This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5d4ae1-16e8-4fc4-a81a-13fd2ccf8790/1/pQE9aytVPeF23W7IHOe5AyU5y7o.mft File: pQE9aytVPeF23W7IHOe5AyU5y7o.mft (raw, json) Hash identifier: IKl1ihhVocYqxNbs2TItAnN99RkK9DfZlc6O43XA61Y= Subject key identifier: EC:75:B2:9F:E3:08:2A:7F:0B:48:10:50:3E:22:48:97:E3:01:AB:7F Authority key identifier: A5:01:3D:6B:2B:55:3D:E1:76:DD:6E:C8:1C:E7:B9:03:25:39:CB:BA Certificate issuer: /CN=a5013d6b2b553de176dd6ec81ce7b9032539cbba Certificate serial: 019AF23F6AFA81F80CF61C3DC534DB2E986D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQE9aytVPeF23W7IHOe5AyU5y7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5d4ae1-16e8-4fc4-a81a-13fd2ccf8790/1/pQE9aytVPeF23W7IHOe5AyU5y7o.mft Manifest number: DB Signing time: Sat 06 Dec 2025 06:00:33 +0000 Manifest this update: Sat 06 Dec 2025 06:00:33 +0000 Manifest next update: Sun 07 Dec 2025 06:00:33 +0000 Files and hashes: 1: DlI7IjfwL0SAh4dXLxQbkIVO2pw.roa (hash: RanqyjCq2uxoaIpK5XkfL6r6d2TC2HkVHoF8vRXcg9U=) 2: pQE9aytVPeF23W7IHOe5AyU5y7o.crl (hash: c2HJeG6+hjPHgfwFctpMz5AijyMc6HGF6bLSj+3Zk3Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5d4ae1-16e8-4fc4-a81a-13fd2ccf8790/1/pQE9aytVPeF23W7IHOe5AyU5y7o.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/5d4ae1-16e8-4fc4-a81a-13fd2ccf8790/1/pQE9aytVPeF23W7IHOe5AyU5y7o.mft rsync://rpki.ripe.net/repository/DEFAULT/pQE9aytVPeF23W7IHOe5AyU5y7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:6a:fa:81:f8:0c:f6:1c:3d:c5:34:db:2e:98:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5013d6b2b553de176dd6ec81ce7b9032539cbba Validity Not Before: Dec 6 06:00:33 2025 GMT Not After : Dec 7 06:00:33 2025 GMT Subject: CN=ec75b29fe3082a7f0b4810503e224897e301ab7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:6b:23:b0:1f:69:4c:b5:5e:0c:3b:2f:e9:f7: f7:a9:17:d4:6d:1e:41:ae:7e:40:c1:b3:83:37:65: ac:d7:11:0f:fe:fb:76:fa:f9:e1:cd:4b:66:42:c7: 2e:54:70:7a:8b:5a:8e:58:bc:94:60:23:ca:52:e2: 6f:1f:a4:54:2e:65:ea:2e:51:dc:f6:ea:35:d0:e1: ed:a4:e7:84:f4:b1:85:bf:89:5d:a6:8f:12:96:88: 51:44:58:d5:ce:4b:a1:4c:8d:3c:98:f1:3a:4c:85: 03:1d:56:ad:d1:f0:1e:68:9f:a3:1b:fd:66:35:d3: 08:5d:bd:16:94:94:ef:e9:33:6e:57:c5:34:02:aa: e4:fa:59:32:0d:cf:98:56:20:e3:55:b4:26:dc:21: 46:4f:01:5e:75:f2:6e:14:d5:6a:15:de:fa:1f:1d: 4f:f0:d6:3e:04:12:9a:d2:b8:7d:b6:f2:d5:2f:7f: 77:0c:84:2d:76:0e:c6:bf:35:b5:33:28:37:37:4b: 60:75:d9:de:76:f9:a5:79:09:11:67:5c:5b:81:08: 99:ec:10:13:ff:19:38:a6:1b:ad:73:3f:a6:6b:39: 33:51:57:b9:f5:53:43:12:52:51:83:e0:60:72:42: 49:b9:be:1d:1b:e8:68:01:5f:7e:4b:3a:ee:6a:07: 5b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:75:B2:9F:E3:08:2A:7F:0B:48:10:50:3E:22:48:97:E3:01:AB:7F X509v3 Authority Key Identifier: keyid:A5:01:3D:6B:2B:55:3D:E1:76:DD:6E:C8:1C:E7:B9:03:25:39:CB:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQE9aytVPeF23W7IHOe5AyU5y7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5d4ae1-16e8-4fc4-a81a-13fd2ccf8790/1/pQE9aytVPeF23W7IHOe5AyU5y7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5d4ae1-16e8-4fc4-a81a-13fd2ccf8790/1/pQE9aytVPeF23W7IHOe5AyU5y7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ad:68:ad:31:69:0a:04:6b:30:a4:27:63:11:d5:95:1c:86: a3:28:52:a3:e9:a4:72:20:40:b3:aa:d1:7c:c0:53:15:79:1f: 7d:2d:8d:cd:9d:d2:60:a4:ba:d9:6b:f6:4b:87:11:43:fc:7e: 23:73:a3:d6:a9:f1:cd:8d:f5:e4:ae:59:c3:88:45:82:1c:19: d5:8b:03:e0:16:cd:d1:6a:4b:00:ef:69:18:07:bf:48:0b:d8: b1:82:61:fb:82:74:bc:ab:7b:49:1b:ce:e1:d3:66:d4:4f:8c: c6:28:0b:f8:a8:94:63:a7:5f:e1:50:b3:f2:af:13:e3:79:28: ab:47:20:4c:d8:66:d9:0c:7e:15:2a:56:08:ba:82:d9:39:ee: 75:ba:3e:87:55:f6:d4:c3:6a:97:72:02:78:ed:94:53:88:66: 63:5d:68:fc:8f:5b:42:19:4c:96:09:5e:16:70:cc:b2:de:c0: 85:c2:fa:36:1c:14:be:15:65:f1:3b:77:5c:f1:c6:b5:30:3a: 60:1d:08:4a:f2:93:7a:f4:9a:57:ef:e4:7f:4b:0f:bd:78:6c: af:d5:da:4b:3b:9b:10:78:44:c6:33:e5:d8:54:70:cc:20:70: 8b:2f:64:9a:b0:c6:fe:36:f4:de:29:b5:6d:4a:91:26:50:48: 18:54:7f:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP2r6gfgM9hw9xTTbLphtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MDEzZDZiMmI1NTNkZTE3NmRkNmVjODFjZTdiOTAzMjUz OWNiYmEwHhcNMjUxMjA2MDYwMDMzWhcNMjUxMjA3MDYwMDMzWjAzMTEwLwYDVQQD EyhlYzc1YjI5ZmUzMDgyYTdmMGI0ODEwNTAzZTIyNDg5N2UzMDFhYjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmsjsB9pTLVeDDsv6ff3qRfUbR5B rn5AwbODN2Ws1xEP/vt2+vnhzUtmQscuVHB6i1qOWLyUYCPKUuJvH6RULmXqLlHc 9uo10OHtpOeE9LGFv4ldpo8SlohRRFjVzkuhTI08mPE6TIUDHVat0fAeaJ+jG/1m NdMIXb0WlJTv6TNuV8U0Aqrk+lkyDc+YViDjVbQm3CFGTwFedfJuFNVqFd76Hx1P 8NY+BBKa0rh9tvLVL393DIQtdg7GvzW1Myg3N0tgddnedvmleQkRZ1xbgQiZ7BAT /xk4phutcz+mazkzUVe59VNDElJRg+BgckJJub4dG+hoAV9+SzruagdbRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOx1sp/jCCp/C0gQUD4iSJfjAat/MB8GA1UdIwQY MBaAFKUBPWsrVT3hdt1uyBznuQMlOcu6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFFFOWF5dFZQZUYyM1c3SUhPZTVBeVU1eTdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC81ZDRhZTEtMTZlOC00ZmM0LWE4MWEt MTNmZDJjY2Y4NzkwLzEvcFFFOWF5dFZQZUYyM1c3SUhPZTVBeVU1eTdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC81ZDRhZTEtMTZlOC00ZmM0LWE4MWEtMTNmZDJjY2Y4Nzkw LzEvcFFFOWF5dFZQZUYyM1c3SUhPZTVBeVU1eTdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX61orTFp CgRrMKQnYxHVlRyGoyhSo+mkciBAs6rRfMBTFXkffS2NzZ3SYKS62Wv2S4cRQ/x+ I3Oj1qnxzY315K5Zw4hFghwZ1YsD4BbN0WpLAO9pGAe/SAvYsYJh+4J0vKt7SRvO 4dNm1E+MxigL+KiUY6df4VCz8q8T43koq0cgTNhm2Qx+FSpWCLqC2Tnudbo+h1X2 1MNql3ICeO2UU4hmY11o/I9bQhlMlgleFnDMst7AhcL6NhwUvhVl8Tt3XPHGtTA6 YB0ISvKTevSaV+/kf0sPvXhsr9XaSzubEHhExjPl2FRwzCBwiy9kmrDG/jb03im1 bUqRJlBIGFR/9g== -----END CERTIFICATE-----Generated at Sat Dec 6 13:48:22 2025 by rpki-client