This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft File: pQl6FWrvL4L_E7PBav9vfhbbAsg.mft (raw, json) Hash identifier: OMieiWoSiejjFFWdfucOt1UVg1DP4kfgC57+KL1hHAU= Subject key identifier: A4:9D:E3:12:98:0D:3B:58:2F:31:BF:60:5F:D3:53:79:C3:82:65:8B Authority key identifier: A5:09:7A:15:6A:EF:2F:82:FF:13:B3:C1:6A:FF:6F:7E:16:DB:02:C8 Certificate issuer: /CN=a5097a156aef2f82ff13b3c16aff6f7e16db02c8 Certificate serial: 019AF1D18A77BA922C9C42382C8A0CF0E46C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft Manifest number: 0627 Signing time: Sat 06 Dec 2025 04:00:32 +0000 Manifest this update: Sat 06 Dec 2025 04:00:32 +0000 Manifest next update: Sun 07 Dec 2025 04:00:32 +0000 Files and hashes: 1: T0GLC9ivgiSJVwGQ5KIOLCKOjqs.roa (hash: FKLm57miA/xZK8gsx+DBE/lZzuzN5GXUjYHQsCWDe8M=) 2: pQl6FWrvL4L_E7PBav9vfhbbAsg.crl (hash: A2zC/3Da9lRzBSBlyNeGaQNg3XUJSlluZIS5MvFE/Q4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:8a:77:ba:92:2c:9c:42:38:2c:8a:0c:f0:e4:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5097a156aef2f82ff13b3c16aff6f7e16db02c8 Validity Not Before: Dec 6 04:00:32 2025 GMT Not After : Dec 7 04:00:32 2025 GMT Subject: CN=a49de312980d3b582f31bf605fd35379c382658b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:11:88:10:6a:8d:5d:6c:a2:2b:11:69:8f:63: 14:62:5a:88:2f:99:0d:3f:22:b2:46:4a:ed:37:6c: 7b:66:44:e1:d2:ae:ef:a6:9d:d1:7d:05:4b:c7:52: 5b:32:7a:b4:4d:fe:5f:ed:cb:0a:98:de:cb:4b:c5: 2d:8e:90:9f:4b:07:4e:eb:f9:d2:8b:a6:5f:85:38: 46:c1:4e:b7:58:52:06:43:9a:e5:07:99:d1:53:b6: ec:41:68:96:45:36:22:0a:e6:3d:3d:6a:b8:46:0c: e6:db:b6:3d:c3:2f:13:5f:8a:38:cb:75:6a:1f:99: 5d:1d:a7:67:79:f1:27:27:fe:79:78:31:b9:9d:bc: 27:4c:f1:de:4f:5c:31:2f:b4:c6:60:ea:b8:1e:98: 58:4d:3d:c1:46:27:31:c9:56:84:1b:6f:1b:09:bb: 14:4a:a9:76:c8:c3:f4:5f:d8:44:eb:49:b4:f0:0c: 7c:f8:79:ab:b8:2a:9e:4e:30:a8:16:8c:39:81:4d: a8:36:08:de:ca:42:e4:3f:33:6b:9f:b7:80:1e:6c: 2f:cb:f5:ee:11:7e:bf:36:66:0c:8d:e8:80:13:d7: 32:1c:86:dd:21:32:8d:f2:e4:57:e6:d3:bf:b1:35: ba:bc:df:2f:45:04:35:b9:ba:78:cf:da:ee:c4:b7: 6f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:9D:E3:12:98:0D:3B:58:2F:31:BF:60:5F:D3:53:79:C3:82:65:8B X509v3 Authority Key Identifier: keyid:A5:09:7A:15:6A:EF:2F:82:FF:13:B3:C1:6A:FF:6F:7E:16:DB:02:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:01:ef:7c:2a:94:d6:bd:5f:bc:4f:2a:a6:43:ee:a4:cb:63: f7:81:36:d9:e8:c2:ce:85:b9:b4:c9:e8:41:63:2b:67:48:01: 5d:20:91:97:ed:95:3f:1a:f0:4b:e6:cd:e1:ea:a5:31:0b:12: 29:ab:52:49:90:20:3c:35:8c:af:11:c4:c4:32:4d:e9:1c:9f: b8:3b:87:c7:6e:09:0a:82:1b:01:6f:98:19:31:1c:e2:76:bb: 09:15:38:14:2b:15:21:71:58:40:18:9c:2a:81:1c:27:9f:73: 3c:be:5d:bb:6c:01:a4:1d:a4:a7:11:58:76:66:67:c2:2d:7e: 4e:87:ae:0d:c3:b2:44:8d:ab:48:5c:10:02:8f:74:81:6b:13: 1f:31:9f:90:76:db:1f:8a:c3:a0:ed:eb:bd:1f:7f:4b:ed:59: 17:a1:73:05:ff:50:22:f7:7a:7b:be:07:ba:3e:95:06:f1:17: 0f:d3:b5:34:53:0d:c3:31:11:2e:c1:d5:90:87:4f:d6:6b:8e: e8:30:1e:7d:ef:ef:56:5c:aa:99:b3:b6:36:45:f7:40:80:58: 2b:86:c3:ae:78:4b:80:b0:c8:2b:06:d1:9c:d5:42:f5:e5:5d: a6:6e:40:eb:fc:ad:30:cb:37:05:a0:34:c2:0f:1b:87:35:25: ed:0d:d0:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0Yp3upIsnEI4LIoM8ORsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MDk3YTE1NmFlZjJmODJmZjEzYjNjMTZhZmY2ZjdlMTZk YjAyYzgwHhcNMjUxMjA2MDQwMDMyWhcNMjUxMjA3MDQwMDMyWjAzMTEwLwYDVQQD EyhhNDlkZTMxMjk4MGQzYjU4MmYzMWJmNjA1ZmQzNTM3OWMzODI2NThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhGIEGqNXWyiKxFpj2MUYlqIL5kN PyKyRkrtN2x7ZkTh0q7vpp3RfQVLx1JbMnq0Tf5f7csKmN7LS8UtjpCfSwdO6/nS i6ZfhThGwU63WFIGQ5rlB5nRU7bsQWiWRTYiCuY9PWq4Rgzm27Y9wy8TX4o4y3Vq H5ldHadnefEnJ/55eDG5nbwnTPHeT1wxL7TGYOq4HphYTT3BRicxyVaEG28bCbsU Sql2yMP0X9hE60m08Ax8+HmruCqeTjCoFow5gU2oNgjeykLkPzNrn7eAHmwvy/Xu EX6/NmYMjeiAE9cyHIbdITKN8uRX5tO/sTW6vN8vRQQ1ubp4z9ruxLdvdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKSd4xKYDTtYLzG/YF/TU3nDgmWLMB8GA1UdIwQY MBaAFKUJehVq7y+C/xOzwWr/b34W2wLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFFsNkZXcnZMNExfRTdQQmF2OXZmaGJiQXNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi80MmY3ZjgtNzQwNy00MzJkLWJiYjUt MGQzMzk3MDdjYjg4LzEvcFFsNkZXcnZMNExfRTdQQmF2OXZmaGJiQXNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi80MmY3ZjgtNzQwNy00MzJkLWJiYjUtMGQzMzk3MDdjYjg4 LzEvcFFsNkZXcnZMNExfRTdQQmF2OXZmaGJiQXNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoAHvfCqU 1r1fvE8qpkPupMtj94E22ejCzoW5tMnoQWMrZ0gBXSCRl+2VPxrwS+bN4eqlMQsS KatSSZAgPDWMrxHExDJN6RyfuDuHx24JCoIbAW+YGTEc4na7CRU4FCsVIXFYQBic KoEcJ59zPL5du2wBpB2kpxFYdmZnwi1+ToeuDcOyRI2rSFwQAo90gWsTHzGfkHbb H4rDoO3rvR9/S+1ZF6FzBf9QIvd6e74Huj6VBvEXD9O1NFMNwzERLsHVkIdP1muO 6DAefe/vVlyqmbO2NkX3QIBYK4bDrnhLgLDIKwbRnNVC9eVdpm5A6/ytMMs3BaA0 wg8bhzUl7Q3Qug== -----END CERTIFICATE-----Generated at Sat Dec 6 10:14:57 2025 by rpki-client