This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft File: pENNZpHm4nwoLKo3r_kPK8VL8eM.mft (raw, json) Hash identifier: 6YSwzLlWmvQgage+kfXKtaLuooWJM7hQpNzmhT9khiA= Subject key identifier: 71:45:29:D1:F3:5B:9B:D1:95:D8:33:18:DC:2D:25:64:E6:8D:A9:C5 Authority key identifier: A4:43:4D:66:91:E6:E2:7C:28:2C:AA:37:AF:F9:0F:2B:C5:4B:F1:E3 Certificate issuer: /CN=a4434d6691e6e27c282caa37aff90f2bc54bf1e3 Certificate serial: 019B1E3CF41946614CA38954B2F29F656C4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft Manifest number: 1778 Signing time: Sun 14 Dec 2025 19:01:09 +0000 Manifest this update: Sun 14 Dec 2025 19:01:09 +0000 Manifest next update: Mon 15 Dec 2025 19:01:09 +0000 Files and hashes: 1: V4fEP3mKAgRZldstTINNuk_J6BQ.roa (hash: 8GFsD/JurXta37HamqakliSVJtpBqW+/i/sWeLhcYfE=) 2: pENNZpHm4nwoLKo3r_kPK8VL8eM.crl (hash: uTZ6kybmLagQinjTgTvsVZeNfxphseZKFYO2+Hrtxbs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.crl rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 19:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:3c:f4:19:46:61:4c:a3:89:54:b2:f2:9f:65:6c:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4434d6691e6e27c282caa37aff90f2bc54bf1e3 Validity Not Before: Dec 14 19:01:09 2025 GMT Not After : Dec 15 19:01:09 2025 GMT Subject: CN=714529d1f35b9bd195d83318dc2d2564e68da9c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:84:0e:0b:66:fc:a2:d6:3e:e0:b4:43:e8:30: 97:14:5f:ca:34:f5:e1:d6:da:16:4c:b7:25:45:43: 32:5b:e4:77:67:bc:de:47:9b:5f:7e:fb:19:49:74: 1a:bb:73:eb:6b:68:39:08:a3:3a:9b:81:2c:21:84: 29:87:7a:75:86:6e:c9:01:fb:89:2e:b0:9a:a8:6f: 45:3b:39:cf:a4:5e:7e:3c:81:c5:ac:a1:46:e7:3c: d3:57:73:43:d7:06:ee:80:f5:03:cf:0e:eb:e1:6c: 62:1c:40:14:28:8a:6a:2f:6f:b5:0e:06:83:4f:7f: 89:f0:f2:ec:18:8c:2e:3b:e7:45:d0:9c:a3:0c:b0: ae:92:cf:63:5b:6f:7f:79:6e:dd:52:7d:59:87:f0: f9:e2:b2:c5:fa:24:37:ff:81:9d:33:51:07:d8:30: 34:a1:e6:12:64:60:30:14:d4:ba:3d:ea:5c:91:ef: d0:48:9e:b1:96:87:71:74:06:4b:95:bf:e6:a5:30: 8a:ed:a2:21:38:67:21:fe:95:a9:ed:1e:5f:95:63: c0:1f:80:68:da:79:bb:ca:a1:f6:61:79:37:05:46: 4e:f7:95:ad:bb:5d:ac:f6:36:72:85:37:2e:4a:88: b7:0f:0d:06:bd:0b:37:94:6a:ee:75:10:a0:2e:0f: 43:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:45:29:D1:F3:5B:9B:D1:95:D8:33:18:DC:2D:25:64:E6:8D:A9:C5 X509v3 Authority Key Identifier: keyid:A4:43:4D:66:91:E6:E2:7C:28:2C:AA:37:AF:F9:0F:2B:C5:4B:F1:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:7d:58:f3:85:d1:bd:6e:7f:5c:09:27:2d:4b:7f:f7:f9:4c: 31:4e:30:29:6f:f7:2f:2f:6e:0b:c9:35:b9:00:fa:3b:e6:4d: 3c:5a:2d:37:85:6f:de:bb:a0:64:50:88:b7:97:8c:1e:d4:b4: dc:37:4e:7e:cd:6b:f3:f9:38:58:00:05:4e:76:a0:72:82:18: bd:9e:4b:48:95:5c:0e:1a:e4:49:06:74:d6:9a:cc:49:68:e9: 3e:0a:a3:29:63:d1:91:47:08:8d:41:42:63:63:17:4c:40:62: d9:57:d2:df:7c:67:10:08:e5:d1:34:82:70:a1:f3:ec:a9:fc: 91:00:7d:a5:1b:da:ef:b4:01:2b:c0:35:22:3d:4e:93:26:9e: b4:4e:e1:22:20:92:71:f9:7f:14:9e:42:0e:1c:c9:1d:a8:f6: 55:9a:7d:66:fd:47:e1:ff:63:c6:ea:e3:46:09:db:cc:38:c1: c0:bf:8a:72:c1:33:b2:08:90:65:67:d2:3b:6b:44:fe:55:05: 4e:b4:be:ec:79:83:be:df:b4:1f:97:12:e7:91:cb:04:95:95: 26:f5:36:fc:bb:3e:07:84:df:2c:92:2a:35:a0:b0:b7:ad:57: 2f:26:aa:4c:af:2c:ec:3d:d7:81:42:98:f6:fc:d4:77:ff:4f: d7:4c:96:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsePPQZRmFMo4lUsvKfZWxOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0NDM0ZDY2OTFlNmUyN2MyODJjYWEzN2FmZjkwZjJiYzU0 YmYxZTMwHhcNMjUxMjE0MTkwMTA5WhcNMjUxMjE1MTkwMTA5WjAzMTEwLwYDVQQD Eyg3MTQ1MjlkMWYzNWI5YmQxOTVkODMzMThkYzJkMjU2NGU2OGRhOWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA64QOC2b8otY+4LRD6DCXFF/KNPXh 1toWTLclRUMyW+R3Z7zeR5tffvsZSXQau3Pra2g5CKM6m4EsIYQph3p1hm7JAfuJ LrCaqG9FOznPpF5+PIHFrKFG5zzTV3ND1wbugPUDzw7r4WxiHEAUKIpqL2+1DgaD T3+J8PLsGIwuO+dF0JyjDLCuks9jW29/eW7dUn1Zh/D54rLF+iQ3/4GdM1EH2DA0 oeYSZGAwFNS6Pepcke/QSJ6xlodxdAZLlb/mpTCK7aIhOGch/pWp7R5flWPAH4Bo 2nm7yqH2YXk3BUZO95Wtu12s9jZyhTcuSoi3Dw0GvQs3lGrudRCgLg9D5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHFFKdHzW5vRldgzGNwtJWTmjanFMB8GA1UdIwQY MBaAFKRDTWaR5uJ8KCyqN6/5DyvFS/HjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEVOTlpwSG00bndvTEtvM3Jfa1BLOFZMOGVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny80NWIyZDktZTg2MS00M2VmLWJjYzAt ZTk5NzVhMGJkZWE3LzEvcEVOTlpwSG00bndvTEtvM3Jfa1BLOFZMOGVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny80NWIyZDktZTg2MS00M2VmLWJjYzAtZTk5NzVhMGJkZWE3 LzEvcEVOTlpwSG00bndvTEtvM3Jfa1BLOFZMOGVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMX1Y84XR vW5/XAknLUt/9/lMMU4wKW/3Ly9uC8k1uQD6O+ZNPFotN4Vv3rugZFCIt5eMHtS0 3DdOfs1r8/k4WAAFTnagcoIYvZ5LSJVcDhrkSQZ01prMSWjpPgqjKWPRkUcIjUFC Y2MXTEBi2VfS33xnEAjl0TSCcKHz7Kn8kQB9pRva77QBK8A1Ij1OkyaetE7hIiCS cfl/FJ5CDhzJHaj2VZp9Zv1H4f9jxurjRgnbzDjBwL+KcsEzsgiQZWfSO2tE/lUF TrS+7HmDvt+0H5cS55HLBJWVJvU2/Ls+B4TfLJIqNaCwt61XLyaqTK8s7D3XgUKY 9vzUd/9P10yWVg== -----END CERTIFICATE-----Generated at Mon Dec 15 04:55:07 2025 by rpki-client