This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft File: 0pigcUzBvyWsfH8c9sKIbIxhkqM.mft (raw, json) Hash identifier: wV57wd21zV1g35eAp9qwMqfy47aBVPFVtGgDl6Sp8KM= Subject key identifier: B7:29:3E:A2:16:82:ED:E1:0D:B8:65:09:5D:55:F8:C4:BA:47:D4:1C Authority key identifier: D2:98:A0:71:4C:C1:BF:25:AC:7C:7F:1C:F6:C2:88:6C:8C:61:92:A3 Certificate issuer: /CN=d298a0714cc1bf25ac7c7f1cf6c2886c8c6192a3 Certificate serial: 019B3AC66B9F307244244F5D57BD97D54C36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft Manifest number: 0502 Signing time: Sat 20 Dec 2025 08:00:40 +0000 Manifest this update: Sat 20 Dec 2025 08:00:40 +0000 Manifest next update: Sun 21 Dec 2025 08:00:40 +0000 Files and hashes: 1: 0pigcUzBvyWsfH8c9sKIbIxhkqM.crl (hash: X3YXnVtG2GfVAynSGmkBrhlbHRuYPcTnJWxyORbYjB4=) 2: eBrn60Df7uG_ub_L-IV105lzs58.roa (hash: O8+G2XvuPwR1yEXnK+zmEZeJLzoyxFForxI59j5WNAY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.crl rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:6b:9f:30:72:44:24:4f:5d:57:bd:97:d5:4c:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d298a0714cc1bf25ac7c7f1cf6c2886c8c6192a3 Validity Not Before: Dec 20 08:00:40 2025 GMT Not After : Dec 21 08:00:40 2025 GMT Subject: CN=b7293ea21682ede10db865095d55f8c4ba47d41c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8d:33:c5:77:00:e8:be:72:9c:7d:7c:25:4d: c2:42:35:bd:cd:64:7a:d3:3e:ad:34:b5:5a:a2:74: be:bb:c8:5f:f7:85:22:f8:70:fe:65:ae:66:bc:d0: d6:60:14:c5:b7:58:81:17:34:55:51:0e:b9:9c:cb: f9:a7:9b:ff:73:96:41:94:ee:b1:50:cd:01:72:82: be:8f:5d:c0:d7:3d:d9:44:6a:76:ff:39:96:38:18: 3d:d3:ea:42:4d:5d:33:3a:52:dc:d6:ac:47:a4:19: 5a:73:69:fb:32:20:11:2e:ca:3a:10:3a:e2:20:ea: f9:e5:29:db:c2:30:98:61:96:f6:27:3e:57:56:94: 4b:96:df:b4:46:5f:69:18:be:65:94:d4:95:c6:32: d3:dc:f6:a0:23:32:b2:cb:81:93:cf:08:44:c1:21: 1f:7e:57:b7:aa:24:9c:03:ca:6b:e0:d3:9c:3e:d2: 51:d6:40:7e:65:a7:78:df:a1:8c:09:13:d0:44:a5: a9:0f:a8:e9:d1:0b:3b:61:f5:af:58:9b:28:8a:7c: 84:c7:87:90:37:3d:b6:0d:fe:03:f5:c5:2f:70:c1: 5c:ce:ef:c2:a1:20:ef:9d:d9:6c:9d:c6:8b:b5:6d: 56:28:e0:88:79:59:5d:1c:e5:70:83:b8:3e:b1:9c: 65:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:29:3E:A2:16:82:ED:E1:0D:B8:65:09:5D:55:F8:C4:BA:47:D4:1C X509v3 Authority Key Identifier: keyid:D2:98:A0:71:4C:C1:BF:25:AC:7C:7F:1C:F6:C2:88:6C:8C:61:92:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:c5:21:3b:37:2c:72:62:71:6f:2f:98:43:a3:49:88:d0:80: cf:a0:1d:0d:58:92:f5:68:76:54:0d:2c:69:9b:d2:cf:88:e8: 8d:90:b0:e1:2c:fc:d5:d4:c5:3b:bb:bd:e4:33:a6:aa:cc:c4: b1:96:90:51:01:40:7c:d9:6c:49:e7:76:31:0d:87:0b:ec:9b: 74:e6:7f:7e:00:1a:1b:32:1b:74:dc:41:09:cd:93:34:93:70: 02:81:e1:11:56:d3:49:cb:c4:a1:9f:07:49:32:6d:9a:06:0e: f0:b7:50:3e:b9:85:42:b9:5e:83:8d:94:20:a9:bb:43:ab:75: 08:14:28:d4:99:b0:5b:aa:b2:20:e8:fe:d5:2b:3a:1a:19:af: 98:23:21:3b:00:2b:fa:82:c2:9f:3c:ba:f0:45:24:3f:aa:d1: 95:b8:a6:08:49:cb:11:2f:2c:bb:a5:aa:74:03:2d:5a:a5:d6: cf:d7:e6:9a:3b:2e:84:64:ea:0e:8b:be:b8:95:5a:0d:1a:85: 41:5e:a7:ed:00:60:77:91:53:29:2f:87:2d:ff:c1:95:3f:f6: 09:1c:8a:b5:3b:44:22:11:b7:48:8a:39:24:2f:a8:31:9d:46: 8c:1b:d1:9c:fa:66:34:26:f8:ab:96:56:a5:da:b1:84:9b:33: 3c:91:4b:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xmufMHJEJE9dV72X1Uw2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyOThhMDcxNGNjMWJmMjVhYzdjN2YxY2Y2YzI4ODZjOGM2 MTkyYTMwHhcNMjUxMjIwMDgwMDQwWhcNMjUxMjIxMDgwMDQwWjAzMTEwLwYDVQQD EyhiNzI5M2VhMjE2ODJlZGUxMGRiODY1MDk1ZDU1ZjhjNGJhNDdkNDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxY0zxXcA6L5ynH18JU3CQjW9zWR6 0z6tNLVaonS+u8hf94Ui+HD+Za5mvNDWYBTFt1iBFzRVUQ65nMv5p5v/c5ZBlO6x UM0BcoK+j13A1z3ZRGp2/zmWOBg90+pCTV0zOlLc1qxHpBlac2n7MiARLso6EDri IOr55SnbwjCYYZb2Jz5XVpRLlt+0Rl9pGL5llNSVxjLT3PagIzKyy4GTzwhEwSEf fle3qiScA8pr4NOcPtJR1kB+Zad436GMCRPQRKWpD6jp0Qs7YfWvWJsoinyEx4eQ Nz22Df4D9cUvcMFczu/CoSDvndlsncaLtW1WKOCIeVldHOVwg7g+sZxl0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLcpPqIWgu3hDbhlCV1V+MS6R9QcMB8GA1UdIwQY MBaAFNKYoHFMwb8lrHx/HPbCiGyMYZKjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHBpZ2NVekJ2eVdzZkg4YzlzS0liSXhoa3FNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kOTdhZWEtZmEzMi00NmRhLTg1MWUt NzVhNDcyNWFhNmZkLzEvMHBpZ2NVekJ2eVdzZkg4YzlzS0liSXhoa3FNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9kOTdhZWEtZmEzMi00NmRhLTg1MWUtNzVhNDcyNWFhNmZk LzEvMHBpZ2NVekJ2eVdzZkg4YzlzS0liSXhoa3FNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjMUhOzcs cmJxby+YQ6NJiNCAz6AdDViS9Wh2VA0saZvSz4jojZCw4Sz81dTFO7u95DOmqszE sZaQUQFAfNlsSed2MQ2HC+ybdOZ/fgAaGzIbdNxBCc2TNJNwAoHhEVbTScvEoZ8H STJtmgYO8LdQPrmFQrleg42UIKm7Q6t1CBQo1JmwW6qyIOj+1Ss6GhmvmCMhOwAr +oLCnzy68EUkP6rRlbimCEnLES8su6WqdAMtWqXWz9fmmjsuhGTqDou+uJVaDRqF QV6n7QBgd5FTKS+HLf/BlT/2CRyKtTtEIhG3SIo5JC+oMZ1GjBvRnPpmNCb4q5ZW pdqxhJszPJFLwQ== -----END CERTIFICATE-----Generated at Sat Dec 20 12:25:53 2025 by rpki-client