This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.mft File: pnkWCgRJ6LUPwByF3PzlSyxim1E.mft (raw, json) Hash identifier: sTXEeUQxqczlOU7SorFUIaOGCBTDZWbXx3NagOEMWlI= Subject key identifier: 43:1E:8D:BC:7A:EA:5F:94:73:1E:9F:EF:D3:CD:8D:67:C1:2A:B0:C5 Authority key identifier: A6:79:16:0A:04:49:E8:B5:0F:C0:1C:85:DC:FC:E5:4B:2C:62:9B:51 Certificate issuer: /CN=a679160a0449e8b50fc01c85dcfce54b2c629b51 Certificate serial: 019B3FED5BC3B437C4FCFFAA319356C347C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnkWCgRJ6LUPwByF3PzlSyxim1E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.mft Manifest number: 118F Signing time: Sun 21 Dec 2025 08:01:18 +0000 Manifest this update: Sun 21 Dec 2025 08:01:18 +0000 Manifest next update: Mon 22 Dec 2025 08:01:18 +0000 Files and hashes: 1: 6zgBCVzd-5kdX0sgGe0YDglrk04.roa (hash: mpYaeNHnIzoaHZnsNjSuZCAnd5S6WeK+VhnJsngc1QQ=) 2: pnkWCgRJ6LUPwByF3PzlSyxim1E.crl (hash: ALNY4w4qqfwPiEYDeucWY/DMmQXauTkn9rFy+jvI/XM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.crl rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.mft rsync://rpki.ripe.net/repository/DEFAULT/pnkWCgRJ6LUPwByF3PzlSyxim1E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 08:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ed:5b:c3:b4:37:c4:fc:ff:aa:31:93:56:c3:47:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a679160a0449e8b50fc01c85dcfce54b2c629b51 Validity Not Before: Dec 21 08:01:18 2025 GMT Not After : Dec 22 08:01:18 2025 GMT Subject: CN=431e8dbc7aea5f94731e9fefd3cd8d67c12ab0c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a6:45:4f:01:5c:c4:2f:95:9a:71:67:0b:c3: 9a:0c:b5:83:e1:3c:68:3b:b4:f4:65:d6:cd:5f:3b: 12:1d:c6:5c:e7:bd:50:52:87:2e:0f:af:d0:d9:bf: 0e:40:85:48:3b:05:08:8f:8a:6d:f0:af:db:3b:02: a5:59:ac:f9:85:0e:86:a6:f6:fc:e9:5a:da:67:f9: 04:56:34:ce:30:17:be:5c:74:e5:d5:6e:65:7a:38: 90:ab:fe:f1:92:74:09:a5:ef:79:be:98:62:85:fe: 3c:5d:1f:3f:01:6e:78:96:29:6c:4d:52:88:7c:06: 8d:a9:a2:17:2e:f7:70:b7:12:04:ad:dd:3d:90:de: b4:db:35:8f:71:98:87:2f:f4:44:3f:e9:00:12:de: 78:50:20:3b:2e:c1:53:49:07:63:71:5a:69:e2:46: d1:c9:39:2d:ba:2c:30:cc:b0:84:da:04:d7:56:c0: e5:0f:f8:8f:9b:50:73:91:5f:14:ca:52:e6:f6:22: 01:1b:93:a3:79:61:c4:6e:f1:d7:e9:2e:8e:6e:aa: 58:dc:f6:a0:f2:43:62:1e:4b:91:32:67:47:19:a4: 13:45:fa:98:e0:a6:88:ec:73:bf:5f:f2:88:20:7b: c4:e3:6e:ac:69:f9:8c:74:f3:4c:86:7c:c7:04:94: 3f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:1E:8D:BC:7A:EA:5F:94:73:1E:9F:EF:D3:CD:8D:67:C1:2A:B0:C5 X509v3 Authority Key Identifier: keyid:A6:79:16:0A:04:49:E8:B5:0F:C0:1C:85:DC:FC:E5:4B:2C:62:9B:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnkWCgRJ6LUPwByF3PzlSyxim1E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:86:0f:2a:f8:e5:f5:a9:ec:d2:b9:3a:1f:dd:b6:57:44:5e: 46:48:3b:ea:28:c1:a3:1e:97:9f:30:b6:2e:35:94:b9:39:8a: 62:ed:0a:9e:25:83:e8:99:f5:d5:51:9a:bc:a2:59:7f:e9:77: f2:59:21:9a:db:85:a3:90:6c:a1:b4:41:6d:95:9e:fe:28:5e: 0a:41:4a:01:92:05:c8:c5:a2:39:c5:30:58:d9:9c:32:d7:6c: a2:85:24:e8:05:97:d4:b5:ad:9e:66:e5:08:5e:65:8b:a5:7e: 47:ca:fa:7c:03:fb:8d:a8:9e:30:c8:8d:5a:8c:36:1f:55:f3: d9:8f:ae:db:9b:f9:4f:46:99:96:26:9c:79:1b:20:6a:4e:b0: 66:10:5b:56:3b:58:b4:a3:0b:39:99:5d:cc:46:3d:5e:5c:14: e3:0e:5a:00:1e:69:5b:79:47:b3:3a:a8:c3:15:05:29:b9:14: 3f:08:95:c8:9c:2a:d7:17:97:0d:55:3e:c5:17:4d:5d:15:9f: 63:68:68:bc:ef:54:c1:34:d2:99:67:87:10:bf:5c:08:f4:83: ab:e8:61:eb:45:30:f4:d0:00:a3:ec:92:43:26:dc:32:95:62: fb:b4:96:99:20:86:6f:f9:a7:c7:2b:9f:9d:bc:4f:94:e8:fe: ce:c9:28:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7VvDtDfE/P+qMZNWw0fHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NzkxNjBhMDQ0OWU4YjUwZmMwMWM4NWRjZmNlNTRiMmM2 MjliNTEwHhcNMjUxMjIxMDgwMTE4WhcNMjUxMjIyMDgwMTE4WjAzMTEwLwYDVQQD Eyg0MzFlOGRiYzdhZWE1Zjk0NzMxZTlmZWZkM2NkOGQ2N2MxMmFiMGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6ZFTwFcxC+VmnFnC8OaDLWD4Txo O7T0ZdbNXzsSHcZc571QUocuD6/Q2b8OQIVIOwUIj4pt8K/bOwKlWaz5hQ6Gpvb8 6VraZ/kEVjTOMBe+XHTl1W5lejiQq/7xknQJpe95vphihf48XR8/AW54lilsTVKI fAaNqaIXLvdwtxIErd09kN602zWPcZiHL/REP+kAEt54UCA7LsFTSQdjcVpp4kbR yTktuiwwzLCE2gTXVsDlD/iPm1BzkV8UylLm9iIBG5OjeWHEbvHX6S6ObqpY3Pag 8kNiHkuRMmdHGaQTRfqY4KaI7HO/X/KIIHvE426safmMdPNMhnzHBJQ/mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEMejbx66l+Ucx6f79PNjWfBKrDFMB8GA1UdIwQY MBaAFKZ5FgoESei1D8Achdz85UssYptRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcG5rV0NnUko2TFVQd0J5RjNQemxTeXhpbTFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83MmRlMzUtMzM4ZC00YTQzLWI3MTkt OGI0ZDA4ZDM3YzVmLzEvcG5rV0NnUko2TFVQd0J5RjNQemxTeXhpbTFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny83MmRlMzUtMzM4ZC00YTQzLWI3MTktOGI0ZDA4ZDM3YzVm LzEvcG5rV0NnUko2TFVQd0J5RjNQemxTeXhpbTFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeYYPKvjl 9ans0rk6H922V0ReRkg76ijBox6XnzC2LjWUuTmKYu0KniWD6Jn11VGavKJZf+l3 8lkhmtuFo5BsobRBbZWe/iheCkFKAZIFyMWiOcUwWNmcMtdsooUk6AWX1LWtnmbl CF5li6V+R8r6fAP7jaieMMiNWow2H1Xz2Y+u25v5T0aZliaceRsgak6wZhBbVjtY tKMLOZldzEY9XlwU4w5aAB5pW3lHszqowxUFKbkUPwiVyJwq1xeXDVU+xRdNXRWf Y2hovO9UwTTSmWeHEL9cCPSDq+hh60Uw9NAAo+ySQybcMpVi+7SWmSCGb/mnxyuf nbxPlOj+zskomQ== -----END CERTIFICATE-----Generated at Sun Dec 21 17:31:13 2025 by rpki-client