This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft File: PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft (raw, json) Hash identifier: GTvZB2OOVifEHJ1A5FsRa5hJa8c/a8RHN3lq5RbHGhQ= Subject key identifier: 2A:B9:18:C6:54:79:16:1E:00:B8:27:9A:87:17:D3:EA:B4:F0:CF:1B Authority key identifier: 3C:A6:FA:99:9E:8A:67:4A:A5:33:2D:EB:71:F1:BA:D0:24:5C:8D:C1 Certificate issuer: /CN=3ca6fa999e8a674aa5332deb71f1bad0245c8dc1 Certificate serial: 019AF38A122888B5DF386F1DCE941CE97D44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft Manifest number: 0EDC Signing time: Sat 06 Dec 2025 12:01:43 +0000 Manifest this update: Sat 06 Dec 2025 12:01:43 +0000 Manifest next update: Sun 07 Dec 2025 12:01:43 +0000 Files and hashes: 1: 9-fbWWjNC4mOvVefigl9UV2UFJs.roa (hash: tWgz0w4Sqnk4S40gqRVMtTMDJNe1eyYOZFDB5oZ2xOA=) 2: PKb6mZ6KZ0qlMy3rcfG60CRcjcE.crl (hash: rFM5+HwHbIy2Dzb2SdSKRmI6mBkCWjjrhpzqPY3L14g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.crl rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft rsync://rpki.ripe.net/repository/DEFAULT/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:8a:12:28:88:b5:df:38:6f:1d:ce:94:1c:e9:7d:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ca6fa999e8a674aa5332deb71f1bad0245c8dc1 Validity Not Before: Dec 6 12:01:43 2025 GMT Not After : Dec 7 12:01:43 2025 GMT Subject: CN=2ab918c65479161e00b8279a8717d3eab4f0cf1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cf:84:c5:d1:e7:0a:e6:4c:8e:2f:f3:42:0c: 31:00:81:2d:b9:a8:e7:71:53:50:51:e8:43:62:a0: a2:e6:b4:8d:1a:4d:99:77:42:8d:54:6a:34:cb:56: e6:88:ca:51:93:e9:cf:2c:c8:2b:fb:24:ad:e1:80: fd:f9:55:e3:8d:0a:4e:1f:3c:00:f8:73:81:12:f2: 05:f0:c5:e1:b5:09:81:5f:de:2f:72:83:7f:b5:2a: a2:e0:8a:4d:11:72:c7:a4:c7:58:9a:63:f7:0a:4b: a2:d5:ac:29:94:53:5c:05:d8:02:bc:d5:95:da:45: d0:f4:e2:1c:9e:9c:a2:b4:ee:cd:d2:7b:92:22:10: bd:84:e1:70:76:dd:9c:19:fc:3b:9e:fe:cb:f3:3a: c1:70:0b:fd:1e:af:b8:0a:33:41:84:bb:b4:29:1e: de:4d:b6:0e:a0:89:2a:8d:25:ad:3e:eb:10:19:df: 76:1c:1d:52:67:ff:e7:c1:7e:7f:0a:d4:c4:c6:9b: 25:a8:cc:25:37:f9:f4:f3:e3:5d:0d:f9:b4:38:bd: a7:da:f7:36:1f:cc:55:ad:1c:81:b1:6d:49:8c:1d: c5:7b:39:7b:31:d2:3e:8f:a7:ad:4f:d9:27:a5:5a: 33:f1:4c:e0:7b:40:26:3f:12:3c:ed:8a:65:4c:12: 2d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:B9:18:C6:54:79:16:1E:00:B8:27:9A:87:17:D3:EA:B4:F0:CF:1B X509v3 Authority Key Identifier: keyid:3C:A6:FA:99:9E:8A:67:4A:A5:33:2D:EB:71:F1:BA:D0:24:5C:8D:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:dc:3f:1e:83:17:15:d4:98:5b:f1:74:fa:8a:5b:df:b0:87: 9d:87:84:40:2b:2f:82:1e:8e:63:1c:7b:1a:bc:57:7b:3a:27: a9:c5:6d:ee:5d:37:ac:28:4e:a3:02:c6:ef:2f:b2:a5:42:b7: 53:63:0f:2a:d2:59:13:0c:51:14:67:75:c9:59:97:d5:e1:da: d7:fc:b6:24:90:95:83:80:a9:bd:d3:43:d1:ac:12:39:c4:49: 9d:41:81:71:3b:21:f0:bd:2f:b7:89:d9:fc:59:e4:6e:81:64: 14:a8:45:1f:1d:1e:03:7e:fc:bc:f7:2e:f9:fa:c5:d5:6a:3a: 9f:7e:67:ff:59:ee:68:25:3f:e7:0b:f0:af:0e:81:2b:48:cd: 43:70:4a:6b:41:69:67:a9:b2:8b:23:3f:c8:cd:21:77:ef:c3: f9:71:79:bc:74:4f:d9:ce:55:20:71:fb:99:f6:7c:13:ef:01: 8e:54:93:cd:ba:88:31:69:3a:0b:43:10:e0:9f:11:50:d4:1d: 38:69:6b:96:52:75:b9:8e:85:b1:49:74:ac:bf:65:12:8c:9c: d7:3f:7f:a0:cd:b2:10:a2:0d:3d:21:ac:9e:a9:dc:0b:12:be: 74:52:75:c0:36:cd:05:08:29:2f:69:ff:56:d8:c6:74:41:91: 55:b9:7b:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzihIoiLXfOG8dzpQc6X1EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjYTZmYTk5OWU4YTY3NGFhNTMzMmRlYjcxZjFiYWQwMjQ1 YzhkYzEwHhcNMjUxMjA2MTIwMTQzWhcNMjUxMjA3MTIwMTQzWjAzMTEwLwYDVQQD EygyYWI5MThjNjU0NzkxNjFlMDBiODI3OWE4NzE3ZDNlYWI0ZjBjZjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoM+ExdHnCuZMji/zQgwxAIEtuajn cVNQUehDYqCi5rSNGk2Zd0KNVGo0y1bmiMpRk+nPLMgr+ySt4YD9+VXjjQpOHzwA +HOBEvIF8MXhtQmBX94vcoN/tSqi4IpNEXLHpMdYmmP3Ckui1awplFNcBdgCvNWV 2kXQ9OIcnpyitO7N0nuSIhC9hOFwdt2cGfw7nv7L8zrBcAv9Hq+4CjNBhLu0KR7e TbYOoIkqjSWtPusQGd92HB1SZ//nwX5/CtTExpslqMwlN/n08+NdDfm0OL2n2vc2 H8xVrRyBsW1JjB3Fezl7MdI+j6etT9knpVoz8Uzge0AmPxI87YplTBItuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCq5GMZUeRYeALgnmocX0+q08M8bMB8GA1UdIwQY MBaAFDym+pmeimdKpTMt63HxutAkXI3BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEtiNm1aNktaMHFsTXkzcmNmRzYwQ1JjamNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9mOTdkM2QtZWQ2NC00MGI3LThiN2Mt MTUyYjBhYmQ3YzBjLzEvUEtiNm1aNktaMHFsTXkzcmNmRzYwQ1JjamNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9mOTdkM2QtZWQ2NC00MGI3LThiN2MtMTUyYjBhYmQ3YzBj LzEvUEtiNm1aNktaMHFsTXkzcmNmRzYwQ1JjamNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMtw/HoMX FdSYW/F0+opb37CHnYeEQCsvgh6OYxx7GrxXezonqcVt7l03rChOowLG7y+ypUK3 U2MPKtJZEwxRFGd1yVmX1eHa1/y2JJCVg4CpvdND0awSOcRJnUGBcTsh8L0vt4nZ /FnkboFkFKhFHx0eA378vPcu+frF1Wo6n35n/1nuaCU/5wvwrw6BK0jNQ3BKa0Fp Z6myiyM/yM0hd+/D+XF5vHRP2c5VIHH7mfZ8E+8BjlSTzbqIMWk6C0MQ4J8RUNQd OGlrllJ1uY6FsUl0rL9lEoyc1z9/oM2yEKINPSGsnqncCxK+dFJ1wDbNBQgpL2n/ VtjGdEGRVbl7sg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:16:36 2025 by rpki-client