This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft File: PksGq_B-6qwRslmgj-Fx1mvSgw0.mft (raw, json) Hash identifier: eApqsStGl/y+PfJfIdKD3bW9RoYbe8LQzW0iE2rUANQ= Subject key identifier: E6:6C:FD:49:F6:E2:97:F7:68:46:BA:AC:48:A5:AC:C2:0A:E9:DD:5A Authority key identifier: 3E:4B:06:AB:F0:7E:EA:AC:11:B2:59:A0:8F:E1:71:D6:6B:D2:83:0D Certificate issuer: /CN=3e4b06abf07eeaac11b259a08fe171d66bd2830d Certificate serial: 019B32D604AA5615E7F5B6B08E29D547C485 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft Manifest number: 0718 Signing time: Thu 18 Dec 2025 19:00:45 +0000 Manifest this update: Thu 18 Dec 2025 19:00:45 +0000 Manifest next update: Fri 19 Dec 2025 19:00:45 +0000 Files and hashes: 1: 75tUj24Sz1np7niKzvR12f9WWo0.roa (hash: 37+oOch5GIb73IinVFHvfdIOejO/FeSmIhgqOGWbqGU=) 2: PksGq_B-6qwRslmgj-Fx1mvSgw0.crl (hash: tn5UN5U8JBb/V1Lc9X/HaCeb7suRrQqAQSvewOTHRSY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.crl rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft rsync://rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:04:aa:56:15:e7:f5:b6:b0:8e:29:d5:47:c4:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e4b06abf07eeaac11b259a08fe171d66bd2830d Validity Not Before: Dec 18 19:00:45 2025 GMT Not After : Dec 19 19:00:45 2025 GMT Subject: CN=e66cfd49f6e297f76846baac48a5acc20ae9dd5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:71:de:9f:1f:53:2b:c6:49:c8:36:5a:cf:d0: 50:40:7e:65:60:7f:73:60:04:b1:33:c4:3f:95:1d: 8d:a5:38:50:84:71:d2:28:3a:95:75:52:90:18:c7: b7:56:55:f3:cd:af:00:6f:a9:2d:a7:70:13:67:34: 38:e6:ce:67:c6:73:e3:90:0f:4b:3b:57:b5:15:03: 00:b9:bb:42:3e:0e:3a:11:47:8d:48:e0:71:b5:18: 81:4d:a6:3e:92:00:a3:7f:f5:24:a4:93:e5:81:fa: e0:68:47:14:2e:65:26:6f:66:e9:b1:74:01:65:df: ff:9b:9b:ea:da:a8:5f:4d:2f:42:d2:be:01:0a:97: 79:d2:10:34:c9:b1:06:cc:4b:18:34:c8:29:2a:72: 18:bb:05:ae:47:fc:20:4b:65:a6:6b:81:5f:e0:1a: 38:e5:81:89:54:7d:b3:43:7f:df:77:d7:d4:5f:cf: dd:fa:1a:94:6b:ea:d7:6e:8a:b1:c4:fb:87:cd:2d: 6e:08:eb:fd:cd:00:c9:d7:5f:ca:ea:80:b0:5c:37: e6:8b:51:b8:80:c0:35:70:88:54:ba:3d:0f:bb:1e: 4b:d7:6f:93:41:56:5e:dc:f5:33:33:c8:c7:67:07: 24:96:62:51:36:f4:dd:60:39:7f:a3:1e:f7:62:3c: 73:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:6C:FD:49:F6:E2:97:F7:68:46:BA:AC:48:A5:AC:C2:0A:E9:DD:5A X509v3 Authority Key Identifier: keyid:3E:4B:06:AB:F0:7E:EA:AC:11:B2:59:A0:8F:E1:71:D6:6B:D2:83:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:9b:d1:63:bc:ab:0f:c8:ed:99:d8:a1:7a:d9:18:fc:20:c8: 7a:bd:3e:54:21:7d:01:ca:12:eb:94:aa:df:50:96:10:45:4d: 59:eb:08:c8:bd:e9:e2:40:66:0b:09:3f:b5:f0:66:90:8e:73: c9:f8:39:35:e9:a5:e4:21:54:cf:ea:09:8b:bb:7b:2b:8e:8a: 37:da:56:2a:a5:dd:c1:10:8e:ac:fe:fa:00:45:12:c7:a0:c9: 01:39:15:fd:56:4f:e3:73:32:b6:ae:8c:22:9c:04:6b:46:80: c0:e2:cb:bb:aa:4c:98:2a:56:cb:bf:08:9b:a6:5f:4c:87:13: 8a:8c:79:1e:e6:85:4e:23:1d:48:17:78:73:94:41:75:61:79: eb:14:2f:98:de:0a:59:37:f8:48:b1:1e:63:64:67:82:d4:ba: 39:d6:a0:f7:4a:81:f9:4a:b8:2e:43:94:d7:31:4a:e0:ab:22: 3f:91:4f:d5:32:ee:bd:6a:1a:19:a7:b1:e4:08:b9:20:49:65: e6:10:6c:22:0f:3c:34:b6:bb:7f:aa:3b:78:1b:32:a9:69:63: 4b:fd:1d:66:b7:a0:73:38:62:91:97:c4:ad:84:9b:64:53:a6: 5d:34:5a:b1:87:a3:f3:c1:0f:97:e7:62:5a:30:8b:42:b2:77: 21:fd:8e:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1gSqVhXn9bawjinVR8SFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNGIwNmFiZjA3ZWVhYWMxMWIyNTlhMDhmZTE3MWQ2NmJk MjgzMGQwHhcNMjUxMjE4MTkwMDQ1WhcNMjUxMjE5MTkwMDQ1WjAzMTEwLwYDVQQD EyhlNjZjZmQ0OWY2ZTI5N2Y3Njg0NmJhYWM0OGE1YWNjMjBhZTlkZDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynHenx9TK8ZJyDZaz9BQQH5lYH9z YASxM8Q/lR2NpThQhHHSKDqVdVKQGMe3VlXzza8Ab6ktp3ATZzQ45s5nxnPjkA9L O1e1FQMAubtCPg46EUeNSOBxtRiBTaY+kgCjf/UkpJPlgfrgaEcULmUmb2bpsXQB Zd//m5vq2qhfTS9C0r4BCpd50hA0ybEGzEsYNMgpKnIYuwWuR/wgS2Wma4Ff4Bo4 5YGJVH2zQ3/fd9fUX8/d+hqUa+rXboqxxPuHzS1uCOv9zQDJ11/K6oCwXDfmi1G4 gMA1cIhUuj0Pux5L12+TQVZe3PUzM8jHZwcklmJRNvTdYDl/ox73YjxziwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOZs/Un24pf3aEa6rEilrMIK6d1aMB8GA1UdIwQY MBaAFD5LBqvwfuqsEbJZoI/hcdZr0oMNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGtzR3FfQi02cXdSc2xtZ2otRngxbXZTZ3cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS80ODM0ODctMmZjNS00MGY2LTk0Zjct NTMwMTc3YzAyZGNjLzEvUGtzR3FfQi02cXdSc2xtZ2otRngxbXZTZ3cwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS80ODM0ODctMmZjNS00MGY2LTk0ZjctNTMwMTc3YzAyZGNj LzEvUGtzR3FfQi02cXdSc2xtZ2otRngxbXZTZ3cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC5vRY7yr D8jtmdihetkY/CDIer0+VCF9AcoS65Sq31CWEEVNWesIyL3p4kBmCwk/tfBmkI5z yfg5Neml5CFUz+oJi7t7K46KN9pWKqXdwRCOrP76AEUSx6DJATkV/VZP43Mytq6M IpwEa0aAwOLLu6pMmCpWy78Im6ZfTIcTiox5HuaFTiMdSBd4c5RBdWF56xQvmN4K WTf4SLEeY2RngtS6Odag90qB+Uq4LkOU1zFK4KsiP5FP1TLuvWoaGaex5Ai5IEll 5hBsIg88NLa7f6o7eBsyqWljS/0dZregczhikZfErYSbZFOmXTRasYej88EPl+di WjCLQrJ3If2OgA== -----END CERTIFICATE-----Generated at Thu Dec 18 22:05:27 2025 by rpki-client