This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft File: pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft (raw, json) Hash identifier: pShETExPNsrelC/xKAJ2MkZELlv7w9Bx7OeiplxVEYk= Subject key identifier: 2A:45:93:79:C9:4F:7B:C6:E3:65:C1:22:D5:F9:B3:1E:D7:0B:51:D2 Authority key identifier: A5:C2:28:64:E3:92:0E:16:0A:D9:B8:4F:F0:1D:A8:66:AA:40:97:85 Certificate issuer: /CN=a5c22864e3920e160ad9b84ff01da866aa409785 Certificate serial: 019AF208D03117CEFCBB897B7D789D5EE5E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft Manifest number: 0635 Signing time: Sat 06 Dec 2025 05:00:55 +0000 Manifest this update: Sat 06 Dec 2025 05:00:55 +0000 Manifest next update: Sun 07 Dec 2025 05:00:55 +0000 Files and hashes: 1: pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl (hash: hpPHzrHkiwVbgk92zfqfZ7jjSPrae6Dt9JXpBEEi+ys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:d0:31:17:ce:fc:bb:89:7b:7d:78:9d:5e:e5:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5c22864e3920e160ad9b84ff01da866aa409785 Validity Not Before: Dec 6 05:00:55 2025 GMT Not After : Dec 7 05:00:55 2025 GMT Subject: CN=2a459379c94f7bc6e365c122d5f9b31ed70b51d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:23:9f:b1:97:1b:a5:d8:67:76:e0:71:01:b6: 79:12:25:a0:80:92:8f:b2:41:af:9c:9e:1d:b2:c7: 4a:c2:21:45:5d:d2:37:12:07:bb:16:41:90:f6:95: 0e:49:f6:db:75:a8:d9:7f:19:20:e0:39:87:b7:e8: 7d:70:2a:93:40:b1:93:46:84:57:45:ba:a3:e7:26: 00:d9:93:4d:9f:44:b2:85:18:5f:13:a1:58:6b:76: 39:de:b3:41:14:95:c5:bd:19:16:9c:5b:5b:31:f4: 61:de:58:c9:d6:97:60:c5:0f:d3:dc:6c:e4:17:49: e6:48:e3:28:dc:5f:48:2e:62:80:ae:02:cf:0f:a8: b8:82:ad:ce:72:b2:ba:ce:d4:2c:e0:b8:da:96:da: cf:6f:14:bd:a0:d9:49:50:22:f1:02:01:99:7f:9c: bb:b7:ae:d1:fd:b6:ca:fa:66:6e:4f:92:d6:35:76: 0d:ae:75:3e:4a:c5:3e:48:26:42:fa:d3:0d:9b:80: 7d:02:5a:db:ab:90:f1:b1:2b:94:c0:3e:9c:4c:40: dd:08:f1:5a:2d:d0:74:ea:42:7b:56:81:7d:4f:45: aa:ad:35:3a:d3:0d:28:8d:2d:fe:82:04:9c:76:94: cc:30:ea:72:7b:3c:a7:1e:e1:2a:a8:1b:e4:74:f4: e7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:45:93:79:C9:4F:7B:C6:E3:65:C1:22:D5:F9:B3:1E:D7:0B:51:D2 X509v3 Authority Key Identifier: keyid:A5:C2:28:64:E3:92:0E:16:0A:D9:B8:4F:F0:1D:A8:66:AA:40:97:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:32:ed:67:15:f9:5e:0e:8d:48:f6:ee:2a:73:25:e2:96:67: 69:d0:3b:87:80:1e:0b:79:23:43:c7:48:fd:9d:25:23:74:eb: 07:2f:85:92:68:08:ac:f0:3c:a0:2b:e0:82:08:44:f9:15:1d: a2:c4:01:84:1a:a7:86:29:5d:e7:ca:79:06:05:0f:15:29:07: 63:9d:40:3d:0b:7c:4d:d4:dd:87:86:23:90:cf:ba:de:9d:8e: fa:8b:17:27:d5:67:5b:02:69:11:62:1d:18:9a:77:61:82:12: d9:85:97:65:b1:44:49:04:a2:b9:71:56:47:c9:13:6e:83:41: f6:3a:78:42:34:66:5d:0a:5d:0c:b1:f6:7b:8f:0b:f5:ae:50: 26:88:c4:db:5f:0d:22:3f:16:28:0b:54:7a:fa:f2:2d:d5:49: 21:b3:71:a6:92:2e:02:a1:f6:2a:29:9e:29:a2:d6:8f:9f:22: 4b:81:32:e2:9e:09:47:15:5b:bc:59:0c:0d:b8:ed:7e:b9:60: 85:00:71:01:a2:1d:f0:b4:61:44:6b:9b:68:aa:a3:d8:b7:95: 9e:b4:80:11:20:2a:d8:4c:76:37:34:58:2c:02:6c:58:ee:da: 5c:00:1a:4b:31:2c:43:ab:c9:99:ad:e3:a0:a4:94:17:01:cf: 69:8d:b0:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNAxF878u4l7fXidXuXmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YzIyODY0ZTM5MjBlMTYwYWQ5Yjg0ZmYwMWRhODY2YWE0 MDk3ODUwHhcNMjUxMjA2MDUwMDU1WhcNMjUxMjA3MDUwMDU1WjAzMTEwLwYDVQQD EygyYTQ1OTM3OWM5NGY3YmM2ZTM2NWMxMjJkNWY5YjMxZWQ3MGI1MWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyOfsZcbpdhnduBxAbZ5EiWggJKP skGvnJ4dssdKwiFFXdI3Ege7FkGQ9pUOSfbbdajZfxkg4DmHt+h9cCqTQLGTRoRX Rbqj5yYA2ZNNn0SyhRhfE6FYa3Y53rNBFJXFvRkWnFtbMfRh3ljJ1pdgxQ/T3Gzk F0nmSOMo3F9ILmKArgLPD6i4gq3OcrK6ztQs4LjaltrPbxS9oNlJUCLxAgGZf5y7 t67R/bbK+mZuT5LWNXYNrnU+SsU+SCZC+tMNm4B9Alrbq5DxsSuUwD6cTEDdCPFa LdB06kJ7VoF9T0WqrTU60w0ojS3+ggScdpTMMOpyezynHuEqqBvkdPTn9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCpFk3nJT3vG42XBItX5sx7XC1HSMB8GA1UdIwQY MBaAFKXCKGTjkg4WCtm4T/AdqGaqQJeFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGNJb1pPT1NEaFlLMmJoUDhCMm9acXBBbDRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9hZDk4NGEtOTlhYy00MTNhLWJkZGUt NTRjODg5MGRmZjJkLzEvcGNJb1pPT1NEaFlLMmJoUDhCMm9acXBBbDRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9hZDk4NGEtOTlhYy00MTNhLWJkZGUtNTRjODg5MGRmZjJk LzEvcGNJb1pPT1NEaFlLMmJoUDhCMm9acXBBbDRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIzLtZxX5 Xg6NSPbuKnMl4pZnadA7h4AeC3kjQ8dI/Z0lI3TrBy+FkmgIrPA8oCvggghE+RUd osQBhBqnhild58p5BgUPFSkHY51APQt8TdTdh4YjkM+63p2O+osXJ9VnWwJpEWId GJp3YYIS2YWXZbFESQSiuXFWR8kTboNB9jp4QjRmXQpdDLH2e48L9a5QJojE218N Ij8WKAtUevryLdVJIbNxppIuAqH2KimeKaLWj58iS4Ey4p4JRxVbvFkMDbjtfrlg hQBxAaId8LRhRGubaKqj2LeVnrSAESAq2Ex2NzRYLAJsWO7aXAAaSzEsQ6vJma3j oKSUFwHPaY2wXQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:20:08 2025 by rpki-client