1e:e8:1a:39:0c:c0:c8:74:a0:6a: 16:db:3d:70:eb:97:13:8d:e6:98:79:c2:66:e4:81: 26:6a:40:8b:9c:bc:65:7f:48:e8:6a:36:b9:46:f0: 44:a9:67:30:cd:d8:b7:4d:47:02:b6:8e:a4:3a:6f: dd:8b:a2:24:f1:95:6f:58:5d:e5:6b:62:6d:8d:6a: 60:eb:9c:21:00:c5:49:37:fe:fd:1e:85:56:d6:d5: 1b:2b:d0:78:59:03:0e:a9:33:9a:50:4a:ed:56:ed: 2a:c8:e9:58:f2:60:78:4e:51:b5:ec:c4:3a:23:b6: a7:37:20:27:04:80:07:b6:90:c7:0e:fc:7b:94:0b: 5f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:AB:CA:CC:AB:E8:3E:2B:38:41:E9:29:72:A4:FC:87:91:7B:19:C3 X509v3 Authority Key Identifier: keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:ae:0a:c3:e2:91:6c:e9:d2:7e:65:61:31:93:36:b4:97:6b: e8:79:96:44:a5:c3:02:6f:48:ad:33:90:e7:75:81:f2:3b:d5: a4:6c:bf:c0:54:3d:18:57:91:bf:5f:f7:32:79:59:a9:71:9b: b0:78:b4:db:b5:5a:c6:98:3e:fd:95:b1:56:be:28:e6:08:4c: 4a:e1:3d:63:bd:67:26:05:e4:84:7a:6c:08:57:30:b9:c7:c2: f7:d2:97:ad:8c:fb:e1:2c:fd:9e:85:a2:cf:ee:32:75:3f:9b: 74:cc:3d:29:ad:8f:9e:a8:fa:21:db:cd:1f:85:a1:e7:fe:7f: 20:4d:93:54:6c:5d:e4:aa:92:98:c2:ee:d5:b5:9a:ad:61:a5: b8:2a:03:2f:63:e9:28:d9:09:6a:46:de:b7:3a:af:85:a2:23: 03:64:b7:bd:e3:2c:a1:89:d2:d6:69:c5:14:57:d7:5b:b4:bf: d4:8f:33:59:45:6a:5d:16:f7:d0:0d:2a:69:0a:e0:62:37:ed: 4e:ad:a8:f9:88:2b:6f:40:23:ba:0f:70:04:6e:10:b6:4d:77: ee:40:a9:c2:2a:df:f5:4f:87:ac:fb:0c:70:c7:52:1b:9b:31: f1:ea:6d:38:50:33:0e:0c:aa:94:63:1c:b8:65:3a:31:ee:36: f9:fb:a2:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr6nbtDIc8xrFgDRQwBzs3SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0Y2U5NjQwYTNlZjJmZWExOTM3NGFkOGY5OWY0MjNkN2Fh N2M3NmIwHhcNMjUxMjA3MjEwMDMyWhcNMjUxMjA4MjEwMDMyWjAzMTEwLwYDVQQD EygwM2FiY2FjY2FiZTgzZTJiMzg0MWU5Mjk3MmE0ZmM4NzkxN2IxOWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/ytzxfQGIh1eTPlU0RlU+R3Q+Om nJXVtnYuKi7XQBy1TQJ+yWau35i/Onb8kPMhcJ7aCEOSh+a0vbC9P9CopNu5hMEu Yz8HtgvKG1fKVq//HlE/sjP648vMDiCmHXAEtj2lMghN4NJoE95PZYDtIbMi0dfg zRQoN/BK0B7oGjkMwMh0oGoW2z1w65cTjeaYecJm5IEmakCLnLxlf0joaja5RvBE qWcwzdi3TUcCto6kOm/di6Ik8ZVvWF3la2JtjWpg65whAMVJN/79HoVW1tUbK9B4 WQMOqTOaUErtVu0qyOlY8mB4TlG17MQ6I7anNyAnBIAHtpDHDvx7lAtfIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAOrysyr6D4rOEHpKXKk/IeRexnDMB8GA1UdIwQY MBaAFKTOlkCj7y/qGTdK2PmfQj16p8drMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQt MjgzZmU1NGE2ZjJmLzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQtMjgzZmU1NGE2ZjJm LzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApa4Kw+KR bOnSfmVhMZM2tJdr6HmWRKXDAm9IrTOQ53WB8jvVpGy/wFQ9GFeRv1/3MnlZqXGb sHi027Vaxpg+/ZWxVr4o5ghMSuE9Y71nJgXkhHpsCFcwucfC99KXrYz74Sz9noWi z+4ydT+bdMw9Ka2Pnqj6IdvNH4Wh5/5/IE2TVGxd5KqSmMLu1bWarWGluCoDL2Pp KNkJakbetzqvhaIjA2S3veMsoYnS1mnFFFfXW7S/1I8zWUVqXRb30A0qaQrgYjft Tq2o+Ygrb0Ajug9wBG4Qtk137kCpwirf9U+HrPsMcMdSG5sx8eptOFAzDgyqlGMc uGU6Me42+fuiyQ== -----END CERTIFICATE-----Generated at Sun Dec 7 22:48:43 2025 by rpki-client