This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft File: pqjzQ2_YPor2EPIWgImW6QrKx10.mft (raw, json) Hash identifier: Y7aGdsO8/5N+TQh3QxtHX26p+tfioyjvN7L6DGvu0gM= Subject key identifier: 94:A0:EE:DC:7D:7B:CB:79:6B:A8:B9:A8:44:71:E3:13:CB:C8:B4:3D Authority key identifier: A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D Certificate issuer: /CN=a6a8f3436fd83e8af610f216808996e90acac75d Certificate serial: 019AF42E7C283EEDF4E673F3EB694E86CF95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft Manifest number: 031F Signing time: Sat 06 Dec 2025 15:01:18 +0000 Manifest this update: Sat 06 Dec 2025 15:01:18 +0000 Manifest next update: Sun 07 Dec 2025 15:01:18 +0000 Files and hashes: 1: 02-uNoM21bjmlG-lE4agOekpdKo.roa (hash: i3b0MZOpH3uEgzpNG0t5Zhkr23yS2t5mSf33Dy8+wNQ=) 2: pqjzQ2_YPor2EPIWgImW6QrKx10.crl (hash: wJSi/IOWhlpiYNItIh/aoogEnZL1EA3qc4he95cFroE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:7c:28:3e:ed:f4:e6:73:f3:eb:69:4e:86:cf:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6a8f3436fd83e8af610f216808996e90acac75d Validity Not Before: Dec 6 15:01:18 2025 GMT Not After : Dec 7 15:01:18 2025 GMT Subject: CN=94a0eedc7d7bcb796ba8b9a84471e313cbc8b43d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f2:12:1b:d5:c4:e7:98:7c:ba:a5:21:e8:ae: 65:bb:7a:38:d4:19:19:a1:ce:fa:c4:c3:11:5d:0c: e5:4f:95:92:2e:71:a5:25:08:64:30:52:fa:a2:85: 82:c2:23:6c:cc:a5:93:5f:75:0f:99:82:b7:6a:6d: 54:08:76:31:5d:0c:60:65:4b:e6:17:ca:87:dc:8b: 42:38:e0:0d:28:77:9a:be:80:34:12:50:e0:e0:6a: 3e:30:c9:05:d6:36:ee:4b:9f:3c:11:9f:79:c0:fb: 4d:11:cc:e0:fb:15:87:e7:75:9e:03:2a:f8:e1:2c: 49:ef:28:4a:86:b1:56:06:d7:74:48:2d:94:77:50: 8a:34:99:d7:46:65:f0:64:e1:44:e2:9d:0c:b5:8a: 3b:c7:b5:89:09:25:7c:c5:b0:a8:0a:5e:a6:89:27: 5f:2b:f7:10:02:30:97:5b:4e:3a:fc:30:e7:5d:9d: 25:a9:bb:af:97:36:90:46:fb:76:a0:f1:a4:fa:34: 7c:22:95:d0:1b:8f:dc:da:c3:f6:27:d2:e2:27:3e: 36:ad:c0:15:91:17:fb:ce:3e:bb:b9:45:0e:84:aa: eb:84:39:0a:9f:28:9e:d7:e1:45:2b:b8:06:11:92: 19:65:0f:d3:92:fa:43:4e:1e:b0:5f:04:32:a6:4a: 8d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:A0:EE:DC:7D:7B:CB:79:6B:A8:B9:A8:44:71:E3:13:CB:C8:B4:3D X509v3 Authority Key Identifier: keyid:A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:56:81:0f:d7:cb:c9:7b:4f:2e:a1:52:49:3e:66:f2:87:6e: fe:72:67:3e:f4:d0:ff:bb:38:cc:e6:81:36:55:cd:89:8c:67: 11:0d:77:38:f4:2c:cf:70:4f:b3:88:0c:f1:f6:51:52:d6:06: 10:74:05:84:13:90:d2:6d:d9:bd:07:94:1b:96:90:50:10:35: f8:5f:d1:58:34:60:dd:ae:a3:ff:85:72:39:8b:0e:2d:ed:c1: bd:68:a1:dd:59:ee:58:0a:98:93:20:72:45:15:be:57:ad:ff: 88:a3:a8:ec:ae:a2:f8:e3:98:fb:ce:73:30:59:77:dc:55:1e: 41:51:f1:26:79:e7:c5:e7:ae:fe:ea:16:31:fa:80:a6:68:d1: b5:af:fa:d0:1d:5e:a3:b1:75:d4:c3:86:16:be:23:e9:16:92: 31:9b:82:a9:de:47:82:fb:6e:01:3c:50:9d:09:57:9f:b6:46: fa:74:4a:d8:1c:f4:2b:92:ee:54:2c:79:98:e3:36:73:ae:fb: 6e:ac:93:31:14:83:e9:93:ea:92:af:d8:18:f2:9a:2b:93:24: 18:57:83:e9:4b:47:4a:65:29:b5:5f:49:86:ed:a1:96:96:b2: 70:c8:29:80:a0:5d:25:c4:34:9b:23:c9:f6:f3:c9:5a:91:35: 3f:b3:e3:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LnwoPu305nPz62lOhs+VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2YThmMzQzNmZkODNlOGFmNjEwZjIxNjgwODk5NmU5MGFj YWM3NWQwHhcNMjUxMjA2MTUwMTE4WhcNMjUxMjA3MTUwMTE4WjAzMTEwLwYDVQQD Eyg5NGEwZWVkYzdkN2JjYjc5NmJhOGI5YTg0NDcxZTMxM2NiYzhiNDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/ISG9XE55h8uqUh6K5lu3o41BkZ oc76xMMRXQzlT5WSLnGlJQhkMFL6ooWCwiNszKWTX3UPmYK3am1UCHYxXQxgZUvm F8qH3ItCOOANKHeavoA0ElDg4Go+MMkF1jbuS588EZ95wPtNEczg+xWH53WeAyr4 4SxJ7yhKhrFWBtd0SC2Ud1CKNJnXRmXwZOFE4p0MtYo7x7WJCSV8xbCoCl6miSdf K/cQAjCXW046/DDnXZ0lqbuvlzaQRvt2oPGk+jR8IpXQG4/c2sP2J9LiJz42rcAV kRf7zj67uUUOhKrrhDkKnyie1+FFK7gGEZIZZQ/TkvpDTh6wXwQypkqNMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJSg7tx9e8t5a6i5qERx4xPLyLQ9MB8GA1UdIwQY MBaAFKao80Nv2D6K9hDyFoCJlukKysddMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHFqelEyX1lQb3IyRVBJV2dJbVc2UXJLeDEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi81YjE2NTctYWJmMC00ZDM2LWE4OTIt YWJlNWM4ZTJiYWQ2LzEvcHFqelEyX1lQb3IyRVBJV2dJbVc2UXJLeDEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi81YjE2NTctYWJmMC00ZDM2LWE4OTItYWJlNWM4ZTJiYWQ2 LzEvcHFqelEyX1lQb3IyRVBJV2dJbVc2UXJLeDEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqFaBD9fL yXtPLqFSST5m8odu/nJnPvTQ/7s4zOaBNlXNiYxnEQ13OPQsz3BPs4gM8fZRUtYG EHQFhBOQ0m3ZvQeUG5aQUBA1+F/RWDRg3a6j/4VyOYsOLe3BvWih3VnuWAqYkyBy RRW+V63/iKOo7K6i+OOY+85zMFl33FUeQVHxJnnnxeeu/uoWMfqApmjRta/60B1e o7F11MOGFr4j6RaSMZuCqd5HgvtuATxQnQlXn7ZG+nRK2Bz0K5LuVCx5mOM2c677 bqyTMRSD6ZPqkq/YGPKaK5MkGFeD6UtHSmUptV9Jhu2hlpaycMgpgKBdJcQ0myPJ 9vPJWpE1P7Pjcg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:52:55 2025 by rpki-client