This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft File: pvE9aAzkgFkb-LN93KD66zu-dE4.mft (raw, json) Hash identifier: ETl+fjcPB4o4ZjaLSCrhyrExESAyKPzM9jrNl7L0T+o= Subject key identifier: 18:EC:1A:DB:F4:FF:BA:22:FD:5C:F0:E6:33:B8:C1:38:14:E4:8D:C6 Authority key identifier: A6:F1:3D:68:0C:E4:80:59:1B:F8:B3:7D:DC:A0:FA:EB:3B:BE:74:4E Certificate issuer: /CN=a6f13d680ce480591bf8b37ddca0faeb3bbe744e Certificate serial: 019B0F37AE0B21C37A6D73D2704A6E0AD80A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pvE9aAzkgFkb-LN93KD66zu-dE4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft Manifest number: 1777 Signing time: Thu 11 Dec 2025 21:01:05 +0000 Manifest this update: Thu 11 Dec 2025 21:01:05 +0000 Manifest next update: Fri 12 Dec 2025 21:01:05 +0000 Files and hashes: 1: OpKyWUUF45asysnRnTgjMvj5UEo.roa (hash: dG/NrnY4NueXZeuAaFWy5reT48MCWKXtWJgALxpo6BI=) 2: pvE9aAzkgFkb-LN93KD66zu-dE4.crl (hash: 5ugfSF8FbIG0Wj4uAd6xMmSBcEJBGlvOwDElIR/KCqU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft rsync://rpki.ripe.net/repository/DEFAULT/pvE9aAzkgFkb-LN93KD66zu-dE4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:ae:0b:21:c3:7a:6d:73:d2:70:4a:6e:0a:d8:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6f13d680ce480591bf8b37ddca0faeb3bbe744e Validity Not Before: Dec 11 21:01:05 2025 GMT Not After : Dec 12 21:01:05 2025 GMT Subject: CN=18ec1adbf4ffba22fd5cf0e633b8c13814e48dc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c2:70:88:b7:38:85:f4:ba:60:37:e9:c7:19: 83:a6:a0:4d:0e:84:0b:82:91:c7:9a:fd:e0:ab:a0: e9:5a:aa:0f:15:86:8b:0e:a3:ef:de:89:13:0a:eb: f2:1e:07:66:9b:f3:f1:f3:3a:91:05:3a:b6:95:16: 5b:eb:02:53:c3:14:e1:69:97:4e:02:80:5b:8f:03: 65:c0:45:ec:99:6c:a8:be:83:ed:6e:59:34:92:7b: e7:15:8a:39:c6:f7:6a:1c:6c:c3:f0:06:84:a2:31: cd:ea:08:39:93:36:6b:8a:57:ec:1d:55:ba:7e:65: cd:b4:f6:b2:f6:3e:11:2a:21:6a:a6:e9:76:d5:25: 61:d4:8e:9a:93:fd:c4:ae:9a:2d:af:e0:70:7a:bc: ca:29:c8:b8:59:72:ce:37:57:39:a2:f6:c5:cc:e0: bd:e9:e5:e3:f7:79:4e:2c:03:f2:7b:e1:26:35:47: c9:71:bc:94:42:f8:78:9d:97:c1:1b:2f:51:b5:4f: 33:ed:14:91:b4:27:66:68:fa:22:e2:31:cb:d3:29: d9:3c:6b:73:5f:46:e2:ca:36:3d:49:1a:0b:83:dc: 63:ea:92:4a:3a:2c:ac:07:e4:30:e8:d9:91:6b:67: 14:0a:be:67:33:cb:b3:98:c9:23:1c:07:a7:c1:53: 7e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:EC:1A:DB:F4:FF:BA:22:FD:5C:F0:E6:33:B8:C1:38:14:E4:8D:C6 X509v3 Authority Key Identifier: keyid:A6:F1:3D:68:0C:E4:80:59:1B:F8:B3:7D:DC:A0:FA:EB:3B:BE:74:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pvE9aAzkgFkb-LN93KD66zu-dE4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:89:fb:da:7a:07:36:28:5a:72:5e:08:2a:bc:2c:f8:2e:b5: a2:00:7c:c2:42:45:3f:ee:a5:c5:10:8d:d7:09:3e:af:5b:f0: 24:a4:b2:0d:fd:c4:40:0a:7c:ab:88:b5:e3:14:55:36:62:d2: 3f:a5:49:15:0b:39:f4:e1:89:13:58:74:47:f1:31:69:c8:c0: 2b:95:ca:53:6f:40:75:9d:82:c9:61:c4:3b:6e:d3:0b:85:67: e5:44:9e:33:a1:9c:54:f9:ee:89:0d:1d:38:ff:c8:42:3f:89: d3:e9:76:95:4a:3c:2a:f7:82:3c:da:bd:4c:94:e9:3e:5b:3d: b5:31:5b:1d:41:2b:96:29:aa:ed:06:0e:ca:00:e9:8d:90:db: 08:ce:3f:db:46:24:d6:1f:73:4e:49:33:3a:a8:59:c6:bc:2c: 2b:a3:fb:84:9a:41:01:5d:95:67:bb:b8:d5:a5:7b:9d:30:f1: ad:2a:dc:00:5a:39:e1:8f:d7:71:61:e3:b7:06:b7:5e:33:86: ec:11:86:77:e0:d1:0b:95:4b:65:b5:7f:78:b5:f7:c5:15:ec: 56:9a:f0:85:fa:29:89:89:5c:d3:0d:db:41:40:2c:81:27:52: ad:a4:fe:49:64:ba:c7:d9:c9:4e:2e:20:75:4e:18:b9:5f:fe: 1a:6d:d0:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN64LIcN6bXPScEpuCtgKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2ZjEzZDY4MGNlNDgwNTkxYmY4YjM3ZGRjYTBmYWViM2Ji ZTc0NGUwHhcNMjUxMjExMjEwMTA1WhcNMjUxMjEyMjEwMTA1WjAzMTEwLwYDVQQD EygxOGVjMWFkYmY0ZmZiYTIyZmQ1Y2YwZTYzM2I4YzEzODE0ZTQ4ZGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMJwiLc4hfS6YDfpxxmDpqBNDoQL gpHHmv3gq6DpWqoPFYaLDqPv3okTCuvyHgdmm/Px8zqRBTq2lRZb6wJTwxThaZdO AoBbjwNlwEXsmWyovoPtblk0knvnFYo5xvdqHGzD8AaEojHN6gg5kzZrilfsHVW6 fmXNtPay9j4RKiFqpul21SVh1I6ak/3Erpotr+BwerzKKci4WXLON1c5ovbFzOC9 6eXj93lOLAPye+EmNUfJcbyUQvh4nZfBGy9RtU8z7RSRtCdmaPoi4jHL0ynZPGtz X0biyjY9SRoLg9xj6pJKOiysB+Qw6NmRa2cUCr5nM8uzmMkjHAenwVN+JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBjsGtv0/7oi/Vzw5jO4wTgU5I3GMB8GA1UdIwQY MBaAFKbxPWgM5IBZG/izfdyg+us7vnROMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHZFOWFBemtnRmtiLUxOOTNLRDY2enUtZEU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ZDFiMDItYjBmOS00ZTBlLWE0NTct MzBiZGI0OGRhNTIxLzEvcHZFOWFBemtnRmtiLUxOOTNLRDY2enUtZEU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ZDFiMDItYjBmOS00ZTBlLWE0NTctMzBiZGI0OGRhNTIx LzEvcHZFOWFBemtnRmtiLUxOOTNLRDY2enUtZEU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARYn72noH Nihacl4IKrws+C61ogB8wkJFP+6lxRCN1wk+r1vwJKSyDf3EQAp8q4i14xRVNmLS P6VJFQs59OGJE1h0R/ExacjAK5XKU29AdZ2CyWHEO27TC4Vn5USeM6GcVPnuiQ0d OP/IQj+J0+l2lUo8KveCPNq9TJTpPls9tTFbHUErlimq7QYOygDpjZDbCM4/20Yk 1h9zTkkzOqhZxrwsK6P7hJpBAV2VZ7u41aV7nTDxrSrcAFo54Y/XcWHjtwa3XjOG 7BGGd+DRC5VLZbV/eLX3xRXsVprwhfopiYlc0w3bQUAsgSdSraT+SWS6x9nJTi4g dU4YuV/+Gm3QfQ== -----END CERTIFICATE-----Generated at Fri Dec 12 04:00:03 2025 by rpki-client