This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft File: pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft (raw, json) Hash identifier: ktA3MStZNwq3nlx+mLNsybQVozrL4pNFya9hghrMopA= Subject key identifier: 21:4D:53:84:8B:71:6B:28:7B:D2:0F:A6:0D:92:4F:18:71:7C:0A:73 Authority key identifier: A4:AB:AF:1D:37:F0:A1:41:A8:14:CA:02:FC:01:E3:D9:62:1C:73:D9 Certificate issuer: /CN=a4abaf1d37f0a141a814ca02fc01e3d9621c73d9 Certificate serial: 019AF5AEF1868E78A97175253A72BE777925 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 22:01:14 +0000 Manifest this update: Sat 06 Dec 2025 22:01:14 +0000 Manifest next update: Sun 07 Dec 2025 22:01:14 +0000 Files and hashes: 1: o-nYlXPYTvbWycHnP4jG4hys78s.roa (hash: +9u5uc7wAwLvJQwWxklCfmQHya0NysgfSBmasNGP6Yk=) 2: pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl (hash: WJGzGZJyZESAqjtzEOlgOcajye2dvs2bJjknwp0sGKI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:f1:86:8e:78:a9:71:75:25:3a:72:be:77:79:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4abaf1d37f0a141a814ca02fc01e3d9621c73d9 Validity Not Before: Dec 6 22:01:14 2025 GMT Not After : Dec 7 22:01:14 2025 GMT Subject: CN=214d53848b716b287bd20fa60d924f18717c0a73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f4:46:4a:2e:1d:bb:6c:6c:1a:82:96:c1:a3: 51:cd:57:61:e7:4d:58:65:98:98:17:7e:1c:08:2b: 8f:0b:43:f2:9c:59:1d:b2:9b:12:7a:5e:55:2b:07: 7c:1d:91:f7:60:cd:6c:b7:ba:77:2c:91:5a:ed:40: c9:d4:46:69:f5:0f:6b:5f:14:97:ea:7f:8f:f6:e7: 21:5d:57:84:4d:a4:5b:72:1c:5e:86:bd:d1:f3:2c: 64:cc:9d:06:96:1e:10:00:75:cc:1b:1d:29:4e:10: 18:ea:75:60:c1:ac:fd:e7:b1:0b:45:eb:1b:de:54: 53:0e:a9:94:e3:33:ff:7e:68:b2:6e:f0:e9:49:70: 71:9c:7c:c2:6f:13:7f:6e:43:3e:47:81:8d:49:e3: 22:81:f8:db:56:98:9b:78:c9:43:17:4e:eb:77:37: 95:e8:16:71:e8:a8:5e:9b:3d:2e:28:69:d9:43:d7: e5:75:67:5c:d1:e9:8c:55:6f:a8:02:7d:c8:64:43: af:ac:f6:3e:19:44:54:20:78:d1:fb:bc:13:1b:84: 8a:bf:e6:a1:e4:1d:b1:02:29:e0:79:ea:3d:2d:11: bf:bb:6f:61:2d:51:ac:63:e3:e8:1a:c7:82:95:54: 22:4c:37:b7:8e:41:d2:8b:7b:62:7f:04:e6:71:87: 42:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:4D:53:84:8B:71:6B:28:7B:D2:0F:A6:0D:92:4F:18:71:7C:0A:73 X509v3 Authority Key Identifier: keyid:A4:AB:AF:1D:37:F0:A1:41:A8:14:CA:02:FC:01:E3:D9:62:1C:73:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:fa:82:b6:6c:98:28:8b:f4:de:63:be:8d:00:c7:e8:b0:f1: 5f:86:03:11:3b:79:d5:fc:ab:ad:ff:7c:89:39:16:bc:59:81: dc:6d:6d:f0:06:26:6c:d8:10:1f:0f:e3:8a:84:49:6a:18:8d: f5:82:c2:15:93:b1:d2:0e:aa:2f:a1:c5:84:5e:83:c4:9b:80: f0:c4:99:20:78:31:1a:c0:fd:68:48:0d:4a:6c:21:c3:0a:01: a0:f4:9b:3b:f2:66:6b:4c:fa:05:3f:71:e4:fa:18:f1:80:ac: 75:72:d5:98:16:0b:89:79:cb:ad:c3:25:2a:5f:29:33:62:8f: 1d:7f:ec:d5:4f:50:b6:a2:ea:62:64:3b:06:73:5e:bb:38:69: 96:5b:0e:48:8d:ab:02:51:1a:c3:3b:bd:a4:4d:b5:c0:fc:73: 7a:15:c2:99:eb:0c:21:11:0b:89:90:65:b3:5d:c6:53:4a:3d: 95:28:b2:3c:66:9f:f1:f4:fc:cd:42:7e:18:1a:60:8a:52:37: 32:92:22:2b:7e:78:20:05:35:19:ba:dd:75:24:f2:23:4e:99: ce:be:27:07:53:19:29:16:73:0e:c3:81:26:07:0f:23:f2:bf: 01:f8:46:b9:da:db:da:b7:59:d9:27:e4:9d:5c:35:e2:d0:84: b4:4c:8b:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rvGGjnipcXUlOnK+d3klMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YWJhZjFkMzdmMGExNDFhODE0Y2EwMmZjMDFlM2Q5NjIx YzczZDkwHhcNMjUxMjA2MjIwMTE0WhcNMjUxMjA3MjIwMTE0WjAzMTEwLwYDVQQD EygyMTRkNTM4NDhiNzE2YjI4N2JkMjBmYTYwZDkyNGYxODcxN2MwYTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PRGSi4du2xsGoKWwaNRzVdh501Y ZZiYF34cCCuPC0PynFkdspsSel5VKwd8HZH3YM1st7p3LJFa7UDJ1EZp9Q9rXxSX 6n+P9uchXVeETaRbchxehr3R8yxkzJ0Glh4QAHXMGx0pThAY6nVgwaz957ELResb 3lRTDqmU4zP/fmiybvDpSXBxnHzCbxN/bkM+R4GNSeMigfjbVpibeMlDF07rdzeV 6BZx6Khemz0uKGnZQ9fldWdc0emMVW+oAn3IZEOvrPY+GURUIHjR+7wTG4SKv+ah 5B2xAingeeo9LRG/u29hLVGsY+PoGseClVQiTDe3jkHSi3tifwTmcYdCxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCFNU4SLcWsoe9IPpg2STxhxfApzMB8GA1UdIwQY MBaAFKSrrx038KFBqBTKAvwB49liHHPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEt1dkhUZndvVUdvRk1vQ19BSGoyV0ljYzlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8xNTViZGMtYjU3NC00N2Y5LWIzNDgt OTNjZjY0Zjg4OTkwLzEvcEt1dkhUZndvVUdvRk1vQ19BSGoyV0ljYzlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS8xNTViZGMtYjU3NC00N2Y5LWIzNDgtOTNjZjY0Zjg4OTkw LzEvcEt1dkhUZndvVUdvRk1vQ19BSGoyV0ljYzlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN/qCtmyY KIv03mO+jQDH6LDxX4YDETt51fyrrf98iTkWvFmB3G1t8AYmbNgQHw/jioRJahiN 9YLCFZOx0g6qL6HFhF6DxJuA8MSZIHgxGsD9aEgNSmwhwwoBoPSbO/Jma0z6BT9x 5PoY8YCsdXLVmBYLiXnLrcMlKl8pM2KPHX/s1U9QtqLqYmQ7BnNeuzhpllsOSI2r AlEawzu9pE21wPxzehXCmesMIRELiZBls13GU0o9lSiyPGaf8fT8zUJ+GBpgilI3 MpIiK354IAU1GbrddSTyI06Zzr4nB1MZKRZzDsOBJgcPI/K/AfhGudrb2rdZ2Sfk nVw14tCEtEyLpg== -----END CERTIFICATE-----Generated at Sun Dec 7 00:29:49 2025 by rpki-client