This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.mft File: pnYhghhEiOf3hxIqcYCZfOjpDUw.mft (raw, json) Hash identifier: Vh8cV4oKCwYXq3oFhekx69Wmnd3YTkTzfx5Lc3XqVI0= Subject key identifier: A4:1C:30:F3:8D:91:33:C2:DC:01:F6:48:91:3B:C0:D4:C4:3C:72:CB Authority key identifier: A6:76:21:82:18:44:88:E7:F7:87:12:2A:71:80:99:7C:E8:E9:0D:4C Certificate issuer: /CN=a6762182184488e7f787122a7180997ce8e90d4c Certificate serial: 019B3DFEB924BC84F39B48B81FCE951E7639 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnYhghhEiOf3hxIqcYCZfOjpDUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.mft Manifest number: 044E Signing time: Sat 20 Dec 2025 23:01:02 +0000 Manifest this update: Sat 20 Dec 2025 23:01:02 +0000 Manifest next update: Sun 21 Dec 2025 23:01:02 +0000 Files and hashes: 1: pnYhghhEiOf3hxIqcYCZfOjpDUw.crl (hash: 26VmpALhBdIJwxazHRmfPndsvmWNxk24zYCxiJ0gE/Y=) 2: yNyV4cceOnlRqYhPeAllARW73Jw.roa (hash: 8x/01ij81KHBd33TvjxnJ5OVDsgBIBKqbtRkLV2shYM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.mft rsync://rpki.ripe.net/repository/DEFAULT/pnYhghhEiOf3hxIqcYCZfOjpDUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:b9:24:bc:84:f3:9b:48:b8:1f:ce:95:1e:76:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6762182184488e7f787122a7180997ce8e90d4c Validity Not Before: Dec 20 23:01:02 2025 GMT Not After : Dec 21 23:01:02 2025 GMT Subject: CN=a41c30f38d9133c2dc01f648913bc0d4c43c72cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:56:fd:cf:b3:7e:ac:59:42:d8:5b:48:3a:f7: 5d:4e:c2:f8:45:49:ea:46:89:79:36:13:d2:bc:b8: b2:a6:7e:a0:00:4f:d4:f3:68:b8:9e:79:de:b7:29: cc:ac:77:75:e0:ab:64:2a:1c:c5:b1:8d:33:9e:89: 0b:df:72:44:9d:ef:d9:e4:0a:e9:55:22:00:91:78: 17:1f:60:8e:fd:17:c2:18:7b:51:18:13:a8:22:82: 7b:23:f2:4b:f0:d7:dc:56:0d:90:39:55:e4:35:19: 4d:0b:bb:65:b5:bb:6b:92:28:24:d9:db:09:89:66: fa:0e:91:23:2a:f8:05:09:0a:9c:77:e7:97:2c:77: 4b:74:ac:51:da:f1:32:76:33:5d:0f:9b:fa:d4:05: 8b:96:0f:ce:03:2d:a9:e6:aa:66:18:88:c1:90:59: 4f:28:55:16:12:35:ab:5d:8b:3b:da:6c:95:4a:5c: df:ca:55:bf:60:e3:3e:1b:5c:5c:5c:3d:31:fb:ea: 4d:62:0c:6a:ad:af:b4:92:64:05:6c:a6:95:c6:83: 3a:f2:ce:65:ee:f2:ce:d5:bc:60:a2:4f:1d:2c:8c: 65:3b:1a:46:55:8d:b4:8d:95:93:30:8a:2a:f5:84: 09:51:b6:b6:55:9f:41:3b:78:17:ed:c3:b7:e3:dd: df:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:1C:30:F3:8D:91:33:C2:DC:01:F6:48:91:3B:C0:D4:C4:3C:72:CB X509v3 Authority Key Identifier: keyid:A6:76:21:82:18:44:88:E7:F7:87:12:2A:71:80:99:7C:E8:E9:0D:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnYhghhEiOf3hxIqcYCZfOjpDUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:f5:89:29:0b:61:12:0b:ef:c5:85:4f:71:7f:fc:c7:21:e9: 37:2d:09:d6:5d:4d:b2:cb:af:4a:47:d3:f3:7d:11:50:69:2f: 50:cd:82:cc:00:6d:f1:c9:d2:b0:21:a4:0b:84:c1:53:3b:d3: 8b:01:13:b4:35:3e:46:65:56:2b:ad:57:03:85:bb:6d:1a:a5: 6f:48:b1:a8:75:f4:ab:f3:c0:3b:39:d2:69:c3:ef:15:34:88: 14:f1:df:5a:e4:19:a5:04:fd:be:55:5a:65:1d:3c:68:3c:fc: 6a:44:64:0c:aa:4f:23:c3:bd:85:00:83:0f:e4:ec:f6:67:b1: 91:5b:be:b1:5d:d2:70:5e:d5:70:ac:bf:47:a6:30:fc:16:a4: 58:b5:b6:fc:1e:67:b4:74:12:3a:f3:a1:e8:fb:65:88:fb:5d: 1a:28:f1:fc:5d:2a:ed:a6:79:bd:34:39:39:1a:d5:71:8e:a9: d1:1a:94:10:72:e8:bc:40:3c:79:36:0c:72:15:64:9a:9c:92: cf:6c:63:7b:db:f4:c8:ed:7b:d3:39:44:5a:0a:70:8a:17:de: 02:1d:d8:65:a8:8b:f9:fb:d3:31:ee:06:44:3d:c4:e8:2e:69: 51:b3:ca:b1:23:ec:63:a0:ae:24:18:c4:39:25:df:31:c9:18: 9f:4d:69:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/rkkvITzm0i4H86VHnY5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NzYyMTgyMTg0NDg4ZTdmNzg3MTIyYTcxODA5OTdjZThl OTBkNGMwHhcNMjUxMjIwMjMwMTAyWhcNMjUxMjIxMjMwMTAyWjAzMTEwLwYDVQQD EyhhNDFjMzBmMzhkOTEzM2MyZGMwMWY2NDg5MTNiYzBkNGM0M2M3MmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11b9z7N+rFlC2FtIOvddTsL4RUnq Rol5NhPSvLiypn6gAE/U82i4nnnetynMrHd14KtkKhzFsY0znokL33JEne/Z5Arp VSIAkXgXH2CO/RfCGHtRGBOoIoJ7I/JL8NfcVg2QOVXkNRlNC7tltbtrkigk2dsJ iWb6DpEjKvgFCQqcd+eXLHdLdKxR2vEydjNdD5v61AWLlg/OAy2p5qpmGIjBkFlP KFUWEjWrXYs72myVSlzfylW/YOM+G1xcXD0x++pNYgxqra+0kmQFbKaVxoM68s5l 7vLO1bxgok8dLIxlOxpGVY20jZWTMIoq9YQJUba2VZ9BO3gX7cO3493fJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQcMPONkTPC3AH2SJE7wNTEPHLLMB8GA1UdIwQY MBaAFKZ2IYIYRIjn94cSKnGAmXzo6Q1MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcG5ZaGdoaEVpT2YzaHhJcWNZQ1pmT2pwRFV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8yZjMxOWUtMjY4NS00NDI3LWFlYzAt ZWQ2MGJhYjc1NzJmLzEvcG5ZaGdoaEVpT2YzaHhJcWNZQ1pmT2pwRFV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8yZjMxOWUtMjY4NS00NDI3LWFlYzAtZWQ2MGJhYjc1NzJm LzEvcG5ZaGdoaEVpT2YzaHhJcWNZQ1pmT2pwRFV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAPWJKQth EgvvxYVPcX/8xyHpNy0J1l1NssuvSkfT830RUGkvUM2CzABt8cnSsCGkC4TBUzvT iwETtDU+RmVWK61XA4W7bRqlb0ixqHX0q/PAOznSacPvFTSIFPHfWuQZpQT9vlVa ZR08aDz8akRkDKpPI8O9hQCDD+Ts9mexkVu+sV3ScF7VcKy/R6Yw/BakWLW2/B5n tHQSOvOh6PtliPtdGijx/F0q7aZ5vTQ5ORrVcY6p0RqUEHLovEA8eTYMchVkmpyS z2xje9v0yO170zlEWgpwihfeAh3YZaiL+fvTMe4GRD3E6C5pUbPKsSPsY6CuJBjE OSXfMckYn01pPg== -----END CERTIFICATE-----Generated at Sun Dec 21 01:48:04 2025 by rpki-client