This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.mft File: Pkgvs8n5r0cOTki23zgtPVAVRmE.mft (raw, json) Hash identifier: uHimkwZY5gWE0B77vfcWIA/hzgTGrqcf1QXGY8cW0Qo= Subject key identifier: CF:2D:0C:BD:8F:CB:37:00:84:34:81:B3:53:DE:25:81:80:EA:56:89 Authority key identifier: 3E:48:2F:B3:C9:F9:AF:47:0E:4E:48:B6:DF:38:2D:3D:50:15:46:61 Certificate issuer: /CN=3e482fb3c9f9af470e4e48b6df382d3d50154661 Certificate serial: 019B3CEC9AB6DD5B44127E5C45FB9523CF20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pkgvs8n5r0cOTki23zgtPVAVRmE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 18:01:37 +0000 Manifest this update: Sat 20 Dec 2025 18:01:37 +0000 Manifest next update: Sun 21 Dec 2025 18:01:37 +0000 Files and hashes: 1: Pkgvs8n5r0cOTki23zgtPVAVRmE.crl (hash: /JlFvmql6ZVxZs9hDnpOoaKqKl8BnZB7fX/N1s3m3XM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.crl rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.mft rsync://rpki.ripe.net/repository/DEFAULT/Pkgvs8n5r0cOTki23zgtPVAVRmE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:9a:b6:dd:5b:44:12:7e:5c:45:fb:95:23:cf:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e482fb3c9f9af470e4e48b6df382d3d50154661 Validity Not Before: Dec 20 18:01:37 2025 GMT Not After : Dec 21 18:01:37 2025 GMT Subject: CN=cf2d0cbd8fcb3700843481b353de258180ea5689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:02:72:fb:10:5c:b8:45:0b:4a:51:0d:a5:81: 06:6d:04:d2:30:9e:54:90:48:ce:d4:11:4d:64:ec: 71:1b:b9:e9:4b:bb:69:61:0b:23:ad:32:45:db:83: 95:01:4c:96:11:7a:f7:10:a9:9a:2e:79:9d:e3:b4: 87:f6:fc:e9:eb:ea:76:6f:8b:09:c1:c6:64:36:18: e5:18:d7:86:1f:41:08:3f:6c:04:e9:ab:36:28:b8: 03:ee:aa:91:51:2f:79:1a:ea:73:ec:cf:1d:9a:e1: ce:22:7b:ab:4d:a7:99:2a:1a:68:4d:ee:60:ea:14: d3:e5:27:7d:b0:c0:32:40:b1:6d:3f:2c:6d:7d:a6: 6c:89:37:96:07:91:6a:bb:b9:ec:85:e1:f8:77:06: ef:b5:c2:67:aa:92:b2:39:f2:ee:a4:dc:29:13:98: 76:1b:ed:fd:a6:64:4f:5b:6c:31:27:30:8e:29:78: 0c:67:cf:26:57:b0:ff:44:77:48:81:ac:31:3c:14: 9b:12:a4:20:50:38:5e:ab:f4:d0:09:f1:5d:5e:40: 54:4c:1a:b5:6d:64:c7:86:03:a6:d8:c6:ac:06:f7: f1:85:00:d4:95:4c:6c:50:51:a3:fc:c3:d9:ba:cb: 02:3d:c5:1b:32:d1:e7:7d:6b:36:6d:11:4d:9c:8d: 87:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:2D:0C:BD:8F:CB:37:00:84:34:81:B3:53:DE:25:81:80:EA:56:89 X509v3 Authority Key Identifier: keyid:3E:48:2F:B3:C9:F9:AF:47:0E:4E:48:B6:DF:38:2D:3D:50:15:46:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pkgvs8n5r0cOTki23zgtPVAVRmE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:5c:8f:ff:4a:83:1d:94:ca:5f:19:07:bc:94:bc:d3:c6:68: b7:f6:d9:1c:51:10:ed:ad:cb:1b:67:c3:c7:8c:80:13:66:e4: 8f:3e:e8:65:ef:ad:c3:67:f4:88:9a:e9:3c:cb:9b:15:d0:d5: 6b:6a:ab:93:7b:1f:bf:2e:3b:81:a7:7c:c2:45:7e:91:bb:d1: f5:e2:3b:dc:f7:25:1e:b8:3d:c6:b8:ff:04:cc:5e:e9:b3:e3: a4:01:de:ee:8e:40:a6:8d:a5:85:27:4a:ed:f1:7a:12:8e:04: 9e:6d:09:c7:b8:7d:dc:73:f3:c1:e1:86:fb:c4:9d:f4:41:d0: e0:d0:f6:9a:09:73:7b:2d:98:71:b4:d8:76:e0:2f:99:97:44: 6a:00:72:8c:be:cc:46:24:3f:f2:7d:65:ae:64:df:fb:b2:5c: 47:2f:52:22:79:fd:fa:e5:1d:ff:f1:e7:b7:ca:e1:fd:81:2d: a4:fa:3e:d2:5d:49:86:6c:c4:c5:e1:6c:7e:d5:b1:76:8d:af: 15:bc:e1:a7:63:e0:af:9a:20:8c:55:d8:10:09:80:21:f7:7e: 4f:c9:05:ec:e6:eb:f2:ce:41:16:cf:ca:77:99:2e:79:7f:db: 01:b0:50:8a:8c:6e:bf:f8:6a:b2:78:67:2f:f3:e0:83:e2:a7: 3f:5a:af:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87Jq23VtEEn5cRfuVI88gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNDgyZmIzYzlmOWFmNDcwZTRlNDhiNmRmMzgyZDNkNTAx NTQ2NjEwHhcNMjUxMjIwMTgwMTM3WhcNMjUxMjIxMTgwMTM3WjAzMTEwLwYDVQQD EyhjZjJkMGNiZDhmY2IzNzAwODQzNDgxYjM1M2RlMjU4MTgwZWE1Njg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgJy+xBcuEULSlENpYEGbQTSMJ5U kEjO1BFNZOxxG7npS7tpYQsjrTJF24OVAUyWEXr3EKmaLnmd47SH9vzp6+p2b4sJ wcZkNhjlGNeGH0EIP2wE6as2KLgD7qqRUS95Gupz7M8dmuHOInurTaeZKhpoTe5g 6hTT5Sd9sMAyQLFtPyxtfaZsiTeWB5Fqu7nsheH4dwbvtcJnqpKyOfLupNwpE5h2 G+39pmRPW2wxJzCOKXgMZ88mV7D/RHdIgawxPBSbEqQgUDheq/TQCfFdXkBUTBq1 bWTHhgOm2MasBvfxhQDUlUxsUFGj/MPZussCPcUbMtHnfWs2bRFNnI2HpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM8tDL2PyzcAhDSBs1PeJYGA6laJMB8GA1UdIwQY MBaAFD5IL7PJ+a9HDk5Itt84LT1QFUZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGtndnM4bjVyMGNPVGtpMjN6Z3RQVkFWUm1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My81NDNiMTUtZmIxYi00NDVmLThhYTQt ZGI0ZDcxNDg1OWI1LzEvUGtndnM4bjVyMGNPVGtpMjN6Z3RQVkFWUm1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My81NDNiMTUtZmIxYi00NDVmLThhYTQtZGI0ZDcxNDg1OWI1 LzEvUGtndnM4bjVyMGNPVGtpMjN6Z3RQVkFWUm1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARVyP/0qD HZTKXxkHvJS808Zot/bZHFEQ7a3LG2fDx4yAE2bkjz7oZe+tw2f0iJrpPMubFdDV a2qrk3sfvy47gad8wkV+kbvR9eI73PclHrg9xrj/BMxe6bPjpAHe7o5Apo2lhSdK 7fF6Eo4Enm0Jx7h93HPzweGG+8Sd9EHQ4ND2mglzey2YcbTYduAvmZdEagByjL7M RiQ/8n1lrmTf+7JcRy9SInn9+uUd//Hnt8rh/YEtpPo+0l1JhmzExeFsftWxdo2v Fbzhp2Pgr5ogjFXYEAmAIfd+T8kF7Obr8s5BFs/Kd5kueX/bAbBQioxuv/hqsnhn L/Pgg+KnP1qvkA== -----END CERTIFICATE-----Generated at Sun Dec 21 04:22:22 2025 by rpki-client