This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft File: pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft (raw, json) Hash identifier: uXDwEvMRM601Uzq+e9Ol73gKQIHuNTdDphlyfPcm5Rg= Subject key identifier: 21:09:35:F9:58:2A:96:5E:40:94:37:3E:6D:20:72:9B:13:E0:72:A5 Authority key identifier: A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB Certificate issuer: /CN=a4a37878c14f216c32649819ea428a58225504fb Certificate serial: 019AFAD589B621303C2FBAF973B712D748FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft Manifest number: 070E Signing time: Sun 07 Dec 2025 22:01:29 +0000 Manifest this update: Sun 07 Dec 2025 22:01:29 +0000 Manifest next update: Mon 08 Dec 2025 22:01:29 +0000 Files and hashes: 1: pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl (hash: 0s+ZQoube+Dc5vuA1dWxPsf6YXSXsuQPJvXo5VMtzdA=) 2: ro12KKiX-LBkOFDMXKVrhIyQ9tA.roa (hash: 3rfI99WFfWKHo+rtyifcnFcBumsIBP/guPHdSOGN9zM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 19:58:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fa:d5:89:b6:21:30:3c:2f:ba:f9:73:b7:12:d7:48:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4a37878c14f216c32649819ea428a58225504fb Validity Not Before: Dec 7 22:01:29 2025 GMT Not After : Dec 8 22:01:29 2025 GMT Subject: CN=210935f9582a965e4094373e6d20729b13e072a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:4c:99:85:28:e0:fc:fe:51:60:e2:5c:c3:c9: 1d:d6:01:b0:5b:f7:17:95:f1:46:c1:89:7d:02:c6: 20:8b:51:05:ff:05:41:d4:ed:62:4e:42:5e:88:d7: 19:d4:80:dd:0a:c0:a4:6d:ba:52:84:51:7f:ee:c8: 1d:2f:4c:30:44:ee:eb:bd:21:ae:88:94:78:83:2a: dc:25:c5:77:df:7c:8a:2d:42:6b:bd:87:dc:0e:d5: bc:a2:0d:3b:06:88:a5:d1:bc:a2:7b:b0:3d:c6:a2: 45:e9:21:5a:d5:66:01:2a:42:85:56:24:72:a9:82: 4f:db:0f:78:66:19:fa:58:b8:6d:a2:5b:ff:ef:07: bb:a7:db:c3:8a:b3:aa:3d:43:f8:80:7b:8c:9c:9e: e3:d8:cf:7b:18:bb:a1:0c:e6:d9:5d:1f:99:3a:b6: 2f:94:99:17:c0:bf:15:cb:98:8c:12:6b:c2:ca:90: 3e:6e:10:1f:ce:55:89:ed:d0:8d:ac:70:61:58:de: 52:72:52:9f:12:96:4e:72:33:fe:f7:e9:e6:8a:b3: fe:da:45:45:10:6f:26:0c:1e:51:88:25:1c:3c:d5: 49:f3:f7:12:a7:88:f2:6b:01:1a:dd:a5:19:f5:14: c0:85:0f:4d:a8:59:7b:12:a5:83:c5:ab:b0:b2:76: c7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:09:35:F9:58:2A:96:5E:40:94:37:3E:6D:20:72:9B:13:E0:72:A5 X509v3 Authority Key Identifier: keyid:A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:01:9b:9a:75:5a:e2:72:f1:dc:17:8c:67:33:96:4b:10:63: 4b:3f:b6:4f:f7:8c:17:19:f0:5d:77:eb:41:cb:5d:6c:32:9b: ef:46:86:f9:85:fd:48:20:dd:5b:bf:15:81:1b:d7:b5:b4:c9: bf:88:48:8e:b0:54:2e:a3:63:70:36:39:62:09:5d:9e:06:3a: 48:3b:ce:07:71:b9:f4:65:55:4a:6e:54:e4:d1:ae:4d:c7:85: 43:4e:26:2a:ac:88:50:91:58:35:7c:d4:ea:ab:02:dd:11:c2: 3b:80:ce:18:ad:33:98:01:75:7b:53:45:02:ab:0c:31:a3:18: 24:c1:2d:f9:3f:10:06:24:33:48:9d:2d:7c:ac:bb:13:8f:74: a0:fe:91:a6:fc:44:0c:4f:e8:c3:2e:ad:6d:e6:ad:da:c3:01: 3f:d4:97:90:c4:fe:7e:55:cb:de:98:04:2c:f9:e8:87:6b:74: eb:9f:55:00:a1:1f:66:06:8d:02:14:11:ad:17:95:40:9c:8f: 75:49:a6:c8:7e:e9:4b:c0:c5:93:76:ab:78:8b:99:b6:1e:4c: 1d:2a:5d:9d:ef:b2:9a:5d:bd:3e:66:c0:27:54:b3:c6:01:eb: 0d:c3:f7:fa:a2:78:05:3e:a2:d4:95:d8:3e:91:5a:a7:45:1b: 09:59:7f:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr61Ym2ITA8L7r5c7cS10j8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YTM3ODc4YzE0ZjIxNmMzMjY0OTgxOWVhNDI4YTU4MjI1 NTA0ZmIwHhcNMjUxMjA3MjIwMTI5WhcNMjUxMjA4MjIwMTI5WjAzMTEwLwYDVQQD EygyMTA5MzVmOTU4MmE5NjVlNDA5NDM3M2U2ZDIwNzI5YjEzZTA3MmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EyZhSjg/P5RYOJcw8kd1gGwW/cX lfFGwYl9AsYgi1EF/wVB1O1iTkJeiNcZ1IDdCsCkbbpShFF/7sgdL0wwRO7rvSGu iJR4gyrcJcV333yKLUJrvYfcDtW8og07Boil0byie7A9xqJF6SFa1WYBKkKFViRy qYJP2w94Zhn6WLhtolv/7we7p9vDirOqPUP4gHuMnJ7j2M97GLuhDObZXR+ZOrYv lJkXwL8Vy5iMEmvCypA+bhAfzlWJ7dCNrHBhWN5SclKfEpZOcjP+9+nmirP+2kVF EG8mDB5RiCUcPNVJ8/cSp4jyawEa3aUZ9RTAhQ9NqFl7EqWDxauwsnbHLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCEJNflYKpZeQJQ3Pm0gcpsT4HKlMB8GA1UdIwQY MBaAFKSjeHjBTyFsMmSYGepCilgiVQT7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEtONGVNRlBJV3d5WkpnWjZrS0tXQ0pWQlBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9lNjA2ZmItMTA3Zi00Mjk2LTg4NzAt NGIwZTBhYzhkMjI5LzEvcEtONGVNRlBJV3d5WkpnWjZrS0tXQ0pWQlBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9lNjA2ZmItMTA3Zi00Mjk2LTg4NzAtNGIwZTBhYzhkMjI5 LzEvcEtONGVNRlBJV3d5WkpnWjZrS0tXQ0pWQlBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtgGbmnVa 4nLx3BeMZzOWSxBjSz+2T/eMFxnwXXfrQctdbDKb70aG+YX9SCDdW78VgRvXtbTJ v4hIjrBULqNjcDY5YgldngY6SDvOB3G59GVVSm5U5NGuTceFQ04mKqyIUJFYNXzU 6qsC3RHCO4DOGK0zmAF1e1NFAqsMMaMYJMEt+T8QBiQzSJ0tfKy7E490oP6RpvxE DE/owy6tbeat2sMBP9SXkMT+flXL3pgELPnoh2t0659VAKEfZgaNAhQRrReVQJyP dUmmyH7pS8DFk3areIuZth5MHSpdne+yml29PmbAJ1SzxgHrDcP3+qJ4BT6i1JXY PpFap0UbCVl/Mg== -----END CERTIFICATE-----Generated at Mon Dec 8 04:13:21 2025 by rpki-client