This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft File: Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft (raw, json) Hash identifier: SimMY+EiGxCS/eS4jmOaUhrD+Fdk0huTdlI24TGkhZs= Subject key identifier: F2:A6:88:6C:0D:1B:49:C3:7A:6F:D1:EF:E9:FB:02:CD:A4:EB:7D:E2 Authority key identifier: 3E:AD:19:09:6B:0E:E0:80:FE:43:81:05:00:B7:18:A9:47:FE:D2:29 Certificate issuer: /CN=3ead19096b0ee080fe43810500b718a947fed229 Certificate serial: 019B2F68011F710E7E6037362B76CE404EBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft Manifest number: 0BAA Signing time: Thu 18 Dec 2025 03:01:43 +0000 Manifest this update: Thu 18 Dec 2025 03:01:43 +0000 Manifest next update: Fri 19 Dec 2025 03:01:43 +0000 Files and hashes: 1: Bk8zYlSKqLYVsGMH3YEvHnLSsEU.roa (hash: LyRPaqVEcdiw5E3uBmgAAh9/7xweVS475crHOVmwvK8=) 2: Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl (hash: oWFC8luO7yCEHzf6Hvk7R5F6qbRhryT6bVl6iTW3dy0=) 3: gwj9P8ZuERM-SCTzjIoGfn0Rln0.roa (hash: 9JU5L0oKqu22gCI9ibec6Elcvk/4kJnQuHkzo4ps1r4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:68:01:1f:71:0e:7e:60:37:36:2b:76:ce:40:4e:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ead19096b0ee080fe43810500b718a947fed229 Validity Not Before: Dec 18 03:01:43 2025 GMT Not After : Dec 19 03:01:43 2025 GMT Subject: CN=f2a6886c0d1b49c37a6fd1efe9fb02cda4eb7de2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ff:c1:f0:16:c2:13:92:a0:05:68:0f:9f:11: 66:0c:e9:f6:13:8f:39:63:e1:34:fe:45:33:7f:cf: e9:14:5e:6b:92:c3:8f:e6:d6:e5:18:1d:98:c9:68: 96:b8:7d:04:28:a6:ae:a4:d5:c6:26:03:2a:76:21: 7f:71:de:47:44:1d:af:d0:21:5d:83:da:62:d3:ac: 99:6f:02:64:84:81:8a:9f:26:7a:fb:54:9d:d8:90: c6:39:30:ee:00:06:15:eb:eb:26:9b:fd:30:76:29: d7:c1:82:98:64:32:cf:60:e5:4d:c7:01:07:cc:aa: 6f:0c:59:64:78:4c:86:70:2c:3b:51:e6:95:e0:f7: 1d:88:cb:1b:fd:17:12:24:d2:ff:fa:6e:ae:33:ee: 12:74:fb:5c:67:ce:7a:33:ca:31:a3:aa:a1:54:83: 7b:b3:fa:4f:d9:ae:a8:ca:a6:22:28:e4:9e:ce:cf: ec:8a:c9:39:ac:79:c2:73:f5:c2:75:54:fe:44:82: 2c:37:02:8b:ee:8d:38:f6:d1:f0:2c:54:69:9e:41: e9:8c:a3:90:55:5f:6c:d7:70:c7:f0:ef:d2:80:ba: 6d:13:c0:3c:3c:4b:7e:aa:ee:cc:fd:c0:bc:5e:c6: c4:5e:41:a6:1d:60:9c:95:68:cd:8e:0f:1e:3c:b5: 43:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A6:88:6C:0D:1B:49:C3:7A:6F:D1:EF:E9:FB:02:CD:A4:EB:7D:E2 X509v3 Authority Key Identifier: keyid:3E:AD:19:09:6B:0E:E0:80:FE:43:81:05:00:B7:18:A9:47:FE:D2:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:80:eb:18:9d:ae:64:1b:9e:1d:61:6d:57:c1:f4:7f:8d:28: 71:44:f9:11:ee:d4:3f:e9:7d:bc:49:b2:be:7e:a0:54:bb:02: 38:93:83:03:c9:24:a6:8f:1d:cc:68:79:92:c6:1f:65:41:ec: 9e:ee:14:61:a3:09:f6:4f:39:45:65:41:39:1c:a8:d6:bf:ba: 9d:ca:e2:40:48:67:1b:85:d6:cf:ab:f5:25:f0:1a:9b:40:01: 0b:84:a5:1d:46:94:18:86:2a:a9:90:44:09:3b:e5:c2:4b:99: e2:e4:7c:e7:5e:22:6c:dc:20:e8:fe:74:fa:37:db:ba:40:4b: db:9d:7b:45:19:c3:f4:6c:f9:28:57:0b:3f:a8:36:9b:de:47: 34:0a:b4:20:04:b4:8f:a5:87:5c:a6:49:2b:3d:0e:32:3a:c9: f3:d9:f8:f2:ad:3e:b2:aa:56:2c:87:5b:75:89:43:6c:a1:13: b8:22:c0:4b:d6:d7:51:c1:52:ca:7c:23:1c:dc:58:f4:ce:42: f8:e2:38:57:77:c3:20:07:2b:35:71:47:cc:b1:c4:37:7a:30: de:ba:04:5b:d4:1f:9d:ea:60:d7:5d:fb:72:e1:ae:e1:a8:61: 8e:64:a7:92:35:8b:5e:61:1a:4b:f9:ee:60:da:67:9e:75:4a: 45:f4:60:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvaAEfcQ5+YDc2K3bOQE66MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYWQxOTA5NmIwZWUwODBmZTQzODEwNTAwYjcxOGE5NDdm ZWQyMjkwHhcNMjUxMjE4MDMwMTQzWhcNMjUxMjE5MDMwMTQzWjAzMTEwLwYDVQQD EyhmMmE2ODg2YzBkMWI0OWMzN2E2ZmQxZWZlOWZiMDJjZGE0ZWI3ZGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsv/B8BbCE5KgBWgPnxFmDOn2E485 Y+E0/kUzf8/pFF5rksOP5tblGB2YyWiWuH0EKKaupNXGJgMqdiF/cd5HRB2v0CFd g9pi06yZbwJkhIGKnyZ6+1Sd2JDGOTDuAAYV6+smm/0wdinXwYKYZDLPYOVNxwEH zKpvDFlkeEyGcCw7UeaV4PcdiMsb/RcSJNL/+m6uM+4SdPtcZ856M8oxo6qhVIN7 s/pP2a6oyqYiKOSezs/sisk5rHnCc/XCdVT+RIIsNwKL7o049tHwLFRpnkHpjKOQ VV9s13DH8O/SgLptE8A8PEt+qu7M/cC8XsbEXkGmHWCclWjNjg8ePLVDxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKmiGwNG0nDem/R7+n7As2k633iMB8GA1UdIwQY MBaAFD6tGQlrDuCA/kOBBQC3GKlH/tIpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHEwWkNXc080SUQtUTRFRkFMY1lxVWYtMGlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy82M2JiNzktOTNiMC00OTlmLTk3OGQt MTBmZTQ0NzI2OTA4LzEvUHEwWkNXc080SUQtUTRFRkFMY1lxVWYtMGlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy82M2JiNzktOTNiMC00OTlmLTk3OGQtMTBmZTQ0NzI2OTA4 LzEvUHEwWkNXc080SUQtUTRFRkFMY1lxVWYtMGlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKYDrGJ2u ZBueHWFtV8H0f40ocUT5Ee7UP+l9vEmyvn6gVLsCOJODA8kkpo8dzGh5ksYfZUHs nu4UYaMJ9k85RWVBORyo1r+6ncriQEhnG4XWz6v1JfAam0ABC4SlHUaUGIYqqZBE CTvlwkuZ4uR8514ibNwg6P50+jfbukBL2517RRnD9Gz5KFcLP6g2m95HNAq0IAS0 j6WHXKZJKz0OMjrJ89n48q0+sqpWLIdbdYlDbKETuCLAS9bXUcFSynwjHNxY9M5C +OI4V3fDIAcrNXFHzLHEN3ow3roEW9Qfnepg1137cuGu4ahhjmSnkjWLXmEaS/nu YNpnnnVKRfRg3w== -----END CERTIFICATE-----Generated at Thu Dec 18 05:42:57 2025 by rpki-client