This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/955d9c-218e-4231-8cd3-9cd3d3f89a59/1/paxWYvjZJWAF42kgCFIk7TSijq0.mft File: paxWYvjZJWAF42kgCFIk7TSijq0.mft (raw, json) Hash identifier: 3NTwuolnXlfuAur2Sy/cM8gDthosO35TBxZn4ZGOK94= Subject key identifier: 74:34:F4:42:56:BC:90:05:AF:6E:D0:16:EF:3C:EB:C7:7E:55:B9:90 Authority key identifier: A5:AC:56:62:F8:D9:25:60:05:E3:69:20:08:52:24:ED:34:A2:8E:AD Certificate issuer: /CN=a5ac5662f8d9256005e36920085224ed34a28ead Certificate serial: 019B5B63EEE8B14D0E94913D9141AEA8C343 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paxWYvjZJWAF42kgCFIk7TSijq0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/955d9c-218e-4231-8cd3-9cd3d3f89a59/1/paxWYvjZJWAF42kgCFIk7TSijq0.mft Manifest number: 0109 Signing time: Fri 26 Dec 2025 16:00:34 +0000 Manifest this update: Fri 26 Dec 2025 16:00:34 +0000 Manifest next update: Sat 27 Dec 2025 16:00:34 +0000 Files and hashes: 1: paxWYvjZJWAF42kgCFIk7TSijq0.crl (hash: gtTaEIhj8FGUhKLtT+5M6+QYAt/+48ZYsd4zH3HXxsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/955d9c-218e-4231-8cd3-9cd3d3f89a59/1/paxWYvjZJWAF42kgCFIk7TSijq0.crl rsync://rpki.ripe.net/repository/DEFAULT/51/955d9c-218e-4231-8cd3-9cd3d3f89a59/1/paxWYvjZJWAF42kgCFIk7TSijq0.mft rsync://rpki.ripe.net/repository/DEFAULT/paxWYvjZJWAF42kgCFIk7TSijq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:63:ee:e8:b1:4d:0e:94:91:3d:91:41:ae:a8:c3:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5ac5662f8d9256005e36920085224ed34a28ead Validity Not Before: Dec 26 16:00:34 2025 GMT Not After : Dec 27 16:00:34 2025 GMT Subject: CN=7434f44256bc9005af6ed016ef3cebc77e55b990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9b:f5:21:b9:ae:a1:20:99:6b:7d:5f:b8:b6: 45:90:19:b4:4a:17:80:1c:ff:06:22:9e:66:2b:f0: a5:70:bd:f3:b2:a8:79:18:44:f8:49:3e:34:dd:b9: a9:1f:07:08:36:f6:59:b7:b0:dd:63:57:a8:70:5f: 19:74:95:d9:fe:ee:f6:b0:3c:a3:7d:d4:77:38:08: ea:55:44:0b:fd:07:92:f0:44:33:50:ed:21:de:9f: 0d:19:17:84:5b:de:57:d4:28:aa:0b:a2:fe:17:45: a7:6e:9b:61:ac:b4:bd:3b:06:51:19:ac:45:b3:b8: 58:d7:eb:da:28:52:23:f2:4f:cb:89:b2:ef:64:32: f6:1f:32:c1:24:50:d7:0f:f0:e5:93:a7:b0:cf:9e: 48:6c:cc:a0:e3:05:57:4a:26:16:fb:d9:c9:51:a2: e5:b1:1f:78:2c:5d:34:bd:c4:c8:1b:9c:65:d8:ae: 61:f2:83:f3:a2:dd:9e:a7:8d:ac:b5:83:7e:09:fe: ff:58:6c:c5:71:c5:61:2e:c2:0f:5a:f1:4e:0c:ca: 7a:b4:cd:7e:89:5c:bf:c2:ef:ae:71:a5:2a:0b:23: 18:c1:5a:d0:10:e9:5b:d3:39:fe:be:61:b0:3c:c7: c0:3b:d8:29:db:0d:93:84:5e:44:bc:52:39:6e:5f: 83:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:34:F4:42:56:BC:90:05:AF:6E:D0:16:EF:3C:EB:C7:7E:55:B9:90 X509v3 Authority Key Identifier: keyid:A5:AC:56:62:F8:D9:25:60:05:E3:69:20:08:52:24:ED:34:A2:8E:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paxWYvjZJWAF42kgCFIk7TSijq0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/955d9c-218e-4231-8cd3-9cd3d3f89a59/1/paxWYvjZJWAF42kgCFIk7TSijq0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/955d9c-218e-4231-8cd3-9cd3d3f89a59/1/paxWYvjZJWAF42kgCFIk7TSijq0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:13:d4:f1:1f:9c:51:0e:9a:a7:74:fa:b5:85:45:95:37:1c: a5:01:08:77:14:50:34:21:e1:aa:02:34:60:e6:fb:9c:09:c2: 14:66:07:97:11:2e:31:58:a4:45:17:b8:bc:57:d7:c2:f6:17: 44:bf:80:81:b2:2b:1e:99:bf:fc:f4:b6:18:df:22:f1:47:35: a1:7c:ca:a0:89:ab:9d:7e:10:1c:e6:62:6c:38:c9:da:78:05: ba:fa:23:2d:ab:1b:05:24:38:8f:af:c9:35:48:03:67:49:1d: e5:86:b3:19:0f:20:f8:c3:12:1f:b4:d7:c2:be:81:44:2b:02: b5:6a:a7:13:99:04:e8:32:4f:55:ed:e3:4e:e1:8d:11:68:0a: 00:8d:fc:8b:27:ba:07:e4:98:a4:9f:05:c7:96:64:ea:65:90: d2:87:76:64:1a:38:9a:36:26:5a:c5:f4:8d:d5:f3:52:0a:ea: 3c:a1:7f:45:61:5d:ea:04:12:27:25:96:3b:ad:f0:f8:e2:35: 79:44:af:c7:d4:15:38:5c:a5:85:fd:b5:66:0e:1a:e0:8a:18: 67:84:1b:f3:ce:6a:f3:1f:af:d2:41:18:3d:17:c9:5f:92:b0: 58:fb:ac:11:89:c7:84:47:d2:a4:93:ba:e8:17:27:f2:1f:fe: 01:46:47:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbY+7osU0OlJE9kUGuqMNDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YWM1NjYyZjhkOTI1NjAwNWUzNjkyMDA4NTIyNGVkMzRh MjhlYWQwHhcNMjUxMjI2MTYwMDM0WhcNMjUxMjI3MTYwMDM0WjAzMTEwLwYDVQQD Eyg3NDM0ZjQ0MjU2YmM5MDA1YWY2ZWQwMTZlZjNjZWJjNzdlNTViOTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupv1IbmuoSCZa31fuLZFkBm0SheA HP8GIp5mK/ClcL3zsqh5GET4ST403bmpHwcINvZZt7DdY1eocF8ZdJXZ/u72sDyj fdR3OAjqVUQL/QeS8EQzUO0h3p8NGReEW95X1CiqC6L+F0WnbpthrLS9OwZRGaxF s7hY1+vaKFIj8k/LibLvZDL2HzLBJFDXD/Dlk6ewz55IbMyg4wVXSiYW+9nJUaLl sR94LF00vcTIG5xl2K5h8oPzot2ep42stYN+Cf7/WGzFccVhLsIPWvFODMp6tM1+ iVy/wu+ucaUqCyMYwVrQEOlb0zn+vmGwPMfAO9gp2w2ThF5EvFI5bl+DMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHQ09EJWvJAFr27QFu8868d+VbmQMB8GA1UdIwQY MBaAFKWsVmL42SVgBeNpIAhSJO00oo6tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGF4V1l2alpKV0FGNDJrZ0NGSWs3VFNpanEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS85NTVkOWMtMjE4ZS00MjMxLThjZDMt OWNkM2QzZjg5YTU5LzEvcGF4V1l2alpKV0FGNDJrZ0NGSWs3VFNpanEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS85NTVkOWMtMjE4ZS00MjMxLThjZDMtOWNkM2QzZjg5YTU5 LzEvcGF4V1l2alpKV0FGNDJrZ0NGSWs3VFNpanEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwxPU8R+c UQ6ap3T6tYVFlTccpQEIdxRQNCHhqgI0YOb7nAnCFGYHlxEuMVikRRe4vFfXwvYX RL+AgbIrHpm//PS2GN8i8Uc1oXzKoImrnX4QHOZibDjJ2ngFuvojLasbBSQ4j6/J NUgDZ0kd5YazGQ8g+MMSH7TXwr6BRCsCtWqnE5kE6DJPVe3jTuGNEWgKAI38iye6 B+SYpJ8Fx5Zk6mWQ0od2ZBo4mjYmWsX0jdXzUgrqPKF/RWFd6gQSJyWWO63w+OI1 eUSvx9QVOFylhf21Zg4a4IoYZ4Qb885q8x+v0kEYPRfJX5KwWPusEYnHhEfSpJO6 6Bcn8h/+AUZHlg== -----END CERTIFICATE-----Generated at Fri Dec 26 17:43:30 2025 by rpki-client