This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.mft File: pkWmgpYFxtWOTgwadHTAo_MGjW4.mft (raw, json) Hash identifier: Udq2YQcqNsjgWJk34gVU5jSlTsSvqSwVKbGMFmlbIrI= Subject key identifier: F5:94:2D:92:D4:13:E5:66:10:53:74:48:F4:C0:16:BC:9A:5F:91:5B Authority key identifier: A6:45:A6:82:96:05:C6:D5:8E:4E:0C:1A:74:74:C0:A3:F3:06:8D:6E Certificate issuer: /CN=a645a6829605c6d58e4e0c1a7474c0a3f3068d6e Certificate serial: 019B292E092B8864948C5150B6840022CA41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkWmgpYFxtWOTgwadHTAo_MGjW4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.mft Manifest number: 13 Signing time: Tue 16 Dec 2025 22:00:41 +0000 Manifest this update: Tue 16 Dec 2025 22:00:41 +0000 Manifest next update: Wed 17 Dec 2025 22:00:41 +0000 Files and hashes: 1: 4YqUfZCeiEUJuCY-psjsNuWtksw.asa (hash: sR1+4a2yNEE9K27sk1iLMEzEGkqFA/HBPoWU5NgO9QU=) 2: pkWmgpYFxtWOTgwadHTAo_MGjW4.crl (hash: bH//N8GVWyOI2QMlxZPZuEzgUZexZ+Zqtx0UAxIeGE8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.mft rsync://rpki.ripe.net/repository/DEFAULT/pkWmgpYFxtWOTgwadHTAo_MGjW4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 22:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:2e:09:2b:88:64:94:8c:51:50:b6:84:00:22:ca:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a645a6829605c6d58e4e0c1a7474c0a3f3068d6e Validity Not Before: Dec 16 22:00:41 2025 GMT Not After : Dec 17 22:00:41 2025 GMT Subject: CN=f5942d92d413e56610537448f4c016bc9a5f915b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d5:ec:77:da:4a:8f:90:9a:8d:a9:b4:30:0a: d2:a9:f8:9e:e5:4e:50:3a:72:dc:31:0d:4e:f8:64: c7:45:7d:18:82:27:b8:1e:31:ee:3f:54:53:b7:87: ed:05:8f:91:c3:d1:cf:26:8b:66:95:4f:cc:f9:76: 19:0b:54:13:63:4e:f1:49:d0:78:c6:3a:bd:09:73: 6a:58:3a:93:2a:f5:6a:1c:7c:23:94:f0:55:6f:a2: 49:3c:06:53:cf:f7:6b:43:46:5c:5a:38:ef:b9:fa: f7:62:bd:9c:58:4c:b4:ca:30:75:91:09:75:05:5a: 0c:4a:3d:e3:b2:bb:9e:3c:bd:fb:99:90:66:3c:5e: 86:2f:76:05:e9:9f:0f:d3:2d:ac:2a:35:b7:7b:0c: b2:54:51:cd:fd:7e:49:7b:75:f1:1a:cd:1c:30:22: 43:25:48:9d:99:66:6b:d9:7b:e8:0f:0d:2b:69:6d: 92:6d:67:16:38:13:e4:20:e9:5a:e9:0f:af:8b:8c: 22:e8:3c:0f:68:c5:81:e4:09:fb:ec:77:9f:34:9f: 96:58:ed:ff:ff:9c:ac:95:9c:aa:86:34:4b:f9:a0: 86:62:55:99:34:2f:8b:90:09:1b:da:a4:86:44:14: 85:14:d4:a2:75:b6:0d:dc:bd:ad:e5:1e:58:20:cd: 43:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:94:2D:92:D4:13:E5:66:10:53:74:48:F4:C0:16:BC:9A:5F:91:5B X509v3 Authority Key Identifier: keyid:A6:45:A6:82:96:05:C6:D5:8E:4E:0C:1A:74:74:C0:A3:F3:06:8D:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkWmgpYFxtWOTgwadHTAo_MGjW4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:e2:bf:75:48:38:b8:97:91:84:6d:27:98:89:a2:ce:0f:b5: 33:c1:0a:50:88:53:9d:79:f8:a5:77:32:38:cd:d0:0f:c5:33: e1:34:58:a1:f9:52:79:35:a5:1c:00:e0:51:c2:fe:98:fd:0e: ea:50:27:82:de:2f:95:93:40:ed:c8:4a:f0:53:0c:62:fe:ec: 99:ba:6e:6c:28:19:4c:05:71:9f:e5:e7:ff:6a:63:be:01:fb: 42:b8:ab:74:b0:b8:2b:29:f7:7a:9f:c8:b3:e7:9d:e9:f0:a1: 46:27:7b:5a:ac:a7:a5:e3:17:d5:f3:6a:a2:2a:a7:b0:e8:fa: f4:b8:d2:ad:98:90:82:56:7b:57:e8:42:f6:45:84:b8:b0:8a: 2f:e1:f7:03:6d:16:4d:23:ce:99:a8:32:7b:c1:f9:e9:ca:42: f1:b3:68:61:53:df:ad:d2:28:12:7c:48:d3:82:a1:78:63:a9: 09:63:a8:92:41:19:8e:11:26:80:8f:b9:de:52:f4:5b:15:71: 22:f9:ca:ac:95:12:02:1e:ba:3c:28:a1:ab:1f:85:95:77:5f: 5b:19:57:06:3c:f0:8c:a7:88:bb:e9:1b:20:84:97:d7:7d:b0: 58:ae:31:7b:d6:f9:04:31:fc:cc:2c:36:eb:9b:4a:ce:bf:db: 37:d4:3f:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZspLgkriGSUjFFQtoQAIspBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NDVhNjgyOTYwNWM2ZDU4ZTRlMGMxYTc0NzRjMGEzZjMw NjhkNmUwHhcNMjUxMjE2MjIwMDQxWhcNMjUxMjE3MjIwMDQxWjAzMTEwLwYDVQQD EyhmNTk0MmQ5MmQ0MTNlNTY2MTA1Mzc0NDhmNGMwMTZiYzlhNWY5MTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NXsd9pKj5Cajam0MArSqfie5U5Q OnLcMQ1O+GTHRX0Ygie4HjHuP1RTt4ftBY+Rw9HPJotmlU/M+XYZC1QTY07xSdB4 xjq9CXNqWDqTKvVqHHwjlPBVb6JJPAZTz/drQ0ZcWjjvufr3Yr2cWEy0yjB1kQl1 BVoMSj3jsruePL37mZBmPF6GL3YF6Z8P0y2sKjW3ewyyVFHN/X5Je3XxGs0cMCJD JUidmWZr2XvoDw0raW2SbWcWOBPkIOla6Q+vi4wi6DwPaMWB5An77HefNJ+WWO3/ /5yslZyqhjRL+aCGYlWZNC+LkAkb2qSGRBSFFNSidbYN3L2t5R5YIM1DGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPWULZLUE+VmEFN0SPTAFryaX5FbMB8GA1UdIwQY MBaAFKZFpoKWBcbVjk4MGnR0wKPzBo1uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGtXbWdwWUZ4dFdPVGd3YWRIVEFvX01Halc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9lNDIwOTctNTU2MS00YjdlLTk0NTgt MmQ4ZjNiNmUxYjk0LzEvcGtXbWdwWUZ4dFdPVGd3YWRIVEFvX01Halc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9lNDIwOTctNTU2MS00YjdlLTk0NTgtMmQ4ZjNiNmUxYjk0 LzEvcGtXbWdwWUZ4dFdPVGd3YWRIVEFvX01Halc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASeK/dUg4 uJeRhG0nmImizg+1M8EKUIhTnXn4pXcyOM3QD8Uz4TRYoflSeTWlHADgUcL+mP0O 6lAngt4vlZNA7chK8FMMYv7smbpubCgZTAVxn+Xn/2pjvgH7QrirdLC4Kyn3ep/I s+ed6fChRid7WqynpeMX1fNqoiqnsOj69LjSrZiQglZ7V+hC9kWEuLCKL+H3A20W TSPOmagye8H56cpC8bNoYVPfrdIoEnxI04KheGOpCWOokkEZjhEmgI+53lL0WxVx IvnKrJUSAh66PCihqx+FlXdfWxlXBjzwjKeIu+kbIISX132wWK4xe9b5BDH8zCw2 65tKzr/bN9Q/3w== -----END CERTIFICATE-----Generated at Wed Dec 17 06:39:23 2025 by rpki-client