This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft File: pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft (raw, json) Hash identifier: jsmo4h1y7brN+gt0KS/cpt4OGBI6kYMH0VKqrWjRBPM= Subject key identifier: 98:F1:53:26:34:41:9D:D2:BB:4D:AC:3C:2E:E1:7B:99:F6:E0:BD:24 Authority key identifier: A5:0F:21:C3:DC:93:75:7F:C0:32:82:A8:35:60:0D:65:9F:96:1E:8E Certificate issuer: /CN=a50f21c3dc93757fc03282a835600d659f961e8e Certificate serial: 019B28890FFCE2A373240A214922B27B3C8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft Manifest number: 0C5F Signing time: Tue 16 Dec 2025 19:00:29 +0000 Manifest this update: Tue 16 Dec 2025 19:00:29 +0000 Manifest next update: Wed 17 Dec 2025 19:00:29 +0000 Files and hashes: 1: XKCgbBOF2hVHKDo78niiU6jULHg.roa (hash: QEaRFAJhUUsQeo4vGH+Fx3VQmk/EsBaPpLYF/MqkgOs=) 2: pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl (hash: GyjvRTHKy7ao47wKcXsMqnDPNHBOLg9FjSB5HUCFz7I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:89:0f:fc:e2:a3:73:24:0a:21:49:22:b2:7b:3c:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a50f21c3dc93757fc03282a835600d659f961e8e Validity Not Before: Dec 16 19:00:29 2025 GMT Not After : Dec 17 19:00:29 2025 GMT Subject: CN=98f1532634419dd2bb4dac3c2ee17b99f6e0bd24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:54:dc:25:e3:f1:29:3a:07:c6:9f:0f:c9:c1: 25:0e:6e:24:1b:ba:52:78:08:b1:1a:c0:3c:00:d8: 25:a8:29:98:45:b6:86:71:49:ab:30:df:96:74:38: 50:6e:08:9e:55:17:e4:db:42:65:45:21:3d:98:fb: fd:b8:14:dc:97:66:4c:50:3d:16:0d:d2:25:26:d8: 08:37:74:9f:e9:28:fc:7b:09:86:39:6e:f5:53:eb: a4:ff:e5:1b:2e:41:3d:a7:07:8d:1c:46:0e:17:7d: b4:28:7a:92:65:e6:37:14:c2:15:06:17:c3:29:be: bf:f2:d1:a9:ce:07:4d:02:37:95:84:ed:f5:0b:20: 94:9d:61:2e:3b:71:0f:29:a8:55:a1:67:22:a1:e6: 3f:6a:2d:08:8a:f0:3e:56:d1:87:4d:72:1e:76:fc: e5:ab:f3:e5:60:3b:f6:30:00:75:05:9a:bc:05:ad: a3:7d:0f:3e:69:9c:f9:aa:7f:21:1f:4e:2d:c9:e7: ed:e2:23:f2:22:8f:4d:16:ca:92:e7:13:fe:af:7d: 45:c7:3a:3b:bd:39:d7:5d:89:1f:7b:aa:63:8b:cf: 02:6c:58:dc:bc:5c:4a:4d:8c:80:50:aa:85:ba:b4: 0c:3b:fa:62:c6:5e:58:5e:9c:63:bb:5a:56:2d:28: c8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:F1:53:26:34:41:9D:D2:BB:4D:AC:3C:2E:E1:7B:99:F6:E0:BD:24 X509v3 Authority Key Identifier: keyid:A5:0F:21:C3:DC:93:75:7F:C0:32:82:A8:35:60:0D:65:9F:96:1E:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:fe:70:df:7a:d7:7c:e1:73:a7:03:2c:0a:1a:a9:0a:76:80: b4:e2:9a:24:38:d4:b6:5a:6a:47:17:86:71:74:74:6b:4b:84: e5:c3:8c:9c:b8:d6:53:1d:bb:aa:20:15:00:6f:1e:f4:c0:4f: eb:06:bc:d4:74:0f:e9:4f:2c:01:1a:37:e1:17:b8:d1:69:1b: 4a:98:96:c3:3e:85:46:70:bf:c8:d0:49:49:01:1d:25:f0:28: e3:f6:2b:08:09:6e:8d:da:ae:e0:f7:fc:b1:99:29:77:87:76: 50:b3:19:06:fd:a4:f4:a7:13:24:07:bd:ed:06:76:a8:71:7b: 77:b4:42:bb:93:a3:50:3f:14:89:41:12:49:a6:71:db:e3:b6: ce:b3:00:bf:72:4b:2d:90:ac:bb:60:68:46:9b:46:95:dd:a2: 4e:54:90:31:0f:1e:d9:5f:a9:57:85:c1:ac:e8:61:47:71:0a: a0:ac:43:9f:d2:27:21:48:3f:ee:08:ce:95:29:62:f5:47:15: 86:b7:1f:6b:6c:ee:1f:9e:11:63:74:58:9c:15:b5:de:2a:b9: e8:eb:91:32:da:8d:9d:70:4c:e1:e7:a9:68:77:f7:3b:59:4b: 37:12:82:ce:c1:05:40:3e:f2:24:ea:bf:e1:e3:32:11:b7:4d: 9f:d3:2a:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoiQ/84qNzJAohSSKyezyLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MGYyMWMzZGM5Mzc1N2ZjMDMyODJhODM1NjAwZDY1OWY5 NjFlOGUwHhcNMjUxMjE2MTkwMDI5WhcNMjUxMjE3MTkwMDI5WjAzMTEwLwYDVQQD Eyg5OGYxNTMyNjM0NDE5ZGQyYmI0ZGFjM2MyZWUxN2I5OWY2ZTBiZDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlTcJePxKToHxp8PycElDm4kG7pS eAixGsA8ANglqCmYRbaGcUmrMN+WdDhQbgieVRfk20JlRSE9mPv9uBTcl2ZMUD0W DdIlJtgIN3Sf6Sj8ewmGOW71U+uk/+UbLkE9pweNHEYOF320KHqSZeY3FMIVBhfD Kb6/8tGpzgdNAjeVhO31CyCUnWEuO3EPKahVoWcioeY/ai0IivA+VtGHTXIedvzl q/PlYDv2MAB1BZq8Ba2jfQ8+aZz5qn8hH04tyeft4iPyIo9NFsqS5xP+r31Fxzo7 vTnXXYkfe6pji88CbFjcvFxKTYyAUKqFurQMO/pixl5YXpxju1pWLSjIWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJjxUyY0QZ3Su02sPC7he5n24L0kMB8GA1UdIwQY MBaAFKUPIcPck3V/wDKCqDVgDWWflh6OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFE4aHc5eVRkWF9BTW9Lb05XQU5aWi1XSG80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9lYTFkZjctODA4YS00N2MzLWFlNTEt YjA4NDNlYzM4ODIzLzEvcFE4aHc5eVRkWF9BTW9Lb05XQU5aWi1XSG80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9lYTFkZjctODA4YS00N2MzLWFlNTEtYjA4NDNlYzM4ODIz LzEvcFE4aHc5eVRkWF9BTW9Lb05XQU5aWi1XSG80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfP5w33rX fOFzpwMsChqpCnaAtOKaJDjUtlpqRxeGcXR0a0uE5cOMnLjWUx27qiAVAG8e9MBP 6wa81HQP6U8sARo34Re40WkbSpiWwz6FRnC/yNBJSQEdJfAo4/YrCAlujdqu4Pf8 sZkpd4d2ULMZBv2k9KcTJAe97QZ2qHF7d7RCu5OjUD8UiUESSaZx2+O2zrMAv3JL LZCsu2BoRptGld2iTlSQMQ8e2V+pV4XBrOhhR3EKoKxDn9InIUg/7gjOlSli9UcV hrcfa2zuH54RY3RYnBW13iq56OuRMtqNnXBM4eepaHf3O1lLNxKCzsEFQD7yJOq/ 4eMyEbdNn9Mq1Q== -----END CERTIFICATE-----Generated at Wed Dec 17 03:46:12 2025 by rpki-client