This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft File: pmAQdyZRcCotMzyDFfGukvbMdJA.mft (raw, json) Hash identifier: La/FbUNbg8XzLrlv12GYn1Ie7v1Yc/JGh5ZueiBIDXs= Subject key identifier: 4C:06:D8:7A:F3:B3:B9:7A:8D:4D:07:B4:FC:74:3D:90:81:6F:A5:06 Authority key identifier: A6:60:10:77:26:51:70:2A:2D:33:3C:83:15:F1:AE:92:F6:CC:74:90 Certificate issuer: /CN=a66010772651702a2d333c8315f1ae92f6cc7490 Certificate serial: 019B5ABF409B01CA99B2E2E508D6AA592143 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft Manifest number: 16D0 Signing time: Fri 26 Dec 2025 13:00:41 +0000 Manifest this update: Fri 26 Dec 2025 13:00:41 +0000 Manifest next update: Sat 27 Dec 2025 13:00:41 +0000 Files and hashes: 1: pmAQdyZRcCotMzyDFfGukvbMdJA.crl (hash: BvovZSisNeG5LDDxQ7YenAEj8ZY89NxO7iEhyAciq+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:40:9b:01:ca:99:b2:e2:e5:08:d6:aa:59:21:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a66010772651702a2d333c8315f1ae92f6cc7490 Validity Not Before: Dec 26 13:00:41 2025 GMT Not After : Dec 27 13:00:41 2025 GMT Subject: CN=4c06d87af3b3b97a8d4d07b4fc743d90816fa506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cd:54:4c:ab:6e:c6:50:74:25:a5:16:7c:bc: bf:20:e3:8f:7a:c4:c4:ce:c2:b5:b8:ee:06:04:69: 06:c9:75:e8:6a:f2:de:00:0a:b0:7f:bd:79:91:6a: 10:a2:3a:cd:93:42:00:ae:2b:8a:b2:01:17:99:1e: 64:b4:20:13:6e:1e:a4:d6:63:7e:74:df:43:ae:93: 36:48:c5:21:c6:d6:11:1a:42:34:39:3b:c5:b4:8b: 6e:f2:c8:e4:a6:a6:35:a6:68:4e:99:8d:14:bd:b2: 5d:63:a1:eb:24:d0:56:2e:29:b6:d2:44:22:08:c0: f1:47:8f:0b:f8:97:eb:11:95:01:f9:f1:d8:20:a9: a6:9a:7e:b1:9c:f9:f7:f7:76:7c:17:46:9e:4f:78: 7d:ee:b4:d3:f8:36:23:5d:3c:21:d2:8e:04:95:57: 37:18:06:74:68:ae:ee:80:97:57:ff:95:ed:e8:30: 19:23:f5:cb:d6:ad:fa:cc:20:17:21:ec:9a:51:5a: 89:d0:2f:80:80:f8:ba:fd:93:0c:39:75:f8:eb:15: e8:1c:83:54:6d:ab:2c:55:1d:2e:4b:a9:e2:76:12: ae:28:5b:83:93:d3:e0:76:a3:5c:63:44:3b:60:44: 73:35:e4:b4:f6:c9:62:cc:a0:94:99:7a:c7:00:c2: 3a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:06:D8:7A:F3:B3:B9:7A:8D:4D:07:B4:FC:74:3D:90:81:6F:A5:06 X509v3 Authority Key Identifier: keyid:A6:60:10:77:26:51:70:2A:2D:33:3C:83:15:F1:AE:92:F6:CC:74:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:d1:ca:a5:64:e3:5e:82:b2:d7:12:63:0b:31:42:e1:c0:d0: 47:cd:48:83:df:63:51:8d:c7:ed:e0:f1:2c:1d:0e:ee:52:b6: b8:86:9f:49:37:14:6c:09:49:20:d1:74:07:5d:f3:86:a1:31: 0e:6b:75:29:0f:22:98:5c:99:21:fa:86:d5:5b:2f:2b:10:39: 5f:87:5a:52:cc:31:fa:b1:26:f1:77:1e:07:52:f5:7b:21:6b: 29:f7:9a:db:2e:b8:d2:24:eb:0e:8d:cd:49:f6:98:8c:5e:f7: 73:24:80:53:55:3f:49:ac:27:66:a4:84:f8:d2:55:ac:8d:2f: ae:cc:5b:23:bc:fe:73:36:cd:2d:06:84:ed:5a:07:53:c7:00: 14:09:47:a7:33:c7:95:92:2f:c6:d6:b0:02:b9:11:9e:98:e4: 3d:6c:e8:08:77:75:4f:7c:e1:7f:7e:af:b3:bb:ed:b9:f5:4d: c3:72:3b:96:41:c9:ab:e2:13:4f:dc:28:98:e8:ad:cb:18:55: 32:47:3c:23:ca:80:bb:b3:05:3f:50:07:8a:11:32:56:46:b6: c1:73:91:95:5d:d9:78:2e:94:2e:06:cd:d8:91:04:e8:f3:d2: e2:af:16:9a:cd:9e:3e:c9:a6:bc:4a:d7:82:94:0b:7d:f4:2e: d8:f8:63:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav0CbAcqZsuLlCNaqWSFDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NjAxMDc3MjY1MTcwMmEyZDMzM2M4MzE1ZjFhZTkyZjZj Yzc0OTAwHhcNMjUxMjI2MTMwMDQxWhcNMjUxMjI3MTMwMDQxWjAzMTEwLwYDVQQD Eyg0YzA2ZDg3YWYzYjNiOTdhOGQ0ZDA3YjRmYzc0M2Q5MDgxNmZhNTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0M1UTKtuxlB0JaUWfLy/IOOPesTE zsK1uO4GBGkGyXXoavLeAAqwf715kWoQojrNk0IAriuKsgEXmR5ktCATbh6k1mN+ dN9DrpM2SMUhxtYRGkI0OTvFtItu8sjkpqY1pmhOmY0UvbJdY6HrJNBWLim20kQi CMDxR48L+JfrEZUB+fHYIKmmmn6xnPn393Z8F0aeT3h97rTT+DYjXTwh0o4ElVc3 GAZ0aK7ugJdX/5Xt6DAZI/XL1q36zCAXIeyaUVqJ0C+AgPi6/ZMMOXX46xXoHINU bassVR0uS6nidhKuKFuDk9PgdqNcY0Q7YERzNeS09slizKCUmXrHAMI6rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEwG2Hrzs7l6jU0HtPx0PZCBb6UGMB8GA1UdIwQY MBaAFKZgEHcmUXAqLTM8gxXxrpL2zHSQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcG1BUWR5WlJjQ290TXp5REZmR3VrdmJNZEpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi80NTRkN2ItNWQ0YS00Y2YxLTg1ZWIt NGZhNzFmMjRlZTQzLzEvcG1BUWR5WlJjQ290TXp5REZmR3VrdmJNZEpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi80NTRkN2ItNWQ0YS00Y2YxLTg1ZWItNGZhNzFmMjRlZTQz LzEvcG1BUWR5WlJjQ290TXp5REZmR3VrdmJNZEpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF9HKpWTj XoKy1xJjCzFC4cDQR81Ig99jUY3H7eDxLB0O7lK2uIafSTcUbAlJINF0B13zhqEx Dmt1KQ8imFyZIfqG1VsvKxA5X4daUswx+rEm8XceB1L1eyFrKfea2y640iTrDo3N SfaYjF73cySAU1U/SawnZqSE+NJVrI0vrsxbI7z+czbNLQaE7VoHU8cAFAlHpzPH lZIvxtawArkRnpjkPWzoCHd1T3zhf36vs7vtufVNw3I7lkHJq+ITT9womOityxhV Mkc8I8qAu7MFP1AHihEyVka2wXORlV3ZeC6ULgbN2JEE6PPS4q8Wms2ePsmmvErX gpQLffQu2Phj9Q== -----END CERTIFICATE-----Generated at Fri Dec 26 15:44:25 2025 by rpki-client