This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft File: pk-mS7PC3keIMGMSxlLedJ7JNRc.mft (raw, json) Hash identifier: YBy/a+Y6DOj3ITISHxYvXd9Xux4RxTQ/bswHPCh/oUs= Subject key identifier: 3B:4F:81:2B:69:F1:C7:F0:9C:9D:D2:CD:06:BF:BA:E7:50:11:63:E5 Authority key identifier: A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17 Certificate issuer: /CN=a64fa64bb3c2de4788306312c652de749ec93517 Certificate serial: 019B34C624FD02EF6DB1D126902C9AE5FDE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft Manifest number: 10C3 Signing time: Fri 19 Dec 2025 04:02:39 +0000 Manifest this update: Fri 19 Dec 2025 04:02:39 +0000 Manifest next update: Sat 20 Dec 2025 04:02:39 +0000 Files and hashes: 1: DGbM08ZTsAqYw2-cwkwYARO53tE.roa (hash: vRmKPjIDxHKM6g2DoHk9sDKKAGwsNzCt7i6bkh/HxXk=) 2: pk-mS7PC3keIMGMSxlLedJ7JNRc.crl (hash: mR9AKWMyWImcTFYvPI5JdPP6rQORBu3BhruKTv0cj74=) 3: rXPM57-D6wTVhLckZD7CZVwkBW8.roa (hash: fUjK4fhETtHvQdYsLgWmfiWiFboo/MkwlvPD3alJWYc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:02:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c6:24:fd:02:ef:6d:b1:d1:26:90:2c:9a:e5:fd:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a64fa64bb3c2de4788306312c652de749ec93517 Validity Not Before: Dec 19 04:02:39 2025 GMT Not After : Dec 20 04:02:39 2025 GMT Subject: CN=3b4f812b69f1c7f09c9dd2cd06bfbae7501163e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6a:fc:29:94:7a:9b:b8:c3:38:dd:ef:ce:e1: 53:9e:31:34:d6:d6:fe:be:d2:ae:0a:5d:52:6c:47: 7f:51:a5:7e:0b:2f:27:05:96:68:cd:58:5c:c0:cf: f0:3c:9e:18:7f:59:d9:32:34:da:8a:4d:a2:42:35: b6:cb:0b:2f:d0:f5:d3:49:c2:11:65:93:6d:36:1f: 61:90:dc:7b:c3:a7:4b:e5:3a:98:7f:e9:f2:64:50: b2:69:0e:75:df:31:7f:5a:50:b4:f0:45:b2:5c:98: bd:43:62:39:19:8a:69:38:f6:dc:99:95:e9:f5:a2: c1:5a:af:e8:b7:e8:6e:61:bf:9b:f8:74:3b:d7:bf: ed:74:92:33:11:1a:13:0c:fc:ee:4f:8f:45:9a:07: d1:90:59:19:21:b2:dc:6e:5d:5d:84:5e:7e:6b:bb: 70:ef:a0:a2:24:c8:87:d7:10:86:81:38:7d:c5:da: 86:0f:83:a9:92:cf:cc:0b:ac:d2:3b:10:a8:20:ec: 64:ad:bc:14:5f:9e:54:97:5e:eb:a6:80:27:c7:d5: 3e:ea:a3:39:b9:46:9c:81:29:6c:c6:28:f2:81:9b: 8e:bd:2b:c7:51:2d:c2:d2:25:65:da:84:9f:fb:4c: 7b:23:f7:f7:9d:b7:49:75:11:cf:08:86:f5:34:57: aa:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:4F:81:2B:69:F1:C7:F0:9C:9D:D2:CD:06:BF:BA:E7:50:11:63:E5 X509v3 Authority Key Identifier: keyid:A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:c8:46:70:1d:cb:26:c7:1d:9f:59:55:cf:5a:2c:55:21:a3: ac:6a:9c:5c:58:62:82:90:92:36:bb:91:59:5d:a4:c8:f1:99: 37:2b:d8:77:c7:17:e0:de:22:f0:2f:0b:07:a9:8c:51:f4:39: c5:5f:93:3e:18:26:a9:49:a5:08:33:4a:57:6f:3a:a7:04:b6: 2a:59:da:c6:ae:ea:9c:59:f7:af:5d:a6:62:f8:47:ea:ac:7c: 9a:e7:ea:b5:9c:84:fd:ab:74:4e:49:56:72:18:e2:95:20:3c: 9e:e1:52:b5:c9:89:f7:8c:23:7d:91:43:13:77:69:32:dd:f7: b9:58:a8:f2:b8:8a:33:e8:9b:8d:0a:27:4f:9c:50:0d:c2:b6: 3b:5e:fc:c8:70:46:9c:15:e2:22:15:5a:bb:ef:89:b0:a3:9a: 24:2b:55:95:b4:15:74:c8:67:42:78:a6:70:66:96:bf:77:7b: b3:c2:26:f0:87:e2:1e:18:a2:2b:6a:dd:0b:ad:fe:78:bb:9d: fc:1e:14:41:e3:47:2b:52:9a:df:b0:8c:50:a7:27:f2:c5:53: c9:37:05:e2:4b:ac:b3:b0:a8:07:a6:81:a7:38:c8:7f:08:80: a3:89:36:e7:81:b2:7d:68:e1:09:03:39:70:20:5c:71:48:91: 64:92:33:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xiT9Au9tsdEmkCya5f3iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NGZhNjRiYjNjMmRlNDc4ODMwNjMxMmM2NTJkZTc0OWVj OTM1MTcwHhcNMjUxMjE5MDQwMjM5WhcNMjUxMjIwMDQwMjM5WjAzMTEwLwYDVQQD EygzYjRmODEyYjY5ZjFjN2YwOWM5ZGQyY2QwNmJmYmFlNzUwMTE2M2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGr8KZR6m7jDON3vzuFTnjE01tb+ vtKuCl1SbEd/UaV+Cy8nBZZozVhcwM/wPJ4Yf1nZMjTaik2iQjW2ywsv0PXTScIR ZZNtNh9hkNx7w6dL5TqYf+nyZFCyaQ513zF/WlC08EWyXJi9Q2I5GYppOPbcmZXp 9aLBWq/ot+huYb+b+HQ717/tdJIzERoTDPzuT49FmgfRkFkZIbLcbl1dhF5+a7tw 76CiJMiH1xCGgTh9xdqGD4Opks/MC6zSOxCoIOxkrbwUX55Ul17rpoAnx9U+6qM5 uUacgSlsxijygZuOvSvHUS3C0iVl2oSf+0x7I/f3nbdJdRHPCIb1NFeqOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDtPgStp8cfwnJ3SzQa/uudQEWPlMB8GA1UdIwQY MBaAFKZPpkuzwt5HiDBjEsZS3nSeyTUXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGstbVM3UEMza2VJTUdNU3hsTGVkSjdKTlJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80MjdkYjItYzYxMy00ZTg0LWIzOGMt OTA1NjliYzZjYTU0LzEvcGstbVM3UEMza2VJTUdNU3hsTGVkSjdKTlJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80MjdkYjItYzYxMy00ZTg0LWIzOGMtOTA1NjliYzZjYTU0 LzEvcGstbVM3UEMza2VJTUdNU3hsTGVkSjdKTlJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2MhGcB3L Jscdn1lVz1osVSGjrGqcXFhigpCSNruRWV2kyPGZNyvYd8cX4N4i8C8LB6mMUfQ5 xV+TPhgmqUmlCDNKV286pwS2Klnaxq7qnFn3r12mYvhH6qx8mufqtZyE/at0TklW chjilSA8nuFStcmJ94wjfZFDE3dpMt33uVio8riKM+ibjQonT5xQDcK2O178yHBG nBXiIhVau++JsKOaJCtVlbQVdMhnQnimcGaWv3d7s8Im8IfiHhiiK2rdC63+eLud /B4UQeNHK1Ka37CMUKcn8sVTyTcF4kuss7CoB6aBpzjIfwiAo4k254GyfWjhCQM5 cCBccUiRZJIzXw== -----END CERTIFICATE-----Generated at Fri Dec 19 13:30:18 2025 by rpki-client