This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft File: pmAQdyZRcCotMzyDFfGukvbMdJA.mft (raw, json) Hash identifier: 8x5z/9+TFtuQVasbA/e7KGVXp/9lRLAUsWlgdhlU0RE= Subject key identifier: CE:9D:44:39:35:6A:BC:1F:9B:DC:AF:50:1B:82:31:09:09:4A:A5:DD Authority key identifier: A6:60:10:77:26:51:70:2A:2D:33:3C:83:15:F1:AE:92:F6:CC:74:90 Certificate issuer: /CN=a66010772651702a2d333c8315f1ae92f6cc7490 Certificate serial: 019B32313F105F0F6476A820829C7E73286E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft Manifest number: 16BB Signing time: Thu 18 Dec 2025 16:00:46 +0000 Manifest this update: Thu 18 Dec 2025 16:00:46 +0000 Manifest next update: Fri 19 Dec 2025 16:00:46 +0000 Files and hashes: 1: pmAQdyZRcCotMzyDFfGukvbMdJA.crl (hash: 8pmDxPbWxmC7ak9pCdGscbvaTubG8abvgsUNH3vyLUA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:3f:10:5f:0f:64:76:a8:20:82:9c:7e:73:28:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a66010772651702a2d333c8315f1ae92f6cc7490 Validity Not Before: Dec 18 16:00:46 2025 GMT Not After : Dec 19 16:00:46 2025 GMT Subject: CN=ce9d4439356abc1f9bdcaf501b823109094aa5dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:24:55:7e:65:41:13:06:b0:98:79:8b:ae:3d: 30:13:44:98:7c:34:9f:d8:9d:b6:db:ef:ef:5a:83: 1c:51:5a:8a:6d:4d:59:85:e1:b1:2b:c8:8d:93:dd: 72:53:9b:8f:c8:2b:55:d6:7a:44:ad:a0:f8:d6:2e: 4b:71:cf:56:e5:12:79:09:cd:bb:8e:b5:a8:6a:77: bd:72:64:4d:59:9a:fc:22:da:14:0c:03:3f:1c:4a: 87:5f:7d:a3:d5:88:13:c0:c7:59:91:b0:77:09:66: 1d:00:13:90:9b:0e:70:3f:50:62:d3:d7:ee:0c:75: b8:59:b0:09:09:50:e5:ff:af:e3:bb:ae:1b:a0:b1: 0e:59:09:49:fe:8f:69:82:b4:d1:65:c2:88:3b:c5: 36:ee:6a:d2:ba:95:27:25:95:cf:e6:66:7f:41:7f: 8d:08:20:7b:8c:84:f8:70:65:d8:7a:b3:01:cd:18: f5:ff:c2:40:91:c1:a3:52:fd:4f:f3:77:e7:ce:96: d7:a4:a2:d7:59:e5:35:be:c8:03:11:af:5c:ea:bb: c5:da:00:7b:b4:65:29:30:34:2b:d1:d6:0a:62:1d: 58:f5:3f:0e:1f:07:da:88:b6:15:ee:c4:56:e1:91: 9a:31:66:2e:7d:e8:c8:2a:39:d4:74:f9:49:08:0b: a8:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:9D:44:39:35:6A:BC:1F:9B:DC:AF:50:1B:82:31:09:09:4A:A5:DD X509v3 Authority Key Identifier: keyid:A6:60:10:77:26:51:70:2A:2D:33:3C:83:15:F1:AE:92:F6:CC:74:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:cf:6c:ce:83:7a:d1:f8:b3:88:d5:06:d4:e4:27:a9:a8:dd: ac:01:fb:89:d9:15:d3:d4:92:34:68:74:ca:05:a4:00:24:35: e1:e2:04:6b:41:c3:56:84:a4:29:bf:76:d8:cf:06:b9:57:b3: 10:8a:3e:3e:0c:3d:5c:48:cd:e9:3f:80:30:31:09:15:cd:4d: af:c9:5a:3c:a4:d7:56:b9:8e:6e:bb:a9:3d:d4:14:36:51:3b: 68:80:2e:01:c4:20:df:7f:f8:b9:c8:0e:da:55:d0:a0:ee:59: 41:8c:1d:c6:26:b7:75:5d:a9:94:a5:64:0f:8f:6a:48:a1:4f: d1:53:05:86:4f:dc:9f:eb:2c:62:96:94:6d:fc:96:b0:c5:56: 7b:84:09:57:56:77:6f:9b:78:cb:b3:ff:f6:6d:89:eb:a5:8c: 03:af:6f:23:8a:17:1c:74:f5:1b:84:20:94:32:d5:6c:1e:f2: c0:d5:46:22:59:b3:0a:8c:d4:78:75:ce:f1:ea:ff:d9:9d:f4: 63:9d:3f:b9:a0:59:37:98:fd:4e:fb:e5:02:b2:fa:94:fe:e9: aa:0c:8b:dd:e3:a5:8e:d3:46:5e:82:04:c8:47:14:bf:4e:27: dc:fe:9b:3f:d1:05:94:62:d8:de:6c:5b:2f:86:f2:92:3a:e0: e3:e8:42:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMT8QXw9kdqgggpx+cyhuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NjAxMDc3MjY1MTcwMmEyZDMzM2M4MzE1ZjFhZTkyZjZj Yzc0OTAwHhcNMjUxMjE4MTYwMDQ2WhcNMjUxMjE5MTYwMDQ2WjAzMTEwLwYDVQQD EyhjZTlkNDQzOTM1NmFiYzFmOWJkY2FmNTAxYjgyMzEwOTA5NGFhNWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CRVfmVBEwawmHmLrj0wE0SYfDSf 2J222+/vWoMcUVqKbU1ZheGxK8iNk91yU5uPyCtV1npEraD41i5Lcc9W5RJ5Cc27 jrWoane9cmRNWZr8ItoUDAM/HEqHX32j1YgTwMdZkbB3CWYdABOQmw5wP1Bi09fu DHW4WbAJCVDl/6/ju64boLEOWQlJ/o9pgrTRZcKIO8U27mrSupUnJZXP5mZ/QX+N CCB7jIT4cGXYerMBzRj1/8JAkcGjUv1P83fnzpbXpKLXWeU1vsgDEa9c6rvF2gB7 tGUpMDQr0dYKYh1Y9T8OHwfaiLYV7sRW4ZGaMWYufejIKjnUdPlJCAuocQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6dRDk1arwfm9yvUBuCMQkJSqXdMB8GA1UdIwQY MBaAFKZgEHcmUXAqLTM8gxXxrpL2zHSQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcG1BUWR5WlJjQ290TXp5REZmR3VrdmJNZEpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi80NTRkN2ItNWQ0YS00Y2YxLTg1ZWIt NGZhNzFmMjRlZTQzLzEvcG1BUWR5WlJjQ290TXp5REZmR3VrdmJNZEpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi80NTRkN2ItNWQ0YS00Y2YxLTg1ZWItNGZhNzFmMjRlZTQz LzEvcG1BUWR5WlJjQ290TXp5REZmR3VrdmJNZEpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC89szoN6 0fiziNUG1OQnqajdrAH7idkV09SSNGh0ygWkACQ14eIEa0HDVoSkKb922M8GuVez EIo+Pgw9XEjN6T+AMDEJFc1Nr8laPKTXVrmObrupPdQUNlE7aIAuAcQg33/4ucgO 2lXQoO5ZQYwdxia3dV2plKVkD49qSKFP0VMFhk/cn+ssYpaUbfyWsMVWe4QJV1Z3 b5t4y7P/9m2J66WMA69vI4oXHHT1G4QglDLVbB7ywNVGIlmzCozUeHXO8er/2Z30 Y50/uaBZN5j9TvvlArL6lP7pqgyL3eOljtNGXoIEyEcUv04n3P6bP9EFlGLY3mxb L4bykjrg4+hCBg== -----END CERTIFICATE-----Generated at Thu Dec 18 23:05:21 2025 by rpki-client