This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.mft File: PKap1LWSRrTjNhThpLWRthGOihU.mft (raw, json) Hash identifier: Imp1Ram74Qk1mLg+GyJ+UZVpHkicErSoD6t0EkPTzLo= Subject key identifier: BD:47:F8:FB:A5:51:AE:3F:27:86:FF:09:C4:C2:CD:D4:E0:AE:0D:66 Authority key identifier: 3C:A6:A9:D4:B5:92:46:B4:E3:36:14:E1:A4:B5:91:B6:11:8E:8A:15 Certificate issuer: /CN=3ca6a9d4b59246b4e33614e1a4b591b6118e8a15 Certificate serial: 019B38A1C9FCC6DDAD24C8AB63A661F70461 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKap1LWSRrTjNhThpLWRthGOihU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.mft Manifest number: 1329 Signing time: Fri 19 Dec 2025 22:01:25 +0000 Manifest this update: Fri 19 Dec 2025 22:01:25 +0000 Manifest next update: Sat 20 Dec 2025 22:01:25 +0000 Files and hashes: 1: PKap1LWSRrTjNhThpLWRthGOihU.crl (hash: kmfsqG2WWl4iF3yUl4PsYNApsXsCO7DKbNMnYDFCShI=) 2: Szhjvm0y4QI0uwIjWJbCdPZPvps.roa (hash: Y0iaHG2LAJbIgjzTxyOFn6Uuz+FyO1yYuNhr0qnz3To=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.crl rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.mft rsync://rpki.ripe.net/repository/DEFAULT/PKap1LWSRrTjNhThpLWRthGOihU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:c9:fc:c6:dd:ad:24:c8:ab:63:a6:61:f7:04:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ca6a9d4b59246b4e33614e1a4b591b6118e8a15 Validity Not Before: Dec 19 22:01:25 2025 GMT Not After : Dec 20 22:01:25 2025 GMT Subject: CN=bd47f8fba551ae3f2786ff09c4c2cdd4e0ae0d66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b0:d5:aa:0c:22:5b:2e:a2:0d:64:12:b7:83: 35:c9:9c:79:14:dc:7f:03:6a:48:58:00:bf:77:e0: 05:a1:8f:e8:4f:0a:16:f2:84:ce:37:70:ce:c2:0f: 93:51:69:d1:cf:d0:46:8a:13:8a:a7:04:88:e3:90: 27:ac:8f:9f:f7:4c:2d:b0:89:9c:92:f3:71:be:00: c2:ae:3e:98:b7:a3:a2:08:02:4c:79:eb:96:da:4e: f8:5d:51:12:c0:8b:63:84:17:d5:9f:8d:80:a5:81: df:2b:1a:84:78:10:d3:88:05:d1:39:37:44:b6:f1: 34:51:7d:01:ab:ba:a4:c6:c0:36:d7:85:53:db:bd: 88:28:ba:c7:31:84:2a:de:3b:09:4b:72:1a:19:e6: f7:70:40:1d:43:a5:89:33:be:a0:ee:3b:84:49:fd: 53:c4:44:a6:c7:66:1a:79:8a:bb:6c:cf:f5:6d:45: 79:e2:32:95:98:c1:c6:1e:6a:65:36:df:7b:32:df: 6f:ad:0a:f6:89:23:ef:06:87:e7:93:0b:56:70:5c: 22:ef:61:42:d5:be:28:a6:0d:19:37:82:3c:b8:61: 64:29:12:45:c1:88:ff:c2:f7:c8:06:ba:14:20:c7: 67:a3:07:38:39:d8:b3:60:f8:5d:8d:fe:aa:d6:78: 47:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:47:F8:FB:A5:51:AE:3F:27:86:FF:09:C4:C2:CD:D4:E0:AE:0D:66 X509v3 Authority Key Identifier: keyid:3C:A6:A9:D4:B5:92:46:B4:E3:36:14:E1:A4:B5:91:B6:11:8E:8A:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKap1LWSRrTjNhThpLWRthGOihU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:64:b7:18:c4:6b:c4:c5:54:1f:af:33:48:3a:7c:9c:7f:ae: 55:b6:4b:81:1f:e8:15:ec:6c:f5:0c:a8:6c:83:07:b4:8f:05: 01:b2:72:e9:30:b7:ad:42:28:aa:a5:1e:02:57:2d:3a:55:e9: 0b:51:3e:21:37:01:ef:36:58:0e:68:7a:f6:cf:da:34:26:3c: 37:d1:ca:2d:c2:af:c3:8e:cd:79:5e:b6:fd:14:23:d9:a8:b4: 42:96:68:31:49:b6:99:d2:90:b3:f7:91:97:75:fe:2e:ff:7e: 6c:45:26:d4:6d:49:00:50:49:db:b7:23:6a:b1:22:fd:68:fc: da:f6:16:10:d9:5d:eb:07:d5:f4:04:02:4c:0e:46:ca:bc:b2: c7:8e:47:a2:17:05:99:01:12:50:e0:11:04:1b:74:50:40:a7: d3:11:16:37:3b:40:b3:a8:c2:d6:25:ce:f9:d0:9e:f5:09:06: ef:8f:69:ac:54:f8:03:b1:cd:77:0e:e8:09:38:ef:d7:44:74: 67:58:b7:01:24:e4:42:96:6d:da:f7:81:a1:5a:f8:54:d5:98: 9c:fe:d3:8a:b9:72:7c:a9:62:c5:4e:7a:e0:37:4c:94:0e:09: 51:fe:c7:53:db:ef:ab:d2:22:02:ad:18:7a:29:5a:14:08:16: 26:44:35:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4ocn8xt2tJMirY6Zh9wRhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjYTZhOWQ0YjU5MjQ2YjRlMzM2MTRlMWE0YjU5MWI2MTE4 ZThhMTUwHhcNMjUxMjE5MjIwMTI1WhcNMjUxMjIwMjIwMTI1WjAzMTEwLwYDVQQD EyhiZDQ3ZjhmYmE1NTFhZTNmMjc4NmZmMDljNGMyY2RkNGUwYWUwZDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7DVqgwiWy6iDWQSt4M1yZx5FNx/ A2pIWAC/d+AFoY/oTwoW8oTON3DOwg+TUWnRz9BGihOKpwSI45AnrI+f90wtsImc kvNxvgDCrj6Yt6OiCAJMeeuW2k74XVESwItjhBfVn42ApYHfKxqEeBDTiAXROTdE tvE0UX0Bq7qkxsA214VT272IKLrHMYQq3jsJS3IaGeb3cEAdQ6WJM76g7juESf1T xESmx2YaeYq7bM/1bUV54jKVmMHGHmplNt97Mt9vrQr2iSPvBofnkwtWcFwi72FC 1b4opg0ZN4I8uGFkKRJFwYj/wvfIBroUIMdnowc4OdizYPhdjf6q1nhHrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL1H+PulUa4/J4b/CcTCzdTgrg1mMB8GA1UdIwQY MBaAFDymqdS1kka04zYU4aS1kbYRjooVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEthcDFMV1NSclRqTmhUaHBMV1J0aEdPaWhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9kZDY1MTgtYmYzNS00YzU4LWI4MWIt OTRiMTQ5M2RmMWYyLzEvUEthcDFMV1NSclRqTmhUaHBMV1J0aEdPaWhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9kZDY1MTgtYmYzNS00YzU4LWI4MWItOTRiMTQ5M2RmMWYy LzEvUEthcDFMV1NSclRqTmhUaHBMV1J0aEdPaWhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb2S3GMRr xMVUH68zSDp8nH+uVbZLgR/oFexs9QyobIMHtI8FAbJy6TC3rUIoqqUeAlctOlXp C1E+ITcB7zZYDmh69s/aNCY8N9HKLcKvw47NeV62/RQj2ai0QpZoMUm2mdKQs/eR l3X+Lv9+bEUm1G1JAFBJ27cjarEi/Wj82vYWENld6wfV9AQCTA5Gyryyx45HohcF mQESUOARBBt0UECn0xEWNztAs6jC1iXO+dCe9QkG749prFT4A7HNdw7oCTjv10R0 Z1i3ASTkQpZt2veBoVr4VNWYnP7TirlyfKlixU564DdMlA4JUf7HU9vvq9IiAq0Y eilaFAgWJkQ1hg== -----END CERTIFICATE-----Generated at Sat Dec 20 08:01:52 2025 by rpki-client