This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft File: PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft (raw, json) Hash identifier: AXnDEBs9AegWEAoTE9bgTXhHURJT1YStT4CN+9Ni/7w= Subject key identifier: 10:C2:C3:06:9E:76:4B:70:4B:57:DD:67:92:22:8B:20:A6:1E:5A:80 Authority key identifier: 3E:AB:E0:28:F3:BE:7E:E0:72:88:5D:02:BB:D7:B6:2A:65:24:25:EF Certificate issuer: /CN=3eabe028f3be7ee072885d02bbd7b62a652425ef Certificate serial: 019AF164115C06CC886A3855C276B2F6B786 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqvgKPO-fuByiF0Cu9e2KmUkJe8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft Manifest number: 0D73 Signing time: Sat 06 Dec 2025 02:00:58 +0000 Manifest this update: Sat 06 Dec 2025 02:00:58 +0000 Manifest next update: Sun 07 Dec 2025 02:00:58 +0000 Files and hashes: 1: PqvgKPO-fuByiF0Cu9e2KmUkJe8.crl (hash: rE0zirtbmBgBAmZN++xluI0XfLj1Z2naSYhdqdaXEV0=) 2: dJvnPDYPLo4Sslu_Zmnf2lx_js4.roa (hash: 5Msv4aPMo6ReE0YmQsW6vQo0j0v5HFcFjEhrex1AtOU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft rsync://rpki.ripe.net/repository/DEFAULT/PqvgKPO-fuByiF0Cu9e2KmUkJe8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:11:5c:06:cc:88:6a:38:55:c2:76:b2:f6:b7:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eabe028f3be7ee072885d02bbd7b62a652425ef Validity Not Before: Dec 6 02:00:58 2025 GMT Not After : Dec 7 02:00:58 2025 GMT Subject: CN=10c2c3069e764b704b57dd6792228b20a61e5a80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2c:c3:53:b3:e2:2e:79:83:1a:f0:95:99:44: d0:84:5f:de:d1:c5:03:06:3f:24:76:e7:67:e8:0e: d5:fb:b9:4b:2a:92:5e:7b:9b:43:7f:94:fc:49:a8: 8d:16:e1:46:0f:fe:dd:d5:c0:d5:09:82:c0:c9:f7: 24:ab:27:af:5d:5c:00:74:3b:4b:29:60:dc:b3:32: 9c:04:7e:2c:24:71:17:c9:cd:f8:79:84:ac:57:35: 86:87:81:35:ce:be:52:f9:a3:74:69:f9:79:b7:c4: b0:b8:4e:bd:ba:d5:59:95:66:7e:f2:91:3c:88:66: e1:e7:af:f1:95:ae:79:c7:95:a9:e0:82:69:5c:a2: 63:5c:ba:72:8a:26:75:d9:a7:89:a5:26:77:b2:6f: e4:ca:d5:49:78:6a:68:e3:aa:b3:5e:64:ab:e3:78: af:4a:01:9d:b6:49:70:ec:3f:89:28:36:75:22:8a: df:c8:11:b7:f7:4f:e6:8c:70:0a:dc:c3:a1:7c:48: ae:7f:90:d8:ab:48:6a:4e:0f:0a:14:80:85:73:8f: bb:ea:a1:aa:90:60:35:d4:3b:56:d3:fa:6d:ad:41: 97:b3:35:80:f5:ab:d1:7f:31:e5:db:6e:56:34:36: 8a:94:e9:b6:ce:f7:25:39:89:71:58:6c:b2:f2:17: d8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C2:C3:06:9E:76:4B:70:4B:57:DD:67:92:22:8B:20:A6:1E:5A:80 X509v3 Authority Key Identifier: keyid:3E:AB:E0:28:F3:BE:7E:E0:72:88:5D:02:BB:D7:B6:2A:65:24:25:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqvgKPO-fuByiF0Cu9e2KmUkJe8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:ea:5b:53:bd:8b:99:76:a2:96:c7:50:b2:22:62:91:f8:58: 72:9f:b8:0c:16:2c:de:eb:2e:4c:90:2c:80:72:23:f3:dd:fb: ea:21:da:6d:2a:64:6d:92:2c:59:ee:e3:8e:91:69:6a:30:91: 69:fe:b9:fc:13:83:6c:3a:08:0d:ad:22:89:2d:17:e3:2f:d7: f7:4a:43:c6:63:bb:95:7b:9c:83:1a:b2:5b:19:6d:cf:a0:c4: 38:74:33:88:be:8f:c0:37:9a:3c:77:07:23:08:f4:4a:a7:bf: 95:27:fd:f1:d7:3c:97:ed:89:da:e1:6e:cd:cd:97:b9:37:f3: a0:7e:f6:cf:81:6c:e7:fd:9b:fd:ac:c3:61:13:76:4e:4f:dc: 24:13:dc:9e:50:0b:8a:8a:6d:51:ea:ee:21:4c:71:3a:3a:6f: 82:61:7e:96:2e:20:d1:e4:be:d9:38:c6:60:b2:2e:00:01:e2: f2:43:88:e3:60:d8:b6:e6:97:32:10:92:c2:7e:1d:00:f9:bc: 9e:22:19:b8:24:4f:3c:10:5f:40:85:b7:16:df:98:50:26:ab: ec:5c:90:bc:be:a3:5f:96:c4:d3:df:3e:7f:b4:f6:56:70:4a: 7e:9b:cb:00:c1:18:f6:6e:9e:7a:17:13:4a:73:6d:86:d4:52: fd:88:fc:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZBFcBsyIajhVwnay9reGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYWJlMDI4ZjNiZTdlZTA3Mjg4NWQwMmJiZDdiNjJhNjUy NDI1ZWYwHhcNMjUxMjA2MDIwMDU4WhcNMjUxMjA3MDIwMDU4WjAzMTEwLwYDVQQD EygxMGMyYzMwNjllNzY0YjcwNGI1N2RkNjc5MjIyOGIyMGE2MWU1YTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCzDU7PiLnmDGvCVmUTQhF/e0cUD Bj8kdudn6A7V+7lLKpJee5tDf5T8SaiNFuFGD/7d1cDVCYLAyfckqyevXVwAdDtL KWDcszKcBH4sJHEXyc34eYSsVzWGh4E1zr5S+aN0afl5t8SwuE69utVZlWZ+8pE8 iGbh56/xla55x5Wp4IJpXKJjXLpyiiZ12aeJpSZ3sm/kytVJeGpo46qzXmSr43iv SgGdtklw7D+JKDZ1IorfyBG390/mjHAK3MOhfEiuf5DYq0hqTg8KFICFc4+76qGq kGA11DtW0/ptrUGXszWA9avRfzHl225WNDaKlOm2zvclOYlxWGyy8hfYjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBDCwwaedktwS1fdZ5IiiyCmHlqAMB8GA1UdIwQY MBaAFD6r4Cjzvn7gcohdArvXtiplJCXvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHF2Z0tQTy1mdUJ5aUYwQ3U5ZTJLbVVrSmU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8yYWQ0ZmEtYmQ3Yi00MDdlLWIyNWEt ZGY3NDEwYjJkMjc1LzEvUHF2Z0tQTy1mdUJ5aUYwQ3U5ZTJLbVVrSmU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8yYWQ0ZmEtYmQ3Yi00MDdlLWIyNWEtZGY3NDEwYjJkMjc1 LzEvUHF2Z0tQTy1mdUJ5aUYwQ3U5ZTJLbVVrSmU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlepbU72L mXailsdQsiJikfhYcp+4DBYs3usuTJAsgHIj89376iHabSpkbZIsWe7jjpFpajCR af65/BODbDoIDa0iiS0X4y/X90pDxmO7lXucgxqyWxltz6DEOHQziL6PwDeaPHcH Iwj0Sqe/lSf98dc8l+2J2uFuzc2XuTfzoH72z4Fs5/2b/azDYRN2Tk/cJBPcnlAL ioptUeruIUxxOjpvgmF+li4g0eS+2TjGYLIuAAHi8kOI42DYtuaXMhCSwn4dAPm8 niIZuCRPPBBfQIW3Ft+YUCar7FyQvL6jX5bE098+f7T2VnBKfpvLAMEY9m6eehcT SnNthtRS/Yj8gw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:53 2025 by rpki-client