This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft File: PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft (raw, json) Hash identifier: mS4jQGme/b1se8YOagWZoN7qpHBzsRc6p+VVXUR1rNA= Subject key identifier: A9:99:D9:74:3C:D0:6A:0E:EA:93:81:73:EE:74:52:E0:34:59:A9:98 Authority key identifier: 3D:C4:10:E3:F0:9B:EA:6A:BC:9D:D8:C6:FF:41:85:65:1B:0A:B8:67 Certificate issuer: /CN=3dc410e3f09bea6abc9dd8c6ff4185651b0ab867 Certificate serial: 019AF5407F06E8B461482B1F952C3EB1459B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft Manifest number: 16F5 Signing time: Sat 06 Dec 2025 20:00:35 +0000 Manifest this update: Sat 06 Dec 2025 20:00:35 +0000 Manifest next update: Sun 07 Dec 2025 20:00:35 +0000 Files and hashes: 1: PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.crl (hash: 4zQuJz/QWF9aMnsTCEU5gK9U+Ioh1FxAq76ZP+PSzKA=) 2: itPEMbOZFFR8e5L5AvpBnlFEedQ.roa (hash: pIQ9iWRr1eE7BBGNob9EZxPiOkZPJVC3FeL7vrrHIjo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft rsync://rpki.ripe.net/repository/DEFAULT/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:7f:06:e8:b4:61:48:2b:1f:95:2c:3e:b1:45:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3dc410e3f09bea6abc9dd8c6ff4185651b0ab867 Validity Not Before: Dec 6 20:00:35 2025 GMT Not After : Dec 7 20:00:35 2025 GMT Subject: CN=a999d9743cd06a0eea938173ee7452e03459a998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:83:f9:af:94:6c:03:ed:97:c8:5f:6d:f3:8d: 3b:25:59:86:e2:62:71:57:d9:63:11:eb:23:af:9a: f8:0c:ec:95:1b:ff:cf:03:51:fb:24:0c:d4:7e:bd: 53:78:bf:c2:3c:7d:e0:91:bb:09:39:d7:65:a5:41: d6:50:d1:d4:05:ea:89:08:96:56:1a:e2:d7:28:5b: be:5e:25:44:ab:59:17:b4:8f:e5:bf:be:25:1d:5e: 0c:10:47:43:04:ec:1f:64:62:0a:97:41:48:f3:0e: 78:65:fd:a3:a7:75:96:7b:18:9d:c0:ca:ce:3f:e9: fe:94:1b:f9:93:94:80:75:68:82:31:1e:21:61:da: c7:b9:8c:1e:68:1b:1f:91:ab:26:1a:6c:be:b7:b0: a3:4f:a5:42:2c:b6:57:a0:5a:78:45:f2:24:33:ac: 22:e4:88:ab:ff:6b:da:3d:c6:29:cc:22:e7:d5:4c: 69:1c:2a:4d:73:3b:3b:44:0b:91:60:3f:66:c2:7b: 72:9b:96:82:ce:7b:4f:37:9d:7e:19:29:88:9d:ef: 81:d4:af:d1:dc:f2:43:e0:45:2a:6b:36:9d:b2:7c: 8f:e6:88:96:7c:cf:6f:3b:f5:1c:df:19:18:e2:99: 2b:45:a2:44:3d:5a:e9:06:23:2e:59:38:a4:54:78: bf:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:99:D9:74:3C:D0:6A:0E:EA:93:81:73:EE:74:52:E0:34:59:A9:98 X509v3 Authority Key Identifier: keyid:3D:C4:10:E3:F0:9B:EA:6A:BC:9D:D8:C6:FF:41:85:65:1B:0A:B8:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:a2:b3:e5:8d:e1:a7:d6:e2:e0:0c:99:53:2d:b4:62:be:39: a2:9c:e2:27:44:5e:31:bf:ca:15:b5:10:34:40:b4:f3:95:19: a5:c1:44:c1:aa:a0:f1:42:d9:f7:aa:ae:0c:27:23:da:3c:bd: 8d:99:d8:b3:82:57:8f:00:19:3b:57:02:9a:cb:e1:0f:da:55: 0b:7c:28:dd:df:ad:24:7c:04:bd:41:2b:06:ec:5f:e3:7b:19: ac:25:3f:b4:64:a7:8e:c4:11:32:43:ab:51:85:9e:fe:31:2a: dc:51:69:a4:7e:69:a9:f0:74:70:ff:a6:50:7a:6a:d1:36:ff: 19:81:b4:df:0d:1b:fb:a4:2f:c7:ee:fd:1c:07:03:ea:4b:0c: 3c:80:5a:76:7e:0f:7a:1a:71:70:5a:cd:1f:20:77:82:97:02: 1e:61:d5:91:f4:b6:ef:71:3f:da:66:db:90:2d:1d:3e:5e:e4: f6:e5:f3:00:a8:c0:1e:ae:9b:26:6c:c0:d8:f4:ac:0f:db:ce: a8:6a:24:e2:d2:ca:58:ac:73:ae:c3:57:58:62:d0:57:fa:b8: b1:45:a1:2a:bb:85:68:ef:e8:e6:45:ba:76:92:2b:e7:38:19: 68:3a:16:d9:e9:03:2b:99:73:bb:c4:22:6d:ee:a3:25:11:b7: c4:4b:87:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QH8G6LRhSCsflSw+sUWbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkYzQxMGUzZjA5YmVhNmFiYzlkZDhjNmZmNDE4NTY1MWIw YWI4NjcwHhcNMjUxMjA2MjAwMDM1WhcNMjUxMjA3MjAwMDM1WjAzMTEwLwYDVQQD EyhhOTk5ZDk3NDNjZDA2YTBlZWE5MzgxNzNlZTc0NTJlMDM0NTlhOTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIP5r5RsA+2XyF9t8407JVmG4mJx V9ljEesjr5r4DOyVG//PA1H7JAzUfr1TeL/CPH3gkbsJOddlpUHWUNHUBeqJCJZW GuLXKFu+XiVEq1kXtI/lv74lHV4MEEdDBOwfZGIKl0FI8w54Zf2jp3WWexidwMrO P+n+lBv5k5SAdWiCMR4hYdrHuYweaBsfkasmGmy+t7CjT6VCLLZXoFp4RfIkM6wi 5Iir/2vaPcYpzCLn1UxpHCpNczs7RAuRYD9mwntym5aCzntPN51+GSmIne+B1K/R 3PJD4EUqazadsnyP5oiWfM9vO/Uc3xkY4pkrRaJEPVrpBiMuWTikVHi/+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKmZ2XQ80GoO6pOBc+50UuA0WamYMB8GA1UdIwQY MBaAFD3EEOPwm+pqvJ3Yxv9BhWUbCrhnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGNRUTRfQ2I2bXE4bmRqR18wR0ZaUnNLdUdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8wNDI5NTEtNTRkOC00NjljLWJiYTEt YTY1NDZjZDlkYTk0LzEvUGNRUTRfQ2I2bXE4bmRqR18wR0ZaUnNLdUdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC8wNDI5NTEtNTRkOC00NjljLWJiYTEtYTY1NDZjZDlkYTk0 LzEvUGNRUTRfQ2I2bXE4bmRqR18wR0ZaUnNLdUdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnaKz5Y3h p9bi4AyZUy20Yr45opziJ0ReMb/KFbUQNEC085UZpcFEwaqg8ULZ96quDCcj2jy9 jZnYs4JXjwAZO1cCmsvhD9pVC3wo3d+tJHwEvUErBuxf43sZrCU/tGSnjsQRMkOr UYWe/jEq3FFppH5pqfB0cP+mUHpq0Tb/GYG03w0b+6Qvx+79HAcD6ksMPIBadn4P ehpxcFrNHyB3gpcCHmHVkfS273E/2mbbkC0dPl7k9uXzAKjAHq6bJmzA2PSsD9vO qGok4tLKWKxzrsNXWGLQV/q4sUWhKruFaO/o5kW6dpIr5zgZaDoW2ekDK5lzu8Qi be6jJRG3xEuHYA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:56:45 2025 by rpki-client