This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft File: 1PkhKd96qnFX4VlzwkdT4RjJBX0.mft (raw, json) Hash identifier: U0lm/He10qgoFCyQuxmzb+fpNDbuHUPLMOTp4T0Hzqc= Subject key identifier: 47:7F:18:CA:2E:F3:DD:CC:49:5C:82:3F:9F:DE:21:91:35:F5:1D:02 Authority key identifier: D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D Certificate issuer: /CN=d4f92129df7aaa7157e15973c24753e118c9057d Certificate serial: 019AF27742E0160C293AD9A1E72EE4355106 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 07:01:33 +0000 Manifest this update: Sat 06 Dec 2025 07:01:33 +0000 Manifest next update: Sun 07 Dec 2025 07:01:33 +0000 Files and hashes: 1: 1PkhKd96qnFX4VlzwkdT4RjJBX0.crl (hash: uEa1IcVLyIMu4fzLq+VC32lPytJVVU2jPyPA9q8ntY4=) 2: DBpy8GqM15mwZnJSLrFuy79x-ls.roa (hash: CRpLC9eGaIL3iQD9GXAwS04kra6vLT84+/umQLGWKqg=) 3: u7kimDAvt4u6Uslfb6Q8dwxXJ4U.roa (hash: 3A49iTtZkWt31Q7WNjMXCnTT1/h0nEZHLn7n09wUli4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.crl rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:42:e0:16:0c:29:3a:d9:a1:e7:2e:e4:35:51:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4f92129df7aaa7157e15973c24753e118c9057d Validity Not Before: Dec 6 07:01:33 2025 GMT Not After : Dec 7 07:01:33 2025 GMT Subject: CN=477f18ca2ef3ddcc495c823f9fde219135f51d02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0f:fd:b5:bc:9c:2f:e8:09:6c:62:44:8b:be: fa:3e:64:47:3f:2d:7e:aa:29:44:d2:78:40:96:4a: 7a:24:17:21:e9:df:51:1d:c8:2a:22:ad:06:9e:e3: 1a:0e:e5:24:6d:b1:c4:30:30:8b:5b:3e:22:ee:52: a3:22:0b:ae:f9:84:f3:09:3a:f5:50:f3:ba:91:3b: b9:14:2b:90:3a:a2:db:80:50:e9:53:4b:4a:f1:c5: 42:98:38:29:56:85:75:07:61:b0:56:55:23:5a:64: 7b:d5:01:ba:b1:9c:49:c9:18:ca:4b:77:bc:5d:2b: 7a:17:42:cf:0e:82:5c:e7:d3:8a:ee:a8:1a:89:05: 8e:d4:28:7b:e6:ee:90:39:40:ac:35:40:92:b4:32: 6b:f2:a0:fe:b1:01:40:b0:cf:d7:fc:d1:4b:e0:68: d9:84:b8:fc:15:74:21:d8:fc:92:10:0b:f1:dc:72: b4:c8:0d:41:8f:b6:3e:e7:39:20:3e:d9:ee:d0:0d: 68:eb:16:5f:23:a9:3b:2d:c3:21:59:0c:a3:36:fa: 07:e2:35:27:c7:31:ad:f2:a9:b6:85:70:36:b8:af: 67:b7:12:e8:c0:00:31:41:41:4a:e3:5a:ec:f0:7b: 4f:a4:3a:c7:be:9d:d9:97:c6:d7:4f:af:d3:9d:e1: 21:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:7F:18:CA:2E:F3:DD:CC:49:5C:82:3F:9F:DE:21:91:35:F5:1D:02 X509v3 Authority Key Identifier: keyid:D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:3a:e0:06:58:69:4a:be:55:b0:61:be:60:95:e6:be:50:36: 90:ca:5e:5e:48:c7:93:f6:42:60:3b:b9:ac:93:59:2f:1c:e9: 33:3d:4f:3d:47:9c:51:a2:42:00:53:98:c1:bc:84:6a:01:0f: c4:51:fc:6c:b1:f5:e0:72:d2:bf:8f:da:e8:16:4f:3f:48:3a: ed:5f:d0:49:13:2f:de:3c:3c:5f:86:f0:66:35:98:ce:47:2d: b9:73:90:a0:e8:ca:3c:41:25:4b:5c:97:db:88:24:5a:c4:17: bb:b7:bc:3d:c8:2f:98:61:21:6e:20:4c:9d:02:6a:8f:76:70: cf:89:7e:bb:c2:fd:be:e1:98:e4:6b:d5:cb:9c:0a:72:6d:a1: bb:c2:1a:6f:73:d6:9b:4a:76:09:be:f0:ae:1f:9d:46:50:e9: 5c:a8:a9:c6:53:e2:72:8a:40:8c:16:ea:85:72:51:59:a0:9e: 0f:2d:26:87:a7:e5:99:ff:0f:0f:55:bb:db:5a:e6:fa:6f:d9: 4c:ad:be:84:68:19:a1:13:fc:18:35:08:81:76:a6:64:9e:d6: 18:44:d0:ad:89:c0:73:f4:93:ae:a4:a5:a9:d7:a6:a6:8a:50: 78:9c:0e:5b:a0:3a:01:f6:9f:4d:66:14:a5:bb:b1:d7:23:d3: db:5f:3a:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryd0LgFgwpOtmh5y7kNVEGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ZjkyMTI5ZGY3YWFhNzE1N2UxNTk3M2MyNDc1M2UxMThj OTA1N2QwHhcNMjUxMjA2MDcwMTMzWhcNMjUxMjA3MDcwMTMzWjAzMTEwLwYDVQQD Eyg0NzdmMThjYTJlZjNkZGNjNDk1YzgyM2Y5ZmRlMjE5MTM1ZjUxZDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxA/9tbycL+gJbGJEi776PmRHPy1+ qilE0nhAlkp6JBch6d9RHcgqIq0GnuMaDuUkbbHEMDCLWz4i7lKjIguu+YTzCTr1 UPO6kTu5FCuQOqLbgFDpU0tK8cVCmDgpVoV1B2GwVlUjWmR71QG6sZxJyRjKS3e8 XSt6F0LPDoJc59OK7qgaiQWO1Ch75u6QOUCsNUCStDJr8qD+sQFAsM/X/NFL4GjZ hLj8FXQh2PySEAvx3HK0yA1Bj7Y+5zkgPtnu0A1o6xZfI6k7LcMhWQyjNvoH4jUn xzGt8qm2hXA2uK9ntxLowAAxQUFK41rs8HtPpDrHvp3Zl8bXT6/TneEhBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEd/GMou893MSVyCP5/eIZE19R0CMB8GA1UdIwQY MBaAFNT5ISnfeqpxV+FZc8JHU+EYyQV9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVBraEtkOTZxbkZYNFZsendrZFQ0UmpKQlgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC85Y2ZlNWQtNTc3MC00YjVkLTg5MzUt OWYzOGM4YjhhOTI4LzEvMVBraEtkOTZxbkZYNFZsendrZFQ0UmpKQlgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC85Y2ZlNWQtNTc3MC00YjVkLTg5MzUtOWYzOGM4YjhhOTI4 LzEvMVBraEtkOTZxbkZYNFZsendrZFQ0UmpKQlgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgzrgBlhp Sr5VsGG+YJXmvlA2kMpeXkjHk/ZCYDu5rJNZLxzpMz1PPUecUaJCAFOYwbyEagEP xFH8bLH14HLSv4/a6BZPP0g67V/QSRMv3jw8X4bwZjWYzkctuXOQoOjKPEElS1yX 24gkWsQXu7e8PcgvmGEhbiBMnQJqj3Zwz4l+u8L9vuGY5GvVy5wKcm2hu8Iab3PW m0p2Cb7wrh+dRlDpXKipxlPicopAjBbqhXJRWaCeDy0mh6flmf8PD1W721rm+m/Z TK2+hGgZoRP8GDUIgXamZJ7WGETQrYnAc/STrqSlqdempopQeJwOW6A6AfafTWYU pbux1yPT2186hg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:50:04 2025 by rpki-client