This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/PKRH_Ql5uKmJNVw1TTBNEU0gcno.mft File: PKRH_Ql5uKmJNVw1TTBNEU0gcno.mft (raw, json) Hash identifier: 7Ci5HNGGEBwP4/Zw92p+Gm5MV94GDOy9f09RJzjK3Gs= Subject key identifier: 59:02:0B:68:2B:86:A8:19:A4:41:88:C7:85:D2:4B:07:F0:28:5C:60 Authority key identifier: 3C:A4:47:FD:09:79:B8:A9:89:35:5C:35:4D:30:4D:11:4D:20:72:7A Certificate issuer: /CN=3ca447fd0979b8a989355c354d304d114d20727a Certificate serial: 019AF5AE5345A1BAE3CDB1578F229553430E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKRH_Ql5uKmJNVw1TTBNEU0gcno.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/PKRH_Ql5uKmJNVw1TTBNEU0gcno.mft Manifest number: 0441 Signing time: Sat 06 Dec 2025 22:00:33 +0000 Manifest this update: Sat 06 Dec 2025 22:00:33 +0000 Manifest next update: Sun 07 Dec 2025 22:00:33 +0000 Files and hashes: 1: BcTRmH6BmmlSz8rh3pMxnCQXpBs.roa (hash: xmk+1c+FLynSNXKfYDQ/lfjoeA1RsSdHXQaf1l1+6Ak=) 2: PKRH_Ql5uKmJNVw1TTBNEU0gcno.crl (hash: W56tMuIpA0gf7hiNvs+4NY+5AIohhUxdUIdeX/BELQA=) 3: eP87Vey-9rBbyOrOh4YCvuO3c1M.roa (hash: az6VMbDPubRZM135slIGEREK5WUZUt9MUwTRvHW3psg=) 4: wBy33E8gC6zWuMOmD5yzfH0QyIQ.roa (hash: yM84zdMfEYNT7elb1Nq+ZFqPP22ZSrKZWHzVdylcK6U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/PKRH_Ql5uKmJNVw1TTBNEU0gcno.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/PKRH_Ql5uKmJNVw1TTBNEU0gcno.mft rsync://rpki.ripe.net/repository/DEFAULT/PKRH_Ql5uKmJNVw1TTBNEU0gcno.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:53:45:a1:ba:e3:cd:b1:57:8f:22:95:53:43:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ca447fd0979b8a989355c354d304d114d20727a Validity Not Before: Dec 6 22:00:33 2025 GMT Not After : Dec 7 22:00:33 2025 GMT Subject: CN=59020b682b86a819a44188c785d24b07f0285c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:39:bf:b4:c5:01:26:99:e7:1e:b9:cf:8f:aa: 61:da:f8:5d:80:ca:af:ed:3f:7a:2e:9a:24:4e:fd: 8f:d8:d4:c3:0e:73:b8:ff:73:d8:60:31:bd:69:83: 31:9c:88:35:5d:3d:3e:70:18:1d:fb:cd:db:ff:e2: c1:27:e0:2e:49:07:2b:43:de:15:2b:ec:e5:ea:44: ad:2a:7a:17:7a:d4:95:c0:5f:7d:38:aa:31:eb:89: 3b:e0:68:0e:92:df:9a:5e:e0:7f:af:c4:9c:04:da: bd:46:9d:51:9d:af:d9:f4:61:cb:f7:cd:d2:61:05: dd:ed:06:1c:7d:d2:66:df:c2:a5:98:9a:67:b5:4d: a3:88:e8:ab:1b:ca:8e:98:05:78:15:46:fd:77:6c: 87:20:71:bb:29:d4:13:55:14:07:7a:90:e2:b7:86: 0f:02:0b:f9:62:6f:4b:c9:e3:eb:ac:c6:d0:2c:b9: 52:49:41:30:00:e6:95:e5:3b:ef:5e:1e:07:30:71: 44:00:e5:57:0a:16:e9:4b:d9:c1:4e:77:9b:4a:48: 92:40:e2:5b:06:9b:e5:20:ec:dc:0d:ae:5d:47:d3: 2f:d5:09:e7:96:25:45:75:c2:f6:b0:f3:a7:46:29: e6:85:e0:e1:db:f0:f3:30:af:26:01:74:d3:d1:72: fd:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:02:0B:68:2B:86:A8:19:A4:41:88:C7:85:D2:4B:07:F0:28:5C:60 X509v3 Authority Key Identifier: keyid:3C:A4:47:FD:09:79:B8:A9:89:35:5C:35:4D:30:4D:11:4D:20:72:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKRH_Ql5uKmJNVw1TTBNEU0gcno.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/PKRH_Ql5uKmJNVw1TTBNEU0gcno.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/PKRH_Ql5uKmJNVw1TTBNEU0gcno.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:c8:80:bf:aa:9b:89:b0:ae:ce:6f:da:81:34:77:d1:5a:b0: e6:c5:62:da:a0:64:d7:bb:20:2b:6b:cd:0d:f7:bc:f8:2f:0b: 86:d5:9a:b9:3f:c0:e1:ee:f4:2a:dd:26:d7:00:15:cb:65:be: 1a:25:64:8d:d5:7c:53:dd:90:83:44:43:e5:db:e0:5d:f5:f8: 04:fe:cf:ed:c0:a1:dd:de:71:7a:aa:45:9b:09:08:36:0b:05: 42:06:27:7d:97:32:44:ba:22:59:09:14:68:9b:57:d1:80:de: 09:54:9a:0f:72:c0:82:1b:f0:9f:f8:32:5d:db:61:b8:ef:ca: 6d:96:9c:fd:e8:7b:e6:64:08:a1:a8:4f:44:c4:bd:83:81:45: b6:71:53:92:6a:57:f4:ee:14:88:46:6d:24:42:b7:46:14:ce: cd:cb:51:82:87:f3:fc:40:44:2f:a0:c3:6f:4d:18:a2:e9:ef: de:0c:20:37:6a:4c:a3:be:37:61:70:b6:08:49:15:77:83:65: 7a:55:1e:19:e6:c8:46:8a:33:42:9d:b1:2c:93:24:ef:1f:ac: 25:dc:c6:19:3e:d1:b4:71:1d:fb:c9:f9:42:1a:00:80:17:8b: ee:04:d6:be:73:6f:aa:fa:05:b4:53:6d:19:b4:9b:e4:b2:0e: 84:26:62:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rlNFobrjzbFXjyKVU0MOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjYTQ0N2ZkMDk3OWI4YTk4OTM1NWMzNTRkMzA0ZDExNGQy MDcyN2EwHhcNMjUxMjA2MjIwMDMzWhcNMjUxMjA3MjIwMDMzWjAzMTEwLwYDVQQD Eyg1OTAyMGI2ODJiODZhODE5YTQ0MTg4Yzc4NWQyNGIwN2YwMjg1YzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDm/tMUBJpnnHrnPj6ph2vhdgMqv 7T96LpokTv2P2NTDDnO4/3PYYDG9aYMxnIg1XT0+cBgd+83b/+LBJ+AuSQcrQ94V K+zl6kStKnoXetSVwF99OKox64k74GgOkt+aXuB/r8ScBNq9Rp1Rna/Z9GHL983S YQXd7QYcfdJm38KlmJpntU2jiOirG8qOmAV4FUb9d2yHIHG7KdQTVRQHepDit4YP Agv5Ym9LyePrrMbQLLlSSUEwAOaV5TvvXh4HMHFEAOVXChbpS9nBTnebSkiSQOJb BpvlIOzcDa5dR9Mv1QnnliVFdcL2sPOnRinmheDh2/DzMK8mAXTT0XL9HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFkCC2grhqgZpEGIx4XSSwfwKFxgMB8GA1UdIwQY MBaAFDykR/0JebipiTVcNU0wTRFNIHJ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEtSSF9RbDV1S21KTlZ3MVRUQk5FVTBnY25vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9iNWEwOGYtZDlmOC00MzJkLWJhNGIt YTZlZjc1MmM2ZGMyLzEvUEtSSF9RbDV1S21KTlZ3MVRUQk5FVTBnY25vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9iNWEwOGYtZDlmOC00MzJkLWJhNGItYTZlZjc1MmM2ZGMy LzEvUEtSSF9RbDV1S21KTlZ3MVRUQk5FVTBnY25vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ8iAv6qb ibCuzm/agTR30Vqw5sVi2qBk17sgK2vNDfe8+C8LhtWauT/A4e70Kt0m1wAVy2W+ GiVkjdV8U92Qg0RD5dvgXfX4BP7P7cCh3d5xeqpFmwkINgsFQgYnfZcyRLoiWQkU aJtX0YDeCVSaD3LAghvwn/gyXdthuO/KbZac/eh75mQIoahPRMS9g4FFtnFTkmpX 9O4UiEZtJEK3RhTOzctRgofz/EBEL6DDb00Younv3gwgN2pMo743YXC2CEkVd4Nl elUeGebIRoozQp2xLJMk7x+sJdzGGT7RtHEd+8n5QhoAgBeL7gTWvnNvqvoFtFNt GbSb5LIOhCZiKQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:41:31 2025 by rpki-client