This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/67b254-56f4-4e89-a99d-caa329181964/1/PnpcKTN0JfqBOVVRcmyMK35MUIc.mft File: PnpcKTN0JfqBOVVRcmyMK35MUIc.mft (raw, json) Hash identifier: RADFFRkaMvM7gxrlt3swWCGnewO3zFCcIpk9J99BnDY= Subject key identifier: 91:DF:C8:A0:F3:D1:1B:B4:E2:36:3D:AD:A1:52:0B:CD:53:1E:D7:A3 Authority key identifier: 3E:7A:5C:29:33:74:25:FA:81:39:55:51:72:6C:8C:2B:7E:4C:50:87 Certificate issuer: /CN=3e7a5c29337425fa81395551726c8c2b7e4c5087 Certificate serial: 019B33446E14BE64E7BB314280AA665575EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnpcKTN0JfqBOVVRcmyMK35MUIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/67b254-56f4-4e89-a99d-caa329181964/1/PnpcKTN0JfqBOVVRcmyMK35MUIc.mft Manifest number: 04CB Signing time: Thu 18 Dec 2025 21:01:21 +0000 Manifest this update: Thu 18 Dec 2025 21:01:21 +0000 Manifest next update: Fri 19 Dec 2025 21:01:21 +0000 Files and hashes: 1: PnpcKTN0JfqBOVVRcmyMK35MUIc.crl (hash: eFpk365ekZk9qGDP1Ue8ADp0tAB+Lc+jCSjK0Qij9I8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/67b254-56f4-4e89-a99d-caa329181964/1/PnpcKTN0JfqBOVVRcmyMK35MUIc.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/67b254-56f4-4e89-a99d-caa329181964/1/PnpcKTN0JfqBOVVRcmyMK35MUIc.mft rsync://rpki.ripe.net/repository/DEFAULT/PnpcKTN0JfqBOVVRcmyMK35MUIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:6e:14:be:64:e7:bb:31:42:80:aa:66:55:75:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e7a5c29337425fa81395551726c8c2b7e4c5087 Validity Not Before: Dec 18 21:01:21 2025 GMT Not After : Dec 19 21:01:21 2025 GMT Subject: CN=91dfc8a0f3d11bb4e2363dada1520bcd531ed7a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8e:79:d1:fe:92:08:78:6a:37:ea:a3:bd:13: df:bb:53:67:d4:35:fd:9e:28:5b:d8:f1:67:a2:e3: ac:69:fd:99:ea:b1:80:86:8a:7a:70:66:5a:77:03: 86:0f:fa:8a:75:7b:dd:2c:d6:d5:e6:1c:21:32:d4: 64:c2:bf:9b:ab:58:32:a1:8a:43:e3:8d:50:eb:20: 65:f9:72:9c:a4:d5:9f:bd:42:a2:aa:cc:67:92:30: 1a:73:77:4f:8b:1c:42:02:4a:c9:8f:12:d8:2f:67: 2f:40:17:4c:7e:2b:21:c6:c4:9b:7d:7d:88:82:98: cc:6c:f8:54:8f:f7:6c:93:2e:23:e5:10:09:c6:10: d0:8e:81:cd:a2:c0:61:74:39:bd:9f:a5:07:32:ae: b9:ba:29:c8:2d:3d:f1:81:96:c6:ac:f6:b2:26:c8: e2:6b:31:19:48:97:7f:ce:a2:64:16:46:76:46:a3: 0a:73:e5:a6:2f:d6:0e:ac:14:99:03:d2:f7:02:d9: 61:75:63:40:74:bd:9d:1e:0b:99:11:5d:06:7e:24: df:56:bb:43:35:28:32:bc:a4:c9:7d:1f:80:79:9e: 23:32:d4:70:f5:bc:12:4d:3e:bf:2f:39:bb:5c:20: c8:06:3b:d0:02:72:70:bc:c8:cc:98:1d:88:ba:49: 52:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:DF:C8:A0:F3:D1:1B:B4:E2:36:3D:AD:A1:52:0B:CD:53:1E:D7:A3 X509v3 Authority Key Identifier: keyid:3E:7A:5C:29:33:74:25:FA:81:39:55:51:72:6C:8C:2B:7E:4C:50:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnpcKTN0JfqBOVVRcmyMK35MUIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/67b254-56f4-4e89-a99d-caa329181964/1/PnpcKTN0JfqBOVVRcmyMK35MUIc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/67b254-56f4-4e89-a99d-caa329181964/1/PnpcKTN0JfqBOVVRcmyMK35MUIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:ed:18:11:e0:bb:88:34:d1:3a:b6:e7:cf:64:3a:89:16:24: e0:67:fb:96:5c:49:16:f7:4b:f6:ff:2c:c8:3d:07:d8:43:2a: 77:87:ed:7d:78:83:07:f6:b6:75:f8:99:31:59:c7:5c:53:40: 41:cc:57:9f:1c:08:c1:4f:97:a6:5b:78:85:a3:59:0a:b3:f4: 4a:b8:92:7d:a0:ae:e6:39:40:ed:bc:33:77:3b:a9:a9:23:b0: 2a:c8:3c:19:e2:5b:71:b0:d9:59:56:8f:12:7e:01:9f:a3:0d: 9c:e2:e8:07:07:c6:bc:0b:16:04:35:32:e7:b5:a1:f9:19:99: 3f:6e:7e:c9:e1:73:36:79:99:26:ed:af:fc:eb:f4:e6:65:d1: 65:5d:0d:62:c7:d0:49:43:64:68:0e:6e:b3:b1:c3:da:ef:e4: d8:80:86:9c:ab:4f:40:8f:16:6a:fb:bc:9f:e8:38:18:a0:76: 75:bc:b1:b4:81:82:ae:94:bc:77:70:d7:e2:2d:4d:6d:45:0d: 9f:9b:e6:33:78:50:d1:48:ab:d0:79:39:69:e4:72:78:a3:4e: 44:de:73:5a:f0:5a:e5:73:3f:2b:4b:55:00:cd:b5:93:47:d2: a0:4d:8e:1a:25:21:0d:86:0c:44:22:e8:40:2f:10:75:d6:1b: 38:58:6b:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRG4UvmTnuzFCgKpmVXXuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlN2E1YzI5MzM3NDI1ZmE4MTM5NTU1MTcyNmM4YzJiN2U0 YzUwODcwHhcNMjUxMjE4MjEwMTIxWhcNMjUxMjE5MjEwMTIxWjAzMTEwLwYDVQQD Eyg5MWRmYzhhMGYzZDExYmI0ZTIzNjNkYWRhMTUyMGJjZDUzMWVkN2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtI550f6SCHhqN+qjvRPfu1Nn1DX9 nihb2PFnouOsaf2Z6rGAhop6cGZadwOGD/qKdXvdLNbV5hwhMtRkwr+bq1gyoYpD 441Q6yBl+XKcpNWfvUKiqsxnkjAac3dPixxCAkrJjxLYL2cvQBdMfishxsSbfX2I gpjMbPhUj/dsky4j5RAJxhDQjoHNosBhdDm9n6UHMq65uinILT3xgZbGrPayJsji azEZSJd/zqJkFkZ2RqMKc+WmL9YOrBSZA9L3AtlhdWNAdL2dHguZEV0GfiTfVrtD NSgyvKTJfR+AeZ4jMtRw9bwSTT6/Lzm7XCDIBjvQAnJwvMjMmB2IuklStQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHfyKDz0Ru04jY9raFSC81THtejMB8GA1UdIwQY MBaAFD56XCkzdCX6gTlVUXJsjCt+TFCHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG5wY0tUTjBKZnFCT1ZWUmNteU1LMzVNVUljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82N2IyNTQtNTZmNC00ZTg5LWE5OWQt Y2FhMzI5MTgxOTY0LzEvUG5wY0tUTjBKZnFCT1ZWUmNteU1LMzVNVUljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi82N2IyNTQtNTZmNC00ZTg5LWE5OWQtY2FhMzI5MTgxOTY0 LzEvUG5wY0tUTjBKZnFCT1ZWUmNteU1LMzVNVUljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALu0YEeC7 iDTROrbnz2Q6iRYk4Gf7llxJFvdL9v8syD0H2EMqd4ftfXiDB/a2dfiZMVnHXFNA QcxXnxwIwU+Xplt4haNZCrP0SriSfaCu5jlA7bwzdzupqSOwKsg8GeJbcbDZWVaP En4Bn6MNnOLoBwfGvAsWBDUy57Wh+RmZP25+yeFzNnmZJu2v/Ov05mXRZV0NYsfQ SUNkaA5us7HD2u/k2ICGnKtPQI8Wavu8n+g4GKB2dbyxtIGCrpS8d3DX4i1NbUUN n5vmM3hQ0Uir0Hk5aeRyeKNORN5zWvBa5XM/K0tVAM21k0fSoE2OGiUhDYYMRCLo QC8QddYbOFhrdA== -----END CERTIFICATE-----Generated at Fri Dec 19 02:49:55 2025 by rpki-client