This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft File: Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft (raw, json) Hash identifier: hwFfc6DPs4iL5VF22RKwCyBhOtszai9j6gahFzqrK4Y= Subject key identifier: 40:EE:64:87:48:56:A7:5B:4B:2C:FD:27:30:CB:7E:DF:AD:DD:91:59 Authority key identifier: 3E:AD:19:09:6B:0E:E0:80:FE:43:81:05:00:B7:18:A9:47:FE:D2:29 Certificate issuer: /CN=3ead19096b0ee080fe43810500b718a947fed229 Certificate serial: 019AF766DD33EA58D28CC71F50B1B506B8FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft Manifest number: 0B8D Signing time: Sun 07 Dec 2025 06:01:44 +0000 Manifest this update: Sun 07 Dec 2025 06:01:44 +0000 Manifest next update: Mon 08 Dec 2025 06:01:44 +0000 Files and hashes: 1: Bk8zYlSKqLYVsGMH3YEvHnLSsEU.roa (hash: LyRPaqVEcdiw5E3uBmgAAh9/7xweVS475crHOVmwvK8=) 2: Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl (hash: ePBIgoXVPtNllyd3SIpBBhIxKIhn2GemPYpyUtn2zfI=) 3: gwj9P8ZuERM-SCTzjIoGfn0Rln0.roa (hash: 9JU5L0oKqu22gCI9ibec6Elcvk/4kJnQuHkzo4ps1r4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:66:dd:33:ea:58:d2:8c:c7:1f:50:b1:b5:06:b8:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ead19096b0ee080fe43810500b718a947fed229 Validity Not Before: Dec 7 06:01:44 2025 GMT Not After : Dec 8 06:01:44 2025 GMT Subject: CN=40ee64874856a75b4b2cfd2730cb7edfaddd9159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c5:68:4a:ec:3b:20:f6:c0:cc:7a:39:f5:2a: 64:41:91:2b:06:37:cc:28:66:fd:63:6a:22:7f:46: c9:ef:a0:35:8e:6c:34:4f:ff:39:54:c2:35:b4:8c: b0:12:96:7c:90:21:68:19:42:b5:36:d5:a1:99:57: 9f:3f:1a:1a:d2:b3:e5:36:de:63:17:3a:05:bc:72: 66:d7:ac:e6:f1:cb:a1:62:3f:e2:12:76:10:5d:ac: 55:cd:81:09:2e:27:10:05:b4:1b:7c:c9:2f:5f:1d: 26:7f:ea:0c:d5:53:05:33:59:03:dd:cf:1d:fb:52: d9:87:73:96:3a:d6:d3:98:0f:20:33:c0:20:8b:66: d2:88:9e:68:14:3f:0f:66:06:58:0b:f1:4a:3b:e6: f6:38:70:ee:38:aa:13:71:a4:46:e1:0b:84:bf:18: e7:ca:a9:69:8c:bc:9b:9e:31:46:77:bd:7b:a3:87: b3:6e:4f:07:8d:9b:08:c7:9b:ee:a3:03:48:bb:bc: aa:e6:0f:91:47:e7:32:76:09:fd:70:00:ae:a3:76: 29:22:55:48:b5:ae:69:d6:9e:46:bc:f2:d1:46:a9: f5:ba:d0:2c:4d:2d:da:19:1d:23:47:7a:ec:f5:b3: 79:7e:51:54:a9:4d:6b:ef:74:f2:36:f7:f4:b6:84: 5f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:EE:64:87:48:56:A7:5B:4B:2C:FD:27:30:CB:7E:DF:AD:DD:91:59 X509v3 Authority Key Identifier: keyid:3E:AD:19:09:6B:0E:E0:80:FE:43:81:05:00:B7:18:A9:47:FE:D2:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:bc:91:ee:b6:06:85:ab:f7:2f:03:4e:ac:41:21:ed:dc:14: 85:f1:d2:06:19:d0:84:28:7e:a7:af:60:92:fc:e8:8f:1d:27: 21:07:aa:d4:01:dc:b2:0a:e2:af:82:ed:c0:6a:68:57:8d:9f: 55:02:a3:ae:1c:e2:78:b1:99:14:6a:80:05:09:cc:65:30:53: 64:b3:d6:95:4b:2a:78:06:8a:aa:72:d2:03:24:76:5b:09:37: a1:22:1d:30:3f:0e:69:a0:cd:9c:f0:5d:b9:bc:92:cd:7b:d2: 3a:cd:e6:e9:32:cb:55:8f:f9:be:42:8e:d0:f9:6b:49:0c:ce: af:17:d1:1b:40:c8:76:39:88:2e:5f:f8:60:45:62:2c:31:bd: 2c:6f:cc:9d:ad:f1:bc:b1:6c:ca:5d:aa:95:3b:d5:bf:84:16: d0:ab:f2:fa:57:6c:09:14:52:f8:9c:82:1d:e7:37:16:62:25: 5a:b1:9f:1a:a6:6c:4c:db:59:20:d1:e5:4e:42:c7:5a:55:77: fb:70:2a:f7:a4:54:45:88:69:6f:3c:c7:7d:cc:b3:c2:e7:04: 72:6c:cc:63:43:ed:a3:e9:89:fe:ff:00:02:be:20:a5:66:ac: 90:83:28:31:25:c8:d8:ab:31:68:9c:77:1f:ce:14:f2:be:a6: 0f:1b:a6:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr3Zt0z6ljSjMcfULG1Brj8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYWQxOTA5NmIwZWUwODBmZTQzODEwNTAwYjcxOGE5NDdm ZWQyMjkwHhcNMjUxMjA3MDYwMTQ0WhcNMjUxMjA4MDYwMTQ0WjAzMTEwLwYDVQQD Eyg0MGVlNjQ4NzQ4NTZhNzViNGIyY2ZkMjczMGNiN2VkZmFkZGQ5MTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cVoSuw7IPbAzHo59SpkQZErBjfM KGb9Y2oif0bJ76A1jmw0T/85VMI1tIywEpZ8kCFoGUK1NtWhmVefPxoa0rPlNt5j FzoFvHJm16zm8cuhYj/iEnYQXaxVzYEJLicQBbQbfMkvXx0mf+oM1VMFM1kD3c8d +1LZh3OWOtbTmA8gM8Agi2bSiJ5oFD8PZgZYC/FKO+b2OHDuOKoTcaRG4QuEvxjn yqlpjLybnjFGd717o4ezbk8HjZsIx5vuowNIu7yq5g+RR+cydgn9cACuo3YpIlVI ta5p1p5GvPLRRqn1utAsTS3aGR0jR3rs9bN5flFUqU1r73TyNvf0toRfCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEDuZIdIVqdbSyz9JzDLft+t3ZFZMB8GA1UdIwQY MBaAFD6tGQlrDuCA/kOBBQC3GKlH/tIpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHEwWkNXc080SUQtUTRFRkFMY1lxVWYtMGlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy82M2JiNzktOTNiMC00OTlmLTk3OGQt MTBmZTQ0NzI2OTA4LzEvUHEwWkNXc080SUQtUTRFRkFMY1lxVWYtMGlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy82M2JiNzktOTNiMC00OTlmLTk3OGQtMTBmZTQ0NzI2OTA4 LzEvUHEwWkNXc080SUQtUTRFRkFMY1lxVWYtMGlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqryR7rYG hav3LwNOrEEh7dwUhfHSBhnQhCh+p69gkvzojx0nIQeq1AHcsgrir4LtwGpoV42f VQKjrhzieLGZFGqABQnMZTBTZLPWlUsqeAaKqnLSAyR2Wwk3oSIdMD8OaaDNnPBd ubySzXvSOs3m6TLLVY/5vkKO0PlrSQzOrxfRG0DIdjmILl/4YEViLDG9LG/Mna3x vLFsyl2qlTvVv4QW0Kvy+ldsCRRS+JyCHec3FmIlWrGfGqZsTNtZINHlTkLHWlV3 +3Aq96RURYhpbzzHfcyzwucEcmzMY0Pto+mJ/v8AAr4gpWaskIMoMSXI2KsxaJx3 H84U8r6mDxumAA== -----END CERTIFICATE-----Generated at Sun Dec 7 12:01:59 2025 by rpki-client