This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft File: PwKJr_qvCA4lJxjj9Eidop2fpVo.mft (raw, json) Hash identifier: mMpay1JuvOtuPRjetEzlncXPKn1FYFRiIsdk+BgjNYk= Subject key identifier: 26:F5:E1:F8:51:C5:22:8F:BF:0D:6F:4C:7A:32:76:8D:94:3E:BA:FF Authority key identifier: 3F:02:89:AF:FA:AF:08:0E:25:27:18:E3:F4:48:9D:A2:9D:9F:A5:5A Certificate issuer: /CN=3f0289affaaf080e252718e3f4489da29d9fa55a Certificate serial: 019B08C764791926CD404A5674D8D8D4E3D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft Manifest number: 176E Signing time: Wed 10 Dec 2025 15:00:43 +0000 Manifest this update: Wed 10 Dec 2025 15:00:43 +0000 Manifest next update: Thu 11 Dec 2025 15:00:43 +0000 Files and hashes: 1: 4vBZmgBMnVCe-FhubPi7IwTZR7U.roa (hash: pC9viwrfXhDTa2hNSC3okPZXSzJEUX3jBZCttoAMuYA=) 2: PwKJr_qvCA4lJxjj9Eidop2fpVo.crl (hash: VjKkHQDSS8vnASTQ0Voz3z4rRJNy6QeIigm/OPuKebA=) 3: liO3Dk9HW5maOXYINfx-lTJgFC0.roa (hash: q4LEiFG0iKJd0o8pxD+sRsl85pA8hcAalAJZcMAOiLU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.crl rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:c7:64:79:19:26:cd:40:4a:56:74:d8:d8:d4:e3:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f0289affaaf080e252718e3f4489da29d9fa55a Validity Not Before: Dec 10 15:00:43 2025 GMT Not After : Dec 11 15:00:43 2025 GMT Subject: CN=26f5e1f851c5228fbf0d6f4c7a32768d943ebaff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cb:7c:bf:a1:ce:eb:f6:5f:12:a7:7c:e2:9f: ab:fe:71:a4:0f:ae:9f:4a:d5:71:b4:56:07:61:3a: 5a:e2:c2:64:5e:10:f2:b0:54:2d:61:0d:4e:00:f9: c6:d4:0c:5e:aa:05:ae:c1:37:6e:86:81:10:8b:da: ce:cf:d6:df:66:0e:dc:55:0a:a7:f6:56:9d:80:74: 61:d9:18:7c:0c:e3:ed:dc:ab:17:31:e3:6d:00:90: 52:cb:82:f7:34:ec:d4:41:d1:5a:4c:cc:24:b1:ba: 4b:fe:fa:40:af:99:6d:f6:61:35:8e:d8:23:8e:6e: 82:2a:7b:9e:53:a0:bc:00:8b:01:f5:77:cf:c7:dc: fb:bd:d2:63:44:e3:e0:a7:7b:47:01:25:4b:5d:72: 48:01:b3:0d:2e:2e:48:42:c8:3a:52:b6:a9:61:59: 9f:34:13:f9:00:c6:15:37:68:91:c3:66:73:ba:2d: fc:1a:e3:4b:52:b9:d4:10:ee:da:e4:aa:a2:e6:69: c9:90:d5:70:e6:fa:d9:f3:1c:71:f1:8b:ca:f9:64: 8f:c7:b8:81:51:66:a9:17:de:4b:ae:c9:e5:fc:44: a5:76:ff:bd:ad:80:b4:f0:bd:25:62:d0:9a:e2:42: e6:a2:79:9e:d8:d9:78:c5:c7:92:f1:b8:b0:c3:c6: ed:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:F5:E1:F8:51:C5:22:8F:BF:0D:6F:4C:7A:32:76:8D:94:3E:BA:FF X509v3 Authority Key Identifier: keyid:3F:02:89:AF:FA:AF:08:0E:25:27:18:E3:F4:48:9D:A2:9D:9F:A5:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:bc:c6:28:a1:e5:73:fa:1b:36:c9:44:8e:ef:ff:cf:13:bf: 21:74:45:43:f6:4c:86:09:95:5b:0d:11:fc:6a:ba:d2:5a:b9: 01:96:f2:34:b3:77:aa:4e:7a:fe:2d:cb:29:27:27:3f:65:36: e0:3f:b3:e0:20:66:cf:b3:60:46:95:f2:49:97:15:4e:4d:e2: 82:33:d2:04:bf:41:b1:de:b2:19:97:d1:0a:99:88:6a:04:1b: 5f:28:ce:b6:d8:59:79:c7:68:30:5c:23:0c:4c:c5:86:a6:36: 5d:82:d1:ae:eb:0c:8a:d7:40:0f:1d:75:e7:ee:52:93:33:52: 79:d7:2b:9e:17:e4:9e:f4:41:d9:ea:95:f2:7d:3f:62:b7:27: c3:8c:05:e9:a0:bd:5a:ab:f9:37:39:eb:a7:a4:97:a9:3b:83: 15:84:75:3c:ef:79:8e:a6:b6:64:83:25:cf:ca:23:a3:0c:c4: 15:ff:5d:99:7d:39:95:c2:f6:dc:25:07:d8:a0:c3:b5:68:61: 96:81:eb:11:02:98:6b:03:3f:32:2c:67:9d:3f:b6:58:72:af: 8f:c4:fc:e8:44:00:60:a6:0c:52:a7:44:cc:bb:2e:00:fd:23: 5d:65:a0:04:78:ec:3d:b3:a4:a2:07:a8:74:af:2f:43:91:e1: 62:aa:a5:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsIx2R5GSbNQEpWdNjY1OPSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmMDI4OWFmZmFhZjA4MGUyNTI3MThlM2Y0NDg5ZGEyOWQ5 ZmE1NWEwHhcNMjUxMjEwMTUwMDQzWhcNMjUxMjExMTUwMDQzWjAzMTEwLwYDVQQD EygyNmY1ZTFmODUxYzUyMjhmYmYwZDZmNGM3YTMyNzY4ZDk0M2ViYWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8t8v6HO6/ZfEqd84p+r/nGkD66f StVxtFYHYTpa4sJkXhDysFQtYQ1OAPnG1AxeqgWuwTduhoEQi9rOz9bfZg7cVQqn 9ladgHRh2Rh8DOPt3KsXMeNtAJBSy4L3NOzUQdFaTMwksbpL/vpAr5lt9mE1jtgj jm6CKnueU6C8AIsB9XfPx9z7vdJjROPgp3tHASVLXXJIAbMNLi5IQsg6UrapYVmf NBP5AMYVN2iRw2Zzui38GuNLUrnUEO7a5Kqi5mnJkNVw5vrZ8xxx8YvK+WSPx7iB UWapF95Lrsnl/ESldv+9rYC08L0lYtCa4kLmonme2Nl4xceS8biww8btQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCb14fhRxSKPvw1vTHoydo2UPrr/MB8GA1UdIwQY MBaAFD8Cia/6rwgOJScY4/RInaKdn6VaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHdLSnJfcXZDQTRsSnhqajlFaWRvcDJmcFZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85ZmNjY2YtZTdhYS00YzQ0LTk1OTAt MWNmMGZlYWFhM2VhLzEvUHdLSnJfcXZDQTRsSnhqajlFaWRvcDJmcFZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni85ZmNjY2YtZTdhYS00YzQ0LTk1OTAtMWNmMGZlYWFhM2Vh LzEvUHdLSnJfcXZDQTRsSnhqajlFaWRvcDJmcFZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkbzGKKHl c/obNslEju//zxO/IXRFQ/ZMhgmVWw0R/Gq60lq5AZbyNLN3qk56/i3LKScnP2U2 4D+z4CBmz7NgRpXySZcVTk3igjPSBL9Bsd6yGZfRCpmIagQbXyjOtthZecdoMFwj DEzFhqY2XYLRrusMitdADx115+5SkzNSedcrnhfknvRB2eqV8n0/Yrcnw4wF6aC9 Wqv5Nznrp6SXqTuDFYR1PO95jqa2ZIMlz8ojowzEFf9dmX05lcL23CUH2KDDtWhh loHrEQKYawM/MixnnT+2WHKvj8T86EQAYKYMUqdEzLsuAP0jXWWgBHjsPbOkogeo dK8vQ5HhYqqlEA== -----END CERTIFICATE-----Generated at Wed Dec 10 18:27:00 2025 by rpki-client