This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft File: pK0j9tzk2Wg8KklDvTfBczXHYYo.mft (raw, json) Hash identifier: /49fqaFuz7ysJ7wQdGD1vPgfUu0CVL0bb2BjLDUBoTs= Subject key identifier: 41:0F:F9:16:B5:79:9A:38:E1:8B:CD:D3:C1:AA:B2:95:47:A7:45:4D Authority key identifier: A4:AD:23:F6:DC:E4:D9:68:3C:2A:49:43:BD:37:C1:73:35:C7:61:8A Certificate issuer: /CN=a4ad23f6dce4d9683c2a4943bd37c17335c7618a Certificate serial: 019B3A21E84E290D1D45A9886BB088CFCB37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 05:00:59 +0000 Manifest this update: Sat 20 Dec 2025 05:00:59 +0000 Manifest next update: Sun 21 Dec 2025 05:00:59 +0000 Files and hashes: 1: RC2JkOQZBHdrMWWJ6dmI74cPa_s.roa (hash: qL9vMEtT48m8aWpCwA/eKJ1AT6hZ+DcyDfjgFWcllKo=) 2: pK0j9tzk2Wg8KklDvTfBczXHYYo.crl (hash: 8atAJLBwcAX3j8wIqIavQV7RWzTotYzO0q1DAgLvywg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:e8:4e:29:0d:1d:45:a9:88:6b:b0:88:cf:cb:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4ad23f6dce4d9683c2a4943bd37c17335c7618a Validity Not Before: Dec 20 05:00:59 2025 GMT Not After : Dec 21 05:00:59 2025 GMT Subject: CN=410ff916b5799a38e18bcdd3c1aab29547a7454d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:9e:c3:84:c8:e1:9e:79:bc:5e:8d:ec:1f:f5: 0b:57:52:a6:a2:da:c8:bf:61:05:0b:05:ce:44:10: 4f:37:07:35:fd:55:25:8d:f4:45:7f:6c:50:6f:63: 15:87:64:c1:01:32:5f:d5:a8:7a:15:1c:7b:a7:1e: 68:d9:8e:0f:aa:e9:d8:ce:6e:eb:68:28:b3:87:b9: 8b:21:74:c7:08:7e:de:fa:a2:27:65:bc:70:66:b9: c2:8a:b7:db:4e:d4:0e:e7:ab:03:e7:57:95:cf:4b: 67:6f:fa:4b:28:ff:37:99:f0:c1:ad:97:c7:58:22: 6b:73:a3:ef:91:fc:02:3b:cf:97:47:a9:2f:1c:22: 10:39:62:fb:e6:7e:0a:e5:d1:83:cb:37:ea:40:a4: e5:6a:a5:2c:34:da:55:b9:e1:91:cb:00:48:cd:9d: d4:5b:73:f6:c6:99:17:55:2e:b1:71:d1:a9:81:9d: de:17:59:2b:86:5a:a5:79:36:01:a6:ad:5e:84:98: 69:27:a6:84:e9:e6:ae:29:6d:74:c7:00:0d:09:41: e2:29:0d:37:93:07:23:b1:67:aa:6a:0a:63:43:6c: eb:d8:f0:55:36:bc:01:20:79:9c:5f:fb:ba:03:b1: 53:b0:fe:23:0a:7c:fc:ab:c6:28:5f:3c:44:80:55: ae:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:0F:F9:16:B5:79:9A:38:E1:8B:CD:D3:C1:AA:B2:95:47:A7:45:4D X509v3 Authority Key Identifier: keyid:A4:AD:23:F6:DC:E4:D9:68:3C:2A:49:43:BD:37:C1:73:35:C7:61:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:87:9a:e2:17:82:90:11:61:6d:e8:ad:4f:0a:82:c3:47:b5: d9:e1:07:26:46:fd:38:55:c8:49:ff:d1:95:d9:b5:0c:d7:34: 65:f0:f3:27:6d:54:05:98:34:e8:09:98:b3:20:41:fb:28:c8: 38:5f:4c:9f:8c:d7:40:ac:4b:b1:a9:e5:13:15:02:3b:6b:eb: 77:7c:5d:6c:87:78:19:67:fe:14:df:7b:e2:38:86:f1:d1:e7: 5d:22:9f:90:2b:a0:88:ef:e5:7a:b7:35:08:f2:99:27:d0:06: 19:15:1e:a5:21:6f:94:12:d4:b6:fd:8d:3c:67:b9:fa:16:05: 80:e4:6c:48:2f:4e:f1:c4:73:fe:2a:8b:82:b3:68:10:23:7f: 33:3b:f5:db:36:22:68:b9:b4:54:da:c2:92:b1:1a:34:2c:cb: fe:59:ba:f5:78:49:aa:7b:3c:f0:e1:86:14:14:ba:76:9d:d0: 6e:a2:12:bd:75:d7:55:b1:dc:23:21:cb:a6:8c:9c:32:cb:f6: a1:e2:65:21:70:f1:f5:bb:44:8f:65:c2:18:6c:c2:62:26:78: 31:59:23:d8:ac:33:04:3b:eb:65:76:f8:b6:ec:75:dd:23:9f: 43:45:8b:90:c2:59:10:20:12:a5:42:6c:02:a5:0d:df:01:9d: 04:0f:7d:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IehOKQ0dRamIa7CIz8s3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YWQyM2Y2ZGNlNGQ5NjgzYzJhNDk0M2JkMzdjMTczMzVj NzYxOGEwHhcNMjUxMjIwMDUwMDU5WhcNMjUxMjIxMDUwMDU5WjAzMTEwLwYDVQQD Eyg0MTBmZjkxNmI1Nzk5YTM4ZTE4YmNkZDNjMWFhYjI5NTQ3YTc0NTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh57DhMjhnnm8Xo3sH/ULV1KmotrI v2EFCwXORBBPNwc1/VUljfRFf2xQb2MVh2TBATJf1ah6FRx7px5o2Y4PqunYzm7r aCizh7mLIXTHCH7e+qInZbxwZrnCirfbTtQO56sD51eVz0tnb/pLKP83mfDBrZfH WCJrc6PvkfwCO8+XR6kvHCIQOWL75n4K5dGDyzfqQKTlaqUsNNpVueGRywBIzZ3U W3P2xpkXVS6xcdGpgZ3eF1krhlqleTYBpq1ehJhpJ6aE6eauKW10xwANCUHiKQ03 kwcjsWeqagpjQ2zr2PBVNrwBIHmcX/u6A7FTsP4jCnz8q8YoXzxEgFWuGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEEP+Ra1eZo44YvN08GqspVHp0VNMB8GA1UdIwQY MBaAFKStI/bc5NloPCpJQ703wXM1x2GKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEswajl0emsyV2c4S2tsRHZUZkJjelhIWVlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9kMTgzN2EtNjA2ZS00MTgwLWE3ZjAt NzI4ZTBkZmI4NDBkLzEvcEswajl0emsyV2c4S2tsRHZUZkJjelhIWVlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9kMTgzN2EtNjA2ZS00MTgwLWE3ZjAtNzI4ZTBkZmI4NDBk LzEvcEswajl0emsyV2c4S2tsRHZUZkJjelhIWVlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuIea4heC kBFhbeitTwqCw0e12eEHJkb9OFXISf/Rldm1DNc0ZfDzJ21UBZg06AmYsyBB+yjI OF9Mn4zXQKxLsanlExUCO2vrd3xdbId4GWf+FN974jiG8dHnXSKfkCugiO/lerc1 CPKZJ9AGGRUepSFvlBLUtv2NPGe5+hYFgORsSC9O8cRz/iqLgrNoECN/Mzv12zYi aLm0VNrCkrEaNCzL/lm69XhJqns88OGGFBS6dp3QbqISvXXXVbHcIyHLpoycMsv2 oeJlIXDx9btEj2XCGGzCYiZ4MVkj2KwzBDvrZXb4tux13SOfQ0WLkMJZECASpUJs AqUN3wGdBA99eQ== -----END CERTIFICATE-----Generated at Sat Dec 20 07:32:45 2025 by rpki-client