This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft File: PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft (raw, json) Hash identifier: pKbb3qUWvjf0VdNkUUpS4qJafsquuMKEEdCaw9/zy8o= Subject key identifier: C8:21:EF:AF:C6:FC:08:F8:0D:22:5A:4B:CE:BB:A5:48:A7:83:DD:65 Authority key identifier: 3D:0B:E4:AE:38:73:55:54:CD:11:81:0A:9C:7D:20:30:19:04:01:98 Certificate issuer: /CN=3d0be4ae38735554cd11810a9c7d203019040198 Certificate serial: 019AF12D4F95C80F0B7FFC0D7B96D0412837 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQvkrjhzVVTNEYEKnH0gMBkEAZg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft Manifest number: 0143 Signing time: Sat 06 Dec 2025 01:01:09 +0000 Manifest this update: Sat 06 Dec 2025 01:01:09 +0000 Manifest next update: Sun 07 Dec 2025 01:01:09 +0000 Files and hashes: 1: PQvkrjhzVVTNEYEKnH0gMBkEAZg.crl (hash: hjwD2QGTj0sO6DMvQ3quJZJyGrgulDNhyz52IwD5rd4=) 2: wNteWWTd3kO9_LbLgZ8L_st_1hk.asa (hash: i8d+j1Jn/9FgwtGIJwS6enHk4LM9vnpGJ8E77jZ6FWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft rsync://rpki.ripe.net/repository/DEFAULT/PQvkrjhzVVTNEYEKnH0gMBkEAZg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:4f:95:c8:0f:0b:7f:fc:0d:7b:96:d0:41:28:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d0be4ae38735554cd11810a9c7d203019040198 Validity Not Before: Dec 6 01:01:09 2025 GMT Not After : Dec 7 01:01:09 2025 GMT Subject: CN=c821efafc6fc08f80d225a4bcebba548a783dd65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6c:92:4f:75:2c:65:64:15:7d:6c:b6:98:aa: e0:55:f8:6f:b1:b9:1d:e4:c8:75:17:9b:19:61:c4: b6:29:53:d1:54:b8:8a:f1:be:41:a0:ad:57:2d:7d: e2:f2:ad:81:10:bc:11:a9:f1:40:b8:d5:a3:e5:6d: a3:0d:57:ba:fe:17:2e:98:27:94:07:65:f5:36:12: 64:c5:68:81:38:c1:f7:cd:86:03:22:43:0c:87:ec: 7c:fd:db:2e:7c:83:76:7b:e3:b2:d6:61:c1:ab:1a: b8:c5:9c:8a:6c:41:36:df:de:99:55:4b:96:a5:7b: 8e:26:c1:e1:19:d9:61:cc:27:c1:21:e6:a1:ca:01: af:15:1f:88:7a:ef:a8:87:a9:cc:50:53:7d:db:9b: 21:b1:85:9a:49:07:2f:a0:ca:a5:e2:4c:32:79:7c: 27:ac:6d:11:8b:d7:a3:e2:10:4f:c9:f4:c2:ec:e9: 4a:83:c1:7a:82:db:0d:d5:c8:23:5a:9c:e9:73:cb: 6a:c0:ea:98:08:47:fd:58:e4:d2:8e:ff:4e:c3:8e: 27:a8:92:9d:97:d3:0e:b7:45:6e:d5:6d:31:1b:13: 7c:71:a9:d7:96:43:3c:f1:2a:93:4d:69:dc:c2:aa: 9a:9b:10:d8:7c:e2:9b:89:ac:8d:9d:8b:91:05:32: 02:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:21:EF:AF:C6:FC:08:F8:0D:22:5A:4B:CE:BB:A5:48:A7:83:DD:65 X509v3 Authority Key Identifier: keyid:3D:0B:E4:AE:38:73:55:54:CD:11:81:0A:9C:7D:20:30:19:04:01:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQvkrjhzVVTNEYEKnH0gMBkEAZg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:4d:a7:c1:3e:bc:8e:54:ee:bc:41:c3:44:6a:96:4f:49:88: a5:cc:ac:dd:05:0d:39:2b:04:b8:a9:ff:5e:e0:95:87:11:4b: 3a:70:e5:cd:39:13:29:3d:75:b1:82:63:5c:f2:91:11:39:66: 9a:9e:10:bd:59:3f:9a:15:da:c6:fd:48:5d:78:38:2f:60:01: d0:f8:d7:48:70:ea:67:07:2f:f6:39:77:e4:cf:23:c1:f3:54: 48:5b:6e:c9:c7:f3:fc:71:4b:84:50:b8:d7:83:d1:c9:a9:0e: 37:15:d9:b5:81:97:e5:9f:83:ae:ef:f5:52:ea:ba:1d:fe:5c: 53:56:9f:4d:81:d3:6b:b6:66:31:8a:93:c5:a8:4b:92:de:96: 61:74:32:54:2a:74:52:af:af:5d:88:b1:54:01:0d:33:fd:be: 8c:ba:85:7a:fa:bb:89:0f:22:56:3c:e2:7e:2f:42:c9:d6:c9: e2:e1:96:da:06:3d:2c:c6:0a:6e:6e:04:64:c1:95:09:0b:a2: d1:fd:0a:8f:05:b1:9b:5f:23:31:74:7d:92:68:53:31:d6:06: 27:2e:e5:a8:01:3f:fc:d1:fb:0c:f2:af:cc:47:3a:f0:af:8d: a1:59:d2:4e:70:01:9d:20:09:3c:6b:c5:ce:aa:48:08:48:0a: 88:fe:58:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLU+VyA8Lf/wNe5bQQSg3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkMGJlNGFlMzg3MzU1NTRjZDExODEwYTljN2QyMDMwMTkw NDAxOTgwHhcNMjUxMjA2MDEwMTA5WhcNMjUxMjA3MDEwMTA5WjAzMTEwLwYDVQQD EyhjODIxZWZhZmM2ZmMwOGY4MGQyMjVhNGJjZWJiYTU0OGE3ODNkZDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2yST3UsZWQVfWy2mKrgVfhvsbkd 5Mh1F5sZYcS2KVPRVLiK8b5BoK1XLX3i8q2BELwRqfFAuNWj5W2jDVe6/hcumCeU B2X1NhJkxWiBOMH3zYYDIkMMh+x8/dsufIN2e+Oy1mHBqxq4xZyKbEE2396ZVUuW pXuOJsHhGdlhzCfBIeahygGvFR+Ieu+oh6nMUFN925shsYWaSQcvoMql4kwyeXwn rG0Ri9ej4hBPyfTC7OlKg8F6gtsN1cgjWpzpc8tqwOqYCEf9WOTSjv9Ow44nqJKd l9MOt0Vu1W0xGxN8canXlkM88SqTTWncwqqamxDYfOKbiayNnYuRBTICRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMgh76/G/Aj4DSJaS867pUing91lMB8GA1UdIwQY MBaAFD0L5K44c1VUzRGBCpx9IDAZBAGYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFF2a3JqaHpWVlRORVlFS25IMGdNQmtFQVpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kNDA0YTAtNzgwZC00M2M4LWI3MjEt ZmQyZWI1NDk3YjVjLzEvUFF2a3JqaHpWVlRORVlFS25IMGdNQmtFQVpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kNDA0YTAtNzgwZC00M2M4LWI3MjEtZmQyZWI1NDk3YjVj LzEvUFF2a3JqaHpWVlRORVlFS25IMGdNQmtFQVpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPU2nwT68 jlTuvEHDRGqWT0mIpcys3QUNOSsEuKn/XuCVhxFLOnDlzTkTKT11sYJjXPKRETlm mp4QvVk/mhXaxv1IXXg4L2AB0PjXSHDqZwcv9jl35M8jwfNUSFtuycfz/HFLhFC4 14PRyakONxXZtYGX5Z+Dru/1Uuq6Hf5cU1afTYHTa7ZmMYqTxahLkt6WYXQyVCp0 Uq+vXYixVAENM/2+jLqFevq7iQ8iVjzifi9CydbJ4uGW2gY9LMYKbm4EZMGVCQui 0f0KjwWxm18jMXR9kmhTMdYGJy7lqAE//NH7DPKvzEc68K+NoVnSTnABnSAJPGvF zqpICEgKiP5Ypw== -----END CERTIFICATE-----Generated at Sat Dec 6 04:58:42 2025 by rpki-client