This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft File: PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft (raw, json) Hash identifier: Cjeq2VWphPNvRUBWz/NgI2yk1AfXR6opxqOUwtYJ380= Subject key identifier: 90:63:C2:4D:96:F0:19:D6:02:23:D6:86:5B:69:3E:ED:CD:CD:0B:92 Authority key identifier: 3E:4C:81:30:CC:A3:0A:3F:F9:2C:9B:99:DB:54:38:DC:7F:3E:28:30 Certificate issuer: /CN=3e4c8130cca30a3ff92c9b99db5438dc7f3e2830 Certificate serial: 019AF23F7F8786850D4BA9368E021E9F8E66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PkyBMMyjCj_5LJuZ21Q43H8-KDA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft Manifest number: 147B Signing time: Sat 06 Dec 2025 06:00:38 +0000 Manifest this update: Sat 06 Dec 2025 06:00:38 +0000 Manifest next update: Sun 07 Dec 2025 06:00:38 +0000 Files and hashes: 1: PkyBMMyjCj_5LJuZ21Q43H8-KDA.crl (hash: Lml0Q96Ub+XDKwcLe6cTWo5H9RrqBstt7HMyyQh1DG0=) 2: WUGlCtJw6cpU2FG2Edk0WX6jTy8.roa (hash: JBmFXCHcBO6dIcBHrxlCuuoBtse/nvSs/yMZuy61tLs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.crl rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft rsync://rpki.ripe.net/repository/DEFAULT/PkyBMMyjCj_5LJuZ21Q43H8-KDA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:7f:87:86:85:0d:4b:a9:36:8e:02:1e:9f:8e:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e4c8130cca30a3ff92c9b99db5438dc7f3e2830 Validity Not Before: Dec 6 06:00:38 2025 GMT Not After : Dec 7 06:00:38 2025 GMT Subject: CN=9063c24d96f019d60223d6865b693eedcdcd0b92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d9:aa:3c:40:b3:31:03:6c:f9:66:86:84:04: 91:ec:87:b0:50:eb:96:04:ea:e0:23:1a:8c:eb:82: 80:16:fc:a6:60:cd:d2:96:78:77:a0:84:f9:e4:d5: 57:bf:65:f9:38:9e:2e:c3:cc:1c:bf:33:12:25:8d: b6:0b:e6:a1:05:b2:77:12:93:2b:bb:eb:bb:44:bc: fe:78:85:53:ba:dc:69:65:28:b3:0c:b9:63:dd:07: 0a:be:e2:06:db:74:bc:8a:9d:b0:a6:c8:27:88:62: 62:04:11:dc:39:5d:d1:43:60:f4:40:8f:52:e8:bd: 47:3c:4a:f8:d9:2d:dd:3c:65:0c:9d:70:13:91:f8: de:e3:15:37:10:8b:00:15:c9:8e:d6:be:e3:44:4d: 42:27:47:22:e6:9b:2f:f5:49:2b:6e:43:4c:28:71: 99:59:99:78:63:7e:c7:1c:46:c0:f5:57:76:b6:3a: e2:7c:b6:70:14:1f:97:5f:c0:5f:cd:ad:d7:37:8d: e3:71:c9:29:32:4f:54:9f:98:37:66:ba:f8:84:81: 5c:9a:0f:bc:64:7b:b3:d3:55:59:49:8f:44:44:f4: c6:6d:c2:02:a3:d9:4a:b1:b1:38:3b:3a:19:d5:f0: 25:19:da:48:87:bd:b4:71:58:2e:24:4a:61:0f:7c: b5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:63:C2:4D:96:F0:19:D6:02:23:D6:86:5B:69:3E:ED:CD:CD:0B:92 X509v3 Authority Key Identifier: keyid:3E:4C:81:30:CC:A3:0A:3F:F9:2C:9B:99:DB:54:38:DC:7F:3E:28:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkyBMMyjCj_5LJuZ21Q43H8-KDA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:06:55:d4:3f:f5:bf:f3:bc:67:53:c7:b2:bb:03:b4:64:8c: 4e:0e:e4:72:fd:87:92:d3:34:46:ac:3d:cf:fe:15:c3:9f:a0: b9:4a:ae:ca:c7:ca:6b:bf:d9:71:45:b2:e7:b3:a8:53:1f:cf: df:c7:8e:17:c4:3c:07:c7:21:fc:22:83:a6:d8:13:4b:a1:90: 15:41:d6:6b:62:40:a8:db:70:09:40:aa:cc:30:c0:df:00:54: 4b:d2:6a:14:32:a1:a1:6a:80:01:c8:af:e6:cd:47:09:cd:d2: c5:b6:a0:b2:52:c4:ef:71:85:00:e8:c8:86:e2:d7:f1:f7:08: 99:0d:c0:9c:24:af:3c:56:b3:bd:83:f9:26:cc:99:9b:2a:1e: 33:af:1e:f2:9e:e6:22:c5:3b:73:d1:ee:32:6c:5a:fe:b5:42: 3a:76:c2:13:e7:70:be:54:8a:ea:cc:d3:ca:3a:a3:d7:5e:e3: 39:46:bb:c5:b8:f6:41:b0:3e:06:c1:f7:59:4b:87:7e:7b:3a: e7:3a:50:86:34:8e:73:a6:63:a9:e7:03:59:61:14:c8:cd:6f: 4a:c5:fd:a9:39:8c:d6:bb:77:ff:c0:fe:c0:6e:92:53:97:35: 9a:4b:25:b0:1c:56:78:e2:58:1d:b4:f8:8a:44:99:0b:be:99: 54:39:f7:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP3+HhoUNS6k2jgIen45mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNGM4MTMwY2NhMzBhM2ZmOTJjOWI5OWRiNTQzOGRjN2Yz ZTI4MzAwHhcNMjUxMjA2MDYwMDM4WhcNMjUxMjA3MDYwMDM4WjAzMTEwLwYDVQQD Eyg5MDYzYzI0ZDk2ZjAxOWQ2MDIyM2Q2ODY1YjY5M2VlZGNkY2QwYjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNmqPECzMQNs+WaGhASR7IewUOuW BOrgIxqM64KAFvymYM3Slnh3oIT55NVXv2X5OJ4uw8wcvzMSJY22C+ahBbJ3EpMr u+u7RLz+eIVTutxpZSizDLlj3QcKvuIG23S8ip2wpsgniGJiBBHcOV3RQ2D0QI9S 6L1HPEr42S3dPGUMnXATkfje4xU3EIsAFcmO1r7jRE1CJ0ci5psv9UkrbkNMKHGZ WZl4Y37HHEbA9Vd2tjrifLZwFB+XX8Bfza3XN43jcckpMk9Un5g3Zrr4hIFcmg+8 ZHuz01VZSY9ERPTGbcICo9lKsbE4OzoZ1fAlGdpIh720cVguJEphD3y10wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJBjwk2W8BnWAiPWhltpPu3NzQuSMB8GA1UdIwQY MBaAFD5MgTDMowo/+SybmdtUONx/PigwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGt5Qk1NeWpDal81TEp1WjIxUTQzSDgtS0RBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS82YjA1MGYtYzI4Mi00YzUzLWIxNTEt ODNhZGIyMGFmMDBmLzEvUGt5Qk1NeWpDal81TEp1WjIxUTQzSDgtS0RBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS82YjA1MGYtYzI4Mi00YzUzLWIxNTEtODNhZGIyMGFmMDBm LzEvUGt5Qk1NeWpDal81TEp1WjIxUTQzSDgtS0RBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnAZV1D/1 v/O8Z1PHsrsDtGSMTg7kcv2HktM0Rqw9z/4Vw5+guUquysfKa7/ZcUWy57OoUx/P 38eOF8Q8B8ch/CKDptgTS6GQFUHWa2JAqNtwCUCqzDDA3wBUS9JqFDKhoWqAAciv 5s1HCc3SxbagslLE73GFAOjIhuLX8fcImQ3AnCSvPFazvYP5JsyZmyoeM68e8p7m IsU7c9HuMmxa/rVCOnbCE+dwvlSK6szTyjqj117jOUa7xbj2QbA+BsH3WUuHfns6 5zpQhjSOc6ZjqecDWWEUyM1vSsX9qTmM1rt3/8D+wG6SU5c1mkslsBxWeOJYHbT4 ikSZC76ZVDn3Tw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:10:56 2025 by rpki-client