This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.mft File: pWMWxxKYMeBREHlTLe2B3BLIHaA.mft (raw, json) Hash identifier: fSyc0vOhKQi0YTI6QVZewv428+F1F8/6z1pTYLIm7uo= Subject key identifier: 0F:76:C9:BD:F9:A4:E9:C5:D0:5A:6E:62:68:39:C5:13:C8:C6:6C:71 Authority key identifier: A5:63:16:C7:12:98:31:E0:51:10:79:53:2D:ED:81:DC:12:C8:1D:A0 Certificate issuer: /CN=a56316c7129831e0511079532ded81dc12c81da0 Certificate serial: 019AF3C00B28B789AA4AFD967ED879BEF007 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWMWxxKYMeBREHlTLe2B3BLIHaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.mft Manifest number: 0D71 Signing time: Sat 06 Dec 2025 13:00:40 +0000 Manifest this update: Sat 06 Dec 2025 13:00:40 +0000 Manifest next update: Sun 07 Dec 2025 13:00:40 +0000 Files and hashes: 1: XAMH6mQExatvC2LMnoXanctLKzE.roa (hash: pCAATiBl9IRxnVx1ZfARnp3JybBqcsAW/QN7pstrTq0=) 2: pWMWxxKYMeBREHlTLe2B3BLIHaA.crl (hash: LaQaz/T26T9uHo+jC4ZWOq6l3Hlxx4nn+7CjnAnu2Uo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.crl rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.mft rsync://rpki.ripe.net/repository/DEFAULT/pWMWxxKYMeBREHlTLe2B3BLIHaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:0b:28:b7:89:aa:4a:fd:96:7e:d8:79:be:f0:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a56316c7129831e0511079532ded81dc12c81da0 Validity Not Before: Dec 6 13:00:40 2025 GMT Not After : Dec 7 13:00:40 2025 GMT Subject: CN=0f76c9bdf9a4e9c5d05a6e626839c513c8c66c71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:24:c4:cb:7e:ac:03:52:56:d8:33:ca:2c:36: f0:6d:5d:05:44:d5:38:e8:b9:eb:79:88:54:82:57: 08:fe:8d:9c:f6:cf:4e:40:21:17:d7:27:98:f0:2a: 6c:81:dc:4d:5f:10:b2:6f:0c:96:93:c9:92:8b:be: 5e:04:10:41:6d:90:9f:5b:df:a0:a8:9c:5e:cc:ae: b9:5a:cd:ea:a0:e9:a7:aa:45:11:ac:42:4e:94:91: aa:64:4c:b9:34:cd:29:1b:4f:53:2f:de:f5:0c:0d: 7d:c8:fb:06:37:67:7b:3d:ae:7b:42:59:5f:75:ee: 67:a9:ca:2e:d8:a3:e0:6a:3b:04:3d:d7:83:62:c2: a1:31:6b:23:ae:0c:47:ad:d5:31:de:04:de:f9:6c: 9b:4a:40:8a:d4:97:81:9e:06:5e:43:87:4d:90:a8: c5:b0:d6:16:6d:a8:7f:d8:44:9d:f6:d5:0f:1c:4a: 5b:c9:c6:2e:ce:c2:f0:b2:06:d9:d4:2f:54:32:77: 4b:41:39:9d:8a:e8:6c:f4:00:3c:09:df:db:d6:da: 1b:56:c9:ab:a1:a7:ea:5d:50:fd:78:49:d5:fa:28: c4:c5:6b:5c:80:8f:73:c0:03:80:a9:be:d0:a6:3d: be:63:dd:c6:76:30:da:13:f4:3c:b3:28:b8:84:bb: 5b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:76:C9:BD:F9:A4:E9:C5:D0:5A:6E:62:68:39:C5:13:C8:C6:6C:71 X509v3 Authority Key Identifier: keyid:A5:63:16:C7:12:98:31:E0:51:10:79:53:2D:ED:81:DC:12:C8:1D:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWMWxxKYMeBREHlTLe2B3BLIHaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:05:89:fa:bf:41:69:07:10:af:ec:89:c0:10:00:95:48:ad: 12:d7:ff:9c:4e:70:9e:97:4b:a1:41:2e:4b:72:f1:a1:38:35: 96:86:4d:1b:04:4f:fa:ba:27:46:16:ec:79:78:34:d7:47:b1: 11:a6:cf:79:7e:81:0c:d5:0b:f9:3e:80:cd:b7:10:29:20:c2: fa:b4:5b:6f:1e:f1:8c:af:e1:e8:7e:64:78:a7:f9:0a:28:ab: 8a:af:c1:e3:89:7c:90:63:1e:18:6a:f6:5f:50:58:88:d7:53: a3:1b:a9:66:a9:59:25:64:f6:7f:e4:57:ca:cc:29:24:ec:23: 48:be:f3:4d:79:4f:18:3b:f6:4d:ec:a5:c5:10:aa:4f:cb:e6: 25:91:9f:51:c5:46:79:0d:fe:46:8e:9f:7f:11:6b:35:3d:d9: 51:c7:6d:c6:6a:bd:cb:88:1a:08:f3:e8:d1:fe:a9:ed:5b:2e: e2:3f:26:a8:49:36:34:02:58:5a:6b:66:cd:7f:b6:1a:22:47: fb:4e:b1:b6:e5:f1:02:c1:3f:30:44:7c:6f:f9:6e:b9:3f:4f: e8:85:f1:ae:74:10:f2:cf:3e:54:ee:19:f6:b5:05:fd:ca:66: 5a:c2:2a:e1:f7:8b:41:94:16:b0:00:61:09:48:7b:fb:1b:4e: 64:55:0a:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwAsot4mqSv2Wfth5vvAHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NjMxNmM3MTI5ODMxZTA1MTEwNzk1MzJkZWQ4MWRjMTJj ODFkYTAwHhcNMjUxMjA2MTMwMDQwWhcNMjUxMjA3MTMwMDQwWjAzMTEwLwYDVQQD EygwZjc2YzliZGY5YTRlOWM1ZDA1YTZlNjI2ODM5YzUxM2M4YzY2YzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9STEy36sA1JW2DPKLDbwbV0FRNU4 6LnreYhUglcI/o2c9s9OQCEX1yeY8CpsgdxNXxCybwyWk8mSi75eBBBBbZCfW9+g qJxezK65Ws3qoOmnqkURrEJOlJGqZEy5NM0pG09TL971DA19yPsGN2d7Pa57Qllf de5nqcou2KPgajsEPdeDYsKhMWsjrgxHrdUx3gTe+WybSkCK1JeBngZeQ4dNkKjF sNYWbah/2ESd9tUPHEpbycYuzsLwsgbZ1C9UMndLQTmdiuhs9AA8Cd/b1tobVsmr oafqXVD9eEnV+ijExWtcgI9zwAOAqb7Qpj2+Y93GdjDaE/Q8syi4hLtb4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA92yb35pOnF0FpuYmg5xRPIxmxxMB8GA1UdIwQY MBaAFKVjFscSmDHgURB5Uy3tgdwSyB2gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFdNV3h4S1lNZUJSRUhsVExlMkIzQkxJSGFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS80ZDkyNjctNGVhYy00MjEzLTliY2It MjhiODJjMGExNGYwLzEvcFdNV3h4S1lNZUJSRUhsVExlMkIzQkxJSGFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS80ZDkyNjctNGVhYy00MjEzLTliY2ItMjhiODJjMGExNGYw LzEvcFdNV3h4S1lNZUJSRUhsVExlMkIzQkxJSGFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASwWJ+r9B aQcQr+yJwBAAlUitEtf/nE5wnpdLoUEuS3LxoTg1loZNGwRP+ronRhbseXg010ex EabPeX6BDNUL+T6AzbcQKSDC+rRbbx7xjK/h6H5keKf5Ciiriq/B44l8kGMeGGr2 X1BYiNdToxupZqlZJWT2f+RXyswpJOwjSL7zTXlPGDv2TeylxRCqT8vmJZGfUcVG eQ3+Ro6ffxFrNT3ZUcdtxmq9y4gaCPPo0f6p7Vsu4j8mqEk2NAJYWmtmzX+2GiJH +06xtuXxAsE/MER8b/luuT9P6IXxrnQQ8s8+VO4Z9rUF/cpmWsIq4feLQZQWsABh CUh7+xtOZFUKMA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:11:43 2025 by rpki-client