This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft File: pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft (raw, json) Hash identifier: Hd/wEmhuBZ3AkAJKmrc3U/SHaoSRNkfs+XdLXRyvEkI= Subject key identifier: 25:3C:79:46:95:3D:C0:2A:8A:B4:80:EB:6E:C0:F9:E5:1D:03:20:18 Authority key identifier: A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4 Certificate issuer: /CN=a647893fb5b348e68a66d55a28f278cbf3931df4 Certificate serial: 019AF50B9AE19C7BDDA6AC697AEA3605AF18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft Manifest number: 0B56 Signing time: Sat 06 Dec 2025 19:02:49 +0000 Manifest this update: Sat 06 Dec 2025 19:02:49 +0000 Manifest next update: Sun 07 Dec 2025 19:02:49 +0000 Files and hashes: 1: pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl (hash: S3pcOtGU5dnx1vdUQdBQDKTw7JDDeOg6N5v2sjZNH8A=) 2: po_LVWpbKXE3R88IVy-uZ3WJPNw.roa (hash: K+p2Dato5TDcm+bOMSRlFPytRWT6WZtTR14LVyHGo2g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:9a:e1:9c:7b:dd:a6:ac:69:7a:ea:36:05:af:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a647893fb5b348e68a66d55a28f278cbf3931df4 Validity Not Before: Dec 6 19:02:49 2025 GMT Not After : Dec 7 19:02:49 2025 GMT Subject: CN=253c7946953dc02a8ab480eb6ec0f9e51d032018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:64:60:cd:50:cb:6c:c9:1c:3b:e3:c1:45:19: 37:16:34:6e:d8:3d:7e:22:dc:52:a1:7b:6a:4c:5a: b6:f4:9d:c1:ec:eb:fd:11:38:29:6d:d6:33:95:02: 9f:0c:4d:7f:b8:0a:05:e3:fe:29:91:d0:b8:f8:ec: 7e:5f:28:f6:c4:69:ef:30:26:0e:e3:f6:d2:c0:cf: 80:04:1f:fe:dd:6f:ed:3e:e8:c9:0f:4d:06:47:28: 58:c2:c7:b8:36:0c:84:f5:95:de:79:1c:71:9d:75: 40:5c:68:8c:d0:56:9d:07:94:de:96:05:f7:84:e2: 4c:70:e5:aa:51:8b:1c:4b:5a:30:94:fe:62:0b:ac: 9c:25:76:89:4f:f1:d5:22:b1:96:25:0f:c1:4e:47: 5f:56:8f:07:fc:a5:85:c0:ab:4d:35:b6:58:fe:38: d2:77:10:08:6f:0e:0f:05:31:76:d6:70:2a:e9:e4: 37:65:3b:b6:dd:59:a4:29:8a:a8:42:7d:c0:f3:cd: 0d:19:53:b3:2d:80:8c:68:d5:5b:28:12:5b:47:05: 69:08:f6:7d:40:bc:0d:76:94:49:6b:46:d1:b1:b3: a4:bb:81:49:ce:4d:98:15:5d:19:5a:dc:77:b6:df: 3b:27:04:37:a8:4d:de:e3:ff:48:65:af:7c:3f:93: 4a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:3C:79:46:95:3D:C0:2A:8A:B4:80:EB:6E:C0:F9:E5:1D:03:20:18 X509v3 Authority Key Identifier: keyid:A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:58:a6:00:1a:a4:37:e6:b1:56:0f:be:2d:f4:d0:a3:0b:d4: 18:62:ef:e2:e7:d6:d7:b8:fb:d3:6a:9e:dd:f5:cd:a9:a7:15: 08:d1:27:fd:29:22:4d:a8:99:c6:bd:41:47:b5:a2:37:db:0f: c4:6c:61:16:f5:75:e6:1b:bf:e4:df:da:df:33:c6:b7:b8:a5: 64:36:8d:21:bc:67:45:9f:39:64:dd:a2:22:ca:26:8c:68:53: 8f:a9:dd:25:da:eb:1f:f6:71:b3:6d:65:f7:07:48:9e:47:a3: 51:68:34:0e:a2:60:07:c7:fd:b4:57:0e:00:0f:72:98:b3:54: 1c:58:4b:c0:0f:b7:9e:7b:7f:7c:6a:0b:08:4a:54:95:6d:8a: 13:2b:34:75:f6:7f:89:33:77:d3:95:17:36:33:51:76:b0:71: a1:55:da:7d:70:19:7c:f5:68:01:10:50:6c:ac:99:18:9f:90: 21:9a:7d:71:d8:41:ab:81:2b:2c:d7:32:88:ce:e9:f5:8f:b3: 7c:c1:85:aa:2e:fe:4b:c3:30:27:2c:50:5e:a7:51:95:01:ac: d1:36:43:95:5d:c2:b4:8b:1f:87:27:31:96:03:c0:f5:bd:f8: 7a:6f:10:f6:f7:fb:4e:66:43:90:9f:45:e0:bd:04:ae:b4:8c: b7:08:3f:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C5rhnHvdpqxpeuo2Ba8YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NDc4OTNmYjViMzQ4ZTY4YTY2ZDU1YTI4ZjI3OGNiZjM5 MzFkZjQwHhcNMjUxMjA2MTkwMjQ5WhcNMjUxMjA3MTkwMjQ5WjAzMTEwLwYDVQQD EygyNTNjNzk0Njk1M2RjMDJhOGFiNDgwZWI2ZWMwZjllNTFkMDMyMDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWRgzVDLbMkcO+PBRRk3FjRu2D1+ ItxSoXtqTFq29J3B7Ov9ETgpbdYzlQKfDE1/uAoF4/4pkdC4+Ox+Xyj2xGnvMCYO 4/bSwM+ABB/+3W/tPujJD00GRyhYwse4NgyE9ZXeeRxxnXVAXGiM0FadB5TelgX3 hOJMcOWqUYscS1owlP5iC6ycJXaJT/HVIrGWJQ/BTkdfVo8H/KWFwKtNNbZY/jjS dxAIbw4PBTF21nAq6eQ3ZTu23VmkKYqoQn3A880NGVOzLYCMaNVbKBJbRwVpCPZ9 QLwNdpRJa0bRsbOku4FJzk2YFV0ZWtx3tt87JwQ3qE3e4/9IZa98P5NKJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCU8eUaVPcAqirSA627A+eUdAyAYMB8GA1UdIwQY MBaAFKZHiT+1s0jmimbVWijyeMvzkx30MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGtlSlA3V3pTT2FLWnRWYUtQSjR5X09USGZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kYThjYjEtMWJmYy00M2ZkLWEwZDIt ZDYyNDQ5NmRkY2M4LzEvcGtlSlA3V3pTT2FLWnRWYUtQSjR5X09USGZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9kYThjYjEtMWJmYy00M2ZkLWEwZDItZDYyNDQ5NmRkY2M4 LzEvcGtlSlA3V3pTT2FLWnRWYUtQSjR5X09USGZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaFimABqk N+axVg++LfTQowvUGGLv4ufW17j702qe3fXNqacVCNEn/SkiTaiZxr1BR7WiN9sP xGxhFvV15hu/5N/a3zPGt7ilZDaNIbxnRZ85ZN2iIsomjGhTj6ndJdrrH/Zxs21l 9wdInkejUWg0DqJgB8f9tFcOAA9ymLNUHFhLwA+3nnt/fGoLCEpUlW2KEys0dfZ/ iTN305UXNjNRdrBxoVXafXAZfPVoARBQbKyZGJ+QIZp9cdhBq4ErLNcyiM7p9Y+z fMGFqi7+S8MwJyxQXqdRlQGs0TZDlV3CtIsfhycxlgPA9b34em8Q9vf7TmZDkJ9F 4L0ErrSMtwg/zg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:57:01 2025 by rpki-client