This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft File: PCKK_HA7a--nNfIhKGH9b6REh80.mft (raw, json) Hash identifier: eSm9OzjpckX2gM5rtr18ywmpqm93bDgarNvWeZ94pKk= Subject key identifier: E2:21:2B:71:CF:88:04:2F:BC:30:67:13:31:C2:14:18:F5:5B:C7:57 Authority key identifier: 3C:22:8A:FC:70:3B:6B:EF:A7:35:F2:21:28:61:FD:6F:A4:44:87:CD Certificate issuer: /CN=3c228afc703b6befa735f2212861fd6fa44487cd Certificate serial: 019AF20929C411C5310BEC20DD354FC2ADFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCKK_HA7a--nNfIhKGH9b6REh80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft Manifest number: 1236 Signing time: Sat 06 Dec 2025 05:01:18 +0000 Manifest this update: Sat 06 Dec 2025 05:01:18 +0000 Manifest next update: Sun 07 Dec 2025 05:01:18 +0000 Files and hashes: 1: PCKK_HA7a--nNfIhKGH9b6REh80.crl (hash: 59r+wwjzdfcD6j0neeH4SfkjKuI96bh6GFWAXxAqRtA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft rsync://rpki.ripe.net/repository/DEFAULT/PCKK_HA7a--nNfIhKGH9b6REh80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:29:c4:11:c5:31:0b:ec:20:dd:35:4f:c2:ad:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c228afc703b6befa735f2212861fd6fa44487cd Validity Not Before: Dec 6 05:01:18 2025 GMT Not After : Dec 7 05:01:18 2025 GMT Subject: CN=e2212b71cf88042fbc30671331c21418f55bc757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ad:ca:11:a5:43:73:fc:80:2a:3a:8e:b5:7d: 73:07:b2:86:da:6a:01:30:c4:2f:63:21:3d:b4:46: 27:d1:1e:e3:84:b5:14:2a:b2:c3:94:0c:18:bd:83: 1a:b8:28:83:2a:48:f1:67:4a:a1:13:35:6f:d2:ca: 03:7c:8c:9d:1a:1e:03:7f:62:29:f0:6e:61:85:76: c5:a2:fd:89:25:7b:b4:4c:54:af:51:13:ad:4d:cb: 4a:13:d8:07:cd:bb:61:74:08:dc:c6:22:5a:ba:e5: 87:5b:35:f7:7e:50:9b:16:61:6a:13:6e:9d:46:0a: ff:b3:b8:bd:43:79:22:be:17:77:a3:98:9f:a7:ba: ff:98:ce:a3:5b:3b:77:d2:74:3f:79:db:72:99:53: d2:13:33:37:1e:44:5e:72:1d:dc:22:bb:97:1d:3d: 77:b7:15:f4:78:90:3c:3f:a6:0f:3d:b4:b2:cb:fa: 52:44:d6:88:19:95:c5:de:69:30:ce:a3:f7:90:bf: 08:3b:37:96:22:03:74:59:a9:cd:3c:76:e4:4a:f4: a9:25:ac:f4:a6:35:41:87:2b:00:ba:7f:16:a7:79: fb:da:d0:15:d8:38:cc:9e:d9:26:52:a5:26:bb:78: 03:a3:09:2f:0e:a5:b4:64:80:70:c7:d4:66:ea:a2: 4d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:21:2B:71:CF:88:04:2F:BC:30:67:13:31:C2:14:18:F5:5B:C7:57 X509v3 Authority Key Identifier: keyid:3C:22:8A:FC:70:3B:6B:EF:A7:35:F2:21:28:61:FD:6F:A4:44:87:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCKK_HA7a--nNfIhKGH9b6REh80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:4d:01:05:4a:1d:62:99:03:9d:b4:11:1c:b7:d2:db:32:53: 93:7b:9f:aa:83:92:ae:85:c4:70:8b:c3:fd:32:69:23:d7:c0: 53:3b:01:db:54:d1:7a:f1:57:86:1c:bf:7e:9a:52:9e:8c:d1: d0:56:78:48:5a:b7:27:b3:75:2c:95:a8:8d:ad:3d:6c:bf:35: ce:79:a0:ba:83:6a:e8:55:8f:22:22:8d:b4:2c:0c:f6:2f:27: 8e:b3:0d:61:2a:4c:fa:3f:5c:3b:7c:3c:c8:90:9a:46:b2:0b: fd:f3:de:2d:b8:44:ee:93:7a:1e:e0:8a:22:cb:13:32:1e:21: 2c:60:4d:c2:be:08:2f:39:30:a9:5b:cd:9e:99:64:48:68:be: 1c:eb:a9:42:c8:a8:2a:4b:00:5c:9f:bb:1f:cc:81:c1:d1:be: 43:a8:fd:e7:20:49:c5:c7:60:a5:b8:05:20:9c:a4:ee:98:3e: 69:84:ec:cc:a1:50:d7:3d:bf:dd:e7:14:50:ae:53:b2:60:21: cb:41:39:89:4e:e9:ca:5b:19:a9:5d:d3:44:ba:47:ec:33:d8: 39:77:69:f7:35:12:85:56:9f:f3:e4:12:71:50:9d:89:85:43: fb:77:1c:32:9f:cb:5d:fa:36:bc:5f:4a:8a:b5:b7:32:2b:c3: 62:0f:9d:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCSnEEcUxC+wg3TVPwq37MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMjI4YWZjNzAzYjZiZWZhNzM1ZjIyMTI4NjFmZDZmYTQ0 NDg3Y2QwHhcNMjUxMjA2MDUwMTE4WhcNMjUxMjA3MDUwMTE4WjAzMTEwLwYDVQQD EyhlMjIxMmI3MWNmODgwNDJmYmMzMDY3MTMzMWMyMTQxOGY1NWJjNzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxq3KEaVDc/yAKjqOtX1zB7KG2moB MMQvYyE9tEYn0R7jhLUUKrLDlAwYvYMauCiDKkjxZ0qhEzVv0soDfIydGh4Df2Ip 8G5hhXbFov2JJXu0TFSvUROtTctKE9gHzbthdAjcxiJauuWHWzX3flCbFmFqE26d Rgr/s7i9Q3kivhd3o5ifp7r/mM6jWzt30nQ/edtymVPSEzM3HkRech3cIruXHT13 txX0eJA8P6YPPbSyy/pSRNaIGZXF3mkwzqP3kL8IOzeWIgN0WanNPHbkSvSpJaz0 pjVBhysAun8Wp3n72tAV2DjMntkmUqUmu3gDowkvDqW0ZIBwx9Rm6qJNTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOIhK3HPiAQvvDBnEzHCFBj1W8dXMB8GA1UdIwQY MBaAFDwiivxwO2vvpzXyIShh/W+kRIfNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUENLS19IQTdhLS1uTmZJaEtHSDliNlJFaDgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy84MWEzMjUtMDliNi00NTE3LWI5M2Ut NTQ2MGU1MDkxZDE4LzEvUENLS19IQTdhLS1uTmZJaEtHSDliNlJFaDgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy84MWEzMjUtMDliNi00NTE3LWI5M2UtNTQ2MGU1MDkxZDE4 LzEvUENLS19IQTdhLS1uTmZJaEtHSDliNlJFaDgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgE0BBUod YpkDnbQRHLfS2zJTk3ufqoOSroXEcIvD/TJpI9fAUzsB21TRevFXhhy/fppSnozR 0FZ4SFq3J7N1LJWoja09bL81znmguoNq6FWPIiKNtCwM9i8njrMNYSpM+j9cO3w8 yJCaRrIL/fPeLbhE7pN6HuCKIssTMh4hLGBNwr4ILzkwqVvNnplkSGi+HOupQsio KksAXJ+7H8yBwdG+Q6j95yBJxcdgpbgFIJyk7pg+aYTszKFQ1z2/3ecUUK5TsmAh y0E5iU7pylsZqV3TRLpH7DPYOXdp9zUShVaf8+QScVCdiYVD+3ccMp/LXfo2vF9K irW3MivDYg+dDg== -----END CERTIFICATE-----Generated at Sat Dec 6 06:59:23 2025 by rpki-client