This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft File: pqxtBp2PtzL0_pK04TzX3E05OkI.mft (raw, json) Hash identifier: 1NBtBpd5eEOLMGm/L281uGbkwwcId+N0N0uBmoCHxuE= Subject key identifier: 16:24:D7:49:A6:8F:3D:3F:98:18:DB:54:9F:4D:C8:F6:64:6C:03:F2 Authority key identifier: A6:AC:6D:06:9D:8F:B7:32:F4:FE:92:B4:E1:3C:D7:DC:4D:39:3A:42 Certificate issuer: /CN=a6ac6d069d8fb732f4fe92b4e13cd7dc4d393a42 Certificate serial: 019AF19B19AF6B86BFC45D5250E24AE4DD1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft Manifest number: 0CD4 Signing time: Sat 06 Dec 2025 03:01:04 +0000 Manifest this update: Sat 06 Dec 2025 03:01:04 +0000 Manifest next update: Sun 07 Dec 2025 03:01:04 +0000 Files and hashes: 1: kORzGbUwfQz_reUfKxE-VKML1Ko.roa (hash: LJNSK27C7NQtNI1BCy3DsB/OzJxofkAzOY3Bw0ai+Lk=) 2: pqxtBp2PtzL0_pK04TzX3E05OkI.crl (hash: lWxnlY1nUhlOcyvv0r5aB+688dnWnvbNoDi5987xaQU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:19:af:6b:86:bf:c4:5d:52:50:e2:4a:e4:dd:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6ac6d069d8fb732f4fe92b4e13cd7dc4d393a42 Validity Not Before: Dec 6 03:01:04 2025 GMT Not After : Dec 7 03:01:04 2025 GMT Subject: CN=1624d749a68f3d3f9818db549f4dc8f6646c03f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4e:48:45:e4:da:db:7d:48:08:cd:c2:11:64: fb:98:54:c5:42:13:09:05:2d:a2:8e:dc:87:cf:98: a3:89:32:28:83:80:a4:29:1e:6c:51:70:73:0e:8a: fb:18:9d:fd:fe:54:74:47:fa:d0:ff:26:aa:4f:7f: 30:6c:a3:53:b7:55:bf:7a:b8:ba:fe:7c:9b:e5:e4: d3:05:7b:e4:27:7f:0c:52:02:61:8e:9d:4e:d4:74: 40:f2:87:97:86:1f:e1:bb:81:21:e7:30:61:7c:4c: 44:fa:19:0b:d4:98:fd:38:0d:c5:ac:f8:ab:12:66: b5:82:5f:d4:88:e2:6b:f1:1a:2c:6c:34:41:54:46: 51:54:27:d3:2c:0e:d8:fd:a8:c1:11:c0:4b:48:b0: 93:7c:5b:5b:20:37:85:94:c1:d4:b8:0e:a2:21:f9: aa:94:33:3c:c3:f9:f4:d7:57:8c:6e:b1:3d:7c:46: e0:11:ab:01:8d:c3:22:f0:d8:91:0a:cf:3f:de:5d: 40:1f:17:4b:41:24:a2:91:5a:b7:47:0c:04:01:6c: 60:7b:cb:f2:57:e3:87:06:d5:23:5f:2a:be:63:90: 38:19:ce:bc:55:2f:9d:d7:f6:37:fe:6c:2d:be:54: f8:f9:02:bc:cb:73:8e:da:14:27:fa:f5:bb:18:2e: d6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:24:D7:49:A6:8F:3D:3F:98:18:DB:54:9F:4D:C8:F6:64:6C:03:F2 X509v3 Authority Key Identifier: keyid:A6:AC:6D:06:9D:8F:B7:32:F4:FE:92:B4:E1:3C:D7:DC:4D:39:3A:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:0f:62:46:36:d1:e7:3c:0b:89:7c:ae:73:2f:10:51:5d:3c: 3a:a4:97:d1:23:03:e5:0f:f1:85:22:70:14:b1:00:e3:c9:a0: b2:df:30:f9:82:ca:a9:45:60:49:59:55:63:ba:a9:55:3d:fc: f9:6c:cc:3d:b1:05:4e:be:2d:76:65:04:03:7d:52:2a:99:9f: 3a:45:af:7c:9c:4c:e5:68:33:b0:c0:2a:05:e6:b7:df:ad:be: fd:50:3e:ce:91:b5:a4:88:99:d3:28:b6:0c:81:a0:28:32:8e: 07:06:f2:39:98:8f:0e:4d:ef:a1:0a:09:06:a3:75:a4:b2:d8: bc:ba:cf:7b:0a:a9:84:c2:cb:57:5b:59:54:57:c7:0d:c9:e5: d6:d0:52:3e:47:b5:86:b0:a7:02:76:9b:fe:03:50:be:64:c2: 71:7e:11:a5:45:bf:2d:85:9e:a3:12:b6:36:c0:6d:4e:08:a1: 5d:59:3a:0c:66:88:3e:89:2c:f3:74:45:d7:14:da:a1:8d:6f: 4d:e6:d6:92:29:cc:ba:3c:10:57:34:80:fb:f5:27:6b:95:71: 60:eb:3c:b5:ea:f1:c1:e0:18:1c:1c:44:c3:3d:dd:d1:a0:a5: ed:9c:29:24:ab:76:d6:c8:db:0b:71:3d:5c:41:8c:8c:6e:81: 12:87:05:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmxmva4a/xF1SUOJK5N0eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2YWM2ZDA2OWQ4ZmI3MzJmNGZlOTJiNGUxM2NkN2RjNGQz OTNhNDIwHhcNMjUxMjA2MDMwMTA0WhcNMjUxMjA3MDMwMTA0WjAzMTEwLwYDVQQD EygxNjI0ZDc0OWE2OGYzZDNmOTgxOGRiNTQ5ZjRkYzhmNjY0NmMwM2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoU5IReTa231ICM3CEWT7mFTFQhMJ BS2ijtyHz5ijiTIog4CkKR5sUXBzDor7GJ39/lR0R/rQ/yaqT38wbKNTt1W/eri6 /nyb5eTTBXvkJ38MUgJhjp1O1HRA8oeXhh/hu4Eh5zBhfExE+hkL1Jj9OA3FrPir Ema1gl/UiOJr8RosbDRBVEZRVCfTLA7Y/ajBEcBLSLCTfFtbIDeFlMHUuA6iIfmq lDM8w/n011eMbrE9fEbgEasBjcMi8NiRCs8/3l1AHxdLQSSikVq3RwwEAWxge8vy V+OHBtUjXyq+Y5A4Gc68VS+d1/Y3/mwtvlT4+QK8y3OO2hQn+vW7GC7WkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBYk10mmjz0/mBjbVJ9NyPZkbAPyMB8GA1UdIwQY MBaAFKasbQadj7cy9P6StOE819xNOTpCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHF4dEJwMlB0ekwwX3BLMDRUelgzRTA1T2tJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9jMDlmMDItNzUxMC00MmVhLWIyODEt YmZhMDNhNjY4NTc3LzEvcHF4dEJwMlB0ekwwX3BLMDRUelgzRTA1T2tJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9jMDlmMDItNzUxMC00MmVhLWIyODEtYmZhMDNhNjY4NTc3 LzEvcHF4dEJwMlB0ekwwX3BLMDRUelgzRTA1T2tJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANw9iRjbR 5zwLiXyucy8QUV08OqSX0SMD5Q/xhSJwFLEA48mgst8w+YLKqUVgSVlVY7qpVT38 +WzMPbEFTr4tdmUEA31SKpmfOkWvfJxM5WgzsMAqBea3362+/VA+zpG1pIiZ0yi2 DIGgKDKOBwbyOZiPDk3voQoJBqN1pLLYvLrPewqphMLLV1tZVFfHDcnl1tBSPke1 hrCnAnab/gNQvmTCcX4RpUW/LYWeoxK2NsBtTgihXVk6DGaIPoks83RF1xTaoY1v TebWkinMujwQVzSA+/Una5VxYOs8terxweAYHBxEwz3d0aCl7ZwpJKt21sjbC3E9 XEGMjG6BEocFeg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:05 2025 by rpki-client