This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft File: pkDHUev7SAfYRiLoBss9C53YEGk.mft (raw, json) Hash identifier: FxSFcHFNJntV25aa4yIsq6qRIBT9t+zFUFQEvjP13Bc= Subject key identifier: 6A:DB:11:1E:26:CB:1D:BA:B8:16:B1:56:E4:CF:FA:14:E4:6C:35:11 Authority key identifier: A6:40:C7:51:EB:FB:48:07:D8:46:22:E8:06:CB:3D:0B:9D:D8:10:69 Certificate issuer: /CN=a640c751ebfb4807d84622e806cb3d0b9dd81069 Certificate serial: 019B2D0ACA1CBD01F199719E82D26F261E1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft Manifest number: 1782 Signing time: Wed 17 Dec 2025 16:00:40 +0000 Manifest this update: Wed 17 Dec 2025 16:00:40 +0000 Manifest next update: Thu 18 Dec 2025 16:00:40 +0000 Files and hashes: 1: CqoX7DJIz6T-m3NHJ01LCtyGJFE.roa (hash: 32gG2ZUMfd1jjxqZY90ktdKNZmqWxjZXungJm+FeL3s=) 2: ZCRNSq91ZKzRcSK6x3pKdZV_4Rw.roa (hash: SLb/dN4BABY7//UWc03uIXxQcoqVDd7HnpJMkhWH2bA=) 3: pkDHUev7SAfYRiLoBss9C53YEGk.crl (hash: f3R9gJgB/8EJIA2ruviqAi2opROGASn3bsVV5CEh7cA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 16:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0a:ca:1c:bd:01:f1:99:71:9e:82:d2:6f:26:1e:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a640c751ebfb4807d84622e806cb3d0b9dd81069 Validity Not Before: Dec 17 16:00:40 2025 GMT Not After : Dec 18 16:00:40 2025 GMT Subject: CN=6adb111e26cb1dbab816b156e4cffa14e46c3511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:78:7a:8f:83:7a:80:35:ca:00:f3:4f:4a:f5: 0b:aa:77:63:a3:5c:36:4e:d3:71:21:97:b4:90:ad: d0:da:88:0c:cb:37:73:5e:f4:c0:c3:79:0b:89:af: 77:6d:81:35:38:08:b2:2a:94:5f:12:97:ff:30:81: 7e:c5:56:75:d9:49:23:8a:61:d5:d5:47:f1:d5:88: e6:08:81:24:b5:01:b3:d0:45:74:7e:8b:54:a2:2c: 81:2d:0a:3b:53:49:ab:ac:c3:70:2c:18:45:19:e7: ba:55:d7:2d:32:fd:af:cf:82:4c:e1:2f:51:74:99: ae:ed:1a:ea:f6:fe:2a:d8:fd:ee:c8:df:bd:da:2b: 65:80:bd:d6:0d:53:d7:c2:96:06:94:ca:c1:87:f2: 92:88:fa:64:da:d0:5f:8d:19:3a:4d:b9:9c:31:14: 71:4f:c7:a9:34:72:78:6b:b2:3d:11:38:da:e3:e9: aa:07:99:3d:d2:fb:6d:f4:59:6d:6a:d5:4f:a1:bc: 7e:5d:12:d4:ad:63:41:16:3a:d7:dd:ef:62:e1:aa: 86:99:9d:8c:ef:56:60:72:06:06:c7:4b:de:97:ad: 40:1c:f3:e6:2b:e6:61:8e:8f:4d:65:75:3a:1c:36: 88:75:f9:1d:cf:0c:a5:04:85:06:e3:10:6f:7e:32: 43:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:DB:11:1E:26:CB:1D:BA:B8:16:B1:56:E4:CF:FA:14:E4:6C:35:11 X509v3 Authority Key Identifier: keyid:A6:40:C7:51:EB:FB:48:07:D8:46:22:E8:06:CB:3D:0B:9D:D8:10:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:85:bd:32:bd:e8:06:6d:4e:5c:ff:dd:ba:dc:b8:ec:e3:14: f7:33:c6:a6:ea:ec:95:6e:7d:e4:6c:c2:c5:83:77:1e:e1:65: de:4c:ba:4e:6d:c6:15:32:32:4e:46:a2:1b:89:df:73:ce:a0: 29:b2:79:25:30:c3:2b:46:b2:3d:78:0a:22:7a:47:97:a7:15: cc:87:8c:ca:2c:be:95:4d:a3:ce:30:57:5d:bd:c1:58:f5:ef: 00:8c:5f:cf:be:7a:e5:ae:f3:3c:77:85:2c:77:8a:69:05:90: b3:fd:36:48:c4:a8:3c:02:99:8c:80:79:de:c3:1c:49:c3:7e: 92:1b:3e:d4:2d:bd:13:a0:fd:e6:80:e0:cf:25:af:76:00:0b: dd:3e:74:86:af:29:97:07:dd:21:94:1f:a9:ca:9b:00:9e:6c: 23:a2:22:07:7e:58:0f:8d:5d:83:49:1b:88:08:fb:aa:5e:9e: dc:cf:d2:67:07:1d:35:17:51:0a:f6:3d:31:30:9c:02:0a:7b: 61:37:41:4c:7b:f6:e2:99:e5:ca:bb:4c:15:36:0c:1f:55:aa: 5c:9f:ad:df:5a:de:e9:4a:b9:0d:57:68:0b:b7:dd:5a:8b:72: f4:64:ab:2f:32:14:54:ba:b4:1c:0d:71:ab:48:6e:da:e5:50: 5d:d9:74:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstCsocvQHxmXGegtJvJh4fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NDBjNzUxZWJmYjQ4MDdkODQ2MjJlODA2Y2IzZDBiOWRk ODEwNjkwHhcNMjUxMjE3MTYwMDQwWhcNMjUxMjE4MTYwMDQwWjAzMTEwLwYDVQQD Eyg2YWRiMTExZTI2Y2IxZGJhYjgxNmIxNTZlNGNmZmExNGU0NmMzNTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3h6j4N6gDXKAPNPSvULqndjo1w2 TtNxIZe0kK3Q2ogMyzdzXvTAw3kLia93bYE1OAiyKpRfEpf/MIF+xVZ12UkjimHV 1Ufx1YjmCIEktQGz0EV0fotUoiyBLQo7U0mrrMNwLBhFGee6VdctMv2vz4JM4S9R dJmu7Rrq9v4q2P3uyN+92itlgL3WDVPXwpYGlMrBh/KSiPpk2tBfjRk6TbmcMRRx T8epNHJ4a7I9ETja4+mqB5k90vtt9FltatVPobx+XRLUrWNBFjrX3e9i4aqGmZ2M 71ZgcgYGx0vel61AHPPmK+Zhjo9NZXU6HDaIdfkdzwylBIUG4xBvfjJDVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGrbER4myx26uBaxVuTP+hTkbDURMB8GA1UdIwQY MBaAFKZAx1Hr+0gH2EYi6AbLPQud2BBpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGtESFVldjdTQWZZUmlMb0JzczlDNTNZRUdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC84YTVhMmUtNGQzMy00YTJjLWFkZjMt MDI2YjhjZjY5MWJhLzEvcGtESFVldjdTQWZZUmlMb0JzczlDNTNZRUdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC84YTVhMmUtNGQzMy00YTJjLWFkZjMtMDI2YjhjZjY5MWJh LzEvcGtESFVldjdTQWZZUmlMb0JzczlDNTNZRUdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnIW9Mr3o Bm1OXP/duty47OMU9zPGpurslW595GzCxYN3HuFl3ky6Tm3GFTIyTkaiG4nfc86g KbJ5JTDDK0ayPXgKInpHl6cVzIeMyiy+lU2jzjBXXb3BWPXvAIxfz7565a7zPHeF LHeKaQWQs/02SMSoPAKZjIB53sMcScN+khs+1C29E6D95oDgzyWvdgAL3T50hq8p lwfdIZQfqcqbAJ5sI6IiB35YD41dg0kbiAj7ql6e3M/SZwcdNRdRCvY9MTCcAgp7 YTdBTHv24pnlyrtMFTYMH1WqXJ+t31re6Uq5DVdoC7fdWoty9GSrLzIUVLq0HA1x q0hu2uVQXdl0yA== -----END CERTIFICATE-----Generated at Wed Dec 17 23:27:46 2025 by rpki-client