This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft File: PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft (raw, json) Hash identifier: IsZJ6GJCgGPfD+0Zrqlz0hXvcRSQMwmVFlZy8wMJsYk= Subject key identifier: 9F:A2:F3:C2:16:DA:F3:05:70:85:A0:26:7C:70:13:3E:5A:53:4D:B5 Authority key identifier: 3C:A1:FA:BE:9F:0B:3E:97:7F:8E:08:29:C0:BF:5F:08:78:38:46:68 Certificate issuer: /CN=3ca1fabe9f0b3e977f8e0829c0bf5f0878384668 Certificate serial: 019B2E54B90E3321C825D09C787D1CBFF4EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKH6vp8LPpd_jggpwL9fCHg4Rmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft Manifest number: 1781 Signing time: Wed 17 Dec 2025 22:01:02 +0000 Manifest this update: Wed 17 Dec 2025 22:01:02 +0000 Manifest next update: Thu 18 Dec 2025 22:01:02 +0000 Files and hashes: 1: 3DgJf8B6gHn6-h7mtLpM7uiT9zs.roa (hash: bNvleSp/4QB52V4DZ5fxsf4u+utsXgrzdigeABa48Cw=) 2: PKH6vp8LPpd_jggpwL9fCHg4Rmg.crl (hash: aCuTDDfRc3fDjql0M7Gw5fpB+k1FFBD7LBI3fkqC/kM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.crl rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft rsync://rpki.ripe.net/repository/DEFAULT/PKH6vp8LPpd_jggpwL9fCHg4Rmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 22:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:54:b9:0e:33:21:c8:25:d0:9c:78:7d:1c:bf:f4:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ca1fabe9f0b3e977f8e0829c0bf5f0878384668 Validity Not Before: Dec 17 22:01:02 2025 GMT Not After : Dec 18 22:01:02 2025 GMT Subject: CN=9fa2f3c216daf3057085a0267c70133e5a534db5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:66:c7:64:5e:36:9e:75:f9:09:59:97:17:e8: dd:b5:d8:92:3d:24:30:09:86:27:d1:8c:36:ed:f6: 57:81:8f:23:d7:ee:6f:d7:b8:89:da:be:88:79:81: da:6d:4f:60:ac:ff:05:99:87:20:7e:73:47:a1:14: f2:99:f0:79:b0:88:26:40:5f:18:be:7e:84:f5:65: bf:66:eb:d4:dd:66:0e:f8:c1:cc:e7:2c:ae:59:32: 64:e2:cb:1f:68:57:01:5d:6d:79:c6:de:1d:4a:f9: 50:00:77:2a:56:17:80:c8:cd:59:53:63:68:fb:b7: b8:d7:fb:31:fd:27:e8:14:94:ac:bd:92:05:b4:05: 80:92:58:d0:40:7d:16:ee:9f:4b:16:49:f5:41:44: 94:e3:f7:5b:af:78:0b:b2:03:98:e2:1d:7b:da:f6: f2:f7:8d:b4:39:25:67:eb:87:42:10:4e:e1:2c:cf: 5a:09:da:dd:ae:73:b7:b9:f4:4e:0b:51:ef:17:dc: dd:5d:ae:64:7b:43:6e:94:58:75:b7:f7:12:ae:24: bf:d0:df:54:c4:32:e0:a7:e8:4c:d9:48:b9:3e:ce: 11:3e:e8:0c:52:e0:30:1c:a9:cf:bc:ce:e3:ea:7b: 48:45:19:61:42:1c:21:7a:b6:c7:e6:f2:60:2d:3c: de:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:A2:F3:C2:16:DA:F3:05:70:85:A0:26:7C:70:13:3E:5A:53:4D:B5 X509v3 Authority Key Identifier: keyid:3C:A1:FA:BE:9F:0B:3E:97:7F:8E:08:29:C0:BF:5F:08:78:38:46:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKH6vp8LPpd_jggpwL9fCHg4Rmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:b0:2e:c8:09:ad:f4:c4:bf:dc:94:4b:ee:20:45:88:38:60: ed:11:20:99:4a:76:74:8d:9e:cc:30:03:9e:40:85:ad:73:9d: 6a:26:19:bd:b0:23:f5:ef:6c:a9:78:70:a8:f0:8d:e0:bf:38: 03:cd:8c:1b:ef:9c:36:be:77:88:50:48:e4:40:16:c9:a4:b6: 52:2c:0e:81:92:69:25:a8:c8:5e:34:3f:47:9b:4d:4d:8a:a9: 5f:a3:d9:d5:e5:ca:85:f2:5d:eb:2b:47:35:a7:61:c4:7f:db: ec:fc:e3:d3:f0:f6:fb:88:92:1d:46:ae:44:67:c9:49:58:61: 70:96:c9:78:06:9c:ec:c0:a2:21:da:7c:62:74:0c:3e:60:cf: 12:44:94:47:cd:14:1c:8a:0a:d4:58:19:07:0d:b8:46:26:e6: d4:62:7a:77:10:a7:57:2c:63:fd:4e:83:9d:f6:2d:35:26:fc: 04:08:64:e3:54:33:ec:fc:74:e7:2e:ce:6f:9e:4c:2f:f3:d7: 1d:ff:35:ad:54:8c:e0:a4:34:64:ab:91:43:d3:41:42:97:d3: 00:41:e5:38:37:d9:80:13:73:9b:c9:0b:73:af:71:9d:8d:61: 08:dc:6e:a9:ac:45:ac:8a:66:7c:0b:9a:94:69:48:7a:dc:84: 3f:b6:93:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuVLkOMyHIJdCceH0cv/TvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjYTFmYWJlOWYwYjNlOTc3ZjhlMDgyOWMwYmY1ZjA4Nzgz ODQ2NjgwHhcNMjUxMjE3MjIwMTAyWhcNMjUxMjE4MjIwMTAyWjAzMTEwLwYDVQQD Eyg5ZmEyZjNjMjE2ZGFmMzA1NzA4NWEwMjY3YzcwMTMzZTVhNTM0ZGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8mbHZF42nnX5CVmXF+jdtdiSPSQw CYYn0Yw27fZXgY8j1+5v17iJ2r6IeYHabU9grP8FmYcgfnNHoRTymfB5sIgmQF8Y vn6E9WW/ZuvU3WYO+MHM5yyuWTJk4ssfaFcBXW15xt4dSvlQAHcqVheAyM1ZU2No +7e41/sx/SfoFJSsvZIFtAWAkljQQH0W7p9LFkn1QUSU4/dbr3gLsgOY4h172vby 9420OSVn64dCEE7hLM9aCdrdrnO3ufROC1HvF9zdXa5ke0NulFh1t/cSriS/0N9U xDLgp+hM2Ui5Ps4RPugMUuAwHKnPvM7j6ntIRRlhQhwherbH5vJgLTzeuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ+i88IW2vMFcIWgJnxwEz5aU021MB8GA1UdIwQY MBaAFDyh+r6fCz6Xf44IKcC/Xwh4OEZoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEtINnZwOExQcGRfamdncHdMOWZDSGc0Um1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9mN2ZlOWItNjlhZS00MjA2LThkNjYt ZjY2MGE1N2UyZGQ1LzEvUEtINnZwOExQcGRfamdncHdMOWZDSGc0Um1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9mN2ZlOWItNjlhZS00MjA2LThkNjYtZjY2MGE1N2UyZGQ1 LzEvUEtINnZwOExQcGRfamdncHdMOWZDSGc0Um1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJLAuyAmt 9MS/3JRL7iBFiDhg7REgmUp2dI2ezDADnkCFrXOdaiYZvbAj9e9sqXhwqPCN4L84 A82MG++cNr53iFBI5EAWyaS2UiwOgZJpJajIXjQ/R5tNTYqpX6PZ1eXKhfJd6ytH NadhxH/b7Pzj0/D2+4iSHUauRGfJSVhhcJbJeAac7MCiIdp8YnQMPmDPEkSUR80U HIoK1FgZBw24Ribm1GJ6dxCnVyxj/U6DnfYtNSb8BAhk41Qz7Px05y7Ob55ML/PX Hf81rVSM4KQ0ZKuRQ9NBQpfTAEHlODfZgBNzm8kLc69xnY1hCNxuqaxFrIpmfAua lGlIetyEP7aTYg== -----END CERTIFICATE-----Generated at Thu Dec 18 06:33:54 2025 by rpki-client