This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft File: pKAVstPT6Qm2Avn91Pb29hiHPFg.mft (raw, json) Hash identifier: h20us92RzeXmQGUxPwgUH+4xSoTWOYZ36g37naro2dw= Subject key identifier: EB:9D:CD:FF:7F:49:61:FC:7C:88:78:0A:6D:6E:57:E0:22:67:AF:57 Authority key identifier: A4:A0:15:B2:D3:D3:E9:09:B6:02:F9:FD:D4:F6:F6:F6:18:87:3C:58 Certificate issuer: /CN=a4a015b2d3d3e909b602f9fdd4f6f6f618873c58 Certificate serial: 019B06A243818C32FE95E1BA85CC867B918F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft Manifest number: 0E01 Signing time: Wed 10 Dec 2025 05:00:55 +0000 Manifest this update: Wed 10 Dec 2025 05:00:55 +0000 Manifest next update: Thu 11 Dec 2025 05:00:55 +0000 Files and hashes: 1: 2Qr4P6TtNG8XIKkXI_c0cLDbaUc.roa (hash: MYKMpqtjE4XkNANAGzzsCBedfNhF2YMsBN5+jKHyoYI=) 2: pKAVstPT6Qm2Avn91Pb29hiHPFg.crl (hash: LoPLmE/6UKCqlrZ6GaxxXI2bK/M2QumCndVkwxKmfLQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.crl rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:a2:43:81:8c:32:fe:95:e1:ba:85:cc:86:7b:91:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4a015b2d3d3e909b602f9fdd4f6f6f618873c58 Validity Not Before: Dec 10 05:00:55 2025 GMT Not After : Dec 11 05:00:55 2025 GMT Subject: CN=eb9dcdff7f4961fc7c88780a6d6e57e02267af57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3b:3a:dc:66:1d:9e:52:1d:42:04:ca:1f:58: ff:44:c5:33:56:1f:2f:3e:74:af:09:aa:d9:f1:cd: aa:55:f6:5c:3f:8d:68:d8:d8:dd:86:63:98:59:a3: 5a:fc:74:90:57:98:50:d4:9f:a7:73:31:58:c1:33: 33:34:84:0f:9d:30:da:6f:61:84:bf:25:0b:d9:55: f6:cb:75:94:45:d7:cb:19:f6:98:01:97:6e:a3:79: 46:f9:cf:e6:eb:eb:a2:9d:52:dd:40:6f:82:49:97: 1b:ea:6b:f8:23:10:02:30:70:ef:ec:3f:ee:79:b0: f4:be:0e:34:1a:2d:c6:bd:85:21:15:ee:d7:f9:e0: 1e:62:ee:72:70:bd:fc:52:f6:eb:13:b4:5e:c2:a9: 86:af:ac:78:5b:ee:8a:6c:55:ce:13:fc:1e:8e:bd: 56:52:d2:a6:3a:98:80:f5:9f:b4:47:33:db:02:40: ae:f5:c2:a4:0c:fb:a4:fe:bd:28:31:62:9f:1b:a5: 6c:40:e3:bf:d1:0e:13:4d:64:da:0f:57:38:e3:b2: 6f:96:a0:dd:dd:67:a3:c5:67:f3:67:3c:a5:df:75: 7e:e7:53:15:18:72:4c:65:6b:c9:21:d7:dd:bd:f7: 0b:e5:d7:a8:56:33:f4:98:1e:4b:cd:ef:74:d7:f7: 27:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:9D:CD:FF:7F:49:61:FC:7C:88:78:0A:6D:6E:57:E0:22:67:AF:57 X509v3 Authority Key Identifier: keyid:A4:A0:15:B2:D3:D3:E9:09:B6:02:F9:FD:D4:F6:F6:F6:18:87:3C:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:04:9e:12:1a:75:44:bc:e2:80:48:de:de:78:96:d7:ba:5c: 0d:f9:9b:b4:76:88:df:b8:f8:9a:d1:97:56:b4:4e:bf:a9:d3: f2:a8:8c:ff:9e:49:20:62:8b:38:64:7e:5c:8e:23:d6:40:fc: 6f:5c:bc:9f:23:44:86:70:8b:84:39:e0:26:42:1a:db:c3:ea: a7:1a:b4:a8:2c:dd:b2:8b:25:d9:b6:f8:7a:e5:f5:88:02:f5: 99:c6:33:d4:62:7c:15:3a:b1:46:23:75:ff:8c:19:d2:76:97: 4e:4f:45:f3:64:c6:4a:4b:e6:fb:cd:34:0d:a0:93:fd:35:ae: 37:e1:d0:6a:32:7c:a8:91:be:f3:96:d2:9e:fc:65:62:64:da: 8b:9d:ae:62:ba:a8:50:f2:6d:24:38:93:56:3f:48:38:7e:ce: 00:19:1b:e1:13:6b:c2:22:d5:6a:47:da:88:d1:d1:5f:4d:6e: 8d:49:04:bf:33:07:31:e8:a2:de:0c:40:e4:f7:c5:df:c5:f5: 84:59:08:7d:46:ef:2e:ef:72:82:c1:f2:89:76:ee:e1:a8:01: 3d:85:f0:c1:3d:f6:74:04:dc:30:db:98:cb:11:d7:04:00:df: 8e:b9:52:ef:d1:7e:a3:d8:28:2e:28:d4:7d:f6:80:5c:af:ca: 01:26:1b:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsGokOBjDL+leG6hcyGe5GPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YTAxNWIyZDNkM2U5MDliNjAyZjlmZGQ0ZjZmNmY2MTg4 NzNjNTgwHhcNMjUxMjEwMDUwMDU1WhcNMjUxMjExMDUwMDU1WjAzMTEwLwYDVQQD EyhlYjlkY2RmZjdmNDk2MWZjN2M4ODc4MGE2ZDZlNTdlMDIyNjdhZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2js63GYdnlIdQgTKH1j/RMUzVh8v PnSvCarZ8c2qVfZcP41o2NjdhmOYWaNa/HSQV5hQ1J+nczFYwTMzNIQPnTDab2GE vyUL2VX2y3WURdfLGfaYAZduo3lG+c/m6+uinVLdQG+CSZcb6mv4IxACMHDv7D/u ebD0vg40Gi3GvYUhFe7X+eAeYu5ycL38UvbrE7RewqmGr6x4W+6KbFXOE/wejr1W UtKmOpiA9Z+0RzPbAkCu9cKkDPuk/r0oMWKfG6VsQOO/0Q4TTWTaD1c447JvlqDd 3WejxWfzZzyl33V+51MVGHJMZWvJIdfdvfcL5deoVjP0mB5Lze901/cnXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOudzf9/SWH8fIh4Cm1uV+AiZ69XMB8GA1UdIwQY MBaAFKSgFbLT0+kJtgL5/dT29vYYhzxYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEtBVnN0UFQ2UW0yQXZuOTFQYjI5aGlIUEZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iOWJkYTMtYjYxMS00MzM4LWJiZTgt YTdkZDE2MzQzMjk3LzEvcEtBVnN0UFQ2UW0yQXZuOTFQYjI5aGlIUEZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9iOWJkYTMtYjYxMS00MzM4LWJiZTgtYTdkZDE2MzQzMjk3 LzEvcEtBVnN0UFQ2UW0yQXZuOTFQYjI5aGlIUEZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPQSeEhp1 RLzigEje3niW17pcDfmbtHaI37j4mtGXVrROv6nT8qiM/55JIGKLOGR+XI4j1kD8 b1y8nyNEhnCLhDngJkIa28Pqpxq0qCzdsosl2bb4euX1iAL1mcYz1GJ8FTqxRiN1 /4wZ0naXTk9F82TGSkvm+800DaCT/TWuN+HQajJ8qJG+85bSnvxlYmTai52uYrqo UPJtJDiTVj9IOH7OABkb4RNrwiLVakfaiNHRX01ujUkEvzMHMeii3gxA5PfF38X1 hFkIfUbvLu9ygsHyiXbu4agBPYXwwT32dATcMNuYyxHXBADfjrlS79F+o9goLijU ffaAXK/KASYboA== -----END CERTIFICATE-----Generated at Wed Dec 10 08:51:07 2025 by rpki-client