This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.mft File: pCNxKB3-GQctEzndBIKyqvrVQs4.mft (raw, json) Hash identifier: Wqfha8c0ChnhfdEH30RyBMbXRcBdI8HkbjX/TlUvmhk= Subject key identifier: 90:4F:D3:92:BF:1B:23:74:BA:50:92:5C:25:14:E1:2A:B6:29:FC:C5 Authority key identifier: A4:23:71:28:1D:FE:19:07:2D:13:39:DD:04:82:B2:AA:FA:D5:42:CE Certificate issuer: /CN=a42371281dfe19072d1339dd0482b2aafad542ce Certificate serial: 019AF50AA5A97179913ED4288BE9F5D3091F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCNxKB3-GQctEzndBIKyqvrVQs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.mft Manifest number: 0A3D Signing time: Sat 06 Dec 2025 19:01:46 +0000 Manifest this update: Sat 06 Dec 2025 19:01:46 +0000 Manifest next update: Sun 07 Dec 2025 19:01:46 +0000 Files and hashes: 1: pCNxKB3-GQctEzndBIKyqvrVQs4.crl (hash: s3CZpq+cn5ipv7haRQ9BF8XAtYnpFRojRsTZ9ZRticA=) 2: rWk5sIUEQt5GM5tD9jvlVGxlmoc.roa (hash: bdSHmybqlxfqe2LDlmT/vhR2hatifsBsFgj+STLVUXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.crl rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.mft rsync://rpki.ripe.net/repository/DEFAULT/pCNxKB3-GQctEzndBIKyqvrVQs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:a5:a9:71:79:91:3e:d4:28:8b:e9:f5:d3:09:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a42371281dfe19072d1339dd0482b2aafad542ce Validity Not Before: Dec 6 19:01:46 2025 GMT Not After : Dec 7 19:01:46 2025 GMT Subject: CN=904fd392bf1b2374ba50925c2514e12ab629fcc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f3:5c:b1:8e:e3:27:3a:c6:c0:29:42:ae:50: 6d:e1:87:e0:2f:c1:7b:11:42:fb:b8:19:21:53:cc: da:a9:00:b8:00:7c:56:81:05:bf:9b:02:85:5f:fa: c1:8a:a5:04:11:ab:fa:f9:f6:32:09:2c:72:9c:db: a8:0b:76:4c:a8:53:1b:df:08:36:e1:62:c0:82:c4: 0b:a7:9e:f4:5a:41:5f:29:ad:fb:09:26:1c:47:07: 6f:e8:1b:1d:b6:e0:ed:1d:eb:bd:38:8c:84:03:93: 88:50:fd:3a:95:bc:9f:ab:b6:6f:be:6e:92:50:82: ac:6c:94:25:f5:07:b5:5c:77:fe:aa:8d:e8:4c:de: a3:77:78:2d:ec:00:9b:82:df:b6:17:eb:b7:0e:b9: 68:cc:d9:63:da:67:5f:5d:9e:42:12:37:3a:74:0e: 0c:d6:f5:d1:73:76:87:1d:a2:dd:95:cc:66:9d:06: d1:63:e2:9e:86:aa:97:6e:b8:eb:53:e5:f5:88:f0: 05:ac:82:e8:6d:37:4c:33:ba:02:b3:ab:60:cf:0c: f9:4e:17:b6:54:14:9e:bb:18:bf:8d:3f:52:ef:cd: b7:9e:76:f7:0d:d2:71:18:90:67:f2:31:fc:45:82: f3:a4:15:92:f2:98:d5:af:51:bd:b0:1d:a8:7c:d1: 11:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:4F:D3:92:BF:1B:23:74:BA:50:92:5C:25:14:E1:2A:B6:29:FC:C5 X509v3 Authority Key Identifier: keyid:A4:23:71:28:1D:FE:19:07:2D:13:39:DD:04:82:B2:AA:FA:D5:42:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCNxKB3-GQctEzndBIKyqvrVQs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:09:8c:7e:d9:6e:57:94:8a:9a:db:5f:9f:80:94:58:50:ed: 13:64:82:3d:c2:48:1f:0f:1d:dc:a8:ba:25:0c:51:cf:86:44: 1f:bc:59:13:2b:d0:a3:91:3f:b6:85:99:e0:dc:23:e2:a6:13: be:d2:f0:82:01:b6:f6:56:e4:8d:c1:25:0a:bb:f6:83:bb:91: 5e:ba:8b:25:59:ee:f6:0a:b4:52:3d:8b:32:f8:08:12:65:4c: a8:35:06:33:56:88:0e:35:14:35:f3:aa:87:3e:65:2a:ab:b6: d4:05:b2:d3:7a:ea:a0:31:82:fa:df:06:a8:7c:d4:c7:42:0c: a9:2e:49:8c:f4:09:e4:da:cc:31:57:ce:9a:46:f2:3f:59:c4: ec:15:94:b8:62:69:1d:af:92:f1:f2:50:76:f5:0d:ad:c0:01: ca:5c:15:c7:9b:e1:18:50:5e:86:88:76:35:eb:f5:b0:77:b7: 3e:b8:dc:e5:59:22:13:64:cc:74:6e:5c:74:dd:75:6b:d8:ab: 28:f4:cb:e1:44:d3:58:97:bd:6b:c8:69:48:93:e3:4c:e2:04: a0:bb:b7:56:bd:b6:54:f8:e3:d0:61:9a:cf:f5:2c:6a:79:91: e5:b3:47:3c:2b:55:2a:41:c7:c3:e8:c5:23:08:e6:09:4a:da: 04:94:6d:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CqWpcXmRPtQoi+n10wkfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MjM3MTI4MWRmZTE5MDcyZDEzMzlkZDA0ODJiMmFhZmFk NTQyY2UwHhcNMjUxMjA2MTkwMTQ2WhcNMjUxMjA3MTkwMTQ2WjAzMTEwLwYDVQQD Eyg5MDRmZDM5MmJmMWIyMzc0YmE1MDkyNWMyNTE0ZTEyYWI2MjlmY2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/NcsY7jJzrGwClCrlBt4YfgL8F7 EUL7uBkhU8zaqQC4AHxWgQW/mwKFX/rBiqUEEav6+fYyCSxynNuoC3ZMqFMb3wg2 4WLAgsQLp570WkFfKa37CSYcRwdv6BsdtuDtHeu9OIyEA5OIUP06lbyfq7Zvvm6S UIKsbJQl9Qe1XHf+qo3oTN6jd3gt7ACbgt+2F+u3DrlozNlj2mdfXZ5CEjc6dA4M 1vXRc3aHHaLdlcxmnQbRY+KehqqXbrjrU+X1iPAFrILobTdMM7oCs6tgzwz5The2 VBSeuxi/jT9S7823nnb3DdJxGJBn8jH8RYLzpBWS8pjVr1G9sB2ofNERnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJBP05K/GyN0ulCSXCUU4Sq2KfzFMB8GA1UdIwQY MBaAFKQjcSgd/hkHLRM53QSCsqr61ULOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcENOeEtCMy1HUWN0RXpuZEJJS3lxdnJWUXM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9hNDNhMDUtNjAzZi00NjA3LWJjNjgt OTkwNjBlMjQ1OGVjLzEvcENOeEtCMy1HUWN0RXpuZEJJS3lxdnJWUXM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9hNDNhMDUtNjAzZi00NjA3LWJjNjgtOTkwNjBlMjQ1OGVj LzEvcENOeEtCMy1HUWN0RXpuZEJJS3lxdnJWUXM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsgmMftlu V5SKmttfn4CUWFDtE2SCPcJIHw8d3Ki6JQxRz4ZEH7xZEyvQo5E/toWZ4Nwj4qYT vtLwggG29lbkjcElCrv2g7uRXrqLJVnu9gq0Uj2LMvgIEmVMqDUGM1aIDjUUNfOq hz5lKqu21AWy03rqoDGC+t8GqHzUx0IMqS5JjPQJ5NrMMVfOmkbyP1nE7BWUuGJp Ha+S8fJQdvUNrcABylwVx5vhGFBehoh2Nev1sHe3Prjc5VkiE2TMdG5cdN11a9ir KPTL4UTTWJe9a8hpSJPjTOIEoLu3Vr22VPjj0GGaz/UsanmR5bNHPCtVKkHHw+jF IwjmCUraBJRtNw== -----END CERTIFICATE-----Generated at Sun Dec 7 04:14:21 2025 by rpki-client