This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft File: PCKK_HA7a--nNfIhKGH9b6REh80.mft (raw, json) Hash identifier: n/6g+mRS5tyYzmLprt0j8vscVL2BPA136CGcxHEyv4Y= Subject key identifier: F6:6F:3D:57:A2:15:1C:3A:DE:1E:B7:AF:27:C0:D3:A3:63:B0:98:6B Authority key identifier: 3C:22:8A:FC:70:3B:6B:EF:A7:35:F2:21:28:61:FD:6F:A4:44:87:CD Certificate issuer: /CN=3c228afc703b6befa735f2212861fd6fa44487cd Certificate serial: 019B2FD5AE4E2A5C5C989E8243277C78A4DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCKK_HA7a--nNfIhKGH9b6REh80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft Manifest number: 1256 Signing time: Thu 18 Dec 2025 05:01:31 +0000 Manifest this update: Thu 18 Dec 2025 05:01:31 +0000 Manifest next update: Fri 19 Dec 2025 05:01:31 +0000 Files and hashes: 1: PCKK_HA7a--nNfIhKGH9b6REh80.crl (hash: mlVxpQL8z7tzhybufT6cwqLE3kpvO11reQ5Ed9pgA+A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft rsync://rpki.ripe.net/repository/DEFAULT/PCKK_HA7a--nNfIhKGH9b6REh80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d5:ae:4e:2a:5c:5c:98:9e:82:43:27:7c:78:a4:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c228afc703b6befa735f2212861fd6fa44487cd Validity Not Before: Dec 18 05:01:31 2025 GMT Not After : Dec 19 05:01:31 2025 GMT Subject: CN=f66f3d57a2151c3ade1eb7af27c0d3a363b0986b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:eb:59:0b:b2:b0:1f:3c:94:a2:09:3b:6d:16: 1d:9b:7d:d0:73:ba:ff:53:d8:4d:16:f3:da:a9:f8: d3:70:ca:f8:86:5d:f1:3e:02:0b:d7:5d:b8:50:91: a5:66:12:3b:99:db:50:32:93:84:ca:0d:4c:c4:51: 41:c9:5c:04:82:8c:49:04:37:f3:82:69:60:37:bf: 9b:7e:8b:6a:fa:80:37:52:94:64:43:3b:a2:e7:f9: 6e:6f:37:ed:b8:55:2e:dc:fb:2c:2c:6e:d4:e7:de: 21:9e:4c:6e:85:48:a2:4f:ae:0f:13:88:5e:d9:2e: 25:e2:28:61:aa:8c:29:57:94:98:6c:8d:d1:9f:42: 63:8f:87:88:d3:b1:6c:7b:46:f0:4d:5a:99:92:53: c7:f3:dc:67:7d:b2:ef:e3:77:37:6a:87:84:19:59: 47:16:73:52:b5:18:db:fb:3e:c4:3e:8d:3c:0e:28: 80:a6:c6:07:cf:64:b6:61:58:03:4d:d0:80:50:9d: 2b:4e:1c:6a:81:f0:73:e8:6a:ad:fd:c3:13:d0:39: 1d:f8:6f:5e:3f:32:73:9f:08:0b:1c:30:82:62:9a: d6:50:11:dd:3d:8e:1a:ff:bd:3e:98:70:6c:f6:fe: be:38:ee:b9:49:d1:48:61:6c:f8:fc:1f:d9:5f:4d: 0a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:6F:3D:57:A2:15:1C:3A:DE:1E:B7:AF:27:C0:D3:A3:63:B0:98:6B X509v3 Authority Key Identifier: keyid:3C:22:8A:FC:70:3B:6B:EF:A7:35:F2:21:28:61:FD:6F:A4:44:87:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCKK_HA7a--nNfIhKGH9b6REh80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:10:00:5b:cc:51:4c:87:b8:d1:f9:15:9f:bb:0b:7f:46:0e: 09:04:f7:ea:04:69:7f:7a:65:f4:12:9d:af:ee:3d:cc:8d:e9: 12:13:ee:47:8e:38:bb:5b:81:f0:20:31:c9:8c:f2:fe:49:95: 57:d4:50:8e:da:95:f9:83:75:84:de:0c:28:3a:12:01:f7:66: 3c:77:fc:3c:8c:27:ab:62:f4:1f:48:c6:de:8c:34:c9:c1:2b: 67:5f:44:17:84:aa:e5:fb:2f:3c:82:b8:39:54:37:71:24:e0: 67:fb:75:65:8d:9e:4d:62:8f:87:e5:b0:c5:a2:b4:8e:b6:6c: e5:2d:d2:1c:82:ba:1b:bc:d2:4f:fc:11:ec:7f:ca:f4:6f:57: 3a:fc:f0:f3:28:8b:4c:c9:8e:a6:fa:bd:11:10:d6:9b:5f:97: c9:6a:c6:ef:69:ca:ec:4b:23:8f:5a:30:81:53:ac:9e:7d:04: 49:33:be:12:4d:5a:1c:77:28:49:2a:ba:28:bd:03:10:2a:00: 7d:56:9f:b1:51:c7:45:d0:11:22:6f:6d:7f:b6:9a:09:f3:1d: ca:3d:8c:a4:bb:fe:e6:10:64:e8:23:79:5b:df:84:94:53:21: 39:01:45:4d:e6:0a:64:bc:31:15:5d:90:7e:56:01:00:46:4b: 30:05:30:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1a5OKlxcmJ6CQyd8eKTeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMjI4YWZjNzAzYjZiZWZhNzM1ZjIyMTI4NjFmZDZmYTQ0 NDg3Y2QwHhcNMjUxMjE4MDUwMTMxWhcNMjUxMjE5MDUwMTMxWjAzMTEwLwYDVQQD EyhmNjZmM2Q1N2EyMTUxYzNhZGUxZWI3YWYyN2MwZDNhMzYzYjA5ODZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzutZC7KwHzyUogk7bRYdm33Qc7r/ U9hNFvPaqfjTcMr4hl3xPgIL1124UJGlZhI7mdtQMpOEyg1MxFFByVwEgoxJBDfz gmlgN7+bfotq+oA3UpRkQzui5/lubzftuFUu3PssLG7U594hnkxuhUiiT64PE4he 2S4l4ihhqowpV5SYbI3Rn0Jjj4eI07Fse0bwTVqZklPH89xnfbLv43c3aoeEGVlH FnNStRjb+z7EPo08DiiApsYHz2S2YVgDTdCAUJ0rThxqgfBz6Gqt/cMT0Dkd+G9e PzJznwgLHDCCYprWUBHdPY4a/70+mHBs9v6+OO65SdFIYWz4/B/ZX00KUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPZvPVeiFRw63h63ryfA06NjsJhrMB8GA1UdIwQY MBaAFDwiivxwO2vvpzXyIShh/W+kRIfNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUENLS19IQTdhLS1uTmZJaEtHSDliNlJFaDgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy84MWEzMjUtMDliNi00NTE3LWI5M2Ut NTQ2MGU1MDkxZDE4LzEvUENLS19IQTdhLS1uTmZJaEtHSDliNlJFaDgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy84MWEzMjUtMDliNi00NTE3LWI5M2UtNTQ2MGU1MDkxZDE4 LzEvUENLS19IQTdhLS1uTmZJaEtHSDliNlJFaDgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjBAAW8xR TIe40fkVn7sLf0YOCQT36gRpf3pl9BKdr+49zI3pEhPuR444u1uB8CAxyYzy/kmV V9RQjtqV+YN1hN4MKDoSAfdmPHf8PIwnq2L0H0jG3ow0ycErZ19EF4Sq5fsvPIK4 OVQ3cSTgZ/t1ZY2eTWKPh+WwxaK0jrZs5S3SHIK6G7zST/wR7H/K9G9XOvzw8yiL TMmOpvq9ERDWm1+XyWrG72nK7Esjj1owgVOsnn0ESTO+Ek1aHHcoSSq6KL0DECoA fVafsVHHRdARIm9tf7aaCfMdyj2MpLv+5hBk6CN5W9+ElFMhOQFFTeYKZLwxFV2Q flYBAEZLMAUwzg== -----END CERTIFICATE-----Generated at Thu Dec 18 07:40:45 2025 by rpki-client