This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft File: pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft (raw, json) Hash identifier: IlXsTF2W9zaw+Yicl1xvZ4rbGcwsk2ZAFOl4/ypVp00= Subject key identifier: 71:86:7B:54:F7:DC:10:30:F9:C9:B4:06:A5:06:E2:43:FF:BA:82:B6 Authority key identifier: A6:7F:1C:F2:74:26:07:0A:ED:A7:B2:60:53:45:3C:28:3F:DF:75:37 Certificate issuer: /CN=a67f1cf27426070aeda7b26053453c283fdf7537 Certificate serial: 019B4324D4814C45E8A509E0195CCBC99F06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft Manifest number: 0A18 Signing time: Sun 21 Dec 2025 23:00:45 +0000 Manifest this update: Sun 21 Dec 2025 23:00:45 +0000 Manifest next update: Mon 22 Dec 2025 23:00:45 +0000 Files and hashes: 1: pGhFSYKZpUat85kiXiiCd2_IqX0.roa (hash: rRFD7qwRqqnJAuhQ1luySoQoJ9GoQlnTCcam7ZPbXJk=) 2: pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl (hash: 7VpQi/eqzCu5dA5uIPAbutWQcTaFSERDzGLeTF9qzuY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:24:d4:81:4c:45:e8:a5:09:e0:19:5c:cb:c9:9f:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a67f1cf27426070aeda7b26053453c283fdf7537 Validity Not Before: Dec 21 23:00:45 2025 GMT Not After : Dec 22 23:00:45 2025 GMT Subject: CN=71867b54f7dc1030f9c9b406a506e243ffba82b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ee:be:83:d6:ae:1c:dd:0a:44:2b:49:f0:88: 7c:ca:3c:8c:45:52:8d:90:17:9d:29:06:9c:e5:c0: 1e:09:eb:68:a3:77:fb:ab:01:46:3b:db:90:bc:07: e4:67:7d:e7:08:f8:93:04:98:29:93:c0:0a:97:fb: 00:4d:96:37:79:4a:5f:da:4d:2c:02:9a:1f:8f:50: 57:1e:03:8d:63:5d:7f:c8:9b:7d:37:0c:8d:cb:22: 1c:f7:1f:a4:77:c3:9f:34:56:a2:0b:8a:44:72:eb: 60:ae:1d:1f:01:f9:a4:18:a3:96:1c:a7:32:31:7c: c5:fa:bd:8d:36:83:0c:8a:0c:e9:ce:32:fe:dc:31: ce:c4:b9:1d:5e:13:75:89:eb:62:46:a6:ce:22:28: f1:9d:84:34:36:a0:2f:18:6f:8d:c7:af:4b:0e:62: 25:70:85:c2:5c:ef:21:ad:ea:9e:a8:6d:e2:82:2d: 25:82:38:6b:2f:43:78:1b:ac:5b:6c:37:4c:f0:0c: 76:f4:99:55:2a:13:27:f2:1b:dc:d8:b3:6c:c9:d3: dd:62:78:94:bf:74:08:59:52:fa:a3:31:e6:69:e5: a1:e8:0e:d9:fa:72:05:b1:44:2c:e1:99:2b:be:36: 91:cb:5c:b6:f2:c6:48:60:9c:8f:5c:f7:97:ee:bd: 9f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:86:7B:54:F7:DC:10:30:F9:C9:B4:06:A5:06:E2:43:FF:BA:82:B6 X509v3 Authority Key Identifier: keyid:A6:7F:1C:F2:74:26:07:0A:ED:A7:B2:60:53:45:3C:28:3F:DF:75:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:22:e1:ba:7c:55:58:5f:79:e3:d8:e5:8c:f5:5b:23:3c:b4: 12:c0:48:03:d7:8f:42:fa:fe:b4:84:a0:fe:b6:57:79:ee:d5: af:15:9a:c0:1a:f3:be:e3:97:87:9d:19:c9:b7:f5:dc:b4:d9: 27:fe:25:09:21:a3:1e:be:61:67:87:34:ee:2a:61:fd:9b:5f: 7f:d5:4f:34:a0:ad:1a:00:6e:98:f4:c1:0e:7b:02:48:19:ed: 96:ec:0f:23:71:2b:6c:7c:5f:64:a5:25:70:7b:e1:32:99:9f: 51:f9:33:6b:3c:4e:d8:23:26:5e:f4:08:87:18:88:1b:70:73: d2:09:57:7e:69:5f:b9:15:eb:0b:db:d8:e2:e2:53:95:b2:85: ba:ce:26:d9:7e:e7:0f:48:fa:31:95:2a:88:a6:a9:19:90:89: ed:bc:33:3d:03:11:ee:9d:72:fc:21:66:9a:6b:06:03:4d:86: f6:f2:18:f7:26:63:73:a6:fe:d4:7d:a7:8a:53:c6:42:b9:cb: 49:2b:fe:2e:17:86:72:7d:f3:24:04:49:a5:e1:4b:e5:2c:40: 9d:a0:14:5a:cc:b2:d5:a7:bd:dc:75:71:ea:39:59:1d:2b:de: a0:5c:23:cb:fe:ba:fe:a2:56:15:ee:84:bd:58:59:33:c5:3b: 00:31:f8:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJNSBTEXopQngGVzLyZ8GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2N2YxY2YyNzQyNjA3MGFlZGE3YjI2MDUzNDUzYzI4M2Zk Zjc1MzcwHhcNMjUxMjIxMjMwMDQ1WhcNMjUxMjIyMjMwMDQ1WjAzMTEwLwYDVQQD Eyg3MTg2N2I1NGY3ZGMxMDMwZjljOWI0MDZhNTA2ZTI0M2ZmYmE4MmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqe6+g9auHN0KRCtJ8Ih8yjyMRVKN kBedKQac5cAeCetoo3f7qwFGO9uQvAfkZ33nCPiTBJgpk8AKl/sATZY3eUpf2k0s Apofj1BXHgONY11/yJt9NwyNyyIc9x+kd8OfNFaiC4pEcutgrh0fAfmkGKOWHKcy MXzF+r2NNoMMigzpzjL+3DHOxLkdXhN1ietiRqbOIijxnYQ0NqAvGG+Nx69LDmIl cIXCXO8hreqeqG3igi0lgjhrL0N4G6xbbDdM8Ax29JlVKhMn8hvc2LNsydPdYniU v3QIWVL6ozHmaeWh6A7Z+nIFsUQs4ZkrvjaRy1y28sZIYJyPXPeX7r2f2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHGGe1T33BAw+cm0BqUG4kP/uoK2MB8GA1UdIwQY MBaAFKZ/HPJ0JgcK7aeyYFNFPCg/33U3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcG44YzhuUW1Cd3J0cDdKZ1UwVThLRF9mZFRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8xMmUyYzQtMjQzZC00NGRmLWIwZGMt YjlkNjY4ZjA1MWRlLzEvcG44YzhuUW1Cd3J0cDdKZ1UwVThLRF9mZFRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8xMmUyYzQtMjQzZC00NGRmLWIwZGMtYjlkNjY4ZjA1MWRl LzEvcG44YzhuUW1Cd3J0cDdKZ1UwVThLRF9mZFRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2iLhunxV WF9549jljPVbIzy0EsBIA9ePQvr+tISg/rZXee7VrxWawBrzvuOXh50Zybf13LTZ J/4lCSGjHr5hZ4c07iph/Ztff9VPNKCtGgBumPTBDnsCSBntluwPI3ErbHxfZKUl cHvhMpmfUfkzazxO2CMmXvQIhxiIG3Bz0glXfmlfuRXrC9vY4uJTlbKFus4m2X7n D0j6MZUqiKapGZCJ7bwzPQMR7p1y/CFmmmsGA02G9vIY9yZjc6b+1H2nilPGQrnL SSv+LheGcn3zJARJpeFL5SxAnaAUWsyy1ae93HVx6jlZHSveoFwjy/66/qJWFe6E vVhZM8U7ADH4+w== -----END CERTIFICATE-----Generated at Mon Dec 22 05:47:52 2025 by rpki-client