This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft File: PabmnmXdClQFmXA-0MkkdMsg6Tk.mft (raw, json) Hash identifier: 7MmXNWWUQGV02fd1SScjSzmg/ef8LlzIG8zVsiGWXcE= Subject key identifier: AE:44:D7:10:17:96:85:D9:EF:F6:BA:A0:65:18:B1:73:99:F6:DD:F2 Authority key identifier: 3D:A6:E6:9E:65:DD:0A:54:05:99:70:3E:D0:C9:24:74:CB:20:E9:39 Certificate issuer: /CN=3da6e69e65dd0a540599703ed0c92474cb20e939 Certificate serial: 019B0EC9B8BAA7C01C200FB4133F51DFDCEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PabmnmXdClQFmXA-0MkkdMsg6Tk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft Manifest number: 16D0 Signing time: Thu 11 Dec 2025 19:00:59 +0000 Manifest this update: Thu 11 Dec 2025 19:00:59 +0000 Manifest next update: Fri 12 Dec 2025 19:00:59 +0000 Files and hashes: 1: PabmnmXdClQFmXA-0MkkdMsg6Tk.crl (hash: K0/9B8cLYocPVXLmOc1KF6PyRzbBy4wyKs7J48ee6is=) 2: wgfEWoteV0ugJhJFFY5StCpYga4.roa (hash: Bu0QgGIHWGxscJbgnF2zr/rd8qdTFWvwHrlBzc8O9aU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.crl rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft rsync://rpki.ripe.net/repository/DEFAULT/PabmnmXdClQFmXA-0MkkdMsg6Tk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:b8:ba:a7:c0:1c:20:0f:b4:13:3f:51:df:dc:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3da6e69e65dd0a540599703ed0c92474cb20e939 Validity Not Before: Dec 11 19:00:59 2025 GMT Not After : Dec 12 19:00:59 2025 GMT Subject: CN=ae44d710179685d9eff6baa06518b17399f6ddf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:99:87:ce:93:0a:37:f1:51:f8:2b:fe:df:89: 84:bd:f6:87:e7:45:e0:f2:52:e4:58:45:06:a5:0d: 37:11:12:98:db:45:94:60:c6:29:ce:f5:93:b1:76: db:1a:80:9d:eb:99:c6:7f:b2:cc:42:44:c0:eb:73: ef:ba:54:bf:bb:5b:67:d2:15:b0:dc:46:7c:44:3b: d1:67:a7:82:f9:72:e5:2b:8f:b4:6f:eb:3e:40:1f: fb:7c:9b:07:2b:b7:04:98:d7:b4:1e:b5:b1:0a:f1: 6e:3d:a7:c4:d0:5b:35:c5:6f:b2:b4:54:94:10:d5: 26:29:fb:56:30:bd:4d:9d:84:65:6d:d8:57:c3:55: fa:04:42:b4:4f:5b:71:fd:7e:00:f8:d5:50:6e:a2: 25:45:e9:61:10:a5:2e:c1:52:c9:e1:77:fc:e1:4f: 3d:b5:2c:4b:fb:be:4b:35:55:e8:e0:76:8a:c5:24: 47:b4:ec:21:23:64:d2:bb:ab:76:40:64:de:51:c0: 4d:16:f9:bc:44:34:64:df:51:d3:7f:c9:9f:48:2d: 1f:e8:b2:62:6c:21:bf:de:c3:42:87:76:44:c7:d8: 03:28:ab:fe:64:a0:0a:20:c9:cf:cc:d7:3e:ed:40: 46:6f:e8:33:76:61:c8:c3:3b:67:45:c6:57:40:e8: c5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:44:D7:10:17:96:85:D9:EF:F6:BA:A0:65:18:B1:73:99:F6:DD:F2 X509v3 Authority Key Identifier: keyid:3D:A6:E6:9E:65:DD:0A:54:05:99:70:3E:D0:C9:24:74:CB:20:E9:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PabmnmXdClQFmXA-0MkkdMsg6Tk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:5b:c2:26:32:29:0b:fd:1b:1b:b2:11:e6:35:e0:8b:4c:c8: 5b:83:7a:11:0c:0a:25:bc:8f:35:ab:d6:b3:67:94:35:37:29: f4:e6:8c:43:ea:6b:01:7d:5f:76:ef:e3:21:41:0d:cb:f3:67: 97:67:20:22:44:e0:6a:af:d6:1b:70:58:c2:83:71:c2:e5:89: c1:b8:50:ef:87:ad:97:a2:2b:89:65:a2:56:f4:52:93:0e:46: 6b:41:5b:d8:15:f1:5e:06:da:b5:f6:b7:d1:60:b9:c7:40:28: d6:d3:fc:03:14:22:f1:63:a9:1b:a7:75:1b:e0:be:c7:e1:2c: 31:3a:69:58:13:55:af:d1:b6:f8:db:96:74:1f:f4:f5:82:63: c7:19:b6:e6:e0:db:a5:07:ce:4f:de:5d:da:0e:1b:1a:5c:74: 2e:66:6d:96:63:96:a2:8b:88:4f:6c:a9:bb:a9:04:44:07:af: 72:97:c4:fd:f3:40:82:15:e9:79:d6:7f:8d:a9:b4:5f:c6:d4: 06:3c:1e:f8:45:d3:70:97:40:4b:14:7e:95:3e:47:71:a6:3a: 1f:43:67:f1:8d:6c:d7:5c:49:20:66:5e:d6:e2:83:42:30:df: ca:ce:a1:46:4e:82:97:61:e7:50:d8:33:c5:de:39:a9:be:86: 18:6c:bd:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOybi6p8AcIA+0Ez9R39zqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkYTZlNjllNjVkZDBhNTQwNTk5NzAzZWQwYzkyNDc0Y2Iy MGU5MzkwHhcNMjUxMjExMTkwMDU5WhcNMjUxMjEyMTkwMDU5WjAzMTEwLwYDVQQD EyhhZTQ0ZDcxMDE3OTY4NWQ5ZWZmNmJhYTA2NTE4YjE3Mzk5ZjZkZGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZmHzpMKN/FR+Cv+34mEvfaH50Xg 8lLkWEUGpQ03ERKY20WUYMYpzvWTsXbbGoCd65nGf7LMQkTA63PvulS/u1tn0hWw 3EZ8RDvRZ6eC+XLlK4+0b+s+QB/7fJsHK7cEmNe0HrWxCvFuPafE0Fs1xW+ytFSU ENUmKftWML1NnYRlbdhXw1X6BEK0T1tx/X4A+NVQbqIlRelhEKUuwVLJ4Xf84U89 tSxL+75LNVXo4HaKxSRHtOwhI2TSu6t2QGTeUcBNFvm8RDRk31HTf8mfSC0f6LJi bCG/3sNCh3ZEx9gDKKv+ZKAKIMnPzNc+7UBGb+gzdmHIwztnRcZXQOjFOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK5E1xAXloXZ7/a6oGUYsXOZ9t3yMB8GA1UdIwQY MBaAFD2m5p5l3QpUBZlwPtDJJHTLIOk5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGFibW5tWGRDbFFGbVhBLTBNa2tkTXNnNlRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mN2M0YTItYjYwNi00MjkyLWI5Zjct ZmEzYzRlZjVlZGY2LzEvUGFibW5tWGRDbFFGbVhBLTBNa2tkTXNnNlRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9mN2M0YTItYjYwNi00MjkyLWI5ZjctZmEzYzRlZjVlZGY2 LzEvUGFibW5tWGRDbFFGbVhBLTBNa2tkTXNnNlRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm1vCJjIp C/0bG7IR5jXgi0zIW4N6EQwKJbyPNavWs2eUNTcp9OaMQ+prAX1fdu/jIUENy/Nn l2cgIkTgaq/WG3BYwoNxwuWJwbhQ74etl6IriWWiVvRSkw5Ga0Fb2BXxXgbatfa3 0WC5x0Ao1tP8AxQi8WOpG6d1G+C+x+EsMTppWBNVr9G2+NuWdB/09YJjxxm25uDb pQfOT95d2g4bGlx0LmZtlmOWoouIT2ypu6kERAevcpfE/fNAghXpedZ/jam0X8bU Bjwe+EXTcJdASxR+lT5HcaY6H0Nn8Y1s11xJIGZe1uKDQjDfys6hRk6Cl2HnUNgz xd45qb6GGGy9GA== -----END CERTIFICATE-----Generated at Fri Dec 12 02:48:44 2025 by rpki-client