This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.mft File: Pkgvs8n5r0cOTki23zgtPVAVRmE.mft (raw, json) Hash identifier: U+BhR/CdeLLxJj/cKCGWlXL9QO526X9wfRo3OUzCjP4= Subject key identifier: 6C:80:93:4A:6F:57:FE:83:7E:D1:5F:7F:E2:F0:2B:B1:A8:0A:BD:3F Authority key identifier: 3E:48:2F:B3:C9:F9:AF:47:0E:4E:48:B6:DF:38:2D:3D:50:15:46:61 Certificate issuer: /CN=3e482fb3c9f9af470e4e48b6df382d3d50154661 Certificate serial: 019B23D0E64B199F08A4E43CF91F3CB618F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pkgvs8n5r0cOTki23zgtPVAVRmE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.mft Manifest number: 177E Signing time: Mon 15 Dec 2025 21:00:51 +0000 Manifest this update: Mon 15 Dec 2025 21:00:51 +0000 Manifest next update: Tue 16 Dec 2025 21:00:51 +0000 Files and hashes: 1: Pkgvs8n5r0cOTki23zgtPVAVRmE.crl (hash: GAwF5HAFe/zEFfUe/6IoEIiQKNN9zihBFs/Fj9BfejM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.crl rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.mft rsync://rpki.ripe.net/repository/DEFAULT/Pkgvs8n5r0cOTki23zgtPVAVRmE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 21:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:d0:e6:4b:19:9f:08:a4:e4:3c:f9:1f:3c:b6:18:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e482fb3c9f9af470e4e48b6df382d3d50154661 Validity Not Before: Dec 15 21:00:51 2025 GMT Not After : Dec 16 21:00:51 2025 GMT Subject: CN=6c80934a6f57fe837ed15f7fe2f02bb1a80abd3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ea:9a:4a:08:3d:57:20:5c:c4:8b:da:cc:cc: 5c:b2:4b:f1:7b:0b:33:e9:dd:2f:5f:a0:d6:c9:62: cf:9d:d1:d4:c2:bd:8e:59:91:4b:a8:5f:24:8f:5d: 5d:ee:0d:32:3c:5b:33:8d:18:19:dd:85:5c:bd:74: 0d:8b:db:80:cc:fb:bc:ed:0f:e6:55:8d:f7:fe:7a: c2:7e:e6:c5:f0:30:e9:ec:69:d2:ce:c0:04:58:61: ed:07:90:12:74:90:16:34:12:21:9f:0a:09:8f:65: a5:fb:74:ac:e3:c1:62:01:38:33:12:ee:ac:99:c4: d2:47:8b:1a:e0:9d:b7:5a:08:ec:24:c1:02:8c:0b: 85:ea:5c:00:f6:2f:22:5d:aa:c4:0c:c5:fb:32:fe: 01:d2:7b:b6:25:cd:4f:73:9e:37:a5:c2:81:6b:53: 30:45:b1:6d:94:d9:7d:29:70:68:73:aa:c1:04:97: fc:ac:b5:e5:30:ed:5a:e7:5a:c4:8f:aa:2b:0c:90: d2:80:a5:fa:5b:58:45:38:a2:22:c6:91:00:6a:80: 9e:3a:29:15:ec:81:a9:32:89:ad:e6:4c:12:7a:dc: 35:ee:c2:a2:c9:bf:a9:36:2b:44:3d:37:18:7b:fa: ed:6a:c5:cd:fb:0b:fd:cf:86:ea:0f:2d:6f:0d:c7: 5f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:80:93:4A:6F:57:FE:83:7E:D1:5F:7F:E2:F0:2B:B1:A8:0A:BD:3F X509v3 Authority Key Identifier: keyid:3E:48:2F:B3:C9:F9:AF:47:0E:4E:48:B6:DF:38:2D:3D:50:15:46:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pkgvs8n5r0cOTki23zgtPVAVRmE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:17:fb:f1:1d:3e:e3:53:b1:28:8a:e6:da:6c:b5:1f:e4:71: d0:dd:45:cc:b3:b0:67:77:5d:20:58:a1:29:a0:bf:af:a7:df: 2b:16:53:8c:0d:be:f1:fb:88:ac:33:81:a4:83:cb:85:74:1b: 63:f1:a9:bf:e3:a5:9a:cf:11:70:2e:6d:a4:db:bf:9a:d1:8f: 18:89:60:aa:e7:b2:a2:fe:c7:e8:07:77:f1:5c:01:da:71:73: 53:1f:2d:72:2b:a1:6e:74:8f:1a:89:e8:1b:a6:41:7f:c5:70: ea:c8:90:b1:85:e2:4d:b7:9e:e8:d5:55:fe:e2:e4:b8:fb:e8: af:d8:e6:b4:2e:11:b9:f1:a2:e2:29:11:23:a1:0f:1c:3c:3f: 38:e9:86:10:63:96:36:d4:f2:89:69:02:ae:3e:a1:7c:32:5b: 28:87:94:64:47:94:48:38:d5:93:9a:d6:5a:c0:c1:eb:89:c4: 32:95:83:d6:7e:04:74:0d:dd:a4:c8:e2:7c:b8:c1:65:c5:a2: fa:b6:03:0a:0c:da:90:09:cb:34:1a:5f:97:3b:67:17:44:cb: b1:77:35:8a:c6:16:bd:d7:0b:c3:3f:29:99:4a:7a:bd:e3:8a: b4:02:ad:77:0d:0d:fe:57:6f:a9:0e:c9:19:6b:b4:7a:1b:56: a5:4b:7f:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsj0OZLGZ8IpOQ8+R88thjzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNDgyZmIzYzlmOWFmNDcwZTRlNDhiNmRmMzgyZDNkNTAx NTQ2NjEwHhcNMjUxMjE1MjEwMDUxWhcNMjUxMjE2MjEwMDUxWjAzMTEwLwYDVQQD Eyg2YzgwOTM0YTZmNTdmZTgzN2VkMTVmN2ZlMmYwMmJiMWE4MGFiZDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuqaSgg9VyBcxIvazMxcskvxewsz 6d0vX6DWyWLPndHUwr2OWZFLqF8kj11d7g0yPFszjRgZ3YVcvXQNi9uAzPu87Q/m VY33/nrCfubF8DDp7GnSzsAEWGHtB5ASdJAWNBIhnwoJj2Wl+3Ss48FiATgzEu6s mcTSR4sa4J23WgjsJMECjAuF6lwA9i8iXarEDMX7Mv4B0nu2Jc1Pc543pcKBa1Mw RbFtlNl9KXBoc6rBBJf8rLXlMO1a51rEj6orDJDSgKX6W1hFOKIixpEAaoCeOikV 7IGpMomt5kwSetw17sKiyb+pNitEPTcYe/rtasXN+wv9z4bqDy1vDcdf2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGyAk0pvV/6DftFff+LwK7GoCr0/MB8GA1UdIwQY MBaAFD5IL7PJ+a9HDk5Itt84LT1QFUZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGtndnM4bjVyMGNPVGtpMjN6Z3RQVkFWUm1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My81NDNiMTUtZmIxYi00NDVmLThhYTQt ZGI0ZDcxNDg1OWI1LzEvUGtndnM4bjVyMGNPVGtpMjN6Z3RQVkFWUm1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My81NDNiMTUtZmIxYi00NDVmLThhYTQtZGI0ZDcxNDg1OWI1 LzEvUGtndnM4bjVyMGNPVGtpMjN6Z3RQVkFWUm1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuxf78R0+ 41OxKIrm2my1H+Rx0N1FzLOwZ3ddIFihKaC/r6ffKxZTjA2+8fuIrDOBpIPLhXQb Y/Gpv+Olms8RcC5tpNu/mtGPGIlgqueyov7H6Ad38VwB2nFzUx8tciuhbnSPGono G6ZBf8Vw6siQsYXiTbee6NVV/uLkuPvor9jmtC4RufGi4ikRI6EPHDw/OOmGEGOW NtTyiWkCrj6hfDJbKIeUZEeUSDjVk5rWWsDB64nEMpWD1n4EdA3dpMjifLjBZcWi +rYDCgzakAnLNBpflztnF0TLsXc1isYWvdcLwz8pmUp6veOKtAKtdw0N/ldvqQ7J GWu0ehtWpUt/AQ== -----END CERTIFICATE-----Generated at Tue Dec 16 06:38:32 2025 by rpki-client