This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft File: pENNZpHm4nwoLKo3r_kPK8VL8eM.mft (raw, json) Hash identifier: zsuHTFYVvirq+XI1d9SOMURsUtMvlreYsEgfoGindw0= Subject key identifier: 64:62:4D:12:A7:7D:2F:92:78:55:64:63:93:69:BA:9E:A0:15:91:5D Authority key identifier: A4:43:4D:66:91:E6:E2:7C:28:2C:AA:37:AF:F9:0F:2B:C5:4B:F1:E3 Certificate issuer: /CN=a4434d6691e6e27c282caa37aff90f2bc54bf1e3 Certificate serial: 019AF1D214FE0CDFEB30C64AFA02C109CE6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 04:01:08 +0000 Manifest this update: Sat 06 Dec 2025 04:01:08 +0000 Manifest next update: Sun 07 Dec 2025 04:01:08 +0000 Files and hashes: 1: V4fEP3mKAgRZldstTINNuk_J6BQ.roa (hash: 8GFsD/JurXta37HamqakliSVJtpBqW+/i/sWeLhcYfE=) 2: pENNZpHm4nwoLKo3r_kPK8VL8eM.crl (hash: eW3oy8SuRBzgON7+2KululWPj4UfSLJj67UdBHCch7M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.crl rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:14:fe:0c:df:eb:30:c6:4a:fa:02:c1:09:ce:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4434d6691e6e27c282caa37aff90f2bc54bf1e3 Validity Not Before: Dec 6 04:01:08 2025 GMT Not After : Dec 7 04:01:08 2025 GMT Subject: CN=64624d12a77d2f92785564639369ba9ea015915d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b4:f2:9e:70:61:ee:11:42:78:ff:52:b5:e5: 55:3b:66:5f:df:71:db:3f:e2:93:15:6e:a2:d5:e7: 34:c3:a2:f2:63:d6:d4:47:aa:5e:98:bc:94:ef:e6: 4e:e4:35:14:a1:2b:1e:d7:a9:8d:d6:91:02:ae:b9: 08:a6:84:bf:ca:9d:20:a8:30:b1:7a:15:b1:da:36: c4:54:cb:86:7b:73:71:23:08:9f:20:ea:0a:3d:c9: e6:21:ce:43:1e:28:f2:a3:d4:7e:84:b2:e6:66:85: 7b:f2:f2:43:1a:b4:a2:01:eb:7e:f8:7c:d5:07:58: 08:17:57:3f:9e:58:34:bf:78:a0:51:3e:fe:7c:92: 24:14:d4:a6:12:f7:50:d7:43:90:1f:77:aa:20:68: c9:74:80:29:44:61:1c:85:40:2e:8d:8e:27:2e:98: 11:6c:d0:3b:36:e7:96:96:d6:26:17:45:42:e9:8e: 5f:23:f0:3e:d9:db:2c:b6:20:af:16:ab:30:c7:68: 82:90:ac:67:bd:6a:bc:8f:c6:75:57:0b:d2:b6:77: ea:b1:7a:48:16:c0:3e:26:fc:5b:9a:5c:1f:94:25: 82:9c:c8:2f:11:34:52:00:c3:71:bb:0c:e9:c5:34: 70:00:c9:f6:c6:28:ea:1d:ae:8f:85:0f:9b:f5:c3: 57:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:62:4D:12:A7:7D:2F:92:78:55:64:63:93:69:BA:9E:A0:15:91:5D X509v3 Authority Key Identifier: keyid:A4:43:4D:66:91:E6:E2:7C:28:2C:AA:37:AF:F9:0F:2B:C5:4B:F1:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:87:35:d6:d0:81:69:28:08:99:d1:7e:9c:12:a3:55:84:50: 98:62:39:6f:2c:2f:b7:54:71:3e:d6:19:a9:32:bd:be:1b:62: 3b:ff:72:02:c0:a5:6f:b1:18:65:21:3e:95:81:ca:de:80:41: 7b:17:8e:87:4e:fe:df:97:d4:89:f2:ca:21:7c:15:27:80:f7: b5:66:a3:3f:b1:5f:3c:e5:eb:1f:84:61:58:d0:cb:3e:de:43: a9:6b:61:76:31:77:a2:2b:3e:80:86:ef:63:2f:03:03:f5:86: 55:b8:40:d1:c5:7a:73:bf:72:13:cb:73:e9:66:48:b6:35:d8: bd:e9:55:e8:1e:12:d0:37:52:27:55:a4:a6:48:b4:57:4b:bb: 87:79:db:ab:8f:90:23:7e:e3:8b:36:86:59:b7:c2:dc:6b:36: 9a:40:5f:47:16:69:5b:08:ca:81:ef:dc:3a:eb:c9:46:c8:d9: 58:49:9c:f8:bb:c3:93:68:7e:0c:0e:16:01:c4:94:4f:7d:18: 71:3a:8c:cf:b9:49:71:3b:ba:4c:16:f4:af:7d:07:cb:11:f4: 0f:f8:f1:53:e9:b6:4f:cf:b4:2b:07:29:17:51:51:be:0d:a7: a2:9d:1b:d8:ba:38:41:ce:e7:7f:c7:05:eb:91:d1:0f:79:f0: ee:65:ee:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0hT+DN/rMMZK+gLBCc5tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0NDM0ZDY2OTFlNmUyN2MyODJjYWEzN2FmZjkwZjJiYzU0 YmYxZTMwHhcNMjUxMjA2MDQwMTA4WhcNMjUxMjA3MDQwMTA4WjAzMTEwLwYDVQQD Eyg2NDYyNGQxMmE3N2QyZjkyNzg1NTY0NjM5MzY5YmE5ZWEwMTU5MTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37TynnBh7hFCeP9SteVVO2Zf33Hb P+KTFW6i1ec0w6LyY9bUR6pemLyU7+ZO5DUUoSse16mN1pECrrkIpoS/yp0gqDCx ehWx2jbEVMuGe3NxIwifIOoKPcnmIc5DHijyo9R+hLLmZoV78vJDGrSiAet++HzV B1gIF1c/nlg0v3igUT7+fJIkFNSmEvdQ10OQH3eqIGjJdIApRGEchUAujY4nLpgR bNA7NueWltYmF0VC6Y5fI/A+2dsstiCvFqswx2iCkKxnvWq8j8Z1VwvStnfqsXpI FsA+JvxbmlwflCWCnMgvETRSAMNxuwzpxTRwAMn2xijqHa6PhQ+b9cNXQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGRiTRKnfS+SeFVkY5Npup6gFZFdMB8GA1UdIwQY MBaAFKRDTWaR5uJ8KCyqN6/5DyvFS/HjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEVOTlpwSG00bndvTEtvM3Jfa1BLOFZMOGVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny80NWIyZDktZTg2MS00M2VmLWJjYzAt ZTk5NzVhMGJkZWE3LzEvcEVOTlpwSG00bndvTEtvM3Jfa1BLOFZMOGVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny80NWIyZDktZTg2MS00M2VmLWJjYzAtZTk5NzVhMGJkZWE3 LzEvcEVOTlpwSG00bndvTEtvM3Jfa1BLOFZMOGVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIYc11tCB aSgImdF+nBKjVYRQmGI5bywvt1RxPtYZqTK9vhtiO/9yAsClb7EYZSE+lYHK3oBB exeOh07+35fUifLKIXwVJ4D3tWajP7FfPOXrH4RhWNDLPt5DqWthdjF3ois+gIbv Yy8DA/WGVbhA0cV6c79yE8tz6WZItjXYvelV6B4S0DdSJ1Wkpki0V0u7h3nbq4+Q I37jizaGWbfC3Gs2mkBfRxZpWwjKge/cOuvJRsjZWEmc+LvDk2h+DA4WAcSUT30Y cTqMz7lJcTu6TBb0r30HyxH0D/jxU+m2T8+0KwcpF1FRvg2nop0b2Lo4Qc7nf8cF 65HRD3nw7mXucQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:46:07 2025 by rpki-client