This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft File: pmAQdyZRcCotMzyDFfGukvbMdJA.mft (raw, json) Hash identifier: eMX5Kfxoi41NulFd8ulHAolL/NHuuuxDg3AC6TOa+G4= Subject key identifier: 3A:FA:E5:F5:89:DF:D7:2E:65:9D:C0:D9:8C:98:94:98:43:E7:FE:7E Authority key identifier: A6:60:10:77:26:51:70:2A:2D:33:3C:83:15:F1:AE:92:F6:CC:74:90 Certificate issuer: /CN=a66010772651702a2d333c8315f1ae92f6cc7490 Certificate serial: 019AF08885EE9F629830F387768D8792C01B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft Manifest number: 1699 Signing time: Fri 05 Dec 2025 22:01:10 +0000 Manifest this update: Fri 05 Dec 2025 22:01:10 +0000 Manifest next update: Sat 06 Dec 2025 22:01:10 +0000 Files and hashes: 1: pmAQdyZRcCotMzyDFfGukvbMdJA.crl (hash: uh6VgWp9e9qn+hbk13F5kayPfU9T5BuR+hUJKA7H36Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:85:ee:9f:62:98:30:f3:87:76:8d:87:92:c0:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a66010772651702a2d333c8315f1ae92f6cc7490 Validity Not Before: Dec 5 22:01:10 2025 GMT Not After : Dec 6 22:01:10 2025 GMT Subject: CN=3afae5f589dfd72e659dc0d98c98949843e7fe7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:28:d7:01:1e:a7:8e:80:4d:90:12:17:75:6c: 0d:0b:0a:9c:eb:9a:58:9f:5f:57:0d:14:9a:b0:80: bb:cf:f5:4a:62:9d:b5:37:4b:ed:38:b9:7a:61:7a: e1:f4:75:db:41:6f:d1:7c:ff:c2:a7:ea:c5:7d:f3: 75:f0:8c:c4:5a:96:45:07:3d:d6:45:57:52:ec:eb: 97:73:bb:4e:be:49:9b:f1:18:0f:b9:18:59:40:0e: cf:04:06:a3:a1:8e:14:e2:a0:a2:a6:27:e5:a2:84: 93:25:8a:dd:93:e2:4c:bc:d0:30:57:87:78:a0:96: 56:d9:8f:f3:c1:d5:47:c2:fe:df:b7:5b:df:a9:04: 74:43:70:3e:3d:eb:e1:41:a1:38:01:b0:07:91:a0: 9a:e3:8c:de:64:1f:5f:01:5f:b8:d9:ef:0d:84:cf: 88:1e:11:09:99:30:cf:3f:2d:60:e8:06:f3:22:51: fc:4c:26:5b:2f:60:eb:33:75:8b:32:46:bc:63:8e: 2a:c2:03:74:6a:c7:3e:e3:67:b2:a4:9c:f0:20:c4: 62:50:57:21:5a:64:2d:c3:84:1a:e2:25:d9:3e:26: 5a:e0:03:95:3d:8e:ac:9a:16:92:ee:d2:4b:84:39: 47:02:cb:a8:68:eb:0b:70:b0:0c:3d:6e:70:c0:58: 08:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:FA:E5:F5:89:DF:D7:2E:65:9D:C0:D9:8C:98:94:98:43:E7:FE:7E X509v3 Authority Key Identifier: keyid:A6:60:10:77:26:51:70:2A:2D:33:3C:83:15:F1:AE:92:F6:CC:74:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:3b:49:80:9c:c8:dd:61:60:df:f8:99:e2:06:d7:f0:dd:42: 52:4a:da:f0:78:6a:6e:ed:ce:0c:ab:a3:02:ed:e2:5d:38:5d: 4d:8d:d7:56:c4:d0:35:bc:a1:74:b4:64:cb:bb:58:f7:6a:2a: 3a:85:f9:d9:f3:69:c9:ec:a8:de:ea:8e:00:99:64:a7:d2:79: fd:c3:e5:b8:4f:05:f3:87:a7:a9:f3:17:5b:b6:04:af:e9:0e: 1c:42:43:ae:2c:fe:15:bd:0c:a0:42:e9:3c:d9:14:62:9f:cd: 44:26:59:93:ff:b2:90:2b:27:e1:4f:0d:1e:c7:c6:ff:92:17: 6e:bd:0f:fe:b1:5f:28:9f:98:96:f9:eb:15:78:01:cf:5c:ac: 6d:84:05:e2:5b:ce:c8:54:98:40:e2:2f:39:66:9a:82:42:fe: 7b:ea:03:69:36:95:31:18:73:4d:cd:c0:ac:74:19:8b:a2:05: 9e:66:7f:9e:57:0c:5e:d3:7b:5d:29:90:51:33:6b:06:27:cd: ab:49:0e:00:69:57:34:86:0d:e8:ef:11:85:aa:c5:ef:f9:2f: 46:ee:66:cd:de:03:d0:14:91:3b:be:fb:72:db:fa:3d:91:1d: f2:af:e8:37:e6:fa:70:95:0f:06:10:b1:68:63:28:26:88:87: 9f:ff:30:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiIXun2KYMPOHdo2HksAbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NjAxMDc3MjY1MTcwMmEyZDMzM2M4MzE1ZjFhZTkyZjZj Yzc0OTAwHhcNMjUxMjA1MjIwMTEwWhcNMjUxMjA2MjIwMTEwWjAzMTEwLwYDVQQD EygzYWZhZTVmNTg5ZGZkNzJlNjU5ZGMwZDk4Yzk4OTQ5ODQzZTdmZTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ijXAR6njoBNkBIXdWwNCwqc65pY n19XDRSasIC7z/VKYp21N0vtOLl6YXrh9HXbQW/RfP/Cp+rFffN18IzEWpZFBz3W RVdS7OuXc7tOvkmb8RgPuRhZQA7PBAajoY4U4qCipiflooSTJYrdk+JMvNAwV4d4 oJZW2Y/zwdVHwv7ft1vfqQR0Q3A+PevhQaE4AbAHkaCa44zeZB9fAV+42e8NhM+I HhEJmTDPPy1g6AbzIlH8TCZbL2DrM3WLMka8Y44qwgN0asc+42eypJzwIMRiUFch WmQtw4Qa4iXZPiZa4AOVPY6smhaS7tJLhDlHAsuoaOsLcLAMPW5wwFgIbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDr65fWJ39cuZZ3A2YyYlJhD5/5+MB8GA1UdIwQY MBaAFKZgEHcmUXAqLTM8gxXxrpL2zHSQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcG1BUWR5WlJjQ290TXp5REZmR3VrdmJNZEpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi80NTRkN2ItNWQ0YS00Y2YxLTg1ZWIt NGZhNzFmMjRlZTQzLzEvcG1BUWR5WlJjQ290TXp5REZmR3VrdmJNZEpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi80NTRkN2ItNWQ0YS00Y2YxLTg1ZWItNGZhNzFmMjRlZTQz LzEvcG1BUWR5WlJjQ290TXp5REZmR3VrdmJNZEpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGTtJgJzI 3WFg3/iZ4gbX8N1CUkra8Hhqbu3ODKujAu3iXThdTY3XVsTQNbyhdLRky7tY92oq OoX52fNpyeyo3uqOAJlkp9J5/cPluE8F84enqfMXW7YEr+kOHEJDriz+Fb0MoELp PNkUYp/NRCZZk/+ykCsn4U8NHsfG/5IXbr0P/rFfKJ+YlvnrFXgBz1ysbYQF4lvO yFSYQOIvOWaagkL+e+oDaTaVMRhzTc3ArHQZi6IFnmZ/nlcMXtN7XSmQUTNrBifN q0kOAGlXNIYN6O8RharF7/kvRu5mzd4D0BSRO777ctv6PZEd8q/oN+b6cJUPBhCx aGMoJoiHn/8wMA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:05 2025 by rpki-client