This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.mft File: Pk1h9w-8mJgzsvOA9SzulBHk26k.mft (raw, json) Hash identifier: iEBr5LnsrcJ+0MMBnMr/Od3VIEfXJf1DYubOECeamVo= Subject key identifier: 53:68:0F:7B:26:94:4F:B0:6B:C2:60:EE:48:D1:7E:1E:3C:4B:C7:3C Authority key identifier: 3E:4D:61:F7:0F:BC:98:98:33:B2:F3:80:F5:2C:EE:94:11:E4:DB:A9 Certificate issuer: /CN=3e4d61f70fbc989833b2f380f52cee9411e4dba9 Certificate serial: 019B318CBE10EEF967302BEF989B9B650FD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pk1h9w-8mJgzsvOA9SzulBHk26k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.mft Manifest number: 079E Signing time: Thu 18 Dec 2025 13:01:05 +0000 Manifest this update: Thu 18 Dec 2025 13:01:05 +0000 Manifest next update: Fri 19 Dec 2025 13:01:05 +0000 Files and hashes: 1: Pk1h9w-8mJgzsvOA9SzulBHk26k.crl (hash: X3TALSfsR0jrpmlJzYLitIlOXJhX1GnJFJB/8pjet9M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.mft rsync://rpki.ripe.net/repository/DEFAULT/Pk1h9w-8mJgzsvOA9SzulBHk26k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8c:be:10:ee:f9:67:30:2b:ef:98:9b:9b:65:0f:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e4d61f70fbc989833b2f380f52cee9411e4dba9 Validity Not Before: Dec 18 13:01:05 2025 GMT Not After : Dec 19 13:01:05 2025 GMT Subject: CN=53680f7b26944fb06bc260ee48d17e1e3c4bc73c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e8:de:a4:7b:d8:4b:d5:3d:15:f9:43:a1:fd: af:d6:c4:be:1f:45:9b:ef:3c:57:c5:82:9e:21:b7: be:c1:2c:b7:58:c0:8f:ed:96:18:d1:ef:69:b4:d8: ed:32:07:dc:7f:7c:b0:19:df:af:d4:b0:5d:a0:0b: d0:15:2d:75:7e:00:1d:98:e1:57:f4:dc:ea:55:d9: c8:d9:f4:fe:14:c5:00:55:6f:8a:67:39:99:cf:63: 41:53:76:bc:81:c6:d0:5c:9a:d1:6a:36:65:e2:db: 8e:99:eb:5c:08:d3:8d:a7:97:4c:2f:ed:a2:7a:05: e8:1f:fe:e9:20:cc:1a:f7:7f:f9:1a:1d:d0:cf:af: 3a:6c:e4:16:59:2e:15:d7:aa:43:05:a9:9b:31:ec: 31:61:c2:14:43:df:c7:29:ff:2b:9b:58:a9:a3:9b: 5f:25:cb:7c:fd:9d:ac:53:65:04:06:da:11:b4:48: 48:04:5f:44:02:53:6a:81:29:1d:f6:2b:f7:79:ca: a0:43:43:e0:f3:b9:10:53:94:9e:79:da:fd:e5:98: b7:a2:20:97:16:33:53:44:41:55:f8:64:52:dd:6c: 2b:db:2f:2a:9e:07:55:7e:30:cc:a8:06:ce:28:39: dd:b0:a6:da:43:53:4a:f8:a7:10:f4:c2:e6:92:be: c7:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:68:0F:7B:26:94:4F:B0:6B:C2:60:EE:48:D1:7E:1E:3C:4B:C7:3C X509v3 Authority Key Identifier: keyid:3E:4D:61:F7:0F:BC:98:98:33:B2:F3:80:F5:2C:EE:94:11:E4:DB:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pk1h9w-8mJgzsvOA9SzulBHk26k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:72:dc:d1:51:82:39:73:f7:d3:c1:2d:bd:28:39:4f:8e:2d: 22:1c:97:75:f5:55:4e:16:78:9d:52:d7:ae:1e:52:d7:04:20: 4b:a7:6c:be:4f:b5:c2:52:df:6c:10:72:2d:1f:ad:65:ac:ba: 26:3e:96:b6:c5:97:79:5b:38:57:d7:97:0b:a1:f9:a9:7f:80: de:0b:f9:04:e2:d3:4f:5e:f9:f4:c2:a7:fd:d3:fb:de:53:5e: 16:88:70:32:01:14:93:59:3c:29:f2:ef:a1:2d:a9:15:c7:a0: 0d:70:64:fd:96:86:17:a2:66:05:63:2d:73:b3:c5:6d:85:c4: c7:de:df:48:a3:e5:3f:90:93:98:41:2a:98:36:9e:3c:f4:1f: 47:c1:6f:84:d9:b1:75:a8:38:48:92:c5:8a:cb:15:60:b6:4f: d1:63:cb:07:e3:65:92:41:d4:e5:bf:ff:32:bf:83:1e:61:df: e1:be:bc:79:5d:0c:f7:ec:91:82:42:5c:16:06:a4:8c:2c:e0: 77:5e:a4:28:bb:3e:f2:76:b1:bb:0d:e9:f7:4e:df:f5:23:b3: ef:be:65:29:46:a4:17:05:bc:11:03:35:ee:74:4a:96:d6:fa: 5e:6e:bf:28:5d:9b:b8:2f:10:ee:4d:a3:25:88:8f:24:a3:de: 6f:21:d7:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjL4Q7vlnMCvvmJubZQ/RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNGQ2MWY3MGZiYzk4OTgzM2IyZjM4MGY1MmNlZTk0MTFl NGRiYTkwHhcNMjUxMjE4MTMwMTA1WhcNMjUxMjE5MTMwMTA1WjAzMTEwLwYDVQQD Eyg1MzY4MGY3YjI2OTQ0ZmIwNmJjMjYwZWU0OGQxN2UxZTNjNGJjNzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkejepHvYS9U9FflDof2v1sS+H0Wb 7zxXxYKeIbe+wSy3WMCP7ZYY0e9ptNjtMgfcf3ywGd+v1LBdoAvQFS11fgAdmOFX 9NzqVdnI2fT+FMUAVW+KZzmZz2NBU3a8gcbQXJrRajZl4tuOmetcCNONp5dML+2i egXoH/7pIMwa93/5Gh3Qz686bOQWWS4V16pDBambMewxYcIUQ9/HKf8rm1ipo5tf Jct8/Z2sU2UEBtoRtEhIBF9EAlNqgSkd9iv3ecqgQ0Pg87kQU5Seedr95Zi3oiCX FjNTREFV+GRS3Wwr2y8qngdVfjDMqAbOKDndsKbaQ1NK+KcQ9MLmkr7HmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFNoD3smlE+wa8Jg7kjRfh48S8c8MB8GA1UdIwQY MBaAFD5NYfcPvJiYM7LzgPUs7pQR5NupMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGsxaDl3LThtSmd6c3ZPQTlTenVsQkhrMjZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9jMzRkMmQtM2YyOS00YTZlLTk5Yjkt ZDUwOTA3MDAwNjA5LzEvUGsxaDl3LThtSmd6c3ZPQTlTenVsQkhrMjZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9jMzRkMmQtM2YyOS00YTZlLTk5YjktZDUwOTA3MDAwNjA5 LzEvUGsxaDl3LThtSmd6c3ZPQTlTenVsQkhrMjZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp3Lc0VGC OXP308EtvSg5T44tIhyXdfVVThZ4nVLXrh5S1wQgS6dsvk+1wlLfbBByLR+tZay6 Jj6WtsWXeVs4V9eXC6H5qX+A3gv5BOLTT1759MKn/dP73lNeFohwMgEUk1k8KfLv oS2pFcegDXBk/ZaGF6JmBWMtc7PFbYXEx97fSKPlP5CTmEEqmDaePPQfR8FvhNmx dag4SJLFissVYLZP0WPLB+NlkkHU5b//Mr+DHmHf4b68eV0M9+yRgkJcFgakjCzg d16kKLs+8naxuw3p907f9SOz775lKUakFwW8EQM17nRKltb6Xm6/KF2buC8Q7k2j JYiPJKPebyHXpg== -----END CERTIFICATE-----Generated at Thu Dec 18 19:10:21 2025 by rpki-client