This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft File: pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft (raw, json) Hash identifier: tnn755tn6hHbxT22mbuEFeE0AlPdt9f9kPseMOJrQQE= Subject key identifier: 22:AB:53:07:36:22:7B:79:D2:61:AB:C6:87:7A:2A:BB:0D:93:65:5C Authority key identifier: A4:F6:D6:57:C0:FA:21:82:8D:31:35:07:35:4D:EC:14:81:58:0E:D6 Certificate issuer: /CN=a4f6d657c0fa21828d313507354dec1481580ed6 Certificate serial: 019AF23FD6C9B67EA9720F0B29CA1257478B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft Manifest number: FC Signing time: Sat 06 Dec 2025 06:01:01 +0000 Manifest this update: Sat 06 Dec 2025 06:01:01 +0000 Manifest next update: Sun 07 Dec 2025 06:01:01 +0000 Files and hashes: 1: alAqnpdWmlZswzu0_tz6FMnDdhY.roa (hash: M7Rrc8n9kYkHNkPjYV4H2sgmRO3YC2Zds6sffNzRLow=) 2: nDjykDgCRY5PJeZrLhezjP3d1sg.roa (hash: f6z3v4pV6tnSGxv48rgOnvHwC9qgyyjVMA6AIzAEA7k=) 3: pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl (hash: uFFrSSjrwd3YJIeCVEVcUPiS9u49S+mnuhqwA2DhUpA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:d6:c9:b6:7e:a9:72:0f:0b:29:ca:12:57:47:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4f6d657c0fa21828d313507354dec1481580ed6 Validity Not Before: Dec 6 06:01:01 2025 GMT Not After : Dec 7 06:01:01 2025 GMT Subject: CN=22ab530736227b79d261abc6877a2abb0d93655c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8f:89:93:60:e1:57:02:f9:c1:b5:a3:ac:9c: ba:e8:dc:c6:8d:66:bf:a9:23:3d:94:c5:61:3e:68: a9:a4:80:31:dd:37:78:2a:65:a5:a8:6f:85:f5:d8: 0c:4e:cc:0b:c4:8e:96:22:5b:a8:5b:34:d4:35:e3: dd:9d:88:7f:3b:d1:d3:61:dd:0f:67:db:bc:b6:bf: 5a:4c:93:05:2f:94:de:e7:b9:c4:ba:96:18:65:40: cc:08:dc:1b:22:e9:9d:10:59:1d:84:af:31:8a:2c: ee:6d:28:8d:d3:e5:68:60:f5:76:f3:9a:f4:78:a4: 3f:50:9d:1a:bd:6f:96:6c:85:9c:ab:42:a4:56:04: 0e:61:71:e0:45:33:39:64:c4:44:74:62:cd:88:4e: a9:9e:b4:2d:cb:1c:a7:eb:38:88:d4:f2:cf:2f:0b: f3:8a:d0:48:d1:9b:37:60:ef:d3:1d:a0:d2:90:56: 56:a0:a0:15:ce:44:c8:d5:f7:07:ee:99:50:35:9a: 78:20:6f:9e:4f:ab:7f:51:e0:e3:69:fa:aa:a4:84: f0:97:37:32:17:4c:e2:20:71:78:54:64:bc:33:7b: 12:88:ee:88:c0:4c:56:e7:75:51:3b:e4:6e:0b:e8: 0c:e5:9e:b8:fd:79:e0:aa:8a:de:f2:a3:12:b7:99: 69:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:AB:53:07:36:22:7B:79:D2:61:AB:C6:87:7A:2A:BB:0D:93:65:5C X509v3 Authority Key Identifier: keyid:A4:F6:D6:57:C0:FA:21:82:8D:31:35:07:35:4D:EC:14:81:58:0E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:7f:37:57:b7:94:97:23:8d:e7:38:26:16:94:e7:78:c7:98: 1b:b8:85:a0:93:43:03:80:be:c4:d3:73:ee:c9:e2:e5:7f:ef: bb:bb:a5:be:20:ad:8c:bc:c6:c6:6f:df:43:47:e9:12:e2:60: 0c:0f:7a:a7:37:10:1f:c0:49:49:48:b4:20:29:a4:6a:f0:eb: b4:c7:60:95:4d:ef:21:79:97:f5:2b:93:f3:67:eb:83:94:3a: af:46:b1:f1:f9:f0:ca:48:4d:fe:4b:f8:74:52:f6:08:10:98: a2:ed:26:7c:6e:92:fc:ea:d6:39:db:40:bb:c5:19:e2:52:2f: 03:0a:09:00:e1:db:c7:e4:5e:71:af:6d:7d:17:b5:d7:36:c3: 15:8f:7d:44:ad:bc:1b:25:dc:2d:b7:28:28:46:2f:5c:df:22: 7c:b3:d6:13:3a:77:24:f2:6a:27:95:3d:74:4e:9a:f3:93:0c: 9c:ed:97:74:55:58:43:2f:aa:bd:7a:8b:fe:6e:33:b8:e3:1f: a5:10:f7:58:fa:40:aa:65:24:8b:d3:55:ff:85:9e:5d:bd:ba: 07:7b:8d:68:94:90:0f:38:92:a4:f5:55:41:5f:45:3e:3e:4a: d7:7e:f9:bc:47:8d:d4:ba:bb:79:1b:5c:ff:4c:66:54:5e:80: 0e:2c:75:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9bJtn6pcg8LKcoSV0eLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZjZkNjU3YzBmYTIxODI4ZDMxMzUwNzM1NGRlYzE0ODE1 ODBlZDYwHhcNMjUxMjA2MDYwMTAxWhcNMjUxMjA3MDYwMTAxWjAzMTEwLwYDVQQD EygyMmFiNTMwNzM2MjI3Yjc5ZDI2MWFiYzY4NzdhMmFiYjBkOTM2NTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwI+Jk2DhVwL5wbWjrJy66NzGjWa/ qSM9lMVhPmippIAx3Td4KmWlqG+F9dgMTswLxI6WIluoWzTUNePdnYh/O9HTYd0P Z9u8tr9aTJMFL5Te57nEupYYZUDMCNwbIumdEFkdhK8xiizubSiN0+VoYPV285r0 eKQ/UJ0avW+WbIWcq0KkVgQOYXHgRTM5ZMREdGLNiE6pnrQtyxyn6ziI1PLPLwvz itBI0Zs3YO/THaDSkFZWoKAVzkTI1fcH7plQNZp4IG+eT6t/UeDjafqqpITwlzcy F0ziIHF4VGS8M3sSiO6IwExW53VRO+RuC+gM5Z64/Xngqore8qMSt5lpNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCKrUwc2Int50mGrxod6KrsNk2VcMB8GA1UdIwQY MBaAFKT21lfA+iGCjTE1BzVN7BSBWA7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFBiV1Y4RDZJWUtOTVRVSE5VM3NGSUZZRHRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8yMzkzOTctMzQ3Ny00Mzc5LWFjNDYt NWMyNzYzNjQ4ZjFjLzEvcFBiV1Y4RDZJWUtOTVRVSE5VM3NGSUZZRHRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8yMzkzOTctMzQ3Ny00Mzc5LWFjNDYtNWMyNzYzNjQ4ZjFj LzEvcFBiV1Y4RDZJWUtOTVRVSE5VM3NGSUZZRHRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnn83V7eU lyON5zgmFpTneMeYG7iFoJNDA4C+xNNz7sni5X/vu7ulviCtjLzGxm/fQ0fpEuJg DA96pzcQH8BJSUi0ICmkavDrtMdglU3vIXmX9SuT82frg5Q6r0ax8fnwykhN/kv4 dFL2CBCYou0mfG6S/OrWOdtAu8UZ4lIvAwoJAOHbx+Reca9tfRe11zbDFY99RK28 GyXcLbcoKEYvXN8ifLPWEzp3JPJqJ5U9dE6a85MMnO2XdFVYQy+qvXqL/m4zuOMf pRD3WPpAqmUki9NV/4WeXb26B3uNaJSQDziSpPVVQV9FPj5K1375vEeN1Lq7eRtc /0xmVF6ADix1Fw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:24:35 2025 by rpki-client