This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.mft File: pNyKTpFqo_eO94BHrCDQ0PipUPk.mft (raw, json) Hash identifier: ThlogA6PyxiE146osCrvh1GZSZXmfmSJmMRw5pTCjc0= Subject key identifier: 47:90:37:EE:7C:3E:A5:57:82:46:A7:41:65:A3:10:9A:8D:18:D4:E6 Authority key identifier: A4:DC:8A:4E:91:6A:A3:F7:8E:F7:80:47:AC:20:D0:D0:F8:A9:50:F9 Certificate issuer: /CN=a4dc8a4e916aa3f78ef78047ac20d0d0f8a950f9 Certificate serial: 019AF12E1C768966B8CCFBAB434544BB4B50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNyKTpFqo_eO94BHrCDQ0PipUPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.mft Manifest number: 0DDC Signing time: Sat 06 Dec 2025 01:02:02 +0000 Manifest this update: Sat 06 Dec 2025 01:02:02 +0000 Manifest next update: Sun 07 Dec 2025 01:02:02 +0000 Files and hashes: 1: UTvK6gSJU03H7EOW3gSzFazwB7M.roa (hash: fFNxwITyp66ny+cQJs93d3VRTa/z6HUTvmCKvoybY9I=) 2: pNyKTpFqo_eO94BHrCDQ0PipUPk.crl (hash: /DGCXRLiAzpZh/myrnJ0kRv1jNqk24/aFuUk0cjErrI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.mft rsync://rpki.ripe.net/repository/DEFAULT/pNyKTpFqo_eO94BHrCDQ0PipUPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:1c:76:89:66:b8:cc:fb:ab:43:45:44:bb:4b:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4dc8a4e916aa3f78ef78047ac20d0d0f8a950f9 Validity Not Before: Dec 6 01:02:02 2025 GMT Not After : Dec 7 01:02:02 2025 GMT Subject: CN=479037ee7c3ea5578246a74165a3109a8d18d4e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:77:0c:75:ac:61:ee:61:16:47:ed:be:73:9d: 99:d6:89:b3:26:c9:f6:cd:12:32:8a:e9:3e:6e:a6: 7f:ec:27:1b:29:c0:91:c8:04:ec:b2:e5:5d:f5:37: e6:69:5c:85:df:63:cf:b4:61:02:6d:a8:30:0f:bf: 9d:af:fb:cb:71:8d:a2:a5:4c:14:2b:e3:f6:c2:7c: ef:6e:67:ac:67:ae:1b:90:58:27:49:22:b9:b1:26: a6:82:51:48:bd:00:00:38:b7:00:20:aa:0e:bd:50: 7b:e6:eb:e0:85:2f:33:7f:41:50:da:e1:2a:03:ce: 14:7f:fa:be:bb:71:cc:fc:5f:e1:c3:c6:7e:74:bc: b6:6f:63:ca:9d:cd:62:e1:de:7f:d5:cb:63:95:38: 77:51:a6:f1:33:6b:36:e1:39:d3:cb:5f:da:22:ac: f4:08:b5:f7:f7:f2:84:d0:13:17:f2:30:ed:ae:d7: 6e:5e:72:89:c5:31:0c:6d:ea:19:e7:20:f0:3f:71: 34:ff:d3:b3:8f:33:42:02:9d:ae:f3:1c:64:56:7b: 3a:37:28:6f:0b:21:1a:13:86:67:15:3d:19:f4:d3: 54:34:4b:4e:e0:93:e0:6f:38:10:3c:8c:9e:65:a4: 1e:d9:c9:f7:1b:79:37:36:be:2c:e3:b1:0d:a7:dd: 80:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:90:37:EE:7C:3E:A5:57:82:46:A7:41:65:A3:10:9A:8D:18:D4:E6 X509v3 Authority Key Identifier: keyid:A4:DC:8A:4E:91:6A:A3:F7:8E:F7:80:47:AC:20:D0:D0:F8:A9:50:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNyKTpFqo_eO94BHrCDQ0PipUPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:16:92:cb:5d:e3:e4:34:ed:50:df:c9:a7:37:6d:0b:e0:65: 3f:13:2e:03:44:87:e6:e3:33:05:2c:30:59:3f:46:40:8b:bd: 7f:1d:ed:87:c9:33:f8:2e:93:33:7c:b7:4f:20:5f:ee:4e:0f: 8b:83:48:a2:c6:19:cd:f7:f6:b3:79:a1:3c:9b:52:19:a6:02: 35:89:20:de:04:46:3d:1d:1a:52:9a:a3:7d:a5:0c:fe:fa:6f: a0:a5:6b:12:60:3f:82:db:dd:29:48:58:80:57:b2:b2:e2:71: 5a:82:7a:14:4a:d5:49:8e:e6:9b:51:eb:51:83:16:15:e6:00: 52:51:cd:59:74:c8:3e:01:13:1e:9c:00:32:ea:ee:9b:0b:c0: da:13:3d:95:b9:21:1a:19:16:10:a0:49:4d:be:b1:f2:4b:6f: 99:5c:6d:83:44:82:31:b0:88:2f:8c:bf:53:17:bf:14:41:5a: 3e:c9:b3:9e:8c:30:0d:cf:93:f8:9a:b0:5a:03:b6:92:58:b3: ba:ff:4b:91:03:18:8b:a3:eb:b2:26:63:a8:79:9f:cf:f0:0e: 4c:4b:e7:50:56:cb:8c:6d:92:44:3b:74:37:04:74:1a:57:73: 17:2c:ad:b4:d3:9a:ae:0e:3c:5a:61:9a:d7:55:ea:c0:cb:ae: 60:90:fb:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLhx2iWa4zPurQ0VEu0tQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZGM4YTRlOTE2YWEzZjc4ZWY3ODA0N2FjMjBkMGQwZjhh OTUwZjkwHhcNMjUxMjA2MDEwMjAyWhcNMjUxMjA3MDEwMjAyWjAzMTEwLwYDVQQD Eyg0NzkwMzdlZTdjM2VhNTU3ODI0NmE3NDE2NWEzMTA5YThkMThkNGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63cMdaxh7mEWR+2+c52Z1omzJsn2 zRIyiuk+bqZ/7CcbKcCRyATssuVd9TfmaVyF32PPtGECbagwD7+dr/vLcY2ipUwU K+P2wnzvbmesZ64bkFgnSSK5sSamglFIvQAAOLcAIKoOvVB75uvghS8zf0FQ2uEq A84Uf/q+u3HM/F/hw8Z+dLy2b2PKnc1i4d5/1ctjlTh3UabxM2s24TnTy1/aIqz0 CLX39/KE0BMX8jDtrtduXnKJxTEMbeoZ5yDwP3E0/9OzjzNCAp2u8xxkVns6Nyhv CyEaE4ZnFT0Z9NNUNEtO4JPgbzgQPIyeZaQe2cn3G3k3Nr4s47ENp92AUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEeQN+58PqVXgkanQWWjEJqNGNTmMB8GA1UdIwQY MBaAFKTcik6RaqP3jveAR6wg0ND4qVD5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE55S1RwRnFvX2VPOTRCSHJDRFEwUGlwVVBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9hZTFiODktZmQ0OC00YjJkLWE4OGUt OTY2YmU0ODMyODE1LzEvcE55S1RwRnFvX2VPOTRCSHJDRFEwUGlwVVBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi9hZTFiODktZmQ0OC00YjJkLWE4OGUtOTY2YmU0ODMyODE1 LzEvcE55S1RwRnFvX2VPOTRCSHJDRFEwUGlwVVBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqRaSy13j 5DTtUN/JpzdtC+BlPxMuA0SH5uMzBSwwWT9GQIu9fx3th8kz+C6TM3y3TyBf7k4P i4NIosYZzff2s3mhPJtSGaYCNYkg3gRGPR0aUpqjfaUM/vpvoKVrEmA/gtvdKUhY gFeysuJxWoJ6FErVSY7mm1HrUYMWFeYAUlHNWXTIPgETHpwAMurumwvA2hM9lbkh GhkWEKBJTb6x8ktvmVxtg0SCMbCIL4y/Uxe/FEFaPsmznowwDc+T+JqwWgO2kliz uv9LkQMYi6PrsiZjqHmfz/AOTEvnUFbLjG2SRDt0NwR0GldzFyyttNOarg48WmGa 11XqwMuuYJD7Vw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:01:09 2025 by rpki-client