This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft File: paVuvwHgA0n2cwGRgFYMmjGuqHE.mft (raw, json) Hash identifier: cFlj2n5Lt9E+BqzFO/IKVhNyR79I/skRR/7Opi6x6nw= Subject key identifier: 57:DE:8B:90:EA:1D:D1:A8:C1:60:DA:7E:AF:DF:6C:99:02:77:F0:43 Authority key identifier: A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71 Certificate issuer: /CN=a5a56ebf01e00349f673019180560c9a31aea871 Certificate serial: 019B2F303B020BFD1749FE2822FB07BB1DB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft Manifest number: 0E84 Signing time: Thu 18 Dec 2025 02:00:48 +0000 Manifest this update: Thu 18 Dec 2025 02:00:48 +0000 Manifest next update: Fri 19 Dec 2025 02:00:48 +0000 Files and hashes: 1: Up1DgVu6Rzl8j-xWcnRJPbc9w5c.roa (hash: S1Y+h0243/EB07fB0dXlduT0obEhbg3cgY40o4HTbzQ=) 2: paVuvwHgA0n2cwGRgFYMmjGuqHE.crl (hash: TnHNtf032/boJd/dW2YPfKd0ngkQ5mHVOq02G7k8kEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:30:3b:02:0b:fd:17:49:fe:28:22:fb:07:bb:1d:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5a56ebf01e00349f673019180560c9a31aea871 Validity Not Before: Dec 18 02:00:48 2025 GMT Not After : Dec 19 02:00:48 2025 GMT Subject: CN=57de8b90ea1dd1a8c160da7eafdf6c990277f043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4b:a7:1c:0a:68:12:a7:d4:d7:ff:20:06:5e: 42:c0:e7:00:bc:1e:4f:eb:36:79:4c:6a:f8:bc:35: 30:d4:c0:73:e4:75:da:ac:b2:fe:78:4e:99:71:8c: 9f:48:68:22:cf:d1:1a:15:89:41:94:24:30:58:24: ef:31:37:94:65:ea:4d:e3:e1:78:aa:01:10:65:50: 36:a9:a7:90:0e:25:86:3f:df:f2:43:6f:ea:41:97: 48:72:b2:44:07:bc:06:18:28:eb:49:07:25:1f:4c: f7:e8:a7:55:e3:2b:e5:84:b2:fe:2d:4b:e6:23:34: 0f:85:8c:de:ee:ea:1b:47:90:29:a0:9a:82:0d:5e: 32:98:44:ac:bc:2a:32:75:bb:e5:36:a5:9b:a4:79: 33:e5:a6:f6:f8:44:50:11:f5:6f:36:51:36:89:08: 23:ac:f5:d8:a4:82:0b:41:fd:c9:3c:ce:14:82:d6: 0a:7a:0f:eb:31:a0:73:f3:fa:7a:f0:53:ed:59:42: 5f:30:66:49:e5:ed:7b:5d:92:a6:3b:90:b4:45:a9: 90:07:b5:59:d6:28:5a:3f:30:c7:e3:27:bb:c5:b5: 17:4c:4e:1a:38:a0:e0:0d:05:32:2a:20:28:5f:e7: 68:71:be:a9:03:ee:d3:a7:4a:b7:0e:4a:24:e0:b2: 53:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:DE:8B:90:EA:1D:D1:A8:C1:60:DA:7E:AF:DF:6C:99:02:77:F0:43 X509v3 Authority Key Identifier: keyid:A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:d5:a6:c8:87:ed:8f:2e:fc:ab:0c:81:0a:34:cb:b7:0c:fd: 78:63:09:a2:d0:7d:e6:db:b9:ab:ef:d0:ba:5f:ad:70:f0:0a: 9e:69:ab:97:61:ed:d4:cb:0c:6e:c5:27:be:65:8c:59:8d:82: 8e:6b:bf:66:46:66:32:c9:9f:2a:b6:d0:aa:c1:90:cf:49:be: 54:25:6d:8a:11:b6:a7:a3:c8:b9:ac:61:61:1b:af:a4:a3:8a: 28:6b:40:f8:05:68:73:73:76:26:fa:b3:0b:90:b0:4b:e7:c7: f6:07:94:6a:c9:17:ec:f6:19:d9:c3:93:04:b7:c8:89:89:31: 74:ef:43:86:b9:ce:cc:f5:f8:b1:b8:e0:8b:dc:d7:45:5d:8f: 08:50:19:a6:78:da:92:7d:81:19:31:37:6b:dc:03:a2:23:b6: 25:d3:fb:09:58:93:df:13:19:73:61:87:7d:fe:aa:94:30:50: be:95:75:6b:6e:1a:ad:45:e2:9f:55:df:32:d4:13:d0:ff:e6: 1f:5c:fa:e4:91:2f:da:b7:87:f1:9d:84:41:ae:e8:80:14:2e: 17:ee:47:dc:13:cb:f4:46:cf:7c:bd:fb:a8:b0:c3:56:1a:68: b0:3a:8a:38:03:c5:54:a5:16:d4:e3:a8:31:d0:c8:66:4a:51: ce:aa:f7:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvMDsCC/0XSf4oIvsHux23MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YTU2ZWJmMDFlMDAzNDlmNjczMDE5MTgwNTYwYzlhMzFh ZWE4NzEwHhcNMjUxMjE4MDIwMDQ4WhcNMjUxMjE5MDIwMDQ4WjAzMTEwLwYDVQQD Eyg1N2RlOGI5MGVhMWRkMWE4YzE2MGRhN2VhZmRmNmM5OTAyNzdmMDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkunHApoEqfU1/8gBl5CwOcAvB5P 6zZ5TGr4vDUw1MBz5HXarLL+eE6ZcYyfSGgiz9EaFYlBlCQwWCTvMTeUZepN4+F4 qgEQZVA2qaeQDiWGP9/yQ2/qQZdIcrJEB7wGGCjrSQclH0z36KdV4yvlhLL+LUvm IzQPhYze7uobR5ApoJqCDV4ymESsvCoydbvlNqWbpHkz5ab2+ERQEfVvNlE2iQgj rPXYpIILQf3JPM4UgtYKeg/rMaBz8/p68FPtWUJfMGZJ5e17XZKmO5C0RamQB7VZ 1ihaPzDH4ye7xbUXTE4aOKDgDQUyKiAoX+docb6pA+7Tp0q3Dkok4LJTXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFfei5DqHdGowWDafq/fbJkCd/BDMB8GA1UdIwQY MBaAFKWlbr8B4ANJ9nMBkYBWDJoxrqhxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGFWdXZ3SGdBMG4yY3dHUmdGWU1takd1cUhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81NTRjMzUtYTgzYy00MzI5LWEwOGQt MmQ0NmQzMGRhY2JmLzEvcGFWdXZ3SGdBMG4yY3dHUmdGWU1takd1cUhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS81NTRjMzUtYTgzYy00MzI5LWEwOGQtMmQ0NmQzMGRhY2Jm LzEvcGFWdXZ3SGdBMG4yY3dHUmdGWU1takd1cUhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaNWmyIft jy78qwyBCjTLtwz9eGMJotB95tu5q+/Qul+tcPAKnmmrl2Ht1MsMbsUnvmWMWY2C jmu/ZkZmMsmfKrbQqsGQz0m+VCVtihG2p6PIuaxhYRuvpKOKKGtA+AVoc3N2Jvqz C5CwS+fH9geUaskX7PYZ2cOTBLfIiYkxdO9DhrnOzPX4sbjgi9zXRV2PCFAZpnja kn2BGTE3a9wDoiO2JdP7CViT3xMZc2GHff6qlDBQvpV1a24arUXin1XfMtQT0P/m H1z65JEv2reH8Z2EQa7ogBQuF+5H3BPL9EbPfL37qLDDVhposDqKOAPFVKUW1OOo MdDIZkpRzqr3SA== -----END CERTIFICATE-----Generated at Thu Dec 18 05:48:55 2025 by rpki-client