This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft File: d-PCkAtZl1QoPyfztOjX9sRRCXI.mft (raw, json) Hash identifier: 3/v4oEQIdOFHBv0/ETk+NwXveR5AZtjqwIXJHulmhVg= Subject key identifier: B8:89:83:CE:C3:DD:CA:F8:43:6E:53:06:E1:B2:13:4E:1C:50:A4:50 Authority key identifier: 77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72 Certificate issuer: /CN=77e3c2900b599754283f27f3b4e8d7f6c4510972 Certificate serial: 019B2B1C5D288D871D6F8D810BF526C0AC85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft Manifest number: 0ED1 Signing time: Wed 17 Dec 2025 07:00:37 +0000 Manifest this update: Wed 17 Dec 2025 07:00:37 +0000 Manifest next update: Thu 18 Dec 2025 07:00:37 +0000 Files and hashes: 1: 6FBdm52HrIwxns50lJrMCqThYUM.roa (hash: Fb4owa3jjdnAYqjY2HP/KocZ2u55DXUdS4g1VNhxtCk=) 2: 8V29SLLHHHPak0CW_pb1i9F5mpI.roa (hash: hNuKjceR9DAU4JupE05WFNYQ/cRQ1qbfm397GXwMfeU=) 3: NuaYdI8PAUdP5rZIDe_aHIxvDG0.roa (hash: 9p6cAT0+JvuwI2Q0k7hF6wK1Ly//dC0ShsZ9CdG4PCA=) 4: d-PCkAtZl1QoPyfztOjX9sRRCXI.crl (hash: qFT6QoSQoIGt6p3j1kjbAAWr1/dri59BuKe0ssBd4gc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1c:5d:28:8d:87:1d:6f:8d:81:0b:f5:26:c0:ac:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77e3c2900b599754283f27f3b4e8d7f6c4510972 Validity Not Before: Dec 17 07:00:37 2025 GMT Not After : Dec 18 07:00:37 2025 GMT Subject: CN=b88983cec3ddcaf8436e5306e1b2134e1c50a450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ca:f7:b6:0b:f8:da:7c:1a:7e:51:7e:e1:55: 2d:cd:b6:c2:57:68:03:73:59:d8:7f:dc:14:6e:58: 65:77:51:d9:d9:49:26:65:a1:27:ab:c5:3d:20:31: 9a:09:a6:7a:82:fc:63:e6:5e:cd:f5:d0:cb:84:3c: 98:d8:3a:70:bd:72:26:c4:75:d2:34:c5:b9:2a:04: aa:c9:d5:e0:09:93:3d:01:b6:db:cd:c9:05:a0:13: dc:31:85:2e:0d:73:d7:ac:2f:d8:e6:4b:4d:c3:ab: c6:ee:3d:b5:3b:14:31:23:0a:0c:95:92:c1:dd:9f: de:0d:d5:2c:f8:52:ec:d7:d8:0c:f8:5f:53:7f:14: e2:b3:46:c3:2f:ad:ed:a7:ee:79:f3:76:39:ba:c5: df:79:0d:5b:79:10:06:ed:85:66:a4:8e:cf:ed:7e: 0d:79:ac:34:75:ef:a7:4f:df:cc:3d:93:90:4f:49: d0:27:34:90:10:0a:e9:95:e9:43:92:2a:10:d6:03: 3d:1f:b3:c0:c6:1b:5c:e7:7b:90:70:53:e8:45:c7: c2:a7:4a:1b:f8:d8:38:6c:39:5d:95:67:7f:32:df: 11:ec:9b:8a:94:a5:12:4a:8b:94:8b:5e:d5:97:16: 54:6a:f7:c0:a5:f9:c5:22:71:df:29:86:dd:98:78: 57:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:89:83:CE:C3:DD:CA:F8:43:6E:53:06:E1:B2:13:4E:1C:50:A4:50 X509v3 Authority Key Identifier: keyid:77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:3b:17:5d:22:83:b7:04:b0:93:96:05:fa:c0:b9:6b:4b:7e: 94:d2:d9:cf:23:43:7c:55:21:37:fb:70:3c:fb:18:58:26:e8: e0:97:a7:f0:ca:aa:da:69:b6:37:61:6a:c5:5a:f9:87:b6:47: b1:8a:a8:56:fa:23:84:16:de:7e:50:3e:c4:c4:83:6f:5d:97: d5:18:d1:71:5e:d0:4c:36:bb:51:6c:c1:5c:c9:02:53:4c:90: 01:1d:5e:96:a4:c4:0f:bd:39:a3:04:a7:a4:b4:37:ee:7a:21: 03:c1:66:9f:47:37:b2:4a:74:53:90:e8:e1:35:e9:15:a3:9b: 89:9b:67:a6:15:10:23:26:9f:1d:82:06:c6:4d:9e:f1:46:03: 99:2d:9e:9e:f3:80:90:e6:91:36:e9:aa:92:f5:58:13:72:5a: ba:7e:14:20:86:24:05:6a:ac:11:a5:4d:d8:d4:f1:b9:5e:95: d3:06:25:6f:f9:5b:83:95:6c:27:3d:92:1b:60:3b:50:d6:11: 46:2a:01:30:ab:c0:3d:21:18:67:1f:11:34:55:e6:14:be:23: db:83:18:2d:c8:30:cb:50:e1:a9:dd:b4:e9:b4:d8:32:a1:f1: 2d:d2:a3:5a:f3:23:1d:07:2e:4a:0e:63:aa:6f:ba:e4:8f:fc: 56:c5:b9:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHF0ojYcdb42BC/UmwKyFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3ZTNjMjkwMGI1OTk3NTQyODNmMjdmM2I0ZThkN2Y2YzQ1 MTA5NzIwHhcNMjUxMjE3MDcwMDM3WhcNMjUxMjE4MDcwMDM3WjAzMTEwLwYDVQQD EyhiODg5ODNjZWMzZGRjYWY4NDM2ZTUzMDZlMWIyMTM0ZTFjNTBhNDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8r3tgv42nwaflF+4VUtzbbCV2gD c1nYf9wUblhld1HZ2UkmZaEnq8U9IDGaCaZ6gvxj5l7N9dDLhDyY2DpwvXImxHXS NMW5KgSqydXgCZM9AbbbzckFoBPcMYUuDXPXrC/Y5ktNw6vG7j21OxQxIwoMlZLB 3Z/eDdUs+FLs19gM+F9TfxTis0bDL63tp+5583Y5usXfeQ1beRAG7YVmpI7P7X4N eaw0de+nT9/MPZOQT0nQJzSQEArplelDkioQ1gM9H7PAxhtc53uQcFPoRcfCp0ob +Ng4bDldlWd/Mt8R7JuKlKUSSouUi17VlxZUavfApfnFInHfKYbdmHhXDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLiJg87D3cr4Q25TBuGyE04cUKRQMB8GA1UdIwQY MBaAFHfjwpALWZdUKD8n87To1/bEUQlyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZC1QQ2tBdFpsMVFvUHlmenRPalg5c1JSQ1hJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9lZjJiNDktMDM1Zi00MGE0LWFlNTEt ZDNjNTVkNGZkYTlkLzEvZC1QQ2tBdFpsMVFvUHlmenRPalg5c1JSQ1hJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9lZjJiNDktMDM1Zi00MGE0LWFlNTEtZDNjNTVkNGZkYTlk LzEvZC1QQ2tBdFpsMVFvUHlmenRPalg5c1JSQ1hJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlTsXXSKD twSwk5YF+sC5a0t+lNLZzyNDfFUhN/twPPsYWCbo4Jen8Mqq2mm2N2FqxVr5h7ZH sYqoVvojhBbeflA+xMSDb12X1RjRcV7QTDa7UWzBXMkCU0yQAR1elqTED705owSn pLQ37nohA8Fmn0c3skp0U5Do4TXpFaObiZtnphUQIyafHYIGxk2e8UYDmS2envOA kOaRNumqkvVYE3Jaun4UIIYkBWqsEaVN2NTxuV6V0wYlb/lbg5VsJz2SG2A7UNYR RioBMKvAPSEYZx8RNFXmFL4j24MYLcgwy1Dhqd206bTYMqHxLdKjWvMjHQcuSg5j qm+65I/8VsW5og== -----END CERTIFICATE-----Generated at Wed Dec 17 13:44:27 2025 by rpki-client