This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft File: pK0j9tzk2Wg8KklDvTfBczXHYYo.mft (raw, json) Hash identifier: Y8EApsgv1rUBns5Xh5EWgF0oiVE7TYyfxr7Yd6sPu4o= Subject key identifier: C2:10:CA:7C:4A:07:C8:04:07:19:03:37:A1:B9:CD:F4:2E:A5:CF:C8 Authority key identifier: A4:AD:23:F6:DC:E4:D9:68:3C:2A:49:43:BD:37:C1:73:35:C7:61:8A Certificate issuer: /CN=a4ad23f6dce4d9683c2a4943bd37c17335c7618a Certificate serial: 019AF0BF9419218ACC2FF39BD2414020ACEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft Manifest number: 1761 Signing time: Fri 05 Dec 2025 23:01:18 +0000 Manifest this update: Fri 05 Dec 2025 23:01:18 +0000 Manifest next update: Sat 06 Dec 2025 23:01:18 +0000 Files and hashes: 1: RC2JkOQZBHdrMWWJ6dmI74cPa_s.roa (hash: qL9vMEtT48m8aWpCwA/eKJ1AT6hZ+DcyDfjgFWcllKo=) 2: pK0j9tzk2Wg8KklDvTfBczXHYYo.crl (hash: dF7qtWF+1Poa1+H6h34ORW/OildoNS/eOtmD85cVcGg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:94:19:21:8a:cc:2f:f3:9b:d2:41:40:20:ac:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4ad23f6dce4d9683c2a4943bd37c17335c7618a Validity Not Before: Dec 5 23:01:18 2025 GMT Not After : Dec 6 23:01:18 2025 GMT Subject: CN=c210ca7c4a07c80407190337a1b9cdf42ea5cfc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d4:9e:99:68:22:d1:72:ef:6e:32:ed:a5:f1: a7:a8:49:8e:71:85:f7:3f:22:63:d9:cb:47:22:b0: bd:04:f7:a4:85:ac:36:83:e7:9e:f6:49:4a:f4:dc: 40:f5:de:10:f8:ad:6e:3f:51:14:c2:5b:1a:dc:ed: 66:5d:65:61:a3:2c:24:4d:89:74:ec:02:e7:34:97: 42:6e:2a:06:99:89:04:ef:7f:c8:7a:aa:15:6b:0a: 41:da:5c:71:0c:7d:85:0e:12:81:3a:50:68:fd:a0: 30:ac:54:37:54:06:88:20:b7:76:ce:6e:c0:1f:b4: a9:0e:6c:43:0b:78:52:45:43:83:f7:7c:14:c7:a5: c4:70:d6:d9:de:85:ae:26:b4:82:82:a8:ce:e3:de: 7e:ca:77:fc:c1:ab:6c:71:d4:21:38:06:4c:f1:46: c3:8b:88:21:d4:bc:d7:52:c6:68:2b:22:4f:b5:23: a4:59:04:87:51:80:ab:3c:26:64:85:5d:8b:1f:41: d0:9d:3c:0b:01:2c:13:e4:3f:39:f8:ef:da:c5:c5: 3d:ff:4b:1b:a4:62:2b:ca:fd:26:f3:09:b2:23:e4: 19:f8:4d:fc:44:b1:31:a3:a7:7e:61:a7:05:d3:61: 09:b3:dd:f7:a2:22:1c:4a:65:09:b4:e4:18:b9:35: f3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:10:CA:7C:4A:07:C8:04:07:19:03:37:A1:B9:CD:F4:2E:A5:CF:C8 X509v3 Authority Key Identifier: keyid:A4:AD:23:F6:DC:E4:D9:68:3C:2A:49:43:BD:37:C1:73:35:C7:61:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:f6:46:1a:f5:e8:81:21:86:30:5b:0a:b8:d5:17:97:ef:9e: 33:64:be:8b:c4:71:14:80:f5:bf:fc:4d:41:e1:6f:26:ca:80: 86:f6:fd:8e:c5:ab:92:79:ef:e1:88:85:b3:5b:f8:e2:75:08: 06:15:47:33:9c:de:4a:2d:ed:b1:76:89:26:84:b6:9c:bb:54: 55:db:2e:ac:a9:b4:69:57:7c:10:2e:a9:aa:1e:09:bf:d8:b5: 8c:28:85:2a:ad:8e:4b:6d:45:16:79:b7:a6:3b:ad:50:b6:a9: 69:ce:04:cf:d4:49:e7:4a:25:8d:c5:44:01:78:08:f3:d4:c6: a4:40:46:9d:5b:38:bb:29:28:de:c7:77:91:46:d5:f7:d6:19: 11:20:4c:e1:2f:61:31:70:85:fd:3e:07:ed:e8:fa:16:ee:62: 1c:77:8c:65:97:73:86:05:63:ea:85:68:7e:c2:eb:e4:3a:cf: b1:f1:ef:80:08:89:5a:ca:3b:af:1f:35:7b:45:d5:9e:47:a6: 3a:35:f1:a7:a5:53:14:b5:3e:45:54:10:d4:5c:ac:dd:df:42: 9e:87:55:a0:b7:1a:58:1f:0b:92:62:80:61:3d:c3:c8:f6:1f: a5:44:93:52:b9:cc:be:6d:14:28:73:76:da:a6:50:a2:09:ff: 08:7d:da:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv5QZIYrML/Ob0kFAIKzvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YWQyM2Y2ZGNlNGQ5NjgzYzJhNDk0M2JkMzdjMTczMzVj NzYxOGEwHhcNMjUxMjA1MjMwMTE4WhcNMjUxMjA2MjMwMTE4WjAzMTEwLwYDVQQD EyhjMjEwY2E3YzRhMDdjODA0MDcxOTAzMzdhMWI5Y2RmNDJlYTVjZmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtSemWgi0XLvbjLtpfGnqEmOcYX3 PyJj2ctHIrC9BPekhaw2g+ee9klK9NxA9d4Q+K1uP1EUwlsa3O1mXWVhoywkTYl0 7ALnNJdCbioGmYkE73/IeqoVawpB2lxxDH2FDhKBOlBo/aAwrFQ3VAaIILd2zm7A H7SpDmxDC3hSRUOD93wUx6XEcNbZ3oWuJrSCgqjO495+ynf8watscdQhOAZM8UbD i4gh1LzXUsZoKyJPtSOkWQSHUYCrPCZkhV2LH0HQnTwLASwT5D85+O/axcU9/0sb pGIryv0m8wmyI+QZ+E38RLExo6d+YacF02EJs933oiIcSmUJtOQYuTXzXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMIQynxKB8gEBxkDN6G5zfQupc/IMB8GA1UdIwQY MBaAFKStI/bc5NloPCpJQ703wXM1x2GKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEswajl0emsyV2c4S2tsRHZUZkJjelhIWVlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9kMTgzN2EtNjA2ZS00MTgwLWE3ZjAt NzI4ZTBkZmI4NDBkLzEvcEswajl0emsyV2c4S2tsRHZUZkJjelhIWVlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9kMTgzN2EtNjA2ZS00MTgwLWE3ZjAtNzI4ZTBkZmI4NDBk LzEvcEswajl0emsyV2c4S2tsRHZUZkJjelhIWVlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIPZGGvXo gSGGMFsKuNUXl++eM2S+i8RxFID1v/xNQeFvJsqAhvb9jsWrknnv4YiFs1v44nUI BhVHM5zeSi3tsXaJJoS2nLtUVdsurKm0aVd8EC6pqh4Jv9i1jCiFKq2OS21FFnm3 pjutULapac4Ez9RJ50oljcVEAXgI89TGpEBGnVs4uyko3sd3kUbV99YZESBM4S9h MXCF/T4H7ej6Fu5iHHeMZZdzhgVj6oVofsLr5DrPsfHvgAiJWso7rx81e0XVnkem OjXxp6VTFLU+RVQQ1Fys3d9CnodVoLcaWB8LkmKAYT3DyPYfpUSTUrnMvm0UKHN2 2qZQogn/CH3aIA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:32:15 2025 by rpki-client