This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft File: pQnoZXbAZeFL--6PZSq2wnnM3hI.mft (raw, json) Hash identifier: /c540kY6uaqqqSCsRsG4zK/2e95xlG9UWWTgX/XMvt4= Subject key identifier: BB:25:78:ED:28:A9:88:5B:C2:92:B2:73:A0:BC:4B:48:A0:DE:CA:98 Authority key identifier: A5:09:E8:65:76:C0:65:E1:4B:FB:EE:8F:65:2A:B6:C2:79:CC:DE:12 Certificate issuer: /CN=a509e86576c065e14bfbee8f652ab6c279ccde12 Certificate serial: 019AF208DDFE3ABA62812577061EBB8C0E0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft Manifest number: 109E Signing time: Sat 06 Dec 2025 05:00:58 +0000 Manifest this update: Sat 06 Dec 2025 05:00:58 +0000 Manifest next update: Sun 07 Dec 2025 05:00:58 +0000 Files and hashes: 1: eoOnLGiO6CFkl49Rw92BKVWZ1YY.roa (hash: 5KK2WxAAZ4SHFL6JTNlCRgBRKCCitoVvyQFa3VeriMw=) 2: pQnoZXbAZeFL--6PZSq2wnnM3hI.crl (hash: k74CWFrXk6o7j8NZ8eLJzX7se2c89O0D7z+2Hq2EvnA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.crl rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:dd:fe:3a:ba:62:81:25:77:06:1e:bb:8c:0e:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a509e86576c065e14bfbee8f652ab6c279ccde12 Validity Not Before: Dec 6 05:00:58 2025 GMT Not After : Dec 7 05:00:58 2025 GMT Subject: CN=bb2578ed28a9885bc292b273a0bc4b48a0deca98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8b:8d:c9:f1:a0:a1:54:6f:77:12:c7:af:7f: c4:e9:91:4e:c8:be:1b:80:43:20:b7:07:71:e7:51: e2:90:65:93:ab:62:27:4e:77:1b:98:76:43:76:2a: 96:2e:cb:4c:11:d5:20:8b:47:c6:48:97:4e:73:a5: 82:ac:f6:0d:33:17:9c:95:d5:8b:34:ef:bf:31:50: fe:29:d4:6d:d5:8f:5f:c1:4c:a8:12:65:d2:9e:9e: 58:7b:fa:f2:0e:80:25:31:cd:47:b0:83:8f:f1:6d: 2b:83:cd:8f:e6:8e:9c:ef:cc:3c:b2:d8:db:48:61: 68:59:6a:09:4a:98:c2:63:7b:29:f3:6e:4a:0b:44: bc:71:2d:81:13:9d:65:c6:01:ca:b9:ad:61:15:16: 15:53:be:86:85:11:c6:cc:00:66:97:42:3f:ab:54: 85:0f:b9:3a:06:21:35:df:2a:74:bf:d5:92:e3:5a: 5e:bd:ba:67:97:bd:de:f1:4b:89:4e:24:ef:13:59: 78:61:4c:da:6f:a7:57:bd:df:de:c2:62:3b:e3:60: 02:89:fe:2a:f8:75:bf:33:6e:38:d7:e5:b7:e9:c7: 27:d2:20:a9:63:9f:c0:00:56:9e:80:5f:ba:29:9b: a4:e0:da:5c:1e:ee:47:1f:00:6b:4c:fd:41:a7:31: 98:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:25:78:ED:28:A9:88:5B:C2:92:B2:73:A0:BC:4B:48:A0:DE:CA:98 X509v3 Authority Key Identifier: keyid:A5:09:E8:65:76:C0:65:E1:4B:FB:EE:8F:65:2A:B6:C2:79:CC:DE:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:7a:c9:a0:a6:a6:2b:45:8b:c1:fe:bb:c6:0e:08:5b:04:86: e7:32:60:82:e7:2c:be:a7:68:49:53:62:4a:95:a9:b7:f6:ea: d1:11:e9:ab:51:9a:11:72:1d:fe:72:0d:ab:b8:3b:27:4c:a1: d0:e4:a7:c3:16:2c:1b:fd:7e:21:4c:7d:fd:25:33:3a:ec:10: 2c:70:79:9b:5a:81:1e:8a:c4:64:48:b5:55:62:54:a9:50:0b: ce:a4:f5:59:44:4c:cb:93:d9:ff:19:82:b0:f4:72:38:21:46: 23:fd:ab:d4:c4:23:58:0a:09:c3:73:b8:60:0f:31:50:4f:65: b4:43:a9:d0:f8:c3:95:e6:17:a4:f7:35:18:0a:1f:fe:2c:72: 10:53:3d:a5:9d:ac:5c:45:21:90:50:63:dc:b4:11:d3:c0:ee: 1a:32:1c:d7:59:44:1a:58:83:21:ee:56:eb:fa:1c:89:9b:28: 2a:46:96:5e:25:5f:19:24:2a:86:0f:26:72:fa:ed:83:8e:08: 46:24:03:34:82:e8:b4:a7:77:78:03:19:fb:2e:75:ad:86:87: a4:27:4f:06:5c:63:90:29:25:6d:b0:9b:f7:e0:7c:f2:5d:b6: ee:ef:c0:d7:28:4f:23:e4:5d:10:44:6a:78:22:a1:04:6b:a1: 26:fd:47:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCN3+OrpigSV3Bh67jA4NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MDllODY1NzZjMDY1ZTE0YmZiZWU4ZjY1MmFiNmMyNzlj Y2RlMTIwHhcNMjUxMjA2MDUwMDU4WhcNMjUxMjA3MDUwMDU4WjAzMTEwLwYDVQQD EyhiYjI1NzhlZDI4YTk4ODViYzI5MmIyNzNhMGJjNGI0OGEwZGVjYTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4uNyfGgoVRvdxLHr3/E6ZFOyL4b gEMgtwdx51HikGWTq2InTncbmHZDdiqWLstMEdUgi0fGSJdOc6WCrPYNMxecldWL NO+/MVD+KdRt1Y9fwUyoEmXSnp5Ye/ryDoAlMc1HsIOP8W0rg82P5o6c78w8stjb SGFoWWoJSpjCY3sp825KC0S8cS2BE51lxgHKua1hFRYVU76GhRHGzABml0I/q1SF D7k6BiE13yp0v9WS41pevbpnl73e8UuJTiTvE1l4YUzab6dXvd/ewmI742ACif4q +HW/M2441+W36ccn0iCpY5/AAFaegF+6KZuk4NpcHu5HHwBrTP1BpzGYuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLsleO0oqYhbwpKyc6C8S0ig3sqYMB8GA1UdIwQY MBaAFKUJ6GV2wGXhS/vuj2UqtsJ5zN4SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFFub1pYYkFaZUZMLS02UFpTcTJ3bm5NM2hJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8wMTQyNDUtODY4NS00YWYzLTkzODct YTBmNTc0MmIxYjA0LzEvcFFub1pYYkFaZUZMLS02UFpTcTJ3bm5NM2hJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8wMTQyNDUtODY4NS00YWYzLTkzODctYTBmNTc0MmIxYjA0 LzEvcFFub1pYYkFaZUZMLS02UFpTcTJ3bm5NM2hJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeHrJoKam K0WLwf67xg4IWwSG5zJggucsvqdoSVNiSpWpt/bq0RHpq1GaEXId/nINq7g7J0yh 0OSnwxYsG/1+IUx9/SUzOuwQLHB5m1qBHorEZEi1VWJUqVALzqT1WURMy5PZ/xmC sPRyOCFGI/2r1MQjWAoJw3O4YA8xUE9ltEOp0PjDleYXpPc1GAof/ixyEFM9pZ2s XEUhkFBj3LQR08DuGjIc11lEGliDIe5W6/ociZsoKkaWXiVfGSQqhg8mcvrtg44I RiQDNILotKd3eAMZ+y51rYaHpCdPBlxjkCklbbCb9+B88l227u/A1yhPI+RdEERq eCKhBGuhJv1HFw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:10:33 2025 by rpki-client