This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.mft File: PqmfAAAL7rnxsoVLpQ7HuIEm26k.mft (raw, json) Hash identifier: tGsVt3KScQk1dVRy0XAYW5dDjPISD7cvTRz00twobOE= Subject key identifier: 5F:04:22:15:F2:40:28:9A:54:53:9F:02:D5:EB:5B:21:67:15:53:15 Authority key identifier: 3E:A9:9F:00:00:0B:EE:B9:F1:B2:85:4B:A5:0E:C7:B8:81:26:DB:A9 Certificate issuer: /CN=3ea99f00000beeb9f1b2854ba50ec7b88126dba9 Certificate serial: 019AF12D1AA2BD784219118C284D9375CBB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqmfAAAL7rnxsoVLpQ7HuIEm26k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.mft Manifest number: 08F4 Signing time: Sat 06 Dec 2025 01:00:56 +0000 Manifest this update: Sat 06 Dec 2025 01:00:56 +0000 Manifest next update: Sun 07 Dec 2025 01:00:56 +0000 Files and hashes: 1: FNcoFmyMsrmKFW3pVuTLoiKb9Y0.roa (hash: L2M1ZIYqNE7da9VzHmMG0LiaV1K9e8NQgXmk4Xn6knE=) 2: PqmfAAAL7rnxsoVLpQ7HuIEm26k.crl (hash: 9vSdVFHUK24DaXQmjxgkRkp13wccvzO/CgElksUyDxg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.mft rsync://rpki.ripe.net/repository/DEFAULT/PqmfAAAL7rnxsoVLpQ7HuIEm26k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:1a:a2:bd:78:42:19:11:8c:28:4d:93:75:cb:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ea99f00000beeb9f1b2854ba50ec7b88126dba9 Validity Not Before: Dec 6 01:00:56 2025 GMT Not After : Dec 7 01:00:56 2025 GMT Subject: CN=5f042215f240289a54539f02d5eb5b2167155315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d4:e7:64:20:0c:0a:63:73:fa:fb:4a:ad:56: 8f:0a:e0:22:4e:30:d3:6f:cf:dc:2a:f9:f4:a7:53: fd:fa:d7:b9:34:17:50:cf:7b:80:14:56:a1:ef:db: 4b:f8:93:65:47:d2:42:21:4f:d6:58:19:ed:7f:3b: d2:7f:a5:0d:7c:78:17:cc:c8:46:8c:6e:84:a4:26: 62:37:cc:7d:51:ea:30:76:80:2d:47:91:3f:ae:1b: 95:75:e0:26:a6:c2:5c:1d:a8:ff:58:86:a5:f6:ae: aa:a6:6d:e5:3a:e0:3c:e9:5f:42:4f:30:a1:f0:04: 1d:c5:8e:d7:40:24:5d:7f:4d:10:95:be:62:9b:05: b8:3b:ca:13:9c:f7:e6:41:4a:9b:82:41:88:7c:34: 00:f7:44:66:1e:eb:5a:c9:e2:4c:07:8c:fc:7c:34: cd:e7:55:6d:76:5b:42:e3:5d:04:07:a9:bd:3f:0a: fb:b8:cc:5d:e9:1c:2b:e4:96:bb:00:40:55:b1:6e: c6:a6:dc:9c:00:4a:d6:66:62:5d:b6:7e:22:31:00: 2c:f2:02:a0:3a:6b:84:91:e3:cd:0c:51:e9:9a:db: 5f:da:33:7b:ce:a4:99:c5:3d:b9:ac:c2:d9:ac:a1: 38:92:07:23:08:ed:34:8f:0b:de:f2:ce:ce:e0:f7: 71:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:04:22:15:F2:40:28:9A:54:53:9F:02:D5:EB:5B:21:67:15:53:15 X509v3 Authority Key Identifier: keyid:3E:A9:9F:00:00:0B:EE:B9:F1:B2:85:4B:A5:0E:C7:B8:81:26:DB:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqmfAAAL7rnxsoVLpQ7HuIEm26k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:42:9c:2b:e5:a8:b5:84:11:57:e1:73:e9:af:0c:b8:9b:bb: ce:a2:0f:e8:43:16:a2:31:14:74:20:65:5e:d9:3e:71:b2:87: b5:98:62:b6:33:8c:35:f3:15:d0:0f:32:d6:f2:4e:b9:38:57: 9c:10:6f:bb:ae:9e:fb:8b:ec:23:d8:24:20:f1:2f:15:4a:03: 0b:90:8e:d4:ed:e7:58:bf:94:14:33:0c:07:e6:81:55:b0:c5: e6:a4:33:80:2b:a5:06:21:a9:ac:0d:3e:ea:da:2f:6b:73:15: f2:24:20:55:20:36:fa:8b:a9:97:29:5e:d2:8f:6e:c7:ed:73: 92:c9:0a:bb:01:96:7c:c3:35:25:df:bf:c0:95:fd:bb:e2:6c: 5c:51:c0:6f:eb:ba:5a:5f:81:b6:f2:6e:fa:2a:b3:e1:8f:4e: 1c:0f:20:e3:ab:ca:c6:d9:41:ac:12:cb:fe:9f:ff:8e:c5:2c: 71:fc:0f:66:a8:20:1f:22:bb:93:b5:49:9c:4b:08:90:97:21: 59:3c:af:29:7b:08:c0:b6:b6:74:20:4a:61:ad:63:36:e8:8c: 79:f5:7d:71:ab:cd:cf:9f:87:9f:8a:c8:96:b0:a8:62:3b:68: b4:f8:f2:98:f3:7c:9c:ad:77:61:8b:93:46:37:b2:ac:15:97: 2b:80:91:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLRqivXhCGRGMKE2Tdcu5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYTk5ZjAwMDAwYmVlYjlmMWIyODU0YmE1MGVjN2I4ODEy NmRiYTkwHhcNMjUxMjA2MDEwMDU2WhcNMjUxMjA3MDEwMDU2WjAzMTEwLwYDVQQD Eyg1ZjA0MjIxNWYyNDAyODlhNTQ1MzlmMDJkNWViNWIyMTY3MTU1MzE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdTnZCAMCmNz+vtKrVaPCuAiTjDT b8/cKvn0p1P9+te5NBdQz3uAFFah79tL+JNlR9JCIU/WWBntfzvSf6UNfHgXzMhG jG6EpCZiN8x9UeowdoAtR5E/rhuVdeAmpsJcHaj/WIal9q6qpm3lOuA86V9CTzCh 8AQdxY7XQCRdf00Qlb5imwW4O8oTnPfmQUqbgkGIfDQA90RmHutayeJMB4z8fDTN 51VtdltC410EB6m9Pwr7uMxd6Rwr5Ja7AEBVsW7GptycAErWZmJdtn4iMQAs8gKg OmuEkePNDFHpmttf2jN7zqSZxT25rMLZrKE4kgcjCO00jwve8s7O4PdxVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF8EIhXyQCiaVFOfAtXrWyFnFVMVMB8GA1UdIwQY MBaAFD6pnwAAC+658bKFS6UOx7iBJtupMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHFtZkFBQUw3cm54c29WTHBRN0h1SUVtMjZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS81ODFlNjgtNGQ0NS00MGViLTg5ZDkt ODgxNmZiYThiZTEyLzEvUHFtZkFBQUw3cm54c29WTHBRN0h1SUVtMjZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS81ODFlNjgtNGQ0NS00MGViLTg5ZDktODgxNmZiYThiZTEy LzEvUHFtZkFBQUw3cm54c29WTHBRN0h1SUVtMjZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAikKcK+Wo tYQRV+Fz6a8MuJu7zqIP6EMWojEUdCBlXtk+cbKHtZhitjOMNfMV0A8y1vJOuThX nBBvu66e+4vsI9gkIPEvFUoDC5CO1O3nWL+UFDMMB+aBVbDF5qQzgCulBiGprA0+ 6tova3MV8iQgVSA2+ouplyle0o9ux+1zkskKuwGWfMM1Jd+/wJX9u+JsXFHAb+u6 Wl+BtvJu+iqz4Y9OHA8g46vKxtlBrBLL/p//jsUscfwPZqggHyK7k7VJnEsIkJch WTyvKXsIwLa2dCBKYa1jNuiMefV9cavNz5+Hn4rIlrCoYjtotPjymPN8nK13YYuT RjeyrBWXK4CRFw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:46:34 2025 by rpki-client