This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft File: PQG9lJxV7QfnAkLhUDPQqEdKnho.mft (raw, json) Hash identifier: VO9KtHLmwR7RO6TSlbnxJ8wPs5g6dba+ekHi37NWKMQ= Subject key identifier: 48:20:0B:CE:12:70:AF:C6:29:39:EE:8F:BE:58:21:9F:0D:96:40:55 Authority key identifier: 3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A Certificate issuer: /CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a Certificate serial: 019AF42E700649CBC12B723BC00788C2ED46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft Manifest number: 0641 Signing time: Sat 06 Dec 2025 15:01:15 +0000 Manifest this update: Sat 06 Dec 2025 15:01:15 +0000 Manifest next update: Sun 07 Dec 2025 15:01:15 +0000 Files and hashes: 1: PQG9lJxV7QfnAkLhUDPQqEdKnho.crl (hash: gLuiVF2z+D+K6ZqQD8m0xkOPUSKUTWpzixxvbsOktGQ=) 2: wTHnefFYASN9t7OgaDJP2pTz5W4.roa (hash: 9oC2Jer2cW2AbqdUqYgPoU7bU/Jm0xDFHVun+XWYaKg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:70:06:49:cb:c1:2b:72:3b:c0:07:88:c2:ed:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a Validity Not Before: Dec 6 15:01:15 2025 GMT Not After : Dec 7 15:01:15 2025 GMT Subject: CN=48200bce1270afc62939ee8fbe58219f0d964055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5d:86:92:d2:81:51:26:57:6f:0f:24:be:4b: 84:6f:a5:1f:bc:e3:30:2c:a4:9c:31:b8:99:4b:9d: 7a:e8:1d:92:e7:53:64:85:27:9a:a7:c7:e5:2f:3a: 53:89:c6:d2:99:69:54:ea:0b:eb:8d:ef:6f:23:f2: e4:5d:0d:d6:77:75:aa:62:1b:a5:ff:f2:b1:75:c3: d3:87:b3:2c:53:83:e5:cb:cf:4c:a5:d0:fc:37:2a: 8d:02:d5:a1:a5:ae:11:9f:e4:e9:eb:ae:ae:ed:57: 3a:90:83:d4:4b:05:09:37:a3:ad:d4:49:65:49:a4: 95:ef:07:c8:5b:ed:f5:5a:0b:2f:13:27:8b:05:81: f7:3f:a2:1c:fd:43:2f:74:b9:49:b8:90:59:d1:98: 8a:f8:03:78:e0:17:a4:3c:29:08:2a:61:5e:e9:45: 39:19:f0:03:32:06:e0:5d:b6:91:20:a2:33:3f:9d: e8:6a:23:0a:ad:74:15:b8:9a:9d:ce:26:5f:d1:92: 76:12:35:3d:c7:2b:e8:81:f8:dc:87:a8:d7:ae:1c: 8f:1e:5a:c9:44:78:6c:96:f7:3d:15:41:83:76:9a: 6b:dd:f3:8b:e6:4a:6b:89:ef:42:e1:59:14:ae:80: 08:ee:b3:ed:96:88:c9:ac:3c:5b:fa:6b:ea:f4:f6: 66:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:20:0B:CE:12:70:AF:C6:29:39:EE:8F:BE:58:21:9F:0D:96:40:55 X509v3 Authority Key Identifier: keyid:3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:e2:d4:9a:a8:8a:52:3d:8b:df:e0:7d:e9:82:7f:e2:be:16: 7a:27:2f:14:54:35:36:18:da:90:c2:2d:05:af:0f:9e:8a:c8: d6:dc:86:84:55:d6:b9:e7:8d:93:97:3d:43:90:79:26:78:40: 4f:4f:9f:dc:96:2e:6d:b0:24:24:16:4a:c1:d8:7a:8d:54:ec: 2b:b8:10:ed:58:33:71:64:2a:82:3b:2c:62:20:ed:34:82:4d: e5:e1:dd:62:18:74:e1:d3:b9:36:43:6d:bb:4f:59:1c:61:c5: e2:5b:33:f9:20:56:4f:63:a5:42:c8:25:1c:aa:cf:6b:83:38: f5:d9:f3:24:35:f1:f7:1e:54:8b:39:3d:de:d8:27:a8:45:44: 89:bf:c5:b1:f9:de:17:9d:07:4e:72:82:c0:ce:76:8b:d4:77: f9:8d:53:eb:56:82:b6:89:02:0e:54:dd:0c:20:48:ee:42:d2: b2:58:68:5a:d8:af:1c:75:c4:04:90:bb:fb:11:f6:88:2f:b4: 6d:7c:f5:fa:be:b6:f0:3d:fb:e1:04:7f:7d:f9:15:91:25:30: 38:7e:4a:34:2a:be:84:ea:ac:9c:50:f8:00:e5:47:47:1c:bd: 15:94:86:eb:6b:c2:a3:f5:8d:1d:98:70:c6:ea:f1:a1:11:c1: 5b:d5:f2:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LnAGScvBK3I7wAeIwu1GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkMDFiZDk0OWM1NWVkMDdlNzAyNDJlMTUwMzNkMGE4NDc0 YTllMWEwHhcNMjUxMjA2MTUwMTE1WhcNMjUxMjA3MTUwMTE1WjAzMTEwLwYDVQQD Eyg0ODIwMGJjZTEyNzBhZmM2MjkzOWVlOGZiZTU4MjE5ZjBkOTY0MDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxV2GktKBUSZXbw8kvkuEb6UfvOMw LKScMbiZS5166B2S51NkhSeap8flLzpTicbSmWlU6gvrje9vI/LkXQ3Wd3WqYhul //KxdcPTh7MsU4Ply89MpdD8NyqNAtWhpa4Rn+Tp666u7Vc6kIPUSwUJN6Ot1Ell SaSV7wfIW+31WgsvEyeLBYH3P6Ic/UMvdLlJuJBZ0ZiK+AN44BekPCkIKmFe6UU5 GfADMgbgXbaRIKIzP53oaiMKrXQVuJqdziZf0ZJ2EjU9xyvogfjch6jXrhyPHlrJ RHhslvc9FUGDdppr3fOL5kprie9C4VkUroAI7rPtlojJrDxb+mvq9PZmjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEggC84ScK/GKTnuj75YIZ8NlkBVMB8GA1UdIwQY MBaAFD0BvZScVe0H5wJC4VAz0KhHSp4aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFFHOWxKeFY3UWZuQWtMaFVEUFFxRWRLbmhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMTUwMDMtZWQ1My00MmQzLWFmMDkt ZTRlMGI1NTVhZDU5LzEvUFFHOWxKeFY3UWZuQWtMaFVEUFFxRWRLbmhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9jMTUwMDMtZWQ1My00MmQzLWFmMDktZTRlMGI1NTVhZDU5 LzEvUFFHOWxKeFY3UWZuQWtMaFVEUFFxRWRLbmhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFeLUmqiK Uj2L3+B96YJ/4r4WeicvFFQ1NhjakMItBa8PnorI1tyGhFXWueeNk5c9Q5B5JnhA T0+f3JYubbAkJBZKwdh6jVTsK7gQ7VgzcWQqgjssYiDtNIJN5eHdYhh04dO5NkNt u09ZHGHF4lsz+SBWT2OlQsglHKrPa4M49dnzJDXx9x5Uizk93tgnqEVEib/Fsfne F50HTnKCwM52i9R3+Y1T61aCtokCDlTdDCBI7kLSslhoWtivHHXEBJC7+xH2iC+0 bXz1+r628D374QR/ffkVkSUwOH5KNCq+hOqsnFD4AOVHRxy9FZSG62vCo/WNHZhw xurxoRHBW9XyJw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:15:45 2025 by rpki-client