This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft File: PN4kcMhWOUlIej54dDxUTJnsimQ.mft (raw, json) Hash identifier: 5DYumq1/wPupKyAhlaXlHRzFiN7EO6UgHArpTuWwt4U= Subject key identifier: F4:A7:34:40:2F:7F:BC:1B:29:04:08:D4:38:E7:03:25:7D:9A:3F:74 Authority key identifier: 3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64 Certificate issuer: /CN=3cde2470c8563949487a3e78743c544c99ec8a64 Certificate serial: 019AF61C849E2001362EB522D099858A106A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft Manifest number: 09E6 Signing time: Sun 07 Dec 2025 00:00:55 +0000 Manifest this update: Sun 07 Dec 2025 00:00:55 +0000 Manifest next update: Mon 08 Dec 2025 00:00:55 +0000 Files and hashes: 1: MR6yCa9ahiYB6kt7eFUEnhRZgj0.roa (hash: Q5fLGdiN5URjuSRi8W7fkSayIUiVGY1nf+0ovyfMZAw=) 2: PN4kcMhWOUlIej54dDxUTJnsimQ.crl (hash: oOr+W8zJVWJPPdcl7dqOVit53USxx76SdeWoDWLxLyI=) 3: sFFOUDvWTzfSymlwSYpDyp4rZVo.roa (hash: hd1EPhU6XZRPUxka9ECqkCcKF9k2GizgSrw0eDBr9g4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:84:9e:20:01:36:2e:b5:22:d0:99:85:8a:10:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cde2470c8563949487a3e78743c544c99ec8a64 Validity Not Before: Dec 7 00:00:55 2025 GMT Not After : Dec 8 00:00:55 2025 GMT Subject: CN=f4a734402f7fbc1b290408d438e703257d9a3f74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c5:17:33:92:03:48:bb:5b:28:34:10:6f:c2: 7e:36:50:09:54:27:f4:78:e6:45:65:75:47:df:2d: ff:27:55:4b:91:e0:5a:a9:06:e8:da:e7:20:de:f8: d5:ee:41:19:b5:ba:4f:23:f0:38:71:b3:43:4c:fb: 52:b8:f9:34:36:34:cd:3f:84:51:74:2b:1a:c9:4f: c3:27:88:2a:56:a5:7d:46:59:65:a1:cc:af:6a:b2: 40:53:a6:2c:12:e0:5c:94:4c:fa:c2:b5:3d:49:1f: 67:1d:dd:9b:5b:de:41:4c:6e:64:87:ac:63:66:ac: fd:f8:81:79:43:c9:84:b4:26:ba:f3:58:f2:19:d6: ee:2c:35:97:15:6e:2e:3c:ee:1d:2e:1e:03:60:fd: f8:25:12:a8:d7:9c:9a:68:28:4b:2a:d1:38:9e:9d: 8d:31:1e:e4:7f:7f:b3:ce:f0:25:29:27:a7:07:e7: 3b:ac:60:0c:5c:27:4a:8f:a5:55:71:fe:72:f6:a9: 57:1e:9f:d0:50:fd:a5:82:33:36:cc:8a:af:a8:b0: 90:43:bf:d1:62:91:54:b2:c6:f0:01:aa:68:8f:5d: 82:cf:67:22:84:92:60:7c:00:71:e4:9f:c1:38:b4: d7:21:4f:41:03:25:d9:bc:b7:ad:f6:d8:cf:7a:4c: e4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:A7:34:40:2F:7F:BC:1B:29:04:08:D4:38:E7:03:25:7D:9A:3F:74 X509v3 Authority Key Identifier: keyid:3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:90:70:38:85:a3:fd:32:6c:68:e3:37:33:d8:85:7d:43:8c: 54:ca:33:7d:2a:e0:ea:f4:07:fd:c2:90:7d:e9:38:66:7c:9f: 6f:b7:67:68:28:fb:8f:05:27:66:5e:28:ea:ea:9b:6f:5a:0f: 23:86:16:2f:9c:18:a4:8f:71:07:96:d7:cc:6b:e4:08:54:66: a2:e7:f2:13:96:a6:80:45:07:5b:e4:89:9a:d6:9d:b6:9e:af: 36:6c:07:ef:39:bd:fd:b6:08:4e:c5:0f:bb:ce:f6:11:af:d5: 06:2a:af:66:3f:50:1a:19:c4:48:be:4c:f1:91:5b:34:6c:9b: 6d:af:55:2f:1e:29:3d:bd:4c:20:b4:bb:2c:64:4e:2b:5a:35: ba:d9:bc:d3:48:1a:c3:d5:e3:29:ff:01:2d:6f:fc:cb:b0:06: 79:a1:09:d6:ac:10:d5:cf:5a:ac:bc:2b:00:6f:01:22:3d:53: ec:b4:9e:9f:bb:73:b0:6d:bb:2f:64:74:da:b4:44:c6:c5:dd: 00:4d:a9:eb:46:fc:64:51:18:14:53:19:3e:1b:51:26:0b:d9: 64:a4:83:9c:cd:22:e4:1e:7e:24:7d:69:3b:bb:21:60:3c:b9: ff:b5:79:6a:6f:73:bd:c9:82:a9:a9:f8:e1:f9:79:0d:a9:c8: 59:e5:9d:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HISeIAE2LrUi0JmFihBqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjZGUyNDcwYzg1NjM5NDk0ODdhM2U3ODc0M2M1NDRjOTll YzhhNjQwHhcNMjUxMjA3MDAwMDU1WhcNMjUxMjA4MDAwMDU1WjAzMTEwLwYDVQQD EyhmNGE3MzQ0MDJmN2ZiYzFiMjkwNDA4ZDQzOGU3MDMyNTdkOWEzZjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsUXM5IDSLtbKDQQb8J+NlAJVCf0 eOZFZXVH3y3/J1VLkeBaqQbo2ucg3vjV7kEZtbpPI/A4cbNDTPtSuPk0NjTNP4RR dCsayU/DJ4gqVqV9RlllocyvarJAU6YsEuBclEz6wrU9SR9nHd2bW95BTG5kh6xj Zqz9+IF5Q8mEtCa681jyGdbuLDWXFW4uPO4dLh4DYP34JRKo15yaaChLKtE4np2N MR7kf3+zzvAlKSenB+c7rGAMXCdKj6VVcf5y9qlXHp/QUP2lgjM2zIqvqLCQQ7/R YpFUssbwAapoj12Cz2cihJJgfABx5J/BOLTXIU9BAyXZvLet9tjPekzkdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPSnNEAvf7wbKQQI1DjnAyV9mj90MB8GA1UdIwQY MBaAFDzeJHDIVjlJSHo+eHQ8VEyZ7IpkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUE40a2NNaFdPVWxJZWo1NGREeFVUSm5zaW1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9mYTc5Y2YtOGM0Yy00MDk0LWExZjUt NDQxNzFiMmY1OTllLzEvUE40a2NNaFdPVWxJZWo1NGREeFVUSm5zaW1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9mYTc5Y2YtOGM0Yy00MDk0LWExZjUtNDQxNzFiMmY1OTll LzEvUE40a2NNaFdPVWxJZWo1NGREeFVUSm5zaW1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVJBwOIWj /TJsaOM3M9iFfUOMVMozfSrg6vQH/cKQfek4Znyfb7dnaCj7jwUnZl4o6uqbb1oP I4YWL5wYpI9xB5bXzGvkCFRmoufyE5amgEUHW+SJmtadtp6vNmwH7zm9/bYITsUP u872Ea/VBiqvZj9QGhnESL5M8ZFbNGybba9VLx4pPb1MILS7LGROK1o1utm800ga w9XjKf8BLW/8y7AGeaEJ1qwQ1c9arLwrAG8BIj1T7LSen7tzsG27L2R02rRExsXd AE2p60b8ZFEYFFMZPhtRJgvZZKSDnM0i5B5+JH1pO7shYDy5/7V5am9zvcmCqan4 4fl5DanIWeWd+g== -----END CERTIFICATE-----Generated at Sun Dec 7 01:48:45 2025 by rpki-client