This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.mft File: PqGMkbK-KKB0uaOHSpC0RgE84b4.mft (raw, json) Hash identifier: gLQACmo5fl4rQMyv4n95z/AkwO/NmDxIgva4jHFTMkg= Subject key identifier: 86:4F:25:79:CE:33:18:52:14:6A:05:B8:3E:BB:0B:AA:B6:8E:53:8C Authority key identifier: 3E:A1:8C:91:B2:BE:28:A0:74:B9:A3:87:4A:90:B4:46:01:3C:E1:BE Certificate issuer: /CN=3ea18c91b2be28a074b9a3874a90b446013ce1be Certificate serial: 019AF49C410CEC19448061F63FA31D1DB56E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqGMkbK-KKB0uaOHSpC0RgE84b4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.mft Manifest number: 04F8 Signing time: Sat 06 Dec 2025 17:01:12 +0000 Manifest this update: Sat 06 Dec 2025 17:01:12 +0000 Manifest next update: Sun 07 Dec 2025 17:01:12 +0000 Files and hashes: 1: PqGMkbK-KKB0uaOHSpC0RgE84b4.crl (hash: tfiuU4K9g27OyXkJpBzXfI3M8cYb4Hz9kqdFLWsrNBE=) 2: w78-PkWjkmBWzXnYfu0GZ4j6LVI.roa (hash: BzBqUt4k6YCYPQ6Nn7PdPu+ICTIm/5kh0/Z+KfmEAhE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.mft rsync://rpki.ripe.net/repository/DEFAULT/PqGMkbK-KKB0uaOHSpC0RgE84b4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:41:0c:ec:19:44:80:61:f6:3f:a3:1d:1d:b5:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ea18c91b2be28a074b9a3874a90b446013ce1be Validity Not Before: Dec 6 17:01:12 2025 GMT Not After : Dec 7 17:01:12 2025 GMT Subject: CN=864f2579ce331852146a05b83ebb0baab68e538c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f3:55:82:ab:8e:75:e5:1d:a7:bf:39:94:17: bb:2a:58:0d:9b:79:08:50:32:5e:09:0e:ab:54:5e: 26:db:d7:13:b0:55:65:6a:49:da:c4:43:89:71:c1: 36:9d:16:5d:14:19:ff:58:9d:e3:93:6d:51:0e:67: b7:8d:93:35:98:fe:46:1f:34:3b:2b:00:20:6a:8b: d1:8b:e9:75:94:e2:8c:11:0f:12:03:e4:a9:7c:0f: 8b:a7:aa:96:8e:61:62:3f:f4:65:b7:ad:2f:7b:f3: 42:70:29:e7:db:a7:60:ee:4b:cf:f1:c7:48:27:dd: bf:01:87:ba:4b:b0:39:78:44:1b:59:cc:f9:98:43: 5c:3f:de:76:cb:ac:d7:25:a4:d9:a7:82:0a:c9:16: 73:53:bf:03:1b:1f:40:8e:11:c2:d0:af:9c:89:1f: f1:0b:bc:94:d3:6b:81:32:c6:6e:0c:0d:0c:15:89: 76:4f:6a:50:74:9c:c1:f0:f5:cc:aa:9f:fe:a5:33: 6c:a4:19:4e:57:f9:e1:5e:f4:80:46:ce:98:4c:22: 4e:50:30:f1:8e:69:80:e4:7a:dd:16:77:25:dd:97: e4:52:37:09:f6:59:67:c4:9f:0e:48:5f:fe:ea:bf: 8c:c7:eb:22:f0:fb:58:f1:c6:16:db:4c:86:15:d8: 60:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:4F:25:79:CE:33:18:52:14:6A:05:B8:3E:BB:0B:AA:B6:8E:53:8C X509v3 Authority Key Identifier: keyid:3E:A1:8C:91:B2:BE:28:A0:74:B9:A3:87:4A:90:B4:46:01:3C:E1:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqGMkbK-KKB0uaOHSpC0RgE84b4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:5e:7d:b0:90:1d:d3:1f:ad:1f:d5:24:0b:8f:2d:99:93:36: 10:af:d5:02:83:93:67:b6:f7:49:7b:59:99:7e:bb:6d:d3:e4: 2e:5d:9c:06:58:df:79:f7:ad:5e:ab:fd:6a:62:42:d4:9f:7a: a2:30:96:a9:4b:c8:29:dc:50:2b:fa:a9:8d:85:b5:ac:e2:6d: 59:ca:59:62:9b:1c:05:3e:dd:e0:3a:33:4f:3f:3d:ca:69:6b: bc:b4:c9:38:cc:3b:c0:dd:8a:dd:d5:46:15:e1:63:ac:58:57: 35:55:07:66:8e:4b:b6:ce:22:c2:5f:0e:fe:d7:90:92:80:aa: 7b:c3:b9:84:9e:d2:d1:2b:ac:4f:81:dc:d0:c2:87:2f:4d:41: 5c:3c:4e:29:9c:10:6d:c3:a4:d9:b0:08:dc:3f:c6:9a:43:ab: b1:73:45:b8:43:43:cc:5a:c9:37:1f:05:b6:eb:31:7b:ab:94: 42:b8:1d:bb:51:f9:24:5e:a4:03:00:ad:bd:00:0b:1c:fe:98: 8c:d5:87:9c:a3:5e:40:ba:b2:1d:1f:ae:79:15:10:2f:30:4d: 4d:27:f6:79:6c:75:5a:4d:be:d6:9e:0e:58:92:a0:3f:a8:11: 79:d8:6a:23:32:1e:57:9c:8f:7a:f6:2c:70:fd:82:a2:30:1f: 0e:45:bf:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nEEM7BlEgGH2P6MdHbVuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYTE4YzkxYjJiZTI4YTA3NGI5YTM4NzRhOTBiNDQ2MDEz Y2UxYmUwHhcNMjUxMjA2MTcwMTEyWhcNMjUxMjA3MTcwMTEyWjAzMTEwLwYDVQQD Eyg4NjRmMjU3OWNlMzMxODUyMTQ2YTA1YjgzZWJiMGJhYWI2OGU1MzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvNVgquOdeUdp785lBe7KlgNm3kI UDJeCQ6rVF4m29cTsFVlaknaxEOJccE2nRZdFBn/WJ3jk21RDme3jZM1mP5GHzQ7 KwAgaovRi+l1lOKMEQ8SA+SpfA+Lp6qWjmFiP/Rlt60ve/NCcCnn26dg7kvP8cdI J92/AYe6S7A5eEQbWcz5mENcP952y6zXJaTZp4IKyRZzU78DGx9AjhHC0K+ciR/x C7yU02uBMsZuDA0MFYl2T2pQdJzB8PXMqp/+pTNspBlOV/nhXvSARs6YTCJOUDDx jmmA5HrdFncl3ZfkUjcJ9llnxJ8OSF/+6r+Mx+si8PtY8cYW20yGFdhgJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIZPJXnOMxhSFGoFuD67C6q2jlOMMB8GA1UdIwQY MBaAFD6hjJGyviigdLmjh0qQtEYBPOG+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHFHTWtiSy1LS0IwdWFPSFNwQzBSZ0U4NGI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9jYTM2NDktYzI5Zi00ZTkwLTg4MjIt YmM2NWVmNmIyN2I2LzEvUHFHTWtiSy1LS0IwdWFPSFNwQzBSZ0U4NGI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC9jYTM2NDktYzI5Zi00ZTkwLTg4MjItYmM2NWVmNmIyN2I2 LzEvUHFHTWtiSy1LS0IwdWFPSFNwQzBSZ0U4NGI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc159sJAd 0x+tH9UkC48tmZM2EK/VAoOTZ7b3SXtZmX67bdPkLl2cBljfefetXqv9amJC1J96 ojCWqUvIKdxQK/qpjYW1rOJtWcpZYpscBT7d4DozTz89ymlrvLTJOMw7wN2K3dVG FeFjrFhXNVUHZo5Lts4iwl8O/teQkoCqe8O5hJ7S0SusT4Hc0MKHL01BXDxOKZwQ bcOk2bAI3D/GmkOrsXNFuENDzFrJNx8Ftusxe6uUQrgdu1H5JF6kAwCtvQALHP6Y jNWHnKNeQLqyHR+ueRUQLzBNTSf2eWx1Wk2+1p4OWJKgP6gRedhqIzIeV5yPevYs cP2CojAfDkW/LQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:53:57 2025 by rpki-client