This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft File: pqxtBp2PtzL0_pK04TzX3E05OkI.mft (raw, json) Hash identifier: fBz3Lvwyl9KPTDFSFGTscOOaRkIK4zE+tyr/En3hCqE= Subject key identifier: 6A:A8:71:05:F8:4C:25:5A:7C:99:E1:51:4A:78:CE:57:14:03:51:37 Authority key identifier: A6:AC:6D:06:9D:8F:B7:32:F4:FE:92:B4:E1:3C:D7:DC:4D:39:3A:42 Certificate issuer: /CN=a6ac6d069d8fb732f4fe92b4e13cd7dc4d393a42 Certificate serial: 019B3532E3E7EC26E82F9ADEAE7B3F6D0464 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft Manifest number: 0CF7 Signing time: Fri 19 Dec 2025 06:01:26 +0000 Manifest this update: Fri 19 Dec 2025 06:01:26 +0000 Manifest next update: Sat 20 Dec 2025 06:01:26 +0000 Files and hashes: 1: kORzGbUwfQz_reUfKxE-VKML1Ko.roa (hash: LJNSK27C7NQtNI1BCy3DsB/OzJxofkAzOY3Bw0ai+Lk=) 2: pqxtBp2PtzL0_pK04TzX3E05OkI.crl (hash: ugg97EelPp3OCyTFnE+BncSAPEyvHtdqD/pJ1oq3akw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:e3:e7:ec:26:e8:2f:9a:de:ae:7b:3f:6d:04:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6ac6d069d8fb732f4fe92b4e13cd7dc4d393a42 Validity Not Before: Dec 19 06:01:26 2025 GMT Not After : Dec 20 06:01:26 2025 GMT Subject: CN=6aa87105f84c255a7c99e1514a78ce5714035137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:26:89:b9:bc:41:82:70:97:15:e7:a1:be:ba: 64:01:69:28:46:76:93:75:90:8f:98:a9:8d:7d:dd: 2f:aa:41:41:d8:c1:e4:52:b6:6c:8c:02:e8:b1:28: aa:8b:2b:ee:d9:c7:a3:ca:d0:4b:30:f5:45:cf:e6: e4:d4:f5:1a:e5:5a:43:8c:8d:fa:13:12:63:ff:73: 37:6e:85:22:e0:17:0b:86:d0:db:e1:02:42:46:a7: 8f:97:55:3d:5b:41:c4:80:21:31:7b:b9:8e:90:aa: d4:83:b3:1b:80:1a:93:a3:d5:95:bb:d9:ce:2c:02: 23:0b:bd:9b:39:78:21:18:93:82:b5:e5:2c:16:46: c1:79:6a:94:d9:32:d7:44:13:5d:26:68:1c:43:e5: bc:c6:36:af:32:3e:5f:06:0d:97:02:a6:13:5c:85: 16:88:27:37:24:02:fb:45:59:96:02:b8:22:35:8c: 08:1e:48:6a:27:7c:e0:8b:86:db:8f:bf:78:d3:e1: 3e:5f:d5:b5:3d:82:93:78:11:5e:5e:9f:8e:82:3c: 21:08:d8:7f:ba:ed:6b:0a:7b:eb:7d:b4:8b:e9:35: 0b:d7:a9:0f:68:9e:7a:2b:8e:9c:79:61:9e:ea:02: 94:1c:b6:00:de:32:7c:78:43:76:61:21:44:b9:fb: a8:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:A8:71:05:F8:4C:25:5A:7C:99:E1:51:4A:78:CE:57:14:03:51:37 X509v3 Authority Key Identifier: keyid:A6:AC:6D:06:9D:8F:B7:32:F4:FE:92:B4:E1:3C:D7:DC:4D:39:3A:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:38:93:45:bd:6e:73:a2:c2:1d:0e:01:02:60:e0:37:5c:c0: 3c:9a:ea:3f:90:58:61:f9:93:ae:2d:36:68:fc:bc:1b:7d:86: ff:70:c9:9a:17:14:37:b2:68:00:db:8d:5e:48:d3:14:d2:62: 68:4c:35:14:7e:90:20:cb:5f:a2:8d:93:f9:34:8c:ef:d5:c3: 1f:f6:35:26:e7:95:1b:7b:8a:96:f9:83:f7:13:15:82:8b:21: c6:be:a6:74:c5:fd:63:ba:43:42:6b:45:00:a4:7f:f5:3c:22: 43:08:32:24:97:89:d3:b6:3b:82:c9:2a:f1:7f:8a:e4:de:4f: 3c:2b:6e:10:b6:43:34:11:c0:c4:ad:db:1b:56:03:14:fa:b5: c9:d9:d1:7f:c9:27:07:c5:44:47:96:cf:ee:24:69:7e:fc:b4: 73:c0:fa:e4:a2:bd:6d:c8:86:5b:ae:09:02:e9:5e:d7:0d:ad: 41:07:69:47:a8:ae:1a:2c:20:a0:15:78:e0:12:55:f7:75:ea: ed:78:c3:2d:09:d4:8f:87:a8:3f:a8:a9:1e:c4:cf:c7:cd:ee: 66:10:0c:0e:4c:5e:4c:2d:d7:1d:0a:76:62:40:79:08:90:46: 5c:1b:bd:a7:4e:d5:c4:f9:ca:93:f5:60:fc:93:a1:bc:0f:42: c8:7a:d8:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MuPn7CboL5rerns/bQRkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2YWM2ZDA2OWQ4ZmI3MzJmNGZlOTJiNGUxM2NkN2RjNGQz OTNhNDIwHhcNMjUxMjE5MDYwMTI2WhcNMjUxMjIwMDYwMTI2WjAzMTEwLwYDVQQD Eyg2YWE4NzEwNWY4NGMyNTVhN2M5OWUxNTE0YTc4Y2U1NzE0MDM1MTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyaJubxBgnCXFeehvrpkAWkoRnaT dZCPmKmNfd0vqkFB2MHkUrZsjALosSiqiyvu2cejytBLMPVFz+bk1PUa5VpDjI36 ExJj/3M3boUi4BcLhtDb4QJCRqePl1U9W0HEgCExe7mOkKrUg7MbgBqTo9WVu9nO LAIjC72bOXghGJOCteUsFkbBeWqU2TLXRBNdJmgcQ+W8xjavMj5fBg2XAqYTXIUW iCc3JAL7RVmWArgiNYwIHkhqJ3zgi4bbj7940+E+X9W1PYKTeBFeXp+OgjwhCNh/ uu1rCnvrfbSL6TUL16kPaJ56K46ceWGe6gKUHLYA3jJ8eEN2YSFEufuobQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGqocQX4TCVafJnhUUp4zlcUA1E3MB8GA1UdIwQY MBaAFKasbQadj7cy9P6StOE819xNOTpCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHF4dEJwMlB0ekwwX3BLMDRUelgzRTA1T2tJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9jMDlmMDItNzUxMC00MmVhLWIyODEt YmZhMDNhNjY4NTc3LzEvcHF4dEJwMlB0ekwwX3BLMDRUelgzRTA1T2tJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9jMDlmMDItNzUxMC00MmVhLWIyODEtYmZhMDNhNjY4NTc3 LzEvcHF4dEJwMlB0ekwwX3BLMDRUelgzRTA1T2tJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATTiTRb1u c6LCHQ4BAmDgN1zAPJrqP5BYYfmTri02aPy8G32G/3DJmhcUN7JoANuNXkjTFNJi aEw1FH6QIMtfoo2T+TSM79XDH/Y1JueVG3uKlvmD9xMVgoshxr6mdMX9Y7pDQmtF AKR/9TwiQwgyJJeJ07Y7gskq8X+K5N5PPCtuELZDNBHAxK3bG1YDFPq1ydnRf8kn B8VER5bP7iRpfvy0c8D65KK9bciGW64JAule1w2tQQdpR6iuGiwgoBV44BJV93Xq 7XjDLQnUj4eoP6ipHsTPx83uZhAMDkxeTC3XHQp2YkB5CJBGXBu9p07VxPnKk/Vg /JOhvA9CyHrYnA== -----END CERTIFICATE-----Generated at Fri Dec 19 10:37:07 2025 by rpki-client