This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f66e38-4b06-4808-a46e-2606643ab607/1/pPwscnotINbRTRyACqzbLfEJPcQ.mft File: pPwscnotINbRTRyACqzbLfEJPcQ.mft (raw, json) Hash identifier: SOdq+/T++rN2KNNvXsZrKru9hlXTJjQ13Wtn8HuHWeE= Subject key identifier: A4:9F:61:CD:0A:0E:5F:4C:01:C8:F7:DE:B4:39:04:69:B8:2F:63:E0 Authority key identifier: A4:FC:2C:72:7A:2D:20:D6:D1:4D:1C:80:0A:AC:DB:2D:F1:09:3D:C4 Certificate issuer: /CN=a4fc2c727a2d20d6d14d1c800aacdb2df1093dc4 Certificate serial: 019AF2766C8EE92AB8CF321E836338D9D0C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPwscnotINbRTRyACqzbLfEJPcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/f66e38-4b06-4808-a46e-2606643ab607/1/pPwscnotINbRTRyACqzbLfEJPcQ.mft Manifest number: 02CD Signing time: Sat 06 Dec 2025 07:00:38 +0000 Manifest this update: Sat 06 Dec 2025 07:00:38 +0000 Manifest next update: Sun 07 Dec 2025 07:00:38 +0000 Files and hashes: 1: pPwscnotINbRTRyACqzbLfEJPcQ.crl (hash: ZUeIrmpbYjieRmKvRSjD9EeMJzC3Uk7VaIYZbZUpL8w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/f66e38-4b06-4808-a46e-2606643ab607/1/pPwscnotINbRTRyACqzbLfEJPcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/f66e38-4b06-4808-a46e-2606643ab607/1/pPwscnotINbRTRyACqzbLfEJPcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pPwscnotINbRTRyACqzbLfEJPcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:6c:8e:e9:2a:b8:cf:32:1e:83:63:38:d9:d0:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4fc2c727a2d20d6d14d1c800aacdb2df1093dc4 Validity Not Before: Dec 6 07:00:38 2025 GMT Not After : Dec 7 07:00:38 2025 GMT Subject: CN=a49f61cd0a0e5f4c01c8f7deb4390469b82f63e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:77:a7:4e:c0:d7:46:8a:f6:6f:e9:7f:56:b8: 2a:13:f8:5a:cf:5f:97:b4:67:bd:c5:e6:67:ec:b0: 04:e0:9a:d4:8d:eb:af:2c:15:84:8c:c0:f1:29:93: 90:95:5c:2b:33:77:09:04:f5:49:29:97:72:d3:00: 4c:0e:86:19:43:01:56:1e:63:51:b6:52:3b:fa:7f: 6e:3c:c7:43:8e:df:b7:63:ff:2b:d2:16:b9:e7:ac: 85:90:de:0c:87:7d:3d:1d:e9:59:50:70:2a:ed:8b: c7:06:48:c4:c9:dc:1f:ea:e3:33:b5:af:07:60:bb: 15:08:bb:8e:47:dd:e7:99:74:68:07:84:b4:fc:0e: 9f:44:85:d1:f4:4b:57:58:4f:a0:a8:c0:6a:46:7a: 55:ea:f2:b3:44:f1:36:6c:88:59:cf:72:91:3a:fd: 09:41:51:98:57:c1:6c:a9:fd:f7:56:36:ab:cc:4e: 34:78:5e:cc:ae:21:07:af:14:6f:32:13:4a:88:52: 00:fc:0e:83:f5:33:97:7f:01:20:3a:c5:b4:6b:86: 4e:51:01:27:8c:d6:19:76:67:17:71:b1:dd:9e:c3: 55:95:05:0f:2b:e9:83:64:36:b2:c7:59:99:11:b7: 00:22:20:7f:33:91:12:93:71:99:1b:a8:3c:dc:68: 99:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:9F:61:CD:0A:0E:5F:4C:01:C8:F7:DE:B4:39:04:69:B8:2F:63:E0 X509v3 Authority Key Identifier: keyid:A4:FC:2C:72:7A:2D:20:D6:D1:4D:1C:80:0A:AC:DB:2D:F1:09:3D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPwscnotINbRTRyACqzbLfEJPcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f66e38-4b06-4808-a46e-2606643ab607/1/pPwscnotINbRTRyACqzbLfEJPcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f66e38-4b06-4808-a46e-2606643ab607/1/pPwscnotINbRTRyACqzbLfEJPcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:b9:8b:4e:66:ef:e6:eb:25:d4:42:86:a9:a2:f3:a9:f0:75: e7:16:92:c8:2d:68:5f:02:78:19:b7:ba:c5:bd:38:82:e4:ce: 16:a6:34:ac:28:61:f2:3e:ed:cb:3a:65:1f:19:3e:34:87:85: 81:3f:1b:14:49:5b:71:16:76:26:36:c2:03:d8:1f:a6:1e:f8: 3e:ea:28:29:b6:8f:46:42:e9:fe:06:22:f6:dc:e3:bb:67:87: 6e:87:96:7b:cb:c0:18:60:32:23:8d:10:ba:8b:e2:57:b1:2c: 94:69:51:a5:f3:92:51:3b:03:c8:49:dd:96:aa:3f:1a:2c:ae: 06:6d:60:8e:8f:b9:11:12:bd:c8:13:54:a1:12:a8:8b:08:1e: ab:9c:52:cb:85:76:f8:ea:90:64:1d:36:53:31:53:3e:a6:0f: a1:61:9b:74:a6:30:c3:5e:1e:e4:d3:72:49:02:fd:3d:91:ee: b5:e1:c9:82:43:51:f1:6e:f4:17:c9:31:75:f5:92:18:ab:57: 20:83:2c:40:c9:cc:d8:fe:3e:d7:e2:80:b3:cc:f6:9e:65:f5: d5:54:27:8c:e7:79:ac:5f:88:2d:e3:51:ef:76:65:76:7d:34: b1:bb:fa:1e:3b:e5:2c:c3:ea:c0:5a:48:b4:0f:68:f6:c9:6d: 82:89:f4:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydmyO6Sq4zzIeg2M42dDCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZmMyYzcyN2EyZDIwZDZkMTRkMWM4MDBhYWNkYjJkZjEw OTNkYzQwHhcNMjUxMjA2MDcwMDM4WhcNMjUxMjA3MDcwMDM4WjAzMTEwLwYDVQQD EyhhNDlmNjFjZDBhMGU1ZjRjMDFjOGY3ZGViNDM5MDQ2OWI4MmY2M2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3enTsDXRor2b+l/VrgqE/haz1+X tGe9xeZn7LAE4JrUjeuvLBWEjMDxKZOQlVwrM3cJBPVJKZdy0wBMDoYZQwFWHmNR tlI7+n9uPMdDjt+3Y/8r0ha556yFkN4Mh309HelZUHAq7YvHBkjEydwf6uMzta8H YLsVCLuOR93nmXRoB4S0/A6fRIXR9EtXWE+gqMBqRnpV6vKzRPE2bIhZz3KROv0J QVGYV8Fsqf33VjarzE40eF7MriEHrxRvMhNKiFIA/A6D9TOXfwEgOsW0a4ZOUQEn jNYZdmcXcbHdnsNVlQUPK+mDZDayx1mZEbcAIiB/M5ESk3GZG6g83GiZFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKSfYc0KDl9MAcj33rQ5BGm4L2PgMB8GA1UdIwQY MBaAFKT8LHJ6LSDW0U0cgAqs2y3xCT3EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFB3c2Nub3RJTmJSVFJ5QUNxemJMZkVKUGNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9mNjZlMzgtNGIwNi00ODA4LWE0NmUt MjYwNjY0M2FiNjA3LzEvcFB3c2Nub3RJTmJSVFJ5QUNxemJMZkVKUGNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9mNjZlMzgtNGIwNi00ODA4LWE0NmUtMjYwNjY0M2FiNjA3 LzEvcFB3c2Nub3RJTmJSVFJ5QUNxemJMZkVKUGNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqLmLTmbv 5usl1EKGqaLzqfB15xaSyC1oXwJ4Gbe6xb04guTOFqY0rChh8j7tyzplHxk+NIeF gT8bFElbcRZ2JjbCA9gfph74PuooKbaPRkLp/gYi9tzju2eHboeWe8vAGGAyI40Q uoviV7EslGlRpfOSUTsDyEndlqo/GiyuBm1gjo+5ERK9yBNUoRKoiwgeq5xSy4V2 +OqQZB02UzFTPqYPoWGbdKYww14e5NNySQL9PZHuteHJgkNR8W70F8kxdfWSGKtX IIMsQMnM2P4+1+KAs8z2nmX11VQnjOd5rF+ILeNR73Zldn00sbv6HjvlLMPqwFpI tA9o9sltgon0AQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:32:38 2025 by rpki-client