This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft File: PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft (raw, json) Hash identifier: EyamN77J4qQfPcRLNa29jX4GTG31Qj46jXhm3Q5WWIU= Subject key identifier: 49:0E:A5:E1:A3:CF:9D:90:B6:DB:CA:76:F5:50:7D:FA:CB:BC:6C:B1 Authority key identifier: 3E:4C:81:30:CC:A3:0A:3F:F9:2C:9B:99:DB:54:38:DC:7F:3E:28:30 Certificate issuer: /CN=3e4c8130cca30a3ff92c9b99db5438dc7f3e2830 Certificate serial: 019B435BB663F0199CE265393B709AC64570 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PkyBMMyjCj_5LJuZ21Q43H8-KDA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft Manifest number: 14A5 Signing time: Mon 22 Dec 2025 00:00:42 +0000 Manifest this update: Mon 22 Dec 2025 00:00:42 +0000 Manifest next update: Tue 23 Dec 2025 00:00:42 +0000 Files and hashes: 1: PkyBMMyjCj_5LJuZ21Q43H8-KDA.crl (hash: ulMAigjSo6WACBbszXkwb3SFvuROWaESYgR2c/cuatM=) 2: WUGlCtJw6cpU2FG2Edk0WX6jTy8.roa (hash: JBmFXCHcBO6dIcBHrxlCuuoBtse/nvSs/yMZuy61tLs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.crl rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft rsync://rpki.ripe.net/repository/DEFAULT/PkyBMMyjCj_5LJuZ21Q43H8-KDA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5b:b6:63:f0:19:9c:e2:65:39:3b:70:9a:c6:45:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e4c8130cca30a3ff92c9b99db5438dc7f3e2830 Validity Not Before: Dec 22 00:00:42 2025 GMT Not After : Dec 23 00:00:42 2025 GMT Subject: CN=490ea5e1a3cf9d90b6dbca76f5507dfacbbc6cb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:95:69:de:57:04:50:5c:2e:99:da:ec:0a:a1: c0:ef:55:59:a9:29:b5:75:12:6a:20:7f:6c:1c:e7: 4d:e4:59:a4:0d:23:14:10:d7:79:8e:ac:7f:af:0f: 8e:6b:ef:22:ba:36:43:62:5b:55:37:0f:8a:55:ed: 5a:bf:10:68:cd:35:07:56:76:ff:ea:58:7b:d7:d8: f1:4d:19:ff:7f:cf:0e:c5:44:c4:12:72:c2:62:c3: b1:06:7c:3f:ae:bd:c0:bc:42:00:ef:2f:0e:e9:41: 02:03:c4:fd:29:13:19:11:2a:01:d8:b9:8f:63:51: 5a:f9:a8:58:d7:e6:39:e0:1f:da:56:a4:bf:08:3d: 06:56:80:d2:5f:f9:9c:0e:99:35:c2:ea:f5:cc:cc: c5:44:dc:b1:19:c9:48:0f:0b:8c:ef:99:ba:42:c9: 4b:aa:86:bd:c7:39:66:56:d7:d5:8e:72:ca:25:60: b0:36:b4:b0:b3:56:c2:de:eb:34:7f:a3:bd:dd:05: 2f:7c:ea:a8:4f:b9:43:14:ea:a9:14:6b:3a:26:2e: 73:12:61:8d:e3:25:3e:55:ee:34:81:11:2a:6e:db: f5:1c:d9:33:63:f7:ce:eb:df:b7:37:36:c6:b6:a8: 53:6b:89:28:3f:a3:c9:e2:09:30:e1:a1:9d:60:2c: 05:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:0E:A5:E1:A3:CF:9D:90:B6:DB:CA:76:F5:50:7D:FA:CB:BC:6C:B1 X509v3 Authority Key Identifier: keyid:3E:4C:81:30:CC:A3:0A:3F:F9:2C:9B:99:DB:54:38:DC:7F:3E:28:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkyBMMyjCj_5LJuZ21Q43H8-KDA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:9d:ba:34:81:cc:15:88:a5:0b:e2:94:63:de:d7:f8:ad:42: 40:50:e9:af:e5:b3:c0:d6:32:b2:73:ab:ed:a7:14:fe:2e:e2: ba:e9:77:38:2d:a2:ae:77:85:de:16:e6:29:1f:f7:5a:b4:e4: 01:4c:53:89:cb:17:18:3e:c7:05:25:94:69:09:07:3c:42:33: 64:ec:dc:32:a5:47:9c:c3:58:53:75:8d:6f:51:3b:aa:d3:e1: 98:55:03:b9:82:5d:ea:3b:60:9d:43:d8:6c:07:5d:e0:29:4f: e0:07:f8:3e:d1:69:53:7c:f0:ab:0c:28:15:90:f5:48:26:38: 02:83:ae:a7:77:41:4c:9f:52:7a:e0:60:5d:9e:33:31:d0:ff: 83:e2:45:36:9c:76:84:7f:a7:9c:01:f4:08:b1:5c:4e:99:d8: d2:80:04:01:62:8c:54:c4:1c:bf:65:47:e1:23:b0:06:07:89: 28:65:57:33:c0:b3:e7:72:41:14:2b:5d:0f:78:a8:b3:7b:d8: a2:52:0b:29:61:e0:fc:57:6b:8b:b1:41:18:ac:a1:29:46:b5: 12:2d:c7:07:59:00:bb:86:76:8f:25:e5:43:95:4f:ee:92:76: c3:6a:dc:33:dd:c9:ef:68:6f:15:ca:c0:b2:7e:b5:9e:4f:f7: 6d:bf:4f:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDW7Zj8Bmc4mU5O3CaxkVwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNGM4MTMwY2NhMzBhM2ZmOTJjOWI5OWRiNTQzOGRjN2Yz ZTI4MzAwHhcNMjUxMjIyMDAwMDQyWhcNMjUxMjIzMDAwMDQyWjAzMTEwLwYDVQQD Eyg0OTBlYTVlMWEzY2Y5ZDkwYjZkYmNhNzZmNTUwN2RmYWNiYmM2Y2IxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5Vp3lcEUFwumdrsCqHA71VZqSm1 dRJqIH9sHOdN5FmkDSMUENd5jqx/rw+Oa+8iujZDYltVNw+KVe1avxBozTUHVnb/ 6lh719jxTRn/f88OxUTEEnLCYsOxBnw/rr3AvEIA7y8O6UECA8T9KRMZESoB2LmP Y1Fa+ahY1+Y54B/aVqS/CD0GVoDSX/mcDpk1wur1zMzFRNyxGclIDwuM75m6QslL qoa9xzlmVtfVjnLKJWCwNrSws1bC3us0f6O93QUvfOqoT7lDFOqpFGs6Ji5zEmGN 4yU+Ve40gREqbtv1HNkzY/fO69+3NzbGtqhTa4koP6PJ4gkw4aGdYCwFywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEkOpeGjz52QttvKdvVQffrLvGyxMB8GA1UdIwQY MBaAFD5MgTDMowo/+SybmdtUONx/PigwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGt5Qk1NeWpDal81TEp1WjIxUTQzSDgtS0RBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS82YjA1MGYtYzI4Mi00YzUzLWIxNTEt ODNhZGIyMGFmMDBmLzEvUGt5Qk1NeWpDal81TEp1WjIxUTQzSDgtS0RBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS82YjA1MGYtYzI4Mi00YzUzLWIxNTEtODNhZGIyMGFmMDBm LzEvUGt5Qk1NeWpDal81TEp1WjIxUTQzSDgtS0RBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHp26NIHM FYilC+KUY97X+K1CQFDpr+WzwNYysnOr7acU/i7iuul3OC2irneF3hbmKR/3WrTk AUxTicsXGD7HBSWUaQkHPEIzZOzcMqVHnMNYU3WNb1E7qtPhmFUDuYJd6jtgnUPY bAdd4ClP4Af4PtFpU3zwqwwoFZD1SCY4AoOup3dBTJ9SeuBgXZ4zMdD/g+JFNpx2 hH+nnAH0CLFcTpnY0oAEAWKMVMQcv2VH4SOwBgeJKGVXM8Cz53JBFCtdD3ios3vY olILKWHg/Fdri7FBGKyhKUa1Ei3HB1kAu4Z2jyXlQ5VP7pJ2w2rcM93J72hvFcrA sn61nk/3bb9P4Q== -----END CERTIFICATE-----Generated at Mon Dec 22 02:20:49 2025 by rpki-client