This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft File: pDtTIrjqOKegRNywZxp126EEPX4.mft (raw, json) Hash identifier: y2MhflN2KQ41qgIH1ZGoLM8LDXKz/4CVOosQSeCZU5M= Subject key identifier: 04:12:56:CE:57:09:05:FD:DF:61:CD:6E:D5:9B:AE:E3:18:E1:88:3E Authority key identifier: A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E Certificate issuer: /CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e Certificate serial: 019AF8E778CE033BE1D7D45ACCF6459560DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft Manifest number: 176C Signing time: Sun 07 Dec 2025 13:01:50 +0000 Manifest this update: Sun 07 Dec 2025 13:01:50 +0000 Manifest next update: Mon 08 Dec 2025 13:01:50 +0000 Files and hashes: 1: iMT6U9mtu2u4ZrZg6QFZA1PI4b4.roa (hash: gM1ZjnX5a45F3g+DHFf4ROLZzbrv4Z9zB/pBieJvcD0=) 2: pDtTIrjqOKegRNywZxp126EEPX4.crl (hash: hO5ki0ezlRRw9/TQwpQxfKt/lyaPQPjsE1EKr1wFumw=) 3: uSjPkHVrQGEYzySpy8LO3vhOhQk.roa (hash: 7CsfbkRbBqND0q0gdzh2M/F8+y9Oj0uA6RZKZkPuiPY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f8:e7:78:ce:03:3b:e1:d7:d4:5a:cc:f6:45:95:60:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e Validity Not Before: Dec 7 13:01:50 2025 GMT Not After : Dec 8 13:01:50 2025 GMT Subject: CN=041256ce570905fddf61cd6ed59baee318e1883e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:34:fd:67:08:15:70:d8:55:72:d4:95:34:a2: 55:37:4f:3c:75:ea:72:8a:8a:59:7e:cc:00:4b:bf: a5:06:b1:63:4f:5a:73:22:d9:74:32:b8:48:4f:cd: cd:09:3d:40:78:6f:c9:7b:5c:60:d9:a0:3e:82:64: 62:4f:19:55:d0:36:78:50:d5:d0:2d:5d:3a:fc:eb: c7:61:d6:a9:7f:11:a3:3d:f1:d2:fe:85:f0:55:29: ab:8d:53:bc:e9:6a:92:91:a1:da:8c:ad:bb:89:59: 7e:95:a2:f4:45:b6:8a:02:37:c7:bf:85:4d:b1:6c: f2:f7:21:7f:cd:57:54:05:aa:2b:ec:f1:80:84:96: 0e:1d:36:48:d3:10:22:2a:17:58:25:22:10:5e:e4: 3a:c1:5a:b8:4f:3c:3e:29:4a:24:8e:d9:0b:59:c2: 65:65:bf:33:0a:5f:8b:e3:f0:3d:de:fc:21:62:55: 25:01:76:20:e2:21:42:dd:aa:17:c0:de:b2:be:7a: a5:fe:ae:d2:d0:08:dd:16:d3:d3:b4:fb:1c:7b:93: 4e:99:7b:cd:a3:24:83:36:09:c4:38:5a:d0:b6:4a: a8:1b:75:ec:3b:d5:ed:a9:d4:24:b4:da:c3:ee:eb: 54:0b:84:28:c1:57:a4:73:e2:29:04:f2:6c:1d:71: 56:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:12:56:CE:57:09:05:FD:DF:61:CD:6E:D5:9B:AE:E3:18:E1:88:3E X509v3 Authority Key Identifier: keyid:A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:23:81:d0:f0:17:e4:c6:ef:a1:64:fa:ef:33:e4:b2:6a:8c: 71:4c:c0:a9:54:d3:c3:4c:d6:47:45:65:b8:4a:77:5d:5f:66: b4:9c:79:d3:bc:5c:bf:c2:86:43:f4:fc:1c:3b:9b:44:93:48: cc:b5:59:4e:59:9d:41:7d:7d:73:40:88:af:8a:bd:7a:70:73: 64:17:6f:78:d9:b4:ff:a7:c5:21:aa:8b:1b:5c:fd:f3:eb:72: 66:db:78:30:53:fb:31:d2:c2:fd:c6:eb:97:9d:3d:fd:4c:dc: 6b:17:1b:ca:e5:4b:bb:ce:55:92:3c:c0:f7:aa:5e:cc:3e:d5: 32:9e:90:61:a5:98:0b:e4:b0:a9:07:08:d7:ff:04:64:3f:c9: c5:01:cf:39:3f:c9:1b:34:bf:66:66:c7:8b:37:04:f6:0a:ae: 76:3a:65:90:9e:a6:79:0f:ad:4b:b5:12:c9:e7:06:6f:df:c0: fe:68:e1:63:a1:65:fb:68:7b:62:27:dd:d5:e8:c7:fb:34:d3: 9e:67:ab:5f:f1:3b:d9:5d:5a:95:10:8e:df:96:9a:e6:2d:fb: 5f:0c:42:16:f4:3c:46:86:aa:06:0b:81:80:22:a3:cc:a4:77: 73:da:c1:95:04:ad:ee:7b:04:3c:ae:60:43:79:64:00:da:83: 80:d6:6b:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr453jOAzvh19RazPZFlWDeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0M2I1MzIyYjhlYTM4YTdhMDQ0ZGNiMDY3MWE3NWRiYTEw NDNkN2UwHhcNMjUxMjA3MTMwMTUwWhcNMjUxMjA4MTMwMTUwWjAzMTEwLwYDVQQD EygwNDEyNTZjZTU3MDkwNWZkZGY2MWNkNmVkNTliYWVlMzE4ZTE4ODNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjT9ZwgVcNhVctSVNKJVN088depy iopZfswAS7+lBrFjT1pzItl0MrhIT83NCT1AeG/Je1xg2aA+gmRiTxlV0DZ4UNXQ LV06/OvHYdapfxGjPfHS/oXwVSmrjVO86WqSkaHajK27iVl+laL0RbaKAjfHv4VN sWzy9yF/zVdUBaor7PGAhJYOHTZI0xAiKhdYJSIQXuQ6wVq4Tzw+KUokjtkLWcJl Zb8zCl+L4/A93vwhYlUlAXYg4iFC3aoXwN6yvnql/q7S0AjdFtPTtPsce5NOmXvN oySDNgnEOFrQtkqoG3XsO9XtqdQktNrD7utUC4QowVekc+IpBPJsHXFWsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQSVs5XCQX932HNbtWbruMY4Yg+MB8GA1UdIwQY MBaAFKQ7UyK46jinoETcsGcadduhBD1+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcER0VElyanFPS2VnUk55d1p4cDEyNkVFUFg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9hZTUyMDYtYzg0My00YmQ1LTg4NjAt NzFlOTViMDRiM2VjLzEvcER0VElyanFPS2VnUk55d1p4cDEyNkVFUFg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9hZTUyMDYtYzg0My00YmQ1LTg4NjAtNzFlOTViMDRiM2Vj LzEvcER0VElyanFPS2VnUk55d1p4cDEyNkVFUFg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxSOB0PAX 5MbvoWT67zPksmqMcUzAqVTTw0zWR0VluEp3XV9mtJx507xcv8KGQ/T8HDubRJNI zLVZTlmdQX19c0CIr4q9enBzZBdveNm0/6fFIaqLG1z98+tyZtt4MFP7MdLC/cbr l509/UzcaxcbyuVLu85VkjzA96pezD7VMp6QYaWYC+SwqQcI1/8EZD/JxQHPOT/J GzS/ZmbHizcE9gqudjplkJ6meQ+tS7USyecGb9/A/mjhY6Fl+2h7Yifd1ejH+zTT nmerX/E72V1alRCO35aa5i37XwxCFvQ8RoaqBguBgCKjzKR3c9rBlQSt7nsEPK5g Q3lkANqDgNZrHg== -----END CERTIFICATE-----Generated at Sun Dec 7 18:04:41 2025 by rpki-client