This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft File: pstoJGZQvVjCKirgCtBmF4qB628.mft (raw, json) Hash identifier: OCqkHUIV6qTTtGKaBvRm2QpQ4++l9ibngQpW1WylBs0= Subject key identifier: B0:23:F9:30:1A:A9:C7:A9:E8:8E:5B:C7:E8:A4:EF:B9:1C:DC:16:42 Authority key identifier: A6:CB:68:24:66:50:BD:58:C2:2A:2A:E0:0A:D0:66:17:8A:81:EB:6F Certificate issuer: /CN=a6cb68246650bd58c22a2ae00ad066178a81eb6f Certificate serial: 019B0E26B0EB269E50ECCAF60409CCF197C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pstoJGZQvVjCKirgCtBmF4qB628.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft Manifest number: 0FED Signing time: Thu 11 Dec 2025 16:02:55 +0000 Manifest this update: Thu 11 Dec 2025 16:02:55 +0000 Manifest next update: Fri 12 Dec 2025 16:02:55 +0000 Files and hashes: 1: PUpMBlY3y3LiEyvtN3mwZr7fC6o.roa (hash: 83wzwEaj6Lu4SVxQ13wsJpRArhNJgziukBIbApzP3jM=) 2: pstoJGZQvVjCKirgCtBmF4qB628.crl (hash: dTNQPv8j/wSvKeG2xVoBLRTIaXs49KxHdV5V7H/X1fI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.crl rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft rsync://rpki.ripe.net/repository/DEFAULT/pstoJGZQvVjCKirgCtBmF4qB628.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:b0:eb:26:9e:50:ec:ca:f6:04:09:cc:f1:97:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6cb68246650bd58c22a2ae00ad066178a81eb6f Validity Not Before: Dec 11 16:02:55 2025 GMT Not After : Dec 12 16:02:55 2025 GMT Subject: CN=b023f9301aa9c7a9e88e5bc7e8a4efb91cdc1642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9f:c7:d8:02:51:89:72:0d:11:59:67:f4:04: 3b:8f:95:1b:49:6b:7a:ae:9c:45:33:d3:e6:3d:dc: eb:dd:61:42:a6:d5:4f:a1:d6:2b:2d:f8:30:d1:18: 95:66:e5:fa:9c:b9:03:40:a6:3a:c6:ee:cf:45:ff: 35:68:e9:1e:bc:94:08:56:ad:fc:4c:a7:2c:af:69: 53:0d:8a:77:f3:fb:ed:04:0d:c2:2b:2d:e2:46:0d: 03:4d:64:b6:26:88:1e:df:3a:f5:0e:7a:5a:87:fe: f3:df:fa:b5:7c:17:23:c2:05:88:5c:d3:08:fb:f2: 41:d6:cd:49:71:db:7a:74:90:40:9d:af:3e:fc:3b: 3a:da:5a:c1:b0:f9:28:ff:30:79:22:93:84:4b:9a: 6f:a5:75:2a:1a:01:60:6e:84:c1:ea:e1:be:c8:a7: ce:a2:5a:3e:cd:db:59:e5:fc:ee:a6:77:32:6e:c3: 62:54:23:93:b2:0c:ae:a5:e4:ac:89:d5:f1:35:b0: 26:3f:80:d0:9f:ea:42:fa:79:9e:a3:b0:3b:30:4f: 50:e6:d8:fa:7b:75:48:2f:95:97:92:20:cd:59:62: dc:a8:97:fd:f7:df:0a:37:87:48:03:fb:6f:1d:c5: f5:26:d2:06:5d:d6:a6:84:c3:fa:6b:70:80:89:a2: 9e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:23:F9:30:1A:A9:C7:A9:E8:8E:5B:C7:E8:A4:EF:B9:1C:DC:16:42 X509v3 Authority Key Identifier: keyid:A6:CB:68:24:66:50:BD:58:C2:2A:2A:E0:0A:D0:66:17:8A:81:EB:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pstoJGZQvVjCKirgCtBmF4qB628.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:d9:1c:a7:ba:00:fa:3c:7a:ac:b3:f1:5f:0e:6e:b7:da:8e: 76:9d:b2:64:66:7c:19:e8:c0:15:aa:39:87:7e:83:90:31:b0: 49:20:f4:29:84:53:22:51:a3:39:d6:be:ce:05:f1:8c:46:3c: 13:0f:5e:db:50:89:e6:47:27:95:da:a6:f0:e0:49:2b:5f:82: dc:6a:60:fb:b3:b6:a5:57:80:33:51:32:6c:3b:f8:d1:fa:84: 09:b6:b9:9d:8d:7c:da:11:38:1f:df:c9:52:22:32:c6:b5:a9: 8d:3a:bf:a2:28:f9:69:a1:70:45:db:bc:80:c7:8f:ca:47:4a: 2a:12:68:02:49:b8:eb:df:54:0f:c4:05:d3:14:bb:a4:fc:3b: 2d:7f:80:43:78:b5:eb:c1:42:6b:9e:51:9d:4f:0d:72:58:70: f9:8a:aa:f7:28:67:56:5c:d6:2f:85:8e:a7:82:d5:fc:d5:0c: d3:e0:2d:19:4b:85:5c:78:4d:e6:d6:f6:ac:f2:fd:d2:8c:92: 6e:11:b1:34:80:c4:00:d6:7d:fd:de:9e:ea:61:a1:e7:9a:e7: 07:c3:a2:90:68:2d:87:d1:b8:85:f0:d8:08:a2:3a:97:27:0a: bd:a8:0a:17:38:9a:14:54:f6:04:e5:04:22:ee:55:6e:cb:1c: 7a:f9:d4:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJrDrJp5Q7Mr2BAnM8ZfEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2Y2I2ODI0NjY1MGJkNThjMjJhMmFlMDBhZDA2NjE3OGE4 MWViNmYwHhcNMjUxMjExMTYwMjU1WhcNMjUxMjEyMTYwMjU1WjAzMTEwLwYDVQQD EyhiMDIzZjkzMDFhYTljN2E5ZTg4ZTViYzdlOGE0ZWZiOTFjZGMxNjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZ/H2AJRiXINEVln9AQ7j5UbSWt6 rpxFM9PmPdzr3WFCptVPodYrLfgw0RiVZuX6nLkDQKY6xu7PRf81aOkevJQIVq38 TKcsr2lTDYp38/vtBA3CKy3iRg0DTWS2Joge3zr1Dnpah/7z3/q1fBcjwgWIXNMI +/JB1s1Jcdt6dJBAna8+/Ds62lrBsPko/zB5IpOES5pvpXUqGgFgboTB6uG+yKfO olo+zdtZ5fzupncybsNiVCOTsgyupeSsidXxNbAmP4DQn+pC+nmeo7A7ME9Q5tj6 e3VIL5WXkiDNWWLcqJf9998KN4dIA/tvHcX1JtIGXdamhMP6a3CAiaKePQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLAj+TAaqcep6I5bx+ik77kc3BZCMB8GA1UdIwQY MBaAFKbLaCRmUL1Ywioq4ArQZheKgetvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHN0b0pHWlF2VmpDS2lyZ0N0Qm1GNHFCNjI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9iNjBkNTAtNTUyYS00NGFmLThiYTUt MzZlNGZiNTZmZGI0LzEvcHN0b0pHWlF2VmpDS2lyZ0N0Qm1GNHFCNjI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9iNjBkNTAtNTUyYS00NGFmLThiYTUtMzZlNGZiNTZmZGI0 LzEvcHN0b0pHWlF2VmpDS2lyZ0N0Qm1GNHFCNjI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ9kcp7oA +jx6rLPxXw5ut9qOdp2yZGZ8GejAFao5h36DkDGwSSD0KYRTIlGjOda+zgXxjEY8 Ew9e21CJ5kcnldqm8OBJK1+C3Gpg+7O2pVeAM1EybDv40fqECba5nY182hE4H9/J UiIyxrWpjTq/oij5aaFwRdu8gMePykdKKhJoAkm4699UD8QF0xS7pPw7LX+AQ3i1 68FCa55RnU8Nclhw+Yqq9yhnVlzWL4WOp4LV/NUM0+AtGUuFXHhN5tb2rPL90oyS bhGxNIDEANZ9/d6e6mGh55rnB8OikGgth9G4hfDYCKI6lycKvagKFziaFFT2BOUE Iu5VbsscevnUUg== -----END CERTIFICATE-----Generated at Fri Dec 12 00:29:20 2025 by rpki-client