This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft File: pCAAxPTsSgPNTTZX4BtwA07CO5c.mft (raw, json) Hash identifier: ks6NTKED53Y7NXU9sBmRBiApBXr6c/7PgeiYpwGHfUI= Subject key identifier: D8:EF:38:9F:C6:C3:20:27:AB:48:1C:1D:5C:85:43:E0:E0:EC:4B:1F Authority key identifier: A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97 Certificate issuer: /CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97 Certificate serial: 019B3DC811D78A823E5D85E9633AAE10C290 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft Manifest number: 178D Signing time: Sat 20 Dec 2025 22:01:20 +0000 Manifest this update: Sat 20 Dec 2025 22:01:20 +0000 Manifest next update: Sun 21 Dec 2025 22:01:20 +0000 Files and hashes: 1: 41_o2BIwv76TF64VP1DAdfjTxPo.roa (hash: ZsvXvwGlxNqhMT0bqp079C/5ezKY6fiYSiOoxT1NO2o=) 2: 4mRSyOWbS8hQScfHLulGf4Y6ZgQ.roa (hash: o3JSSVtXNFoFrqvnt6XhA+Y0uItKhtMcyPKqriXcd08=) 3: Qw_MgL0jZxAEcUaQV1xqF4PVe2w.roa (hash: K6DZu82eoM3254ECuNlV9U+0ldDohrzL2NCBM61LLzM=) 4: Zl3HHM0URwuJSk9LlxkNHY3QJSA.roa (hash: Ael3rTKnV/t1wOUc5dyvS7YOaqG/u0QZHukcBegGERg=) 5: pCAAxPTsSgPNTTZX4BtwA07CO5c.crl (hash: k28Z6CQG361FNPk0VLwSHMq1oPQctT0VEEqeOTB0Sl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c8:11:d7:8a:82:3e:5d:85:e9:63:3a:ae:10:c2:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97 Validity Not Before: Dec 20 22:01:20 2025 GMT Not After : Dec 21 22:01:20 2025 GMT Subject: CN=d8ef389fc6c32027ab481c1d5c8543e0e0ec4b1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:31:cd:e0:0c:03:2e:45:d0:e8:a1:d0:d1:c3: bd:d4:eb:46:dc:dc:cf:2c:87:e3:b3:8e:08:50:76: 05:22:db:a1:07:54:5c:e4:ab:3e:98:e0:62:b1:ff: 37:a5:2b:61:54:ec:29:9c:04:b4:9a:fc:33:8e:9b: f9:49:d3:b0:d6:05:a0:18:ca:cc:81:40:30:8e:f4: 6a:49:ea:ac:30:95:b4:d5:4f:b1:d1:ce:f6:05:ec: 89:9a:b3:6a:61:0a:b5:36:ee:19:0e:46:be:c0:70: 5f:03:4e:65:d0:fd:9c:89:9c:fd:b3:da:6e:69:5f: 6c:3b:c7:54:43:90:39:3a:8a:f4:01:10:70:27:cb: 1c:3f:5f:d0:c7:18:26:fb:b5:cb:bc:5d:20:11:b8: 3e:05:61:3a:8d:30:e6:49:07:c9:10:17:20:68:c6: 28:48:98:9e:10:e6:80:4a:f7:ec:bb:c0:be:28:53: 6c:b2:21:02:72:a9:f4:25:da:45:67:d3:b0:2c:c4: 51:44:3b:e9:3f:8f:6f:eb:4e:e4:18:8e:9e:cd:55: f2:cc:3c:81:55:5e:f4:55:a0:48:49:ae:da:37:0e: 01:51:13:0f:be:e7:96:65:a6:cc:ed:ec:04:a9:d8: cf:79:ad:63:6e:23:47:5b:12:3f:e1:4b:fb:de:35: 78:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:EF:38:9F:C6:C3:20:27:AB:48:1C:1D:5C:85:43:E0:E0:EC:4B:1F X509v3 Authority Key Identifier: keyid:A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:06:f5:08:f6:45:3c:68:e7:67:fb:c4:5c:9a:51:88:b6:e4: b7:45:c7:e5:fc:6c:8d:65:f6:99:24:01:5b:df:96:48:80:ed: aa:c2:1b:23:97:06:cb:50:8e:9b:7d:10:7a:70:75:85:3f:7c: 46:e8:8b:bf:7e:7a:8e:af:64:6a:40:29:1d:c6:31:82:bb:26: ce:7f:b3:70:29:ef:38:46:2c:da:1b:3a:86:b6:ef:b5:86:b8: b8:db:90:f7:73:8e:33:15:c9:53:c0:b7:3d:19:67:51:81:82: 5b:8d:84:41:3c:ae:fa:1e:e0:0c:0e:0c:c3:72:00:09:35:fd: 00:f8:52:4a:5f:06:6e:ad:64:88:f8:d4:63:b3:8a:f0:ea:52: 45:39:80:e6:c8:9b:a5:d2:29:96:ff:a0:6e:46:d6:6a:a3:d3: f5:cd:54:cb:c5:29:65:21:3f:2f:9f:b9:cd:dd:8c:5a:97:3c: 3d:4b:44:c6:ba:a4:c8:6b:fe:d0:68:08:ab:88:0c:3b:c3:37: f2:c0:92:26:f3:34:6e:49:ac:c8:9e:19:ef:2d:00:fa:96:d3: 39:9b:f9:0f:8f:47:67:a7:9f:bc:e7:af:c7:df:8b:c2:9b:a2: b1:60:54:bf:77:c8:21:27:61:02:a6:22:4b:d3:a4:8f:62:8f: cc:4a:c2:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9yBHXioI+XYXpYzquEMKQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MjAwMGM0ZjRlYzRhMDNjZDRkMzY1N2UwMWI3MDAzNGVj MjNiOTcwHhcNMjUxMjIwMjIwMTIwWhcNMjUxMjIxMjIwMTIwWjAzMTEwLwYDVQQD EyhkOGVmMzg5ZmM2YzMyMDI3YWI0ODFjMWQ1Yzg1NDNlMGUwZWM0YjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjHN4AwDLkXQ6KHQ0cO91OtG3NzP LIfjs44IUHYFItuhB1Rc5Ks+mOBisf83pSthVOwpnAS0mvwzjpv5SdOw1gWgGMrM gUAwjvRqSeqsMJW01U+x0c72BeyJmrNqYQq1Nu4ZDka+wHBfA05l0P2ciZz9s9pu aV9sO8dUQ5A5Oor0ARBwJ8scP1/Qxxgm+7XLvF0gEbg+BWE6jTDmSQfJEBcgaMYo SJieEOaASvfsu8C+KFNssiECcqn0JdpFZ9OwLMRRRDvpP49v607kGI6ezVXyzDyB VV70VaBISa7aNw4BURMPvueWZabM7ewEqdjPea1jbiNHWxI/4Uv73jV46QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNjvOJ/GwyAnq0gcHVyFQ+Dg7EsfMB8GA1UdIwQY MBaAFKQgAMT07EoDzU02V+AbcANOwjuXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcENBQXhQVHNTZ1BOVFRaWDRCdHdBMDdDTzVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xNjNkNzctNGZlYS00MTMxLWJlY2It MGYyMmQ4OTY4OWEwLzEvcENBQXhQVHNTZ1BOVFRaWDRCdHdBMDdDTzVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xNjNkNzctNGZlYS00MTMxLWJlY2ItMGYyMmQ4OTY4OWEw LzEvcENBQXhQVHNTZ1BOVFRaWDRCdHdBMDdDTzVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgQb1CPZF PGjnZ/vEXJpRiLbkt0XH5fxsjWX2mSQBW9+WSIDtqsIbI5cGy1COm30QenB1hT98 RuiLv356jq9kakApHcYxgrsmzn+zcCnvOEYs2hs6hrbvtYa4uNuQ93OOMxXJU8C3 PRlnUYGCW42EQTyu+h7gDA4Mw3IACTX9APhSSl8Gbq1kiPjUY7OK8OpSRTmA5sib pdIplv+gbkbWaqPT9c1Uy8UpZSE/L5+5zd2MWpc8PUtExrqkyGv+0GgIq4gMO8M3 8sCSJvM0bkmsyJ4Z7y0A+pbTOZv5D49HZ6efvOevx9+LwpuisWBUv3fIISdhAqYi S9Okj2KPzErC/g== -----END CERTIFICATE-----Generated at Sat Dec 20 23:42:38 2025 by rpki-client