This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft File: PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft (raw, json) Hash identifier: oN94cuJy1fkhXIZwdyON/x8woNtXZ6bzkepnUUM79GA= Subject key identifier: 0B:2D:58:EC:C2:90:99:7E:CF:A8:28:24:7A:ED:FA:34:30:9F:30:D3 Authority key identifier: 3C:AB:C3:DD:E8:F1:6C:F6:D9:18:A4:0F:16:82:CA:41:BE:4D:0A:41 Certificate issuer: /CN=3cabc3dde8f16cf6d918a40f1682ca41be4d0a41 Certificate serial: 019AF3BFEEA42E175003C9E0592140F34F3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKvD3ejxbPbZGKQPFoLKQb5NCkE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft Manifest number: 0E8C Signing time: Sat 06 Dec 2025 13:00:33 +0000 Manifest this update: Sat 06 Dec 2025 13:00:33 +0000 Manifest next update: Sun 07 Dec 2025 13:00:33 +0000 Files and hashes: 1: AuOuUKhz7LbWM9xXAFqUFIS1KQI.roa (hash: yQUlcBfkC7CQTeK1Wv3DBode7pqw+A1kJYyGEQOXp9g=) 2: PKvD3ejxbPbZGKQPFoLKQb5NCkE.crl (hash: CIqBV0x1I4JXVs/PE8NyUe/GZUt5G9TYCzhkFyRtGos=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.crl rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft rsync://rpki.ripe.net/repository/DEFAULT/PKvD3ejxbPbZGKQPFoLKQb5NCkE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:bf:ee:a4:2e:17:50:03:c9:e0:59:21:40:f3:4f:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cabc3dde8f16cf6d918a40f1682ca41be4d0a41 Validity Not Before: Dec 6 13:00:33 2025 GMT Not After : Dec 7 13:00:33 2025 GMT Subject: CN=0b2d58ecc290997ecfa828247aedfa34309f30d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:57:3a:0b:5c:c3:14:03:d3:39:90:50:bf:14: 3f:a2:06:9b:cb:c6:2c:a6:15:a7:ca:92:b2:ec:6b: b9:d9:c7:5e:d6:f6:93:df:e6:8d:16:5a:fe:84:3f: fa:83:1b:f4:dd:9c:a6:1b:40:17:6a:57:f8:03:f4: ed:4c:de:b0:74:3f:e4:e2:3e:ec:69:75:de:4f:92: 44:0c:81:8b:e8:2f:d7:94:8f:31:00:e2:4f:ae:72: 4c:ed:48:ef:ca:f7:fe:5a:92:3e:da:55:99:5a:57: 86:76:c6:9b:36:8d:b7:af:0e:06:a7:64:64:e7:58: 33:09:bc:ca:84:e9:83:74:e8:0d:68:48:e9:0f:8d: ba:e2:03:d5:24:b8:a8:70:87:97:20:cd:6b:d2:91: 37:a6:b1:a6:74:89:72:8a:31:91:84:35:47:d7:63: 8a:99:07:60:6f:2c:50:cc:32:aa:a6:0a:ef:85:9c: 63:0f:a1:38:73:95:31:69:8b:b1:51:ee:d5:52:57: 6f:39:ee:d9:ff:08:75:24:e1:2d:a3:cd:27:df:28: f1:a9:88:d8:1b:c0:da:f3:e6:11:e7:ca:34:55:47: 1a:25:58:c2:1d:08:8a:52:0e:84:b0:88:42:e7:82: c8:53:0f:cc:3e:24:1b:fb:8c:2a:b7:20:02:51:1e: 8b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:2D:58:EC:C2:90:99:7E:CF:A8:28:24:7A:ED:FA:34:30:9F:30:D3 X509v3 Authority Key Identifier: keyid:3C:AB:C3:DD:E8:F1:6C:F6:D9:18:A4:0F:16:82:CA:41:BE:4D:0A:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKvD3ejxbPbZGKQPFoLKQb5NCkE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:73:b9:06:2f:54:85:11:83:71:9c:e8:f6:83:f1:05:bb:41: 9b:9e:02:01:37:d2:5d:f2:6e:a4:d4:5b:95:fe:56:19:a0:c3: 74:6a:0f:79:84:29:b7:cc:4a:80:52:b9:59:99:e9:30:97:46: 0d:50:49:19:4e:69:c3:42:4b:1e:6b:00:28:09:7b:64:80:0b: e3:7e:42:39:84:b0:6c:6e:a0:7e:ad:86:ed:c9:87:55:d3:ec: 42:64:de:17:23:7b:3c:04:b8:1a:47:33:95:96:70:8a:04:cf: 89:f8:18:44:83:98:e9:60:5b:28:c2:a9:f3:7a:08:09:1d:0e: 88:13:96:5a:8c:47:d7:a8:7d:3d:17:75:00:1f:68:b2:1d:6c: 0f:af:27:32:3d:6f:18:d8:67:c2:08:f5:b6:e1:d1:63:38:66: 18:4b:c6:25:2c:75:8b:58:20:7a:eb:8a:af:d4:d8:14:6b:ce: 02:35:7e:98:c7:c0:28:e6:ac:42:57:f7:28:ea:df:e2:02:a2: a5:23:37:c6:8f:3c:19:33:e0:bd:70:67:84:79:e6:aa:16:67: f8:27:fa:fe:6f:5b:a9:c5:b1:51:ee:c9:82:f4:bf:56:23:ba: 8c:c4:7f:55:09:fd:31:18:c3:c3:f7:62:9b:60:16:b0:a7:61: b4:2d:50:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzv+6kLhdQA8ngWSFA808+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjYWJjM2RkZThmMTZjZjZkOTE4YTQwZjE2ODJjYTQxYmU0 ZDBhNDEwHhcNMjUxMjA2MTMwMDMzWhcNMjUxMjA3MTMwMDMzWjAzMTEwLwYDVQQD EygwYjJkNThlY2MyOTA5OTdlY2ZhODI4MjQ3YWVkZmEzNDMwOWYzMGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1c6C1zDFAPTOZBQvxQ/ogaby8Ys phWnypKy7Gu52cde1vaT3+aNFlr+hD/6gxv03ZymG0AXalf4A/TtTN6wdD/k4j7s aXXeT5JEDIGL6C/XlI8xAOJPrnJM7Ujvyvf+WpI+2lWZWleGdsabNo23rw4Gp2Rk 51gzCbzKhOmDdOgNaEjpD4264gPVJLiocIeXIM1r0pE3prGmdIlyijGRhDVH12OK mQdgbyxQzDKqpgrvhZxjD6E4c5UxaYuxUe7VUldvOe7Z/wh1JOEto80n3yjxqYjY G8Da8+YR58o0VUcaJVjCHQiKUg6EsIhC54LIUw/MPiQb+4wqtyACUR6LnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAstWOzCkJl+z6goJHrt+jQwnzDTMB8GA1UdIwQY MBaAFDyrw93o8Wz22RikDxaCykG+TQpBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEt2RDNlanhiUGJaR0tRUEZvTEtRYjVOQ2tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC85MTA2MzMtZGU0Ni00YWUyLWExNWEt MjljODdjOGQ4MzM1LzEvUEt2RDNlanhiUGJaR0tRUEZvTEtRYjVOQ2tFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC85MTA2MzMtZGU0Ni00YWUyLWExNWEtMjljODdjOGQ4MzM1 LzEvUEt2RDNlanhiUGJaR0tRUEZvTEtRYjVOQ2tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlnO5Bi9U hRGDcZzo9oPxBbtBm54CATfSXfJupNRblf5WGaDDdGoPeYQpt8xKgFK5WZnpMJdG DVBJGU5pw0JLHmsAKAl7ZIAL435COYSwbG6gfq2G7cmHVdPsQmTeFyN7PAS4Gkcz lZZwigTPifgYRIOY6WBbKMKp83oICR0OiBOWWoxH16h9PRd1AB9osh1sD68nMj1v GNhnwgj1tuHRYzhmGEvGJSx1i1ggeuuKr9TYFGvOAjV+mMfAKOasQlf3KOrf4gKi pSM3xo88GTPgvXBnhHnmqhZn+Cf6/m9bqcWxUe7JgvS/ViO6jMR/VQn9MRjDw/di m2AWsKdhtC1Qxg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:42:11 2025 by rpki-client