This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.mft File: pKN763_WXKqa_EbZ8kJzzSfA-WA.mft (raw, json) Hash identifier: eYgbs5EvEJ15G37OytvcwIAd5gL9g+BB6nLqqSmbSjY= Subject key identifier: 6A:6D:8F:5F:F4:16:BC:7A:3F:5A:7D:7F:CE:48:F6:C5:DB:40:F8:9F Authority key identifier: A4:A3:7B:EB:7F:D6:5C:AA:9A:FC:46:D9:F2:42:73:CD:27:C0:F9:60 Certificate issuer: /CN=a4a37beb7fd65caa9afc46d9f24273cd27c0f960 Certificate serial: 019AF3F7C2FA48A6079E12F4DAD01C3EEAB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKN763_WXKqa_EbZ8kJzzSfA-WA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 14:01:31 +0000 Manifest this update: Sat 06 Dec 2025 14:01:31 +0000 Manifest next update: Sun 07 Dec 2025 14:01:31 +0000 Files and hashes: 1: eZY2teiRCMuc8ordB3siE6vvyrU.roa (hash: eYVuxyQrp/ArDQADFzcG2OxANFHCCc8GbHzB/2LAyF8=) 2: pKN763_WXKqa_EbZ8kJzzSfA-WA.crl (hash: mUA4f+AHXG9SDc5PUOXIelo0WvEjjevbAObbe0XquD0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.crl rsync://rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.mft rsync://rpki.ripe.net/repository/DEFAULT/pKN763_WXKqa_EbZ8kJzzSfA-WA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:c2:fa:48:a6:07:9e:12:f4:da:d0:1c:3e:ea:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4a37beb7fd65caa9afc46d9f24273cd27c0f960 Validity Not Before: Dec 6 14:01:31 2025 GMT Not After : Dec 7 14:01:31 2025 GMT Subject: CN=6a6d8f5ff416bc7a3f5a7d7fce48f6c5db40f89f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:21:56:8e:80:e6:68:c4:ee:f7:28:6c:a7:96: 3c:80:6e:a5:35:82:e9:ed:6b:91:fd:40:cd:d1:bb: 08:a7:84:f9:c1:82:f1:48:8f:3d:3f:6d:69:dd:f8: 50:47:09:38:6b:03:f3:0f:40:a9:11:5a:cc:5e:68: e6:a1:87:d1:7c:2f:4c:88:08:a8:d5:20:d7:db:b5: f8:9a:cb:f2:52:19:5d:d5:f9:77:93:f3:71:1f:bd: 2b:26:b6:0d:73:9e:0f:ce:d9:4e:52:c7:90:08:8a: 73:4e:1c:a4:3a:ab:99:3d:4a:96:7f:45:58:96:39: 18:86:53:71:69:30:fe:83:8e:a8:39:ac:f0:43:a1: 7c:76:28:48:c4:7e:63:e1:0c:af:54:ef:24:4c:e5: ef:2b:52:94:cd:33:4a:ec:dc:5d:6b:4d:fb:53:67: d8:be:53:72:e3:e3:5f:50:65:20:7e:0e:4f:c5:e4: 82:75:31:c8:ff:cf:77:cb:5b:89:95:0b:7a:fa:f9: 8b:fe:be:9c:23:1b:0c:7b:f3:ab:aa:af:40:b3:72: e4:53:23:30:84:94:62:6a:a6:a1:99:1a:be:eb:f2: 7e:1d:c9:34:3b:ab:2c:d0:b9:05:20:f1:67:6a:ef: 51:e4:42:e1:1a:11:e5:b3:b2:88:99:ae:f7:73:cd: cc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:6D:8F:5F:F4:16:BC:7A:3F:5A:7D:7F:CE:48:F6:C5:DB:40:F8:9F X509v3 Authority Key Identifier: keyid:A4:A3:7B:EB:7F:D6:5C:AA:9A:FC:46:D9:F2:42:73:CD:27:C0:F9:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKN763_WXKqa_EbZ8kJzzSfA-WA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:ff:33:dc:c5:6a:79:b4:cc:ca:ea:a5:93:e3:36:81:35:93: 6a:f6:82:05:0a:cd:36:c3:aa:19:08:8c:d4:fc:23:02:ba:e4: 29:4c:cc:46:11:e1:bd:45:c3:99:2f:98:ef:f0:3e:d5:35:29: 25:cb:43:48:c3:c4:0e:0d:b1:e7:66:6a:03:60:dc:f3:15:30: b4:e7:dd:df:6f:f9:6e:a7:bf:a2:9c:4c:8f:5b:f3:6c:1e:2b: bd:19:0a:31:c5:21:21:16:10:75:4a:fd:c8:50:fc:11:35:90: 30:4b:ce:ba:6a:da:3c:bc:b7:e5:8d:01:dd:45:09:53:04:7e: fd:72:de:1f:79:46:05:58:b8:e0:00:6b:64:6c:5e:2e:1e:90: dd:b4:a6:2c:a5:d1:49:5d:6b:f6:57:ee:fd:70:60:0b:8d:f6: 1e:c1:1d:7b:3d:6e:57:c4:42:26:b3:2a:2c:ed:35:3c:6f:c9: dc:81:ba:28:ec:6b:48:25:9f:38:83:b6:62:67:fb:ec:01:d8: 05:fc:7f:9f:b2:b9:f0:97:b0:aa:d5:ff:26:6d:ad:8f:aa:ed: de:2a:db:f8:d4:94:fe:24:55:2c:80:97:5c:5d:0d:c6:19:2e: 02:c1:c2:0a:2b:56:f1:8f:d2:ca:d0:8f:28:99:4a:66:75:70: e8:fd:cf:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz98L6SKYHnhL02tAcPuq2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YTM3YmViN2ZkNjVjYWE5YWZjNDZkOWYyNDI3M2NkMjdj MGY5NjAwHhcNMjUxMjA2MTQwMTMxWhcNMjUxMjA3MTQwMTMxWjAzMTEwLwYDVQQD Eyg2YTZkOGY1ZmY0MTZiYzdhM2Y1YTdkN2ZjZTQ4ZjZjNWRiNDBmODlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCFWjoDmaMTu9yhsp5Y8gG6lNYLp 7WuR/UDN0bsIp4T5wYLxSI89P21p3fhQRwk4awPzD0CpEVrMXmjmoYfRfC9MiAio 1SDX27X4msvyUhld1fl3k/NxH70rJrYNc54PztlOUseQCIpzThykOquZPUqWf0VY ljkYhlNxaTD+g46oOazwQ6F8dihIxH5j4QyvVO8kTOXvK1KUzTNK7Nxda037U2fY vlNy4+NfUGUgfg5PxeSCdTHI/893y1uJlQt6+vmL/r6cIxsMe/Orqq9As3LkUyMw hJRiaqahmRq+6/J+Hck0O6ss0LkFIPFnau9R5ELhGhHls7KIma73c83McQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGptj1/0Frx6P1p9f85I9sXbQPifMB8GA1UdIwQY MBaAFKSje+t/1lyqmvxG2fJCc80nwPlgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEtONzYzX1dYS3FhX0ViWjhrSnp6U2ZBLVdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9mNDQwZGUtMTU5Mi00NThjLWFhYTMt N2M0NzI0MWMwYTg0LzEvcEtONzYzX1dYS3FhX0ViWjhrSnp6U2ZBLVdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9mNDQwZGUtMTU5Mi00NThjLWFhYTMtN2M0NzI0MWMwYTg0 LzEvcEtONzYzX1dYS3FhX0ViWjhrSnp6U2ZBLVdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApv8z3MVq ebTMyuqlk+M2gTWTavaCBQrNNsOqGQiM1PwjArrkKUzMRhHhvUXDmS+Y7/A+1TUp JctDSMPEDg2x52ZqA2Dc8xUwtOfd32/5bqe/opxMj1vzbB4rvRkKMcUhIRYQdUr9 yFD8ETWQMEvOumraPLy35Y0B3UUJUwR+/XLeH3lGBVi44ABrZGxeLh6Q3bSmLKXR SV1r9lfu/XBgC432HsEdez1uV8RCJrMqLO01PG/J3IG6KOxrSCWfOIO2Ymf77AHY Bfx/n7K58JewqtX/Jm2tj6rt3irb+NSU/iRVLICXXF0NxhkuAsHCCitW8Y/SytCP KJlKZnVw6P3POg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:29:59 2025 by rpki-client