This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.mft File: pnkWCgRJ6LUPwByF3PzlSyxim1E.mft (raw, json) Hash identifier: 3AerWxywMruLS0DfaRKFTNO/12/8spk2wWFvjkGs6ms= Subject key identifier: 67:71:3F:90:3A:34:BD:15:C2:5C:86:43:98:5A:B1:8F:5D:CA:48:F6 Authority key identifier: A6:79:16:0A:04:49:E8:B5:0F:C0:1C:85:DC:FC:E5:4B:2C:62:9B:51 Certificate issuer: /CN=a679160a0449e8b50fc01c85dcfce54b2c629b51 Certificate serial: 019B41DB5D2E8B45A13C8E8951BF95DB6D18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnkWCgRJ6LUPwByF3PzlSyxim1E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.mft Manifest number: 1190 Signing time: Sun 21 Dec 2025 17:00:53 +0000 Manifest this update: Sun 21 Dec 2025 17:00:53 +0000 Manifest next update: Mon 22 Dec 2025 17:00:53 +0000 Files and hashes: 1: 6zgBCVzd-5kdX0sgGe0YDglrk04.roa (hash: mpYaeNHnIzoaHZnsNjSuZCAnd5S6WeK+VhnJsngc1QQ=) 2: pnkWCgRJ6LUPwByF3PzlSyxim1E.crl (hash: +b1CXqsqGqdN8RjXZ325dLU5NdexFtsMmhWQ9W1ryfM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.crl rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.mft rsync://rpki.ripe.net/repository/DEFAULT/pnkWCgRJ6LUPwByF3PzlSyxim1E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:5d:2e:8b:45:a1:3c:8e:89:51:bf:95:db:6d:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a679160a0449e8b50fc01c85dcfce54b2c629b51 Validity Not Before: Dec 21 17:00:53 2025 GMT Not After : Dec 22 17:00:53 2025 GMT Subject: CN=67713f903a34bd15c25c8643985ab18f5dca48f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c1:e0:0f:90:88:7b:b1:70:ee:c0:54:06:7d: a7:d8:eb:2d:7a:a7:0d:58:40:02:fe:51:dd:0d:ad: 44:ff:9b:da:97:10:62:ab:a3:5b:92:8e:dc:14:84: 2b:b7:91:6e:b6:3b:5a:e5:02:db:ed:39:6e:11:2b: 4e:bb:ca:86:a7:55:97:e5:0a:64:e9:4b:55:41:30: 81:63:a7:0d:a6:63:81:ce:10:fd:27:40:18:9a:70: 55:97:57:7a:a0:42:c6:48:cd:3f:21:3d:a7:57:9f: 8c:29:92:bd:bd:34:8d:81:4c:7c:cc:a8:c1:be:96: ec:fa:fb:7a:92:f5:20:7c:ca:ae:77:f9:57:f7:5d: 1b:12:59:68:f0:2e:0f:30:9a:93:3f:df:73:fe:59: fd:3a:39:38:ac:94:56:d1:b9:1b:f5:bc:2e:19:69: 9b:dc:73:46:e8:ec:48:34:7b:d0:de:21:2b:57:b3: 72:45:8f:ab:d8:c6:93:e8:2b:a9:da:0a:4e:79:54: 5f:91:75:8f:88:75:45:35:da:82:32:3a:6b:a4:ad: 03:6a:1b:a4:6f:73:12:0c:ad:62:9f:17:e7:a7:01: 62:1b:bd:86:5b:0d:88:94:6e:97:4c:41:db:e6:55: ef:83:44:4d:35:61:f4:25:30:a8:33:6f:a1:c8:50: a2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:71:3F:90:3A:34:BD:15:C2:5C:86:43:98:5A:B1:8F:5D:CA:48:F6 X509v3 Authority Key Identifier: keyid:A6:79:16:0A:04:49:E8:B5:0F:C0:1C:85:DC:FC:E5:4B:2C:62:9B:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnkWCgRJ6LUPwByF3PzlSyxim1E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:6c:05:e3:08:43:03:ba:a7:61:bc:3b:6f:45:90:0f:ee:67: 56:2c:fe:17:4c:34:2e:70:f3:ae:5b:26:ca:27:2b:f8:e5:72: c4:a1:e2:de:38:58:5b:13:63:58:c6:3a:3a:0d:31:55:1d:83: 9b:62:b4:5d:7d:c9:02:8b:81:b8:3b:db:a0:0a:b3:4b:74:f6: a6:c4:6a:cc:21:33:3e:59:d4:a5:5f:7c:81:85:fb:ed:9f:63: 81:2e:cd:68:2a:44:92:e2:9f:c3:10:a2:fb:5a:25:33:68:20: e8:bc:28:7f:90:32:92:09:28:96:f0:69:86:aa:a6:cb:63:cb: ea:63:b0:5a:a6:6e:44:9a:53:61:b3:28:9d:58:a5:be:08:fb: 13:d5:53:e1:72:b9:af:09:e3:64:cc:df:bf:aa:ca:48:68:16: 4b:f6:0b:7d:1e:55:c6:a0:e5:60:0c:2d:19:8f:5f:84:89:59: fe:71:b8:ec:a1:42:2e:f9:a9:06:03:7e:97:5a:81:64:57:eb: 82:c5:d9:86:4b:1c:a8:6f:20:e1:65:35:d9:92:51:8b:b1:35: 15:2c:cc:d0:d9:c3:8d:52:78:41:8f:82:de:75:54:d7:72:e8: 09:27:b3:d3:42:95:3c:17:c8:44:bb:45:69:fa:ed:d4:31:94: 1d:a9:31:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB210ui0WhPI6JUb+V220YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NzkxNjBhMDQ0OWU4YjUwZmMwMWM4NWRjZmNlNTRiMmM2 MjliNTEwHhcNMjUxMjIxMTcwMDUzWhcNMjUxMjIyMTcwMDUzWjAzMTEwLwYDVQQD Eyg2NzcxM2Y5MDNhMzRiZDE1YzI1Yzg2NDM5ODVhYjE4ZjVkY2E0OGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8HgD5CIe7Fw7sBUBn2n2OsteqcN WEAC/lHdDa1E/5valxBiq6Nbko7cFIQrt5Futjta5QLb7TluEStOu8qGp1WX5Qpk 6UtVQTCBY6cNpmOBzhD9J0AYmnBVl1d6oELGSM0/IT2nV5+MKZK9vTSNgUx8zKjB vpbs+vt6kvUgfMqud/lX910bEllo8C4PMJqTP99z/ln9Ojk4rJRW0bkb9bwuGWmb 3HNG6OxINHvQ3iErV7NyRY+r2MaT6Cup2gpOeVRfkXWPiHVFNdqCMjprpK0Dahuk b3MSDK1inxfnpwFiG72GWw2IlG6XTEHb5lXvg0RNNWH0JTCoM2+hyFCilQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGdxP5A6NL0VwlyGQ5hasY9dykj2MB8GA1UdIwQY MBaAFKZ5FgoESei1D8Achdz85UssYptRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcG5rV0NnUko2TFVQd0J5RjNQemxTeXhpbTFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83MmRlMzUtMzM4ZC00YTQzLWI3MTkt OGI0ZDA4ZDM3YzVmLzEvcG5rV0NnUko2TFVQd0J5RjNQemxTeXhpbTFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny83MmRlMzUtMzM4ZC00YTQzLWI3MTktOGI0ZDA4ZDM3YzVm LzEvcG5rV0NnUko2TFVQd0J5RjNQemxTeXhpbTFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ2wF4whD A7qnYbw7b0WQD+5nViz+F0w0LnDzrlsmyicr+OVyxKHi3jhYWxNjWMY6Og0xVR2D m2K0XX3JAouBuDvboAqzS3T2psRqzCEzPlnUpV98gYX77Z9jgS7NaCpEkuKfwxCi +1olM2gg6Lwof5AykgkolvBphqqmy2PL6mOwWqZuRJpTYbMonVilvgj7E9VT4XK5 rwnjZMzfv6rKSGgWS/YLfR5VxqDlYAwtGY9fhIlZ/nG47KFCLvmpBgN+l1qBZFfr gsXZhkscqG8g4WU12ZJRi7E1FSzM0NnDjVJ4QY+C3nVU13LoCSez00KVPBfIRLtF afrt1DGUHakxsQ== -----END CERTIFICATE-----Generated at Sun Dec 21 21:32:01 2025 by rpki-client