This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft File: pKAVstPT6Qm2Avn91Pb29hiHPFg.mft (raw, json) Hash identifier: rkKpmXJA4RpgaS4Zm5Rj+NVbuPyiPr7ueo/FGe1vH20= Subject key identifier: D9:66:1F:5E:4D:EF:66:62:04:E6:AA:0C:39:C6:AC:F6:99:9E:0F:A1 Authority key identifier: A4:A0:15:B2:D3:D3:E9:09:B6:02:F9:FD:D4:F6:F6:F6:18:87:3C:58 Certificate issuer: /CN=a4a015b2d3d3e909b602f9fdd4f6f6f618873c58 Certificate serial: 019AF164757E62BAF9658C1B6547B70DC0A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft Manifest number: 0DF6 Signing time: Sat 06 Dec 2025 02:01:23 +0000 Manifest this update: Sat 06 Dec 2025 02:01:23 +0000 Manifest next update: Sun 07 Dec 2025 02:01:23 +0000 Files and hashes: 1: 2Qr4P6TtNG8XIKkXI_c0cLDbaUc.roa (hash: MYKMpqtjE4XkNANAGzzsCBedfNhF2YMsBN5+jKHyoYI=) 2: pKAVstPT6Qm2Avn91Pb29hiHPFg.crl (hash: DIYTJ/wkWv55QimWtKBXJXtI0s0zv9ylDpptPtTR3P0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.crl rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:75:7e:62:ba:f9:65:8c:1b:65:47:b7:0d:c0:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4a015b2d3d3e909b602f9fdd4f6f6f618873c58 Validity Not Before: Dec 6 02:01:23 2025 GMT Not After : Dec 7 02:01:23 2025 GMT Subject: CN=d9661f5e4def666204e6aa0c39c6acf6999e0fa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a2:62:1f:52:9b:e9:be:da:9b:9f:a1:06:40: 69:c2:ba:24:49:ea:a6:8e:13:19:ad:41:28:b5:ed: 35:b6:16:16:64:55:72:a0:12:7c:8e:28:ca:93:be: f7:27:0b:9d:fe:29:be:0a:73:88:1c:9e:7b:73:3d: 94:7d:00:87:f7:21:37:02:79:51:3a:f0:6c:d4:8a: ac:1c:f0:09:00:43:ce:a5:43:46:13:3b:b3:83:7d: 55:b4:30:7b:28:0b:f1:66:89:9b:d1:68:da:1d:14: 8d:58:72:ac:e8:99:f4:d0:b4:88:65:44:7d:b1:3d: 30:1f:74:33:ac:7e:94:4f:e0:a8:41:79:ef:57:db: 14:61:b9:63:44:fd:65:d8:57:a6:bd:e9:da:07:31: cb:91:06:19:a3:9e:88:2f:11:8c:f4:45:4c:05:14: 1f:26:0c:62:2b:1a:61:8c:13:ec:22:3a:86:2a:5f: d5:51:da:63:6e:7a:db:ba:f7:8d:15:9b:74:09:d5: 17:dc:cb:63:93:34:65:e4:01:ec:d9:c6:2f:dc:a2: 34:02:60:32:8d:87:1d:46:f6:8f:5c:a7:f5:d7:e4: 4d:a6:11:84:dd:a4:fc:25:2e:54:0c:44:a8:72:9c: 60:b6:c4:26:e1:10:db:ca:6d:01:35:8c:2f:0a:d0: 82:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:66:1F:5E:4D:EF:66:62:04:E6:AA:0C:39:C6:AC:F6:99:9E:0F:A1 X509v3 Authority Key Identifier: keyid:A4:A0:15:B2:D3:D3:E9:09:B6:02:F9:FD:D4:F6:F6:F6:18:87:3C:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:d1:d1:96:1f:ec:56:24:83:4c:ce:89:4f:47:fb:4a:9a:b4: 5f:87:d8:32:90:9b:94:8e:74:ee:3d:0a:e0:e5:6a:27:ef:0c: 1e:46:5b:b1:7d:87:b4:7d:d2:48:4c:c2:d4:ff:c8:2e:56:25: bc:c9:07:a4:d6:12:4d:38:b0:81:01:5a:1c:30:de:a7:15:a9: 72:82:95:4b:61:f6:36:f6:84:87:38:2d:81:de:b2:32:87:03: 72:cc:76:03:63:cd:d1:09:7c:7f:f0:23:a4:3a:f7:2b:e2:61: 88:18:93:72:28:e1:03:2f:71:5a:82:ac:d2:c9:49:ee:9a:2d: 59:f9:86:9e:ba:86:fe:0c:e4:31:57:90:cd:8e:68:a7:e0:2b: e0:80:2c:18:81:e0:7d:98:7c:8e:59:f6:01:71:03:1b:0d:07: 49:75:af:47:0b:05:0e:d3:1a:8a:1c:a1:93:46:4a:1d:35:3b: 16:70:c8:12:14:53:6f:b7:8c:fc:72:2b:6a:6b:76:e8:e1:ce: 44:f5:88:96:4f:4b:e0:38:12:e2:da:9f:a2:83:b5:36:6a:a5: 23:09:e8:d5:10:69:02:7a:3b:fe:d5:0c:5f:d3:3d:20:b5:fb: 79:52:eb:ab:db:6f:7c:d1:e6:00:6d:a8:6d:33:b4:37:5f:d2: a8:ae:2e:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZHV+Yrr5ZYwbZUe3DcClMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YTAxNWIyZDNkM2U5MDliNjAyZjlmZGQ0ZjZmNmY2MTg4 NzNjNTgwHhcNMjUxMjA2MDIwMTIzWhcNMjUxMjA3MDIwMTIzWjAzMTEwLwYDVQQD EyhkOTY2MWY1ZTRkZWY2NjYyMDRlNmFhMGMzOWM2YWNmNjk5OWUwZmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaJiH1Kb6b7am5+hBkBpwrokSeqm jhMZrUEote01thYWZFVyoBJ8jijKk773Jwud/im+CnOIHJ57cz2UfQCH9yE3AnlR OvBs1IqsHPAJAEPOpUNGEzuzg31VtDB7KAvxZomb0WjaHRSNWHKs6Jn00LSIZUR9 sT0wH3QzrH6UT+CoQXnvV9sUYbljRP1l2FemvenaBzHLkQYZo56ILxGM9EVMBRQf JgxiKxphjBPsIjqGKl/VUdpjbnrbuveNFZt0CdUX3MtjkzRl5AHs2cYv3KI0AmAy jYcdRvaPXKf11+RNphGE3aT8JS5UDESocpxgtsQm4RDbym0BNYwvCtCCawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNlmH15N72ZiBOaqDDnGrPaZng+hMB8GA1UdIwQY MBaAFKSgFbLT0+kJtgL5/dT29vYYhzxYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEtBVnN0UFQ2UW0yQXZuOTFQYjI5aGlIUEZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iOWJkYTMtYjYxMS00MzM4LWJiZTgt YTdkZDE2MzQzMjk3LzEvcEtBVnN0UFQ2UW0yQXZuOTFQYjI5aGlIUEZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9iOWJkYTMtYjYxMS00MzM4LWJiZTgtYTdkZDE2MzQzMjk3 LzEvcEtBVnN0UFQ2UW0yQXZuOTFQYjI5aGlIUEZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhdHRlh/s ViSDTM6JT0f7Spq0X4fYMpCblI507j0K4OVqJ+8MHkZbsX2HtH3SSEzC1P/ILlYl vMkHpNYSTTiwgQFaHDDepxWpcoKVS2H2NvaEhzgtgd6yMocDcsx2A2PN0Ql8f/Aj pDr3K+JhiBiTcijhAy9xWoKs0slJ7potWfmGnrqG/gzkMVeQzY5op+Ar4IAsGIHg fZh8jln2AXEDGw0HSXWvRwsFDtMaihyhk0ZKHTU7FnDIEhRTb7eM/HIramt26OHO RPWIlk9L4DgS4tqfooO1NmqlIwno1RBpAno7/tUMX9M9ILX7eVLrq9tvfNHmAG2o bTO0N1/SqK4ukw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:13:29 2025 by rpki-client