This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft File: pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft (raw, json) Hash identifier: QzVwaezzyPa/HcWZf5o+vKYN2zY5gx1s7MEZF+zsNC8= Subject key identifier: 3F:9D:4C:0C:04:75:4C:CF:F7:AA:EC:E8:B2:96:E6:D9:26:62:44:F6 Authority key identifier: A4:AA:9B:CD:06:EA:6C:56:5D:D9:07:CA:04:E5:07:7D:68:C0:66:4F Certificate issuer: /CN=a4aa9bcd06ea6c565dd907ca04e5077d68c0664f Certificate serial: 019AF0BF8A47A4EE111BAD4421EABD819A34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKqbzQbqbFZd2QfKBOUHfWjAZk8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft Manifest number: 175F Signing time: Fri 05 Dec 2025 23:01:15 +0000 Manifest this update: Fri 05 Dec 2025 23:01:15 +0000 Manifest next update: Sat 06 Dec 2025 23:01:15 +0000 Files and hashes: 1: pKqbzQbqbFZd2QfKBOUHfWjAZk8.crl (hash: drIaU+KvYTBRK4OkRjcKzlX6yqL/U5jXbMJhhiD0iSo=) 2: vUo_vlJ6sLUoSusR9Owa3qVO6yc.roa (hash: tQbWOVu74034awYo0QKVFApUcQf9SPwefFwA/Lt3iQE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.crl rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft rsync://rpki.ripe.net/repository/DEFAULT/pKqbzQbqbFZd2QfKBOUHfWjAZk8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:8a:47:a4:ee:11:1b:ad:44:21:ea:bd:81:9a:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4aa9bcd06ea6c565dd907ca04e5077d68c0664f Validity Not Before: Dec 5 23:01:15 2025 GMT Not After : Dec 6 23:01:15 2025 GMT Subject: CN=3f9d4c0c04754ccff7aaece8b296e6d9266244f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9d:44:21:13:a9:b7:21:c9:96:c1:fd:22:0f: d1:a6:f8:0f:51:0f:53:9a:1f:15:e4:0d:1d:b9:4a: ff:44:29:06:40:bf:37:83:63:f2:1d:58:ce:2d:01: d4:03:d0:c3:ee:0c:f4:c8:44:5f:82:96:e0:6d:cc: 99:5b:94:55:01:d4:dd:9f:b1:2e:5e:cd:a7:f2:dd: 8d:77:61:04:02:27:5e:af:d1:fc:56:67:2a:1f:db: 0c:54:37:8d:e1:b8:ce:1f:9f:5c:68:6d:a9:7e:e5: 03:58:49:35:e8:76:1a:39:14:e5:69:0c:00:46:e0: 8d:da:e0:50:f0:10:6d:15:17:73:da:51:38:17:23: 21:99:f2:b6:50:e5:93:00:04:86:18:2b:57:56:b6: c3:d1:fd:53:5f:26:61:54:9a:80:ce:f2:09:42:40: d5:a5:2a:d7:e3:78:55:3c:a2:9a:0a:fa:b9:ad:51: 68:c0:96:3a:31:56:2e:d4:bf:bc:93:8c:b7:26:a7: db:9c:5d:f1:5f:1f:2d:21:fe:4c:e1:40:b3:6d:1c: 4f:d5:40:1f:70:59:1b:65:eb:7c:3f:a2:fe:66:f6: e0:cb:a5:64:ef:43:79:69:d1:3c:4a:44:b2:81:4a: 73:ee:50:16:e7:be:68:b6:8e:44:ab:1e:35:c8:a2: db:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:9D:4C:0C:04:75:4C:CF:F7:AA:EC:E8:B2:96:E6:D9:26:62:44:F6 X509v3 Authority Key Identifier: keyid:A4:AA:9B:CD:06:EA:6C:56:5D:D9:07:CA:04:E5:07:7D:68:C0:66:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKqbzQbqbFZd2QfKBOUHfWjAZk8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:2c:0a:5b:37:87:62:38:ee:6c:a2:36:d3:d9:21:b7:81:3b: 59:23:db:c9:8d:9e:49:9d:34:c0:21:64:75:f6:e5:f9:a8:58: 5a:27:48:c0:cf:b5:0b:a0:82:f3:36:b5:04:8c:57:eb:2f:52: 65:c9:08:1f:83:70:7f:59:a7:2d:31:f9:72:2e:4c:11:e5:f5: 7d:83:67:c4:0d:cf:7a:cb:71:60:1a:86:19:74:f8:d5:0a:3a: cc:34:51:42:97:32:19:e3:54:ce:f4:48:77:01:69:ee:d9:b4: 22:da:85:85:61:4e:a7:c4:12:6d:27:86:bb:49:44:a7:4b:f2: 13:d4:d5:0e:ce:a6:c0:a8:0c:04:3e:7f:89:88:98:df:75:a5: 6e:3d:4c:1f:1b:de:e8:2d:9a:66:e5:5f:d2:a3:61:10:1c:96: b6:ca:a4:0e:17:f5:c9:91:e3:04:ac:b4:82:a3:3e:ce:9b:7d: 28:e4:6e:b9:96:48:fc:3f:b8:bb:14:e0:56:6b:4f:e2:bc:82: f8:f2:74:a5:d0:a4:c4:55:88:05:b0:79:aa:e2:5d:ce:3b:31: e3:10:94:2a:9d:c4:7c:ab:67:e9:a8:cb:7b:27:d2:e7:7e:76: c3:d9:0f:8c:26:11:55:ae:a5:86:ed:11:e4:52:1b:1f:e6:be: f0:6a:26:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv4pHpO4RG61EIeq9gZo0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YWE5YmNkMDZlYTZjNTY1ZGQ5MDdjYTA0ZTUwNzdkNjhj MDY2NGYwHhcNMjUxMjA1MjMwMTE1WhcNMjUxMjA2MjMwMTE1WjAzMTEwLwYDVQQD EygzZjlkNGMwYzA0NzU0Y2NmZjdhYWVjZThiMjk2ZTZkOTI2NjI0NGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw51EIROptyHJlsH9Ig/RpvgPUQ9T mh8V5A0duUr/RCkGQL83g2PyHVjOLQHUA9DD7gz0yERfgpbgbcyZW5RVAdTdn7Eu Xs2n8t2Nd2EEAider9H8VmcqH9sMVDeN4bjOH59caG2pfuUDWEk16HYaORTlaQwA RuCN2uBQ8BBtFRdz2lE4FyMhmfK2UOWTAASGGCtXVrbD0f1TXyZhVJqAzvIJQkDV pSrX43hVPKKaCvq5rVFowJY6MVYu1L+8k4y3JqfbnF3xXx8tIf5M4UCzbRxP1UAf cFkbZet8P6L+Zvbgy6Vk70N5adE8SkSygUpz7lAW575oto5Eqx41yKLb/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD+dTAwEdUzP96rs6LKW5tkmYkT2MB8GA1UdIwQY MBaAFKSqm80G6mxWXdkHygTlB31owGZPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEtxYnpRYnFiRlpkMlFmS0JPVUhmV2pBWms4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8wNTJmNGMtYmUzYy00ZDE5LWFhMDQt MGFiOGRkOWViYWIxLzEvcEtxYnpRYnFiRlpkMlFmS0JPVUhmV2pBWms4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8wNTJmNGMtYmUzYy00ZDE5LWFhMDQtMGFiOGRkOWViYWIx LzEvcEtxYnpRYnFiRlpkMlFmS0JPVUhmV2pBWms4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABiwKWzeH YjjubKI209kht4E7WSPbyY2eSZ00wCFkdfbl+ahYWidIwM+1C6CC8za1BIxX6y9S ZckIH4Nwf1mnLTH5ci5MEeX1fYNnxA3PestxYBqGGXT41Qo6zDRRQpcyGeNUzvRI dwFp7tm0ItqFhWFOp8QSbSeGu0lEp0vyE9TVDs6mwKgMBD5/iYiY33Wlbj1MHxve 6C2aZuVf0qNhEByWtsqkDhf1yZHjBKy0gqM+zpt9KORuuZZI/D+4uxTgVmtP4ryC +PJ0pdCkxFWIBbB5quJdzjsx4xCUKp3EfKtn6ajLeyfS5352w9kPjCYRVa6lhu0R 5FIbH+a+8GomHQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:16:33 2025 by rpki-client