This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft File: pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft (raw, json) Hash identifier: /VYDQVTbOxjYDAFv7M6i3n/O91WVedrDpGoBtytNQ/o= Subject key identifier: DB:C7:A9:3D:8C:C8:0E:72:05:1E:D3:65:5A:57:6E:27:89:97:61:31 Authority key identifier: A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB Certificate issuer: /CN=a4a37878c14f216c32649819ea428a58225504fb Certificate serial: 019B5976EC61B13294C54FC4980E00B4DDF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft Manifest number: 073F Signing time: Fri 26 Dec 2025 07:02:04 +0000 Manifest this update: Fri 26 Dec 2025 07:02:04 +0000 Manifest next update: Sat 27 Dec 2025 07:02:04 +0000 Files and hashes: 1: pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl (hash: h71Z5LWMawE80vZaBQ8f45IL7UCov0U/3+hfb3xGYyg=) 2: ro12KKiX-LBkOFDMXKVrhIyQ9tA.roa (hash: 3rfI99WFfWKHo+rtyifcnFcBumsIBP/guPHdSOGN9zM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:ec:61:b1:32:94:c5:4f:c4:98:0e:00:b4:dd:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4a37878c14f216c32649819ea428a58225504fb Validity Not Before: Dec 26 07:02:04 2025 GMT Not After : Dec 27 07:02:04 2025 GMT Subject: CN=dbc7a93d8cc80e72051ed3655a576e2789976131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5c:eb:57:10:fc:25:8d:55:96:6e:72:c0:75: a4:1f:8c:df:40:65:9a:3c:84:33:93:ff:5c:24:f2: f9:cf:8a:f8:13:16:6d:2c:68:67:e4:36:2c:74:a6: 38:73:94:70:15:03:b9:ce:57:63:2a:0c:8a:e9:4d: 05:c0:9b:26:ae:25:83:da:ed:d3:e4:96:64:a9:7f: 17:46:fe:e6:2c:36:a5:99:be:f2:dd:28:99:cb:ee: 45:9f:78:e3:c2:e1:14:4b:f7:95:c3:49:70:27:45: 8b:a4:8e:f3:88:89:c1:e2:2c:8a:37:b0:b6:53:3d: 50:6e:77:84:6b:59:69:4a:ae:11:b4:01:18:35:d0: ca:85:b6:70:79:e5:b2:46:dd:0a:61:66:22:49:1b: 5c:7a:c9:67:dc:35:cd:11:c0:26:73:6a:ae:f7:5e: 16:59:ae:45:8b:f8:ff:71:c5:3f:c4:f5:83:19:8f: 2d:fd:eb:7a:fd:64:3d:4d:6c:f6:2c:8e:0e:a4:1b: ff:07:01:60:27:45:39:02:ab:21:17:dd:88:06:94: 8b:a6:8f:bf:a4:73:5a:a9:90:bb:54:ad:14:fd:fc: 59:22:76:c4:e5:99:d4:fb:58:79:90:b0:66:f4:59: ca:5d:76:16:c4:aa:67:0b:ff:b1:3d:e1:64:2f:e8: 08:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:C7:A9:3D:8C:C8:0E:72:05:1E:D3:65:5A:57:6E:27:89:97:61:31 X509v3 Authority Key Identifier: keyid:A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:2e:57:54:70:5f:c1:0a:9c:c8:8f:62:e8:d6:60:16:c0:d8: 04:7c:ce:85:be:be:13:d7:cc:61:de:31:00:cd:e1:11:79:2d: 1f:73:56:0e:64:64:5c:b3:e0:fe:dd:14:0c:5d:e8:50:57:eb: b9:6d:71:b4:2f:aa:cf:63:36:c3:48:75:96:6b:ae:6e:f7:53: 04:62:df:28:2d:d8:2e:3a:67:97:29:1b:ca:b4:69:6f:03:ee: 2a:8c:c3:90:59:1e:8b:bf:95:dc:7e:58:f3:60:c7:94:30:7a: 2a:9f:ef:10:8f:ec:3d:27:c8:3f:82:46:1f:8e:08:e0:e3:e7: 04:39:4f:89:b4:03:72:5f:0c:94:00:53:40:0f:de:14:5f:00: 44:e5:43:d4:b9:4c:52:32:d7:39:36:01:d7:d7:02:4b:df:83: ba:ba:77:51:69:b2:52:d6:0a:3d:f7:d5:18:45:2b:9a:02:d0: 3c:2d:e0:64:24:fb:4e:6d:84:ac:aa:6a:50:60:21:2b:23:00: e4:c9:5d:59:78:11:39:74:cf:68:19:47:7e:7b:4d:c5:29:31: 2a:a6:18:12:99:14:ec:d0:8b:80:ea:71:3f:00:c3:74:bb:93: 5d:d0:9a:af:31:f5:62:c5:6b:33:d1:d6:98:ed:22:bb:46:4e: 9a:02:0b:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZduxhsTKUxU/EmA4AtN32MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YTM3ODc4YzE0ZjIxNmMzMjY0OTgxOWVhNDI4YTU4MjI1 NTA0ZmIwHhcNMjUxMjI2MDcwMjA0WhcNMjUxMjI3MDcwMjA0WjAzMTEwLwYDVQQD EyhkYmM3YTkzZDhjYzgwZTcyMDUxZWQzNjU1YTU3NmUyNzg5OTc2MTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1zrVxD8JY1Vlm5ywHWkH4zfQGWa PIQzk/9cJPL5z4r4ExZtLGhn5DYsdKY4c5RwFQO5zldjKgyK6U0FwJsmriWD2u3T 5JZkqX8XRv7mLDalmb7y3SiZy+5Fn3jjwuEUS/eVw0lwJ0WLpI7ziInB4iyKN7C2 Uz1QbneEa1lpSq4RtAEYNdDKhbZweeWyRt0KYWYiSRtcesln3DXNEcAmc2qu914W Wa5Fi/j/ccU/xPWDGY8t/et6/WQ9TWz2LI4OpBv/BwFgJ0U5AqshF92IBpSLpo+/ pHNaqZC7VK0U/fxZInbE5ZnU+1h5kLBm9FnKXXYWxKpnC/+xPeFkL+gIdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNvHqT2MyA5yBR7TZVpXbieJl2ExMB8GA1UdIwQY MBaAFKSjeHjBTyFsMmSYGepCilgiVQT7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEtONGVNRlBJV3d5WkpnWjZrS0tXQ0pWQlBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9lNjA2ZmItMTA3Zi00Mjk2LTg4NzAt NGIwZTBhYzhkMjI5LzEvcEtONGVNRlBJV3d5WkpnWjZrS0tXQ0pWQlBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9lNjA2ZmItMTA3Zi00Mjk2LTg4NzAtNGIwZTBhYzhkMjI5 LzEvcEtONGVNRlBJV3d5WkpnWjZrS0tXQ0pWQlBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhy5XVHBf wQqcyI9i6NZgFsDYBHzOhb6+E9fMYd4xAM3hEXktH3NWDmRkXLPg/t0UDF3oUFfr uW1xtC+qz2M2w0h1lmuubvdTBGLfKC3YLjpnlykbyrRpbwPuKozDkFkei7+V3H5Y 82DHlDB6Kp/vEI/sPSfIP4JGH44I4OPnBDlPibQDcl8MlABTQA/eFF8AROVD1LlM UjLXOTYB19cCS9+Durp3UWmyUtYKPffVGEUrmgLQPC3gZCT7Tm2ErKpqUGAhKyMA 5MldWXgROXTPaBlHfntNxSkxKqYYEpkU7NCLgOpxPwDDdLuTXdCarzH1YsVrM9HW mO0iu0ZOmgILHA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:14 2025 by rpki-client