This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft File: PNKqcak6qcEye3NTigR45PeC9vc.mft (raw, json) Hash identifier: 2R24ljP0/OfusYNVSjBxjM0SAnyzQqCBE0OsEo3ONxc= Subject key identifier: 92:38:B3:D9:0F:B5:79:99:85:1C:4F:91:D5:04:3F:0A:BD:8D:C1:64 Authority key identifier: 3C:D2:AA:71:A9:3A:A9:C1:32:7B:73:53:8A:04:78:E4:F7:82:F6:F7 Certificate issuer: /CN=3cd2aa71a93aa9c1327b73538a0478e4f782f6f7 Certificate serial: 019AF2098EE05270D53BC835AC3B9C641B89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNKqcak6qcEye3NTigR45PeC9vc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft Manifest number: 0EDB Signing time: Sat 06 Dec 2025 05:01:43 +0000 Manifest this update: Sat 06 Dec 2025 05:01:43 +0000 Manifest next update: Sun 07 Dec 2025 05:01:43 +0000 Files and hashes: 1: PNKqcak6qcEye3NTigR45PeC9vc.crl (hash: DP+yVAPRzp/CaCdYlG0lIQy8fHTizGGNipnw7/C5j30=) 2: mkUXmgygJpYBMQ2Igm9L-tv-j1s.roa (hash: 9Fpz5SGKImESLClWOjbnaFAMtUoqIoi74+/yK2yHMuQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.crl rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft rsync://rpki.ripe.net/repository/DEFAULT/PNKqcak6qcEye3NTigR45PeC9vc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:8e:e0:52:70:d5:3b:c8:35:ac:3b:9c:64:1b:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cd2aa71a93aa9c1327b73538a0478e4f782f6f7 Validity Not Before: Dec 6 05:01:43 2025 GMT Not After : Dec 7 05:01:43 2025 GMT Subject: CN=9238b3d90fb57999851c4f91d5043f0abd8dc164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b7:a1:20:fc:26:8a:7f:10:67:a1:d1:cb:d3: c5:dc:da:6c:29:90:1a:e9:52:2e:71:1b:38:dd:97: d0:f1:a1:da:9d:df:d9:9b:5b:59:d2:ca:b6:a0:c9: 27:a2:f4:88:3d:36:9e:d6:cf:b5:41:7d:5e:de:0c: c5:17:d2:23:a4:11:80:df:64:df:4f:50:02:5f:0e: 77:7d:bf:56:d4:75:1f:d8:e7:27:8d:8c:32:1a:d3: a5:5e:31:76:1d:54:91:37:42:3a:48:7f:6f:59:ee: 4d:63:5b:15:53:63:78:43:c1:ea:f5:5e:76:81:11: 16:dd:d4:3e:0f:af:5e:02:24:58:4e:e1:49:3b:4e: 9a:fc:3e:7b:05:22:93:87:01:5e:7a:9c:25:03:6a: 6d:76:e7:c0:cc:e9:f4:2d:e7:3d:e0:f7:ad:02:60: 4a:0c:18:bd:82:48:8c:7a:c2:b3:fc:23:96:81:cc: 6b:2f:1f:eb:e4:34:9c:1f:eb:7e:b9:35:cf:05:02: 9b:20:08:1f:c1:e2:61:db:20:de:ba:02:51:d4:5f: 65:f1:e2:67:84:4f:c9:07:05:28:54:d4:3c:02:66: e0:6b:79:c0:a0:46:88:8e:9e:86:8f:bc:59:42:87: 9e:67:4e:bb:85:b2:bc:20:8e:ea:18:8e:af:20:a9: be:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:38:B3:D9:0F:B5:79:99:85:1C:4F:91:D5:04:3F:0A:BD:8D:C1:64 X509v3 Authority Key Identifier: keyid:3C:D2:AA:71:A9:3A:A9:C1:32:7B:73:53:8A:04:78:E4:F7:82:F6:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNKqcak6qcEye3NTigR45PeC9vc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:86:9b:17:12:5d:71:16:d8:7a:76:53:1c:70:b6:ba:ca:bd: eb:85:6b:ba:9a:ef:a8:35:3a:e2:f8:81:54:74:ae:a7:a4:65: 5d:b0:71:eb:c8:98:83:35:41:35:3f:f9:5d:cb:2e:9d:4e:d9: ca:8f:61:ea:fd:44:e0:9a:d0:8a:22:46:50:3f:ef:1d:bb:e1: 34:ec:1d:e4:09:93:a5:32:0a:67:23:8c:80:3c:98:22:97:c4: a9:12:59:3e:64:57:5b:9c:bc:91:d5:7d:1f:7a:44:61:c9:56: 91:f8:dd:68:97:3d:22:c4:94:36:94:6d:4c:81:69:bb:14:56: ae:6d:b6:ea:5c:47:3d:b6:de:6b:47:27:57:40:97:af:d0:09: 2a:f4:68:a9:59:7e:74:52:3d:95:e9:9c:9c:0c:26:5c:b1:6a: 78:45:cf:78:c8:f1:a5:be:fb:79:be:e0:7f:55:66:5b:a3:2f: bf:87:7f:2a:22:a4:4e:ae:f3:5d:55:3c:8c:de:d5:e2:8d:d4: 34:38:00:68:78:c6:79:d8:67:98:d3:e1:7a:9e:a6:b9:65:3c: 9c:3d:a1:c8:95:c2:43:57:3a:52:36:6a:28:10:08:54:da:45: 54:39:14:db:a1:ad:7d:f6:c1:db:bc:fc:76:17:5e:ac:32:04: e4:83:d0:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCY7gUnDVO8g1rDucZBuJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjZDJhYTcxYTkzYWE5YzEzMjdiNzM1MzhhMDQ3OGU0Zjc4 MmY2ZjcwHhcNMjUxMjA2MDUwMTQzWhcNMjUxMjA3MDUwMTQzWjAzMTEwLwYDVQQD Eyg5MjM4YjNkOTBmYjU3OTk5ODUxYzRmOTFkNTA0M2YwYWJkOGRjMTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7ehIPwmin8QZ6HRy9PF3NpsKZAa 6VIucRs43ZfQ8aHand/Zm1tZ0sq2oMknovSIPTae1s+1QX1e3gzFF9IjpBGA32Tf T1ACXw53fb9W1HUf2OcnjYwyGtOlXjF2HVSRN0I6SH9vWe5NY1sVU2N4Q8Hq9V52 gREW3dQ+D69eAiRYTuFJO06a/D57BSKThwFeepwlA2ptdufAzOn0Lec94PetAmBK DBi9gkiMesKz/COWgcxrLx/r5DScH+t+uTXPBQKbIAgfweJh2yDeugJR1F9l8eJn hE/JBwUoVNQ8Ambga3nAoEaIjp6Gj7xZQoeeZ067hbK8II7qGI6vIKm+dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJI4s9kPtXmZhRxPkdUEPwq9jcFkMB8GA1UdIwQY MBaAFDzSqnGpOqnBMntzU4oEeOT3gvb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUE5LcWNhazZxY0V5ZTNOVGlnUjQ1UGVDOXZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83NTdmMmItNGYwMS00ZTcwLWIzZDUt NGZkYmE4NjdlNDdhLzEvUE5LcWNhazZxY0V5ZTNOVGlnUjQ1UGVDOXZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My83NTdmMmItNGYwMS00ZTcwLWIzZDUtNGZkYmE4NjdlNDdh LzEvUE5LcWNhazZxY0V5ZTNOVGlnUjQ1UGVDOXZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfIabFxJd cRbYenZTHHC2usq964VruprvqDU64viBVHSup6RlXbBx68iYgzVBNT/5XcsunU7Z yo9h6v1E4JrQiiJGUD/vHbvhNOwd5AmTpTIKZyOMgDyYIpfEqRJZPmRXW5y8kdV9 H3pEYclWkfjdaJc9IsSUNpRtTIFpuxRWrm226lxHPbbea0cnV0CXr9AJKvRoqVl+ dFI9lemcnAwmXLFqeEXPeMjxpb77eb7gf1VmW6Mvv4d/KiKkTq7zXVU8jN7V4o3U NDgAaHjGedhnmNPhep6muWU8nD2hyJXCQ1c6UjZqKBAIVNpFVDkU26GtffbB27z8 dhderDIE5IPQ1w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:05:00 2025 by rpki-client