This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d04124-77b1-4816-a77c-cc91ca18011f/1/pktGhxxk3a5ARC_JIWZ2xUB0OPk.mft File: pktGhxxk3a5ARC_JIWZ2xUB0OPk.mft (raw, json) Hash identifier: wSsjYxVeF7Wi9mZoohCyShixot2+IfdQoq1w+ngL/JQ= Subject key identifier: 37:69:1D:09:48:CF:6C:5E:6B:9A:BC:08:86:D5:5C:02:DB:4A:CC:75 Authority key identifier: A6:4B:46:87:1C:64:DD:AE:40:44:2F:C9:21:66:76:C5:40:74:38:F9 Certificate issuer: /CN=a64b46871c64ddae40442fc9216676c5407438f9 Certificate serial: 019AF12E7BB97208226C4A691BDA4EE4958B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pktGhxxk3a5ARC_JIWZ2xUB0OPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d04124-77b1-4816-a77c-cc91ca18011f/1/pktGhxxk3a5ARC_JIWZ2xUB0OPk.mft Manifest number: 0108 Signing time: Sat 06 Dec 2025 01:02:26 +0000 Manifest this update: Sat 06 Dec 2025 01:02:26 +0000 Manifest next update: Sun 07 Dec 2025 01:02:26 +0000 Files and hashes: 1: pktGhxxk3a5ARC_JIWZ2xUB0OPk.crl (hash: zfYa7Llg98lYfxuUWEILikHTWmQbNzMTESmjf4cQerM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d04124-77b1-4816-a77c-cc91ca18011f/1/pktGhxxk3a5ARC_JIWZ2xUB0OPk.crl rsync://rpki.ripe.net/repository/DEFAULT/23/d04124-77b1-4816-a77c-cc91ca18011f/1/pktGhxxk3a5ARC_JIWZ2xUB0OPk.mft rsync://rpki.ripe.net/repository/DEFAULT/pktGhxxk3a5ARC_JIWZ2xUB0OPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:7b:b9:72:08:22:6c:4a:69:1b:da:4e:e4:95:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a64b46871c64ddae40442fc9216676c5407438f9 Validity Not Before: Dec 6 01:02:26 2025 GMT Not After : Dec 7 01:02:26 2025 GMT Subject: CN=37691d0948cf6c5e6b9abc0886d55c02db4acc75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:54:bd:49:73:1c:9c:21:2a:ee:39:f1:0f:5c: 3b:7d:f2:5e:1b:cd:58:94:a3:32:9d:9a:98:54:ab: aa:d4:a1:0c:f2:fb:9c:d7:59:c4:19:c9:27:2a:b7: 14:35:80:7e:4d:c4:6e:44:76:56:ca:c9:69:ea:4f: 5d:e4:69:6b:3a:bf:89:c9:7f:8a:c7:09:f5:ff:2e: d3:83:e3:9f:8e:83:30:c6:a6:56:c6:30:44:dc:aa: 38:6b:62:e0:4f:e3:41:58:4c:16:9b:e5:e9:e9:bd: ab:e5:31:99:d9:f0:a6:42:64:3f:26:be:38:72:cf: 8b:45:d2:cf:cf:c8:68:d0:24:2a:bd:49:34:73:7a: a1:ac:c5:f2:01:4e:a3:88:94:7e:00:86:5b:46:8a: fc:5b:02:20:46:2e:9b:2e:4f:a1:b0:dc:e6:c3:cf: a8:cc:f6:61:77:c4:df:89:bc:5d:38:2d:1b:e0:bc: 7b:c9:73:c2:55:f9:e3:da:aa:f3:aa:0c:77:6a:aa: 8c:26:e3:3d:75:64:ab:f1:56:c3:0a:fc:1c:f8:ab: 96:85:1b:d6:cf:f8:64:06:9f:e4:09:05:97:a8:e3: bf:2b:ba:85:7d:b0:78:c1:ff:73:df:33:55:02:d5: f0:eb:66:1a:5c:1b:6b:a1:db:89:be:8e:30:c8:9a: 8d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:69:1D:09:48:CF:6C:5E:6B:9A:BC:08:86:D5:5C:02:DB:4A:CC:75 X509v3 Authority Key Identifier: keyid:A6:4B:46:87:1C:64:DD:AE:40:44:2F:C9:21:66:76:C5:40:74:38:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pktGhxxk3a5ARC_JIWZ2xUB0OPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d04124-77b1-4816-a77c-cc91ca18011f/1/pktGhxxk3a5ARC_JIWZ2xUB0OPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d04124-77b1-4816-a77c-cc91ca18011f/1/pktGhxxk3a5ARC_JIWZ2xUB0OPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:bb:72:29:7c:fe:1d:83:26:6b:0e:77:68:5a:d3:68:19:5a: 91:9f:e7:5f:ef:4a:8f:e5:e4:13:c7:f2:64:56:47:66:81:e2: f8:ac:1f:93:b4:3a:31:24:89:6c:d5:b1:07:cd:9f:50:e0:46: 17:fe:27:3f:7a:4c:04:d6:15:b0:67:60:0c:8c:92:ff:81:d5: 01:40:f9:81:45:aa:0c:f9:01:5c:f0:6b:51:5a:f9:61:36:a0: 66:6a:2c:e0:c4:ba:d8:5e:83:66:19:37:ca:5a:d0:e0:cf:27: d3:31:05:73:e5:55:6d:3d:75:c2:fc:db:c4:7a:11:aa:e9:8b: db:ff:51:fb:cf:8c:37:f0:ec:a5:74:3a:48:3c:34:e1:53:04: 86:52:85:a4:c0:09:32:2f:fa:a0:af:c0:7a:47:a8:9b:f5:38: 22:4c:14:c0:5e:6e:25:8b:5a:77:99:e4:56:47:e8:24:85:a2: 78:42:bf:77:72:90:c4:a6:ed:fa:a2:c1:cd:d1:80:49:bf:2e: c5:e9:f0:0e:66:cc:fe:c8:37:85:e1:72:2b:fc:98:97:e3:b8: 27:08:cf:0f:ea:23:62:09:87:8e:3a:9f:ec:a4:ca:2f:ac:71: 63:b0:af:01:89:7b:68:52:43:4a:f5:b0:47:ba:1c:dd:ef:9c: ad:27:59:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLnu5cggibEppG9pO5JWLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NGI0Njg3MWM2NGRkYWU0MDQ0MmZjOTIxNjY3NmM1NDA3 NDM4ZjkwHhcNMjUxMjA2MDEwMjI2WhcNMjUxMjA3MDEwMjI2WjAzMTEwLwYDVQQD EygzNzY5MWQwOTQ4Y2Y2YzVlNmI5YWJjMDg4NmQ1NWMwMmRiNGFjYzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulS9SXMcnCEq7jnxD1w7ffJeG81Y lKMynZqYVKuq1KEM8vuc11nEGcknKrcUNYB+TcRuRHZWyslp6k9d5GlrOr+JyX+K xwn1/y7Tg+OfjoMwxqZWxjBE3Ko4a2LgT+NBWEwWm+Xp6b2r5TGZ2fCmQmQ/Jr44 cs+LRdLPz8ho0CQqvUk0c3qhrMXyAU6jiJR+AIZbRor8WwIgRi6bLk+hsNzmw8+o zPZhd8TfibxdOC0b4Lx7yXPCVfnj2qrzqgx3aqqMJuM9dWSr8VbDCvwc+KuWhRvW z/hkBp/kCQWXqOO/K7qFfbB4wf9z3zNVAtXw62YaXBtroduJvo4wyJqNOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDdpHQlIz2xea5q8CIbVXALbSsx1MB8GA1UdIwQY MBaAFKZLRoccZN2uQEQvySFmdsVAdDj5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGt0R2h4eGszYTVBUkNfSklXWjJ4VUIwT1BrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9kMDQxMjQtNzdiMS00ODE2LWE3N2Mt Y2M5MWNhMTgwMTFmLzEvcGt0R2h4eGszYTVBUkNfSklXWjJ4VUIwT1BrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9kMDQxMjQtNzdiMS00ODE2LWE3N2MtY2M5MWNhMTgwMTFm LzEvcGt0R2h4eGszYTVBUkNfSklXWjJ4VUIwT1BrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVrtyKXz+ HYMmaw53aFrTaBlakZ/nX+9Kj+XkE8fyZFZHZoHi+Kwfk7Q6MSSJbNWxB82fUOBG F/4nP3pMBNYVsGdgDIyS/4HVAUD5gUWqDPkBXPBrUVr5YTagZmos4MS62F6DZhk3 ylrQ4M8n0zEFc+VVbT11wvzbxHoRqumL2/9R+8+MN/DspXQ6SDw04VMEhlKFpMAJ Mi/6oK/Aekeom/U4IkwUwF5uJYtad5nkVkfoJIWieEK/d3KQxKbt+qLBzdGASb8u xenwDmbM/sg3heFyK/yYl+O4JwjPD+ojYgmHjjqf7KTKL6xxY7CvAYl7aFJDSvWw R7oc3e+crSdZFg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:03:13 2025 by rpki-client