This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft File: PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft (raw, json) Hash identifier: ybJzcnTgwSp9nGf5gTnoyEv4BROy+rkthbTuLTTzHRE= Subject key identifier: 89:48:9F:86:7D:30:56:76:75:E3:A5:C1:66:14:09:32:07:C5:A1:CF Authority key identifier: 3C:A1:FA:BE:9F:0B:3E:97:7F:8E:08:29:C0:BF:5F:08:78:38:46:68 Certificate issuer: /CN=3ca1fabe9f0b3e977f8e0829c0bf5f0878384668 Certificate serial: 019AF27710D484B6CA5C0D1B1784B72967A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKH6vp8LPpd_jggpwL9fCHg4Rmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 07:01:20 +0000 Manifest this update: Sat 06 Dec 2025 07:01:20 +0000 Manifest next update: Sun 07 Dec 2025 07:01:20 +0000 Files and hashes: 1: 3DgJf8B6gHn6-h7mtLpM7uiT9zs.roa (hash: bNvleSp/4QB52V4DZ5fxsf4u+utsXgrzdigeABa48Cw=) 2: PKH6vp8LPpd_jggpwL9fCHg4Rmg.crl (hash: QBmQYDMjvPneF1yiFOGt9A03UaG7ENq4SBr9SYFHE3k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.crl rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft rsync://rpki.ripe.net/repository/DEFAULT/PKH6vp8LPpd_jggpwL9fCHg4Rmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:10:d4:84:b6:ca:5c:0d:1b:17:84:b7:29:67:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ca1fabe9f0b3e977f8e0829c0bf5f0878384668 Validity Not Before: Dec 6 07:01:20 2025 GMT Not After : Dec 7 07:01:20 2025 GMT Subject: CN=89489f867d30567675e3a5c16614093207c5a1cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3d:9b:6f:7c:5a:76:48:b3:aa:65:4d:e1:1c: 28:7b:c7:cc:68:86:bd:9b:a9:38:65:77:a4:95:1a: 6c:b9:4f:db:a5:38:e4:dc:ec:6c:ce:17:33:bc:db: c4:99:c2:5d:cd:c5:31:0a:88:72:83:91:20:67:c6: 71:fc:1a:aa:ed:14:d0:32:8d:4f:7e:ee:74:ba:22: 97:13:d2:9b:72:30:62:44:3b:b1:f8:7e:22:73:2a: 96:28:8f:43:37:a0:f0:4d:62:28:e5:27:ee:96:7a: 5f:4b:50:f1:d5:b0:74:7b:bd:11:6d:7c:51:8d:c0: 1e:4c:ea:07:f5:56:18:30:b6:98:b1:83:75:7c:96: f5:3b:1f:3b:92:8d:bf:42:81:00:a6:b7:57:83:f6: 32:ff:74:fd:ba:fb:8f:02:1e:c2:1a:10:53:19:8e: f2:e0:b1:8c:64:8d:62:15:d3:63:d9:77:ac:54:85: e4:f5:80:9d:d7:b5:0a:16:3e:fc:e2:48:08:77:ba: b7:07:c0:ff:bc:ae:27:83:99:48:f2:d1:5a:22:72: 4d:b4:1c:00:19:96:be:3c:de:46:d9:ea:1e:de:69: 43:35:33:89:4d:a6:87:30:38:77:bc:c5:3f:80:ae: 06:4c:53:db:76:c3:09:42:97:a2:b0:ae:0d:5d:5d: c0:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:48:9F:86:7D:30:56:76:75:E3:A5:C1:66:14:09:32:07:C5:A1:CF X509v3 Authority Key Identifier: keyid:3C:A1:FA:BE:9F:0B:3E:97:7F:8E:08:29:C0:BF:5F:08:78:38:46:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKH6vp8LPpd_jggpwL9fCHg4Rmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:6e:52:e5:95:b9:44:9e:e5:2c:20:2e:f6:ce:50:dd:a0:92: 81:87:23:86:90:34:2e:0b:de:17:fc:46:c7:92:94:d5:79:c2: 88:30:89:72:cb:f2:f2:e2:63:1c:dd:dd:07:37:45:67:39:3d: 4e:aa:fa:6f:41:4a:ed:9c:19:c1:40:6b:39:a0:36:88:54:ef: 38:51:39:4b:b2:cf:72:c3:f0:09:51:51:b5:6f:5d:17:60:5f: a6:c5:68:6b:be:4f:14:63:22:b7:7b:6d:86:08:62:5d:a5:2b: 93:e6:be:35:21:1a:f9:5a:2d:7a:91:f1:d5:a8:d9:50:d2:4b: 3b:26:2a:7e:99:27:2d:cd:69:ea:3a:45:20:4e:f9:81:e4:92: c4:a7:0b:39:02:af:42:c0:26:ef:dc:25:4a:07:4d:11:00:a7: a3:2e:83:04:76:90:78:fd:56:a4:e7:90:39:41:7d:fa:72:06: 82:c7:e9:2a:67:6c:e5:8f:09:e2:1f:92:f8:8e:15:56:9c:ad: 95:6a:e5:50:72:ce:c8:e1:6a:8d:8e:a6:8e:9c:94:ae:43:4b: 63:43:0b:3a:1b:87:1a:1f:89:67:50:c1:55:38:24:74:c5:61: ca:7c:6b:7f:5e:54:24:bb:08:9f:5b:20:dc:c3:4b:69:62:23: 32:97:68:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydxDUhLbKXA0bF4S3KWejMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjYTFmYWJlOWYwYjNlOTc3ZjhlMDgyOWMwYmY1ZjA4Nzgz ODQ2NjgwHhcNMjUxMjA2MDcwMTIwWhcNMjUxMjA3MDcwMTIwWjAzMTEwLwYDVQQD Eyg4OTQ4OWY4NjdkMzA1Njc2NzVlM2E1YzE2NjE0MDkzMjA3YzVhMWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxD2bb3xadkizqmVN4Rwoe8fMaIa9 m6k4ZXeklRpsuU/bpTjk3OxszhczvNvEmcJdzcUxCohyg5EgZ8Zx/Bqq7RTQMo1P fu50uiKXE9KbcjBiRDux+H4icyqWKI9DN6DwTWIo5SfulnpfS1Dx1bB0e70RbXxR jcAeTOoH9VYYMLaYsYN1fJb1Ox87ko2/QoEAprdXg/Yy/3T9uvuPAh7CGhBTGY7y 4LGMZI1iFdNj2XesVIXk9YCd17UKFj784kgId7q3B8D/vK4ng5lI8tFaInJNtBwA GZa+PN5G2eoe3mlDNTOJTaaHMDh3vMU/gK4GTFPbdsMJQpeisK4NXV3AhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIlIn4Z9MFZ2deOlwWYUCTIHxaHPMB8GA1UdIwQY MBaAFDyh+r6fCz6Xf44IKcC/Xwh4OEZoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEtINnZwOExQcGRfamdncHdMOWZDSGc0Um1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9mN2ZlOWItNjlhZS00MjA2LThkNjYt ZjY2MGE1N2UyZGQ1LzEvUEtINnZwOExQcGRfamdncHdMOWZDSGc0Um1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9mN2ZlOWItNjlhZS00MjA2LThkNjYtZjY2MGE1N2UyZGQ1 LzEvUEtINnZwOExQcGRfamdncHdMOWZDSGc0Um1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYG5S5ZW5 RJ7lLCAu9s5Q3aCSgYcjhpA0LgveF/xGx5KU1XnCiDCJcsvy8uJjHN3dBzdFZzk9 Tqr6b0FK7ZwZwUBrOaA2iFTvOFE5S7LPcsPwCVFRtW9dF2BfpsVoa75PFGMit3tt hghiXaUrk+a+NSEa+VotepHx1ajZUNJLOyYqfpknLc1p6jpFIE75geSSxKcLOQKv QsAm79wlSgdNEQCnoy6DBHaQeP1WpOeQOUF9+nIGgsfpKmds5Y8J4h+S+I4VVpyt lWrlUHLOyOFqjY6mjpyUrkNLY0MLOhuHGh+JZ1DBVTgkdMVhynxrf15UJLsIn1sg 3MNLaWIjMpdo3w== -----END CERTIFICATE-----Generated at Sat Dec 6 13:22:49 2025 by rpki-client