This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft File: pqxtBp2PtzL0_pK04TzX3E05OkI.mft (raw, json) Hash identifier: 98nxx2TWcrelezO3IavnrKBB8KLsXklis3l3LfsBu4U= Subject key identifier: 4C:90:BC:F9:C4:88:AF:D4:FF:C6:CE:B5:C0:62:05:76:A0:71:E5:CE Authority key identifier: A6:AC:6D:06:9D:8F:B7:32:F4:FE:92:B4:E1:3C:D7:DC:4D:39:3A:42 Certificate issuer: /CN=a6ac6d069d8fb732f4fe92b4e13cd7dc4d393a42 Certificate serial: 019B1081201620935CCE7F11C87AF522AF2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft Manifest number: 0CE4 Signing time: Fri 12 Dec 2025 03:00:56 +0000 Manifest this update: Fri 12 Dec 2025 03:00:56 +0000 Manifest next update: Sat 13 Dec 2025 03:00:56 +0000 Files and hashes: 1: kORzGbUwfQz_reUfKxE-VKML1Ko.roa (hash: LJNSK27C7NQtNI1BCy3DsB/OzJxofkAzOY3Bw0ai+Lk=) 2: pqxtBp2PtzL0_pK04TzX3E05OkI.crl (hash: nUQ8Sk/QAG/crjBMPgOhkj5ONzdWEom9MQwg4yxw5Kc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:81:20:16:20:93:5c:ce:7f:11:c8:7a:f5:22:af:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6ac6d069d8fb732f4fe92b4e13cd7dc4d393a42 Validity Not Before: Dec 12 03:00:56 2025 GMT Not After : Dec 13 03:00:56 2025 GMT Subject: CN=4c90bcf9c488afd4ffc6ceb5c0620576a071e5ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b0:3a:54:ee:2d:d0:cb:14:f6:56:59:a9:02: 47:f9:5d:9b:2c:57:70:fa:40:31:3c:ac:13:ed:45: 06:11:f4:43:eb:80:2b:a9:c5:d7:16:9e:bf:55:56: 2d:ce:d0:6a:12:c0:5d:b5:d8:14:e4:12:c3:2a:a8: 1a:4c:6a:f1:80:b4:b6:d7:b7:41:08:01:fa:76:16: 7a:c1:51:4d:fe:f3:5c:6d:db:f1:91:8c:47:26:63: e9:7e:b7:ad:1a:8d:b0:7a:a3:f2:b2:5f:3e:1f:6b: 86:ce:86:2b:c7:c7:c1:37:c1:44:ac:bd:2c:94:23: 5b:00:f6:7b:bc:5d:d0:b2:d6:04:5e:25:60:29:fa: 04:63:1a:5c:83:c5:dd:e2:99:5d:bd:fa:b7:5a:d3: fb:00:09:1f:aa:fd:f1:29:67:44:3e:cb:78:8d:de: 0a:3a:8b:d4:39:c9:8c:f3:b0:d4:99:c4:c0:a2:c1: 3e:4a:2b:99:1f:05:ff:3f:f5:b7:2f:be:75:f9:26: c5:6e:07:81:34:5c:32:8f:dd:1c:93:d3:27:23:7d: f2:df:44:a7:4b:b2:bb:c0:37:ea:a8:08:86:15:99: 5c:48:b4:2e:d6:5b:19:de:60:ca:f3:2e:16:48:a9: 11:8a:ae:0f:47:9a:e2:1f:59:ff:1b:c0:ca:b8:ff: a7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:90:BC:F9:C4:88:AF:D4:FF:C6:CE:B5:C0:62:05:76:A0:71:E5:CE X509v3 Authority Key Identifier: keyid:A6:AC:6D:06:9D:8F:B7:32:F4:FE:92:B4:E1:3C:D7:DC:4D:39:3A:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:0e:91:13:73:f9:62:f0:f8:f9:ab:51:81:2b:bc:d5:46:3e: 2e:00:78:d5:e0:13:45:7b:13:cf:24:96:32:aa:98:5c:4f:d8: 3d:53:5e:70:e2:ff:d8:03:52:3f:f4:60:b4:7a:ca:86:1f:57: 07:c7:bc:6e:e1:7b:8e:b3:a7:af:dd:1d:b0:dc:6f:44:ce:d8: 00:73:83:e6:8b:98:d6:d0:01:da:67:85:b8:3d:0c:6b:72:c5: ff:fb:98:af:45:71:44:1a:10:d0:01:c7:ed:be:c7:1b:84:1d: 18:c5:a4:ec:f9:73:80:30:8f:eb:c6:a2:f2:5f:82:7a:58:a5: e9:de:47:42:78:7a:9d:8d:43:8a:4f:de:88:59:9d:5e:ef:ce: be:12:0f:40:c2:6f:95:37:a9:6b:3e:e2:bd:82:1e:27:c9:ea: 48:3d:81:68:44:25:59:3d:ff:c5:de:1c:bd:aa:21:34:94:bf: bb:f7:54:d7:01:d1:c5:97:ef:8f:ee:a9:42:d7:7b:82:c2:1c: 4c:12:26:09:f7:e4:8a:08:f4:00:c4:77:5a:37:be:29:d9:d7: 91:4a:71:15:2b:02:be:a1:62:cf:f1:fd:3c:1f:a7:7c:f5:cd: 3f:b9:48:c8:fd:dc:de:24:98:38:d4:06:0d:5b:eb:13:5f:37: 0c:37:5e:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgSAWIJNczn8RyHr1Iq8tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2YWM2ZDA2OWQ4ZmI3MzJmNGZlOTJiNGUxM2NkN2RjNGQz OTNhNDIwHhcNMjUxMjEyMDMwMDU2WhcNMjUxMjEzMDMwMDU2WjAzMTEwLwYDVQQD Eyg0YzkwYmNmOWM0ODhhZmQ0ZmZjNmNlYjVjMDYyMDU3NmEwNzFlNWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrA6VO4t0MsU9lZZqQJH+V2bLFdw +kAxPKwT7UUGEfRD64ArqcXXFp6/VVYtztBqEsBdtdgU5BLDKqgaTGrxgLS217dB CAH6dhZ6wVFN/vNcbdvxkYxHJmPpfretGo2weqPysl8+H2uGzoYrx8fBN8FErL0s lCNbAPZ7vF3QstYEXiVgKfoEYxpcg8Xd4pldvfq3WtP7AAkfqv3xKWdEPst4jd4K OovUOcmM87DUmcTAosE+SiuZHwX/P/W3L751+SbFbgeBNFwyj90ck9MnI33y30Sn S7K7wDfqqAiGFZlcSLQu1lsZ3mDK8y4WSKkRiq4PR5riH1n/G8DKuP+nnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEyQvPnEiK/U/8bOtcBiBXagceXOMB8GA1UdIwQY MBaAFKasbQadj7cy9P6StOE819xNOTpCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHF4dEJwMlB0ekwwX3BLMDRUelgzRTA1T2tJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9jMDlmMDItNzUxMC00MmVhLWIyODEt YmZhMDNhNjY4NTc3LzEvcHF4dEJwMlB0ekwwX3BLMDRUelgzRTA1T2tJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9jMDlmMDItNzUxMC00MmVhLWIyODEtYmZhMDNhNjY4NTc3 LzEvcHF4dEJwMlB0ekwwX3BLMDRUelgzRTA1T2tJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACQ6RE3P5 YvD4+atRgSu81UY+LgB41eATRXsTzySWMqqYXE/YPVNecOL/2ANSP/RgtHrKhh9X B8e8buF7jrOnr90dsNxvRM7YAHOD5ouY1tAB2meFuD0Ma3LF//uYr0VxRBoQ0AHH 7b7HG4QdGMWk7PlzgDCP68ai8l+Celil6d5HQnh6nY1Dik/eiFmdXu/OvhIPQMJv lTepaz7ivYIeJ8nqSD2BaEQlWT3/xd4cvaohNJS/u/dU1wHRxZfvj+6pQtd7gsIc TBImCffkigj0AMR3Wje+KdnXkUpxFSsCvqFiz/H9PB+nfPXNP7lIyP3c3iSYONQG DVvrE183DDdeUA== -----END CERTIFICATE-----Generated at Fri Dec 12 06:32:08 2025 by rpki-client