This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.mft File: pKgNKvhhtwo37AUOAT5t-6lMiz0.mft (raw, json) Hash identifier: jNqmKj8J7feRRrfU9THr86MNwQvlWY9oSB4etLGtdX4= Subject key identifier: 21:D1:E2:24:DD:75:13:6A:E1:A0:77:6F:A9:6D:BB:1B:30:C9:76:3F Authority key identifier: A4:A8:0D:2A:F8:61:B7:0A:37:EC:05:0E:01:3E:6D:FB:A9:4C:8B:3D Certificate issuer: /CN=a4a80d2af861b70a37ec050e013e6dfba94c8b3d Certificate serial: 019AF12D92E83746048F14F30DF854A3246A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKgNKvhhtwo37AUOAT5t-6lMiz0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.mft Manifest number: 1005 Signing time: Sat 06 Dec 2025 01:01:27 +0000 Manifest this update: Sat 06 Dec 2025 01:01:27 +0000 Manifest next update: Sun 07 Dec 2025 01:01:27 +0000 Files and hashes: 1: pKgNKvhhtwo37AUOAT5t-6lMiz0.crl (hash: qitMRHBhxuOlzFGUhwYiyMjakAoS1JOq5MfIYiCQ0LA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.mft rsync://rpki.ripe.net/repository/DEFAULT/pKgNKvhhtwo37AUOAT5t-6lMiz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:92:e8:37:46:04:8f:14:f3:0d:f8:54:a3:24:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4a80d2af861b70a37ec050e013e6dfba94c8b3d Validity Not Before: Dec 6 01:01:27 2025 GMT Not After : Dec 7 01:01:27 2025 GMT Subject: CN=21d1e224dd75136ae1a0776fa96dbb1b30c9763f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:51:d2:1e:2d:56:2f:7f:5e:fd:7b:03:d3:1c: c9:b8:d2:03:82:8a:4a:03:84:9e:ba:98:c2:32:89: c1:5d:05:51:2e:c8:8c:e4:5e:d8:35:ef:bc:65:a0: b6:7b:3c:ac:ae:3e:57:86:e2:01:c9:45:c2:28:97: 63:d1:88:11:1d:7c:ed:ad:58:ab:a8:4c:bd:31:b3: 3d:6a:a1:2c:45:b2:65:d6:03:dd:52:c3:e2:35:43: ac:26:80:f3:51:da:a0:8a:b3:2c:0c:f4:94:b2:77: 45:4d:70:60:e0:7d:5d:46:11:d7:83:07:3e:bc:73: a7:74:25:bd:57:e6:7a:be:d5:94:31:c6:55:9e:c7: 3f:8a:7c:59:1f:63:e2:90:6f:aa:06:b8:9b:9f:e8: ad:75:18:ea:5a:04:69:83:74:1b:3b:b7:57:57:5f: f6:2b:95:db:43:df:da:bb:23:1f:04:31:01:99:cc: db:b2:5b:78:b6:f5:fd:8e:51:1d:5d:b0:ff:37:81: e2:a7:a1:1f:ef:e5:a8:da:bd:78:36:f3:0e:45:99: 1a:1f:75:fb:39:58:dc:d6:cf:4e:cc:6e:77:24:69: 93:80:14:f5:a8:b0:3e:65:46:de:05:2b:b2:c1:01: 26:f3:5c:1d:10:01:f6:9b:ed:96:d2:16:61:78:8b: 47:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:D1:E2:24:DD:75:13:6A:E1:A0:77:6F:A9:6D:BB:1B:30:C9:76:3F X509v3 Authority Key Identifier: keyid:A4:A8:0D:2A:F8:61:B7:0A:37:EC:05:0E:01:3E:6D:FB:A9:4C:8B:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKgNKvhhtwo37AUOAT5t-6lMiz0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:62:5b:0a:4f:69:9a:b7:f6:19:26:15:20:ef:93:f2:7d:5d: 50:eb:94:74:2f:92:89:21:8f:e1:55:5c:67:4e:39:f2:93:19: 50:ab:7d:7c:f5:a8:7b:e2:88:ac:6c:2b:c4:02:1d:e9:6f:ff: 69:32:cd:7b:ee:c7:e6:9c:02:e6:3d:3f:56:a8:54:a0:5e:35: 7e:9b:ab:5d:bc:e1:74:e2:b2:8a:72:01:f9:e6:c8:ce:8d:b2: 06:05:2b:75:1e:5f:7b:d1:34:6d:eb:dc:90:23:a7:6e:6e:e0: ab:d5:42:ef:bf:ef:be:8a:8f:10:ce:c0:3a:52:00:8c:00:49: 2a:aa:f3:8b:32:00:95:0f:8d:3f:4a:71:62:93:09:5d:95:26: e9:58:3e:74:88:8a:6a:52:b1:02:54:08:49:9e:95:54:b0:14: 41:af:cb:7e:30:e0:ef:11:b7:63:6f:58:24:06:48:90:39:fb: 5f:46:d2:07:b3:5c:42:69:77:26:f6:fb:be:df:8b:4e:f9:a7: 21:0a:54:38:65:f8:4f:30:80:7f:93:b0:b0:56:49:7c:df:1a: 80:d8:bf:72:a9:8e:9d:d6:2c:75:85:4a:61:1b:a2:1c:ab:8e: d6:38:6c:c6:26:aa:51:ef:40:c4:a1:65:d4:d6:15:bd:7b:0c: e5:d1:00:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLZLoN0YEjxTzDfhUoyRqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YTgwZDJhZjg2MWI3MGEzN2VjMDUwZTAxM2U2ZGZiYTk0 YzhiM2QwHhcNMjUxMjA2MDEwMTI3WhcNMjUxMjA3MDEwMTI3WjAzMTEwLwYDVQQD EygyMWQxZTIyNGRkNzUxMzZhZTFhMDc3NmZhOTZkYmIxYjMwYzk3NjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1HSHi1WL39e/XsD0xzJuNIDgopK A4SeupjCMonBXQVRLsiM5F7YNe+8ZaC2ezysrj5XhuIByUXCKJdj0YgRHXztrVir qEy9MbM9aqEsRbJl1gPdUsPiNUOsJoDzUdqgirMsDPSUsndFTXBg4H1dRhHXgwc+ vHOndCW9V+Z6vtWUMcZVnsc/inxZH2PikG+qBribn+itdRjqWgRpg3QbO7dXV1/2 K5XbQ9/auyMfBDEBmczbslt4tvX9jlEdXbD/N4Hip6Ef7+Wo2r14NvMORZkaH3X7 OVjc1s9OzG53JGmTgBT1qLA+ZUbeBSuywQEm81wdEAH2m+2W0hZheItH0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCHR4iTddRNq4aB3b6ltuxswyXY/MB8GA1UdIwQY MBaAFKSoDSr4YbcKN+wFDgE+bfupTIs9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEtnTkt2aGh0d28zN0FVT0FUNXQtNmxNaXowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9lYzYyMjUtZDZhNy00MThhLWIwMmYt NjIzNGVhMDllMTg2LzEvcEtnTkt2aGh0d28zN0FVT0FUNXQtNmxNaXowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9lYzYyMjUtZDZhNy00MThhLWIwMmYtNjIzNGVhMDllMTg2 LzEvcEtnTkt2aGh0d28zN0FVT0FUNXQtNmxNaXowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbmJbCk9p mrf2GSYVIO+T8n1dUOuUdC+SiSGP4VVcZ0458pMZUKt9fPWoe+KIrGwrxAId6W// aTLNe+7H5pwC5j0/VqhUoF41fpurXbzhdOKyinIB+ebIzo2yBgUrdR5fe9E0bevc kCOnbm7gq9VC77/vvoqPEM7AOlIAjABJKqrzizIAlQ+NP0pxYpMJXZUm6Vg+dIiK alKxAlQISZ6VVLAUQa/LfjDg7xG3Y29YJAZIkDn7X0bSB7NcQml3Jvb7vt+LTvmn IQpUOGX4TzCAf5OwsFZJfN8agNi/cqmOndYsdYVKYRuiHKuO1jhsxiaqUe9AxKFl 1NYVvXsM5dEALg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:12 2025 by rpki-client