This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft File: pMK1k9mMCS_TCmAepdJEqr08sU0.mft (raw, json) Hash identifier: xhfkuYdrKz2WhJlqJHgEUmibFCqITFH4LCrB/5eKKx8= Subject key identifier: 0D:EC:70:BF:7A:F7:D7:39:88:91:50:A9:F4:DA:2D:4A:57:EB:C5:A8 Authority key identifier: A4:C2:B5:93:D9:8C:09:2F:D3:0A:60:1E:A5:D2:44:AA:BD:3C:B1:4D Certificate issuer: /CN=a4c2b593d98c092fd30a601ea5d244aabd3cb14d Certificate serial: 019AF3C0A666175193D31F7E8169D6C151FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMK1k9mMCS_TCmAepdJEqr08sU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft Manifest number: 115D Signing time: Sat 06 Dec 2025 13:01:20 +0000 Manifest this update: Sat 06 Dec 2025 13:01:20 +0000 Manifest next update: Sun 07 Dec 2025 13:01:20 +0000 Files and hashes: 1: U7nNEW5XGU3Qw3Z5TlXa8n1A0Xo.roa (hash: El8KNdvpLmelwHnPspzpd+ZkXP2SnewzZSQOjMbCymQ=) 2: pMK1k9mMCS_TCmAepdJEqr08sU0.crl (hash: 1znOVIleZV8JmRSSWrbLKHHx7xAaubVHy1pWJ5yBNfE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.crl rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft rsync://rpki.ripe.net/repository/DEFAULT/pMK1k9mMCS_TCmAepdJEqr08sU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:a6:66:17:51:93:d3:1f:7e:81:69:d6:c1:51:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4c2b593d98c092fd30a601ea5d244aabd3cb14d Validity Not Before: Dec 6 13:01:20 2025 GMT Not After : Dec 7 13:01:20 2025 GMT Subject: CN=0dec70bf7af7d739889150a9f4da2d4a57ebc5a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d0:a7:cc:a6:dd:a5:35:49:a2:11:2b:73:c3: 6d:a6:23:79:9d:ec:2b:af:05:ec:70:5e:1c:ef:c3: bb:5c:49:7d:aa:04:5f:12:b7:c7:fd:c6:ba:b8:a9: 0a:02:a5:0d:d5:d5:9d:c8:f7:d9:8a:ab:67:55:0b: 7a:48:3f:06:27:1e:d0:04:72:23:b2:7c:9f:e2:87: 9c:48:0c:fc:23:53:36:bd:09:69:6c:62:bd:35:63: 21:83:94:aa:b5:e6:b3:b3:8c:0f:eb:55:e7:bf:81: 75:92:d5:46:d0:7f:84:79:a4:13:bc:47:b5:14:06: 6f:fb:3a:27:2a:1d:39:5f:56:6e:ae:3b:1b:f1:9d: c7:5d:2a:bd:b8:1b:b9:dd:03:f1:0d:1b:97:77:fc: 05:77:57:dd:91:e0:e4:bf:57:8c:b4:ee:ea:ac:b9: b0:84:af:d2:35:37:56:58:9c:0a:23:0c:1b:93:b8: dc:d3:54:b9:19:fd:cd:8b:d2:19:fc:9a:79:41:2e: 17:46:9b:19:12:7d:9d:b6:c4:dc:d5:6f:99:ef:11: 49:15:ea:87:3d:45:cb:25:c3:36:c3:8d:c5:1e:ca: 50:34:58:ef:22:2a:19:8d:43:27:7d:a9:7d:eb:8e: a0:13:3f:8e:64:93:a6:f7:62:1d:9a:fa:a9:d0:0f: 1b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:EC:70:BF:7A:F7:D7:39:88:91:50:A9:F4:DA:2D:4A:57:EB:C5:A8 X509v3 Authority Key Identifier: keyid:A4:C2:B5:93:D9:8C:09:2F:D3:0A:60:1E:A5:D2:44:AA:BD:3C:B1:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMK1k9mMCS_TCmAepdJEqr08sU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:41:1c:f2:a3:58:b4:b8:6c:8b:31:85:ec:1f:6e:4e:2b:ee: 79:01:40:76:9d:3d:50:33:88:88:1b:9a:b8:c4:66:15:2a:94: 38:86:ca:ec:81:96:40:f3:2e:0c:a3:6f:e6:b2:cd:1a:bb:1d: ca:93:9a:85:5a:57:de:e4:e4:6d:f6:e4:5c:23:46:9d:b8:c3: 80:42:79:2c:25:92:20:6b:12:ab:b1:ab:35:61:2d:4f:83:0f: cd:12:35:6e:f6:eb:23:17:9a:f2:2f:ff:e6:71:ad:14:23:f1: 2c:60:d3:ca:68:57:28:5a:76:93:61:24:74:78:5d:d2:2a:a0: d0:01:5c:78:f9:f7:e3:54:de:65:20:b8:05:4e:4d:70:20:68: 42:61:0e:4f:82:bd:79:3a:9a:cd:bb:24:8f:b0:66:8d:b3:cb: 0b:05:b7:f9:2d:da:53:8e:32:be:07:5f:e6:e4:c5:b7:36:ec: 72:6a:de:a9:59:84:06:86:6a:e6:36:2d:87:55:ec:3c:9d:0e: f2:7c:15:7f:27:8b:f4:6a:2e:85:c8:ac:d4:ee:21:c8:57:b9: 47:f7:d3:c1:7b:6f:24:80:56:ff:e6:f2:52:83:d7:fd:84:f7: ef:07:d3:94:c3:21:3e:2c:a2:cd:30:44:52:0e:b2:4c:eb:8f: 52:89:08:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwKZmF1GT0x9+gWnWwVH6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YzJiNTkzZDk4YzA5MmZkMzBhNjAxZWE1ZDI0NGFhYmQz Y2IxNGQwHhcNMjUxMjA2MTMwMTIwWhcNMjUxMjA3MTMwMTIwWjAzMTEwLwYDVQQD EygwZGVjNzBiZjdhZjdkNzM5ODg5MTUwYTlmNGRhMmQ0YTU3ZWJjNWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9CnzKbdpTVJohErc8NtpiN5newr rwXscF4c78O7XEl9qgRfErfH/ca6uKkKAqUN1dWdyPfZiqtnVQt6SD8GJx7QBHIj snyf4oecSAz8I1M2vQlpbGK9NWMhg5Sqteazs4wP61Xnv4F1ktVG0H+EeaQTvEe1 FAZv+zonKh05X1Zurjsb8Z3HXSq9uBu53QPxDRuXd/wFd1fdkeDkv1eMtO7qrLmw hK/SNTdWWJwKIwwbk7jc01S5Gf3Ni9IZ/Jp5QS4XRpsZEn2dtsTc1W+Z7xFJFeqH PUXLJcM2w43FHspQNFjvIioZjUMnfal9646gEz+OZJOm92Idmvqp0A8bMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA3scL9699c5iJFQqfTaLUpX68WoMB8GA1UdIwQY MBaAFKTCtZPZjAkv0wpgHqXSRKq9PLFNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE1LMWs5bU1DU19UQ21BZXBkSkVxcjA4c1UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC85NDIyYjAtZGM3OS00YzcxLWJmZDgt ZmNmOTk0NzBiOTg1LzEvcE1LMWs5bU1DU19UQ21BZXBkSkVxcjA4c1UwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC85NDIyYjAtZGM3OS00YzcxLWJmZDgtZmNmOTk0NzBiOTg1 LzEvcE1LMWs5bU1DU19UQ21BZXBkSkVxcjA4c1UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoEEc8qNY tLhsizGF7B9uTivueQFAdp09UDOIiBuauMRmFSqUOIbK7IGWQPMuDKNv5rLNGrsd ypOahVpX3uTkbfbkXCNGnbjDgEJ5LCWSIGsSq7GrNWEtT4MPzRI1bvbrIxea8i// 5nGtFCPxLGDTymhXKFp2k2EkdHhd0iqg0AFcePn341TeZSC4BU5NcCBoQmEOT4K9 eTqazbskj7BmjbPLCwW3+S3aU44yvgdf5uTFtzbscmreqVmEBoZq5jYth1XsPJ0O 8nwVfyeL9Gouhcis1O4hyFe5R/fTwXtvJIBW/+byUoPX/YT37wfTlMMhPiyizTBE Ug6yTOuPUokI1w== -----END CERTIFICATE-----Generated at Sat Dec 6 21:58:33 2025 by rpki-client