This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.mft File: pVAEZhoJ4mdfwVmdTkACfXeMQEw.mft (raw, json) Hash identifier: XbZvRBN9PrjiYJ8m2+MgpswxTcrQMIQRB38QwitjjK4= Subject key identifier: 24:5A:1E:2B:95:67:90:56:0F:00:23:DF:0C:C0:7A:8D:21:7C:F6:F2 Authority key identifier: A5:50:04:66:1A:09:E2:67:5F:C1:59:9D:4E:40:02:7D:77:8C:40:4C Certificate issuer: /CN=a55004661a09e2675fc1599d4e40027d778c404c Certificate serial: 019B5A522DB4690F4CE9BE8DACA40DA8BF8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pVAEZhoJ4mdfwVmdTkACfXeMQEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.mft Manifest number: 08C8 Signing time: Fri 26 Dec 2025 11:01:33 +0000 Manifest this update: Fri 26 Dec 2025 11:01:33 +0000 Manifest next update: Sat 27 Dec 2025 11:01:33 +0000 Files and hashes: 1: e4pYTgrST_OIh_0Qkxb1VUF6r3Y.roa (hash: CwIOS1Io6ZhDFcyydlZIo2WNdIO73K5UrPWTpvd7EH0=) 2: pVAEZhoJ4mdfwVmdTkACfXeMQEw.crl (hash: MtizhzrHsCslFCOpcQnqXu6YmA7WAkdOr0nuKOASCvs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.mft rsync://rpki.ripe.net/repository/DEFAULT/pVAEZhoJ4mdfwVmdTkACfXeMQEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:52:2d:b4:69:0f:4c:e9:be:8d:ac:a4:0d:a8:bf:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a55004661a09e2675fc1599d4e40027d778c404c Validity Not Before: Dec 26 11:01:33 2025 GMT Not After : Dec 27 11:01:33 2025 GMT Subject: CN=245a1e2b956790560f0023df0cc07a8d217cf6f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cc:29:4c:ed:89:5f:23:f8:c0:99:31:7e:b1: 0f:34:5c:50:02:af:50:f6:a9:24:9f:78:3b:a4:95: 14:f8:6b:8f:1f:d0:de:d5:cc:8e:fe:1d:98:c7:dd: 15:6f:26:bd:65:d4:cb:4b:4a:73:86:9c:47:2c:9e: 30:88:61:11:c4:af:3b:61:ff:34:5c:d5:51:99:c5: 63:51:5d:71:c4:85:10:1a:8d:20:2b:91:ad:a2:ec: 04:5e:26:48:c3:31:7b:3d:b9:bb:11:ea:3c:49:69: 51:ce:43:7f:f1:40:95:ce:6e:eb:05:70:3d:e5:4f: 26:34:ee:e9:ac:86:5c:ee:00:5d:74:6b:ac:29:60: f2:94:34:97:53:ca:68:ab:17:bf:15:30:47:c5:d2: 5c:44:78:c6:49:69:2c:73:b5:8a:18:1a:f6:55:2f: 87:4c:58:9d:a1:b8:f8:00:f2:8e:e5:e1:04:92:8b: 7e:e7:e7:00:29:25:c3:7c:7f:0d:9f:ba:ab:14:70: 95:85:53:eb:a4:31:dc:bf:e8:2f:bd:21:3b:bb:a5: 23:99:70:47:7d:6f:0c:8a:64:ba:43:52:ba:80:61: 58:b4:0b:e1:7b:0f:5c:f6:53:1d:a2:ae:dd:46:a9: f6:fa:1e:de:7e:91:9b:fe:09:eb:95:50:05:f3:5c: c9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:5A:1E:2B:95:67:90:56:0F:00:23:DF:0C:C0:7A:8D:21:7C:F6:F2 X509v3 Authority Key Identifier: keyid:A5:50:04:66:1A:09:E2:67:5F:C1:59:9D:4E:40:02:7D:77:8C:40:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pVAEZhoJ4mdfwVmdTkACfXeMQEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:fc:bd:3f:03:0a:db:eb:de:e5:50:f1:c5:22:f7:ca:b5:28: df:89:83:8b:d4:15:00:e5:b7:9e:8b:05:05:12:48:2f:46:83: 60:89:f6:f6:8e:8e:48:b8:9e:f3:e9:22:31:54:43:46:59:87: 1b:50:5d:a8:42:8b:a3:b3:19:8f:da:aa:30:d8:06:97:48:fb: 9b:c4:52:c0:11:e6:5a:0a:60:82:8a:e5:e6:5c:7c:39:70:a4: 2a:47:5c:50:c0:ab:66:c0:60:fd:a0:dc:80:4e:17:11:af:b2: 2f:30:a5:6a:69:4a:60:9c:a6:6b:1b:18:b6:66:c1:00:9a:d2: d4:d7:69:c4:68:ba:9c:de:00:c7:08:c1:4a:be:fd:55:41:66: 3f:5c:15:b4:ad:1d:99:17:28:99:3a:7f:a1:de:9e:42:c2:cb: 9f:c2:74:ae:5b:0f:1f:e3:7e:57:14:51:d2:d4:46:68:4f:6d: 4b:20:cc:80:de:69:18:93:2f:37:43:18:6b:be:94:c7:42:a3: 95:c3:a7:b4:e9:d7:99:5b:1a:b0:b7:31:79:76:ff:05:08:2b: 32:5d:63:fe:cf:cf:7e:af:87:ce:1b:85:9c:2e:fd:21:7b:b9: 9d:c6:b6:71:ea:35:45:1a:fd:0e:39:c8:05:aa:63:bd:63:67: e7:22:3b:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUi20aQ9M6b6NrKQNqL+OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NTAwNDY2MWEwOWUyNjc1ZmMxNTk5ZDRlNDAwMjdkNzc4 YzQwNGMwHhcNMjUxMjI2MTEwMTMzWhcNMjUxMjI3MTEwMTMzWjAzMTEwLwYDVQQD EygyNDVhMWUyYjk1Njc5MDU2MGYwMDIzZGYwY2MwN2E4ZDIxN2NmNmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMwpTO2JXyP4wJkxfrEPNFxQAq9Q 9qkkn3g7pJUU+GuPH9De1cyO/h2Yx90Vbya9ZdTLS0pzhpxHLJ4wiGERxK87Yf80 XNVRmcVjUV1xxIUQGo0gK5GtouwEXiZIwzF7Pbm7Eeo8SWlRzkN/8UCVzm7rBXA9 5U8mNO7prIZc7gBddGusKWDylDSXU8poqxe/FTBHxdJcRHjGSWksc7WKGBr2VS+H TFidobj4APKO5eEEkot+5+cAKSXDfH8Nn7qrFHCVhVPrpDHcv+gvvSE7u6UjmXBH fW8MimS6Q1K6gGFYtAvhew9c9lMdoq7dRqn2+h7efpGb/gnrlVAF81zJDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCRaHiuVZ5BWDwAj3wzAeo0hfPbyMB8GA1UdIwQY MBaAFKVQBGYaCeJnX8FZnU5AAn13jEBMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFZBRVpob0o0bWRmd1ZtZFRrQUNmWGVNUUV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8yY2ZkZmQtMWIzYi00YWFhLWJkODIt M2Y3OGJjM2RlM2E4LzEvcFZBRVpob0o0bWRmd1ZtZFRrQUNmWGVNUUV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8yY2ZkZmQtMWIzYi00YWFhLWJkODItM2Y3OGJjM2RlM2E4 LzEvcFZBRVpob0o0bWRmd1ZtZFRrQUNmWGVNUUV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABfy9PwMK 2+ve5VDxxSL3yrUo34mDi9QVAOW3nosFBRJIL0aDYIn29o6OSLie8+kiMVRDRlmH G1BdqEKLo7MZj9qqMNgGl0j7m8RSwBHmWgpggorl5lx8OXCkKkdcUMCrZsBg/aDc gE4XEa+yLzClamlKYJymaxsYtmbBAJrS1NdpxGi6nN4AxwjBSr79VUFmP1wVtK0d mRcomTp/od6eQsLLn8J0rlsPH+N+VxRR0tRGaE9tSyDMgN5pGJMvN0MYa76Ux0Kj lcOntOnXmVsasLcxeXb/BQgrMl1j/s/Pfq+HzhuFnC79IXu5nca2ceo1RRr9DjnI BapjvWNn5yI7YQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:59:04 2025 by rpki-client