This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.mft File: pPAKrld-dFH4jqYEv2ozc0zQMAk.mft (raw, json) Hash identifier: vCy9mJgqGYMuMsR+TgLXL0Q9tlKuBsrlMetmzyQU+kA= Subject key identifier: 85:72:58:A7:E1:C2:88:30:F5:E2:E4:E8:63:A8:0B:77:8A:C4:F4:B3 Authority key identifier: A4:F0:0A:AE:57:7E:74:51:F8:8E:A6:04:BF:6A:33:73:4C:D0:30:09 Certificate issuer: /CN=a4f00aae577e7451f88ea604bf6a33734cd03009 Certificate serial: 019AF208C4986622365998B417502C17D0AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPAKrld-dFH4jqYEv2ozc0zQMAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.mft Manifest number: 0FC0 Signing time: Sat 06 Dec 2025 05:00:52 +0000 Manifest this update: Sat 06 Dec 2025 05:00:52 +0000 Manifest next update: Sun 07 Dec 2025 05:00:52 +0000 Files and hashes: 1: XRYyvh6J7DkVdKbz1yypWyD6-m0.roa (hash: 6+dNcwPteiKzyDYvKh6xy6mmMEyhqVqNL5Sm9+oU6rA=) 2: pPAKrld-dFH4jqYEv2ozc0zQMAk.crl (hash: 3kijZlwitgFdr5VpViqFKbXseC20x687MMR17fO1k+A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.crl rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.mft rsync://rpki.ripe.net/repository/DEFAULT/pPAKrld-dFH4jqYEv2ozc0zQMAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:c4:98:66:22:36:59:98:b4:17:50:2c:17:d0:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4f00aae577e7451f88ea604bf6a33734cd03009 Validity Not Before: Dec 6 05:00:52 2025 GMT Not After : Dec 7 05:00:52 2025 GMT Subject: CN=857258a7e1c28830f5e2e4e863a80b778ac4f4b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d2:1f:cb:c8:20:81:04:64:77:8d:8b:31:17: 9e:26:52:b1:c9:2a:20:ea:11:35:0f:7b:bb:c9:e7: a1:3a:c2:e2:8e:c8:41:cb:64:46:fd:ec:9b:c1:1c: a1:c1:3d:6b:2b:71:b1:a3:b6:48:4b:30:32:2f:b3: b0:03:db:f1:71:ee:62:c7:df:50:6c:e1:8b:d8:9f: a0:bb:0a:7d:0a:1f:d4:8b:33:d5:cd:97:8f:4c:b4: 0b:01:a3:ef:71:59:79:dd:d2:a3:a2:2a:48:21:de: 2c:79:1c:94:f0:1d:a2:d5:cb:ed:3c:2d:cd:77:b6: 10:57:7a:62:c3:23:c6:23:4c:6c:e8:d0:e8:e2:b0: 48:99:a9:7f:6d:0f:b5:b4:77:ba:a9:cb:a9:17:66: a6:01:a7:77:a8:1a:2f:68:ab:07:e6:69:1e:09:91: c6:3c:a0:05:27:b3:8f:53:74:3a:0c:fc:80:9d:54: 0d:76:bd:45:9e:35:3e:b3:fc:64:b9:a3:7f:e8:13: cb:02:39:e8:46:bf:dc:3d:fc:3e:17:ef:bb:8b:6f: 42:97:67:ce:ee:54:21:76:95:c5:d2:2e:c7:d7:68: a1:41:98:93:0b:dd:60:b9:19:31:a8:ad:e7:07:e4: 29:7f:a5:c4:8b:6e:b8:5e:ad:77:d3:06:22:49:50: ad:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:72:58:A7:E1:C2:88:30:F5:E2:E4:E8:63:A8:0B:77:8A:C4:F4:B3 X509v3 Authority Key Identifier: keyid:A4:F0:0A:AE:57:7E:74:51:F8:8E:A6:04:BF:6A:33:73:4C:D0:30:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPAKrld-dFH4jqYEv2ozc0zQMAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:89:21:27:91:e0:a0:0b:04:dd:b6:94:46:00:32:f7:03:48: 53:8a:66:8e:5f:4b:f8:95:2c:83:db:1d:5b:a4:fa:6e:59:a5: ad:87:14:21:9a:a3:2d:95:92:5e:fe:4f:7f:59:88:3b:94:d7: 14:33:b3:ac:98:1d:96:08:2b:22:21:68:56:56:33:c8:80:67: b7:63:7f:49:0a:67:87:4a:d8:ad:d5:84:7d:cc:b2:8f:a9:0f: 72:b5:c8:46:b4:0d:e9:ee:71:3f:1d:c9:0a:07:00:a9:48:e5: 9f:32:80:b2:5e:5f:40:73:96:11:66:95:3f:f0:52:a2:41:f5: bf:e5:56:39:a2:64:c2:ab:1d:c3:ed:30:f2:17:79:17:68:2e: 8a:d5:20:e7:63:4b:7f:d3:73:27:8a:e2:ad:30:bd:c7:8e:59: 9f:02:e7:ab:e5:48:1c:35:44:54:52:d3:68:e2:09:1a:e5:0f: e3:ef:a4:4e:9f:9f:45:71:ad:e4:e4:2f:c5:14:81:24:0e:61: 7d:8a:20:02:64:f5:ef:4f:59:b7:d4:d3:35:f3:26:f7:42:d3: 49:6c:97:bb:fa:48:e8:64:70:f2:3b:12:1a:8f:ac:45:3d:7e: 3b:af:d8:f0:6d:3e:bd:9f:ae:6d:a1:2b:f7:09:d2:ce:38:cc: 00:86:5a:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCMSYZiI2WZi0F1AsF9CvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZjAwYWFlNTc3ZTc0NTFmODhlYTYwNGJmNmEzMzczNGNk MDMwMDkwHhcNMjUxMjA2MDUwMDUyWhcNMjUxMjA3MDUwMDUyWjAzMTEwLwYDVQQD Eyg4NTcyNThhN2UxYzI4ODMwZjVlMmU0ZTg2M2E4MGI3NzhhYzRmNGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9Ify8gggQRkd42LMReeJlKxySog 6hE1D3u7yeehOsLijshBy2RG/eybwRyhwT1rK3Gxo7ZISzAyL7OwA9vxce5ix99Q bOGL2J+guwp9Ch/UizPVzZePTLQLAaPvcVl53dKjoipIId4seRyU8B2i1cvtPC3N d7YQV3piwyPGI0xs6NDo4rBImal/bQ+1tHe6qcupF2amAad3qBovaKsH5mkeCZHG PKAFJ7OPU3Q6DPyAnVQNdr1FnjU+s/xkuaN/6BPLAjnoRr/cPfw+F++7i29Cl2fO 7lQhdpXF0i7H12ihQZiTC91guRkxqK3nB+Qpf6XEi264Xq130wYiSVCt8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIVyWKfhwogw9eLk6GOoC3eKxPSzMB8GA1UdIwQY MBaAFKTwCq5XfnRR+I6mBL9qM3NM0DAJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFBBS3JsZC1kRkg0anFZRXYyb3pjMHpRTUFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi81OGE5NGEtOWUyOC00N2E1LTlmZDYt OWM5MWIxYzUxNThhLzEvcFBBS3JsZC1kRkg0anFZRXYyb3pjMHpRTUFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi81OGE5NGEtOWUyOC00N2E1LTlmZDYtOWM5MWIxYzUxNThh LzEvcFBBS3JsZC1kRkg0anFZRXYyb3pjMHpRTUFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsIkhJ5Hg oAsE3baURgAy9wNIU4pmjl9L+JUsg9sdW6T6blmlrYcUIZqjLZWSXv5Pf1mIO5TX FDOzrJgdlggrIiFoVlYzyIBnt2N/SQpnh0rYrdWEfcyyj6kPcrXIRrQN6e5xPx3J CgcAqUjlnzKAsl5fQHOWEWaVP/BSokH1v+VWOaJkwqsdw+0w8hd5F2guitUg52NL f9NzJ4rirTC9x45ZnwLnq+VIHDVEVFLTaOIJGuUP4++kTp+fRXGt5OQvxRSBJA5h fYogAmT1709Zt9TTNfMm90LTSWyXu/pI6GRw8jsSGo+sRT1+O6/Y8G0+vZ+ubaEr 9wnSzjjMAIZaPw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:32:58 2025 by rpki-client