This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft File: pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft (raw, json) Hash identifier: sunNT10P5HevDmk/On8Q/ILaP0Dtc9osqTjt7osd9d4= Subject key identifier: 65:84:9B:58:FD:7B:0C:1F:1C:32:A5:7F:D6:9A:5C:BB:2C:82:92:EA Authority key identifier: A4:C9:3A:B3:64:C8:78:32:E7:77:62:26:EE:E6:C1:31:DB:E1:53:BB Certificate issuer: /CN=a4c93ab364c87832e7776226eee6c131dbe153bb Certificate serial: 019B2551EEE455F4992BD5D484C5003B37C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft Manifest number: 177D Signing time: Tue 16 Dec 2025 04:01:24 +0000 Manifest this update: Tue 16 Dec 2025 04:01:24 +0000 Manifest next update: Wed 17 Dec 2025 04:01:24 +0000 Files and hashes: 1: pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl (hash: S53TZak+ubWTfRj98OfuPW/f5jqgOE/6bnTSZQ05ras=) 2: pV9OuJfGvboWa4RSwyOam_iwesY.roa (hash: RTkqdqbXmblScuzpz+Ud/Jj/+DA6UotPUIkNIsu6BJ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:51:ee:e4:55:f4:99:2b:d5:d4:84:c5:00:3b:37:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4c93ab364c87832e7776226eee6c131dbe153bb Validity Not Before: Dec 16 04:01:24 2025 GMT Not After : Dec 17 04:01:24 2025 GMT Subject: CN=65849b58fd7b0c1f1c32a57fd69a5cbb2c8292ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7f:b3:72:45:43:01:f1:87:fe:66:8f:ea:e9: bd:7e:f5:bf:57:bb:23:da:5c:8c:19:36:ce:43:79: f5:a5:45:9a:0c:7a:b5:b6:76:22:24:77:a6:f2:91: 5a:bd:6a:09:94:78:13:5c:ea:2f:0b:47:5c:bc:e8: 90:49:cb:6c:0b:47:f7:40:f5:ad:f5:28:08:54:d0: b9:dc:0f:1d:98:7b:2f:99:f4:10:e0:4a:7b:96:0a: a7:6a:80:44:e4:9b:85:31:91:79:02:68:a2:bc:cd: d2:08:76:94:fa:85:b5:47:14:3d:97:b6:5a:cb:49: b0:ab:d9:f1:e8:36:75:90:d6:76:ea:12:d5:b4:5f: a2:1a:00:5b:4b:ed:18:6f:87:1d:00:c0:70:1b:32: c6:8b:e9:2c:a5:58:56:8d:7a:28:d4:1b:19:98:cf: e7:95:fe:2b:f4:09:fa:2e:29:9c:a5:1e:47:df:b6: ec:51:be:ce:a0:e3:1e:4c:e9:a0:c7:e9:b8:3c:57: 9b:dc:ce:9d:fc:8f:8d:57:7d:6e:f4:38:91:3d:25: bb:8a:2d:04:34:a8:63:d8:92:06:0a:5f:d5:3d:75: 53:a9:cf:35:68:44:ab:18:a9:95:b9:45:ac:3d:d8: 83:7e:bc:7f:e2:ca:4a:ca:12:a3:9f:23:f7:ea:de: a4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:84:9B:58:FD:7B:0C:1F:1C:32:A5:7F:D6:9A:5C:BB:2C:82:92:EA X509v3 Authority Key Identifier: keyid:A4:C9:3A:B3:64:C8:78:32:E7:77:62:26:EE:E6:C1:31:DB:E1:53:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:10:34:08:a1:13:3a:e8:fd:3e:59:54:99:2b:7e:3c:38:8e: dc:35:bd:a7:9f:44:67:3e:a2:62:64:5f:79:d4:f1:6d:14:02: c0:3e:90:e1:4f:90:47:62:59:2f:83:be:aa:8a:b2:5f:4b:7e: c5:cd:6d:b5:84:1e:18:51:a4:05:85:9a:12:03:43:57:9a:dc: 5e:a9:38:00:2a:02:cd:d5:95:6e:18:79:2d:47:a4:fa:e4:3c: 36:d9:86:a1:ac:3f:25:aa:43:4c:2e:fc:87:a8:f1:4a:18:ad: 76:ce:d5:28:0f:14:e3:77:40:87:40:01:83:bf:f4:50:61:b2: ac:de:15:08:2e:47:93:14:8f:be:18:10:0c:ab:16:fa:df:27: e3:bd:48:f4:ce:3d:98:88:cc:1e:42:ac:1c:33:25:63:27:bf: 1a:89:19:1a:a3:bd:7d:75:e9:16:08:1d:58:0b:bc:e5:2e:f6: 38:0e:89:be:75:20:9c:6a:43:3a:0d:ca:ab:f5:b8:f8:e0:1d: 73:e1:84:b2:a5:88:27:e3:34:82:5b:9c:9f:e5:42:49:55:a3: 04:72:9d:6f:79:b6:18:c9:3e:10:76:8e:5a:2d:f9:f6:09:39: 2a:fc:4d:91:09:d0:a7:9d:04:7c:63:2e:aa:62:d9:9a:3a:5d: a7:a3:33:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUe7kVfSZK9XUhMUAOzfFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YzkzYWIzNjRjODc4MzJlNzc3NjIyNmVlZTZjMTMxZGJl MTUzYmIwHhcNMjUxMjE2MDQwMTI0WhcNMjUxMjE3MDQwMTI0WjAzMTEwLwYDVQQD Eyg2NTg0OWI1OGZkN2IwYzFmMWMzMmE1N2ZkNjlhNWNiYjJjODI5MmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwX+zckVDAfGH/maP6um9fvW/V7sj 2lyMGTbOQ3n1pUWaDHq1tnYiJHem8pFavWoJlHgTXOovC0dcvOiQSctsC0f3QPWt 9SgIVNC53A8dmHsvmfQQ4Ep7lgqnaoBE5JuFMZF5AmiivM3SCHaU+oW1RxQ9l7Za y0mwq9nx6DZ1kNZ26hLVtF+iGgBbS+0Yb4cdAMBwGzLGi+kspVhWjXoo1BsZmM/n lf4r9An6LimcpR5H37bsUb7OoOMeTOmgx+m4PFeb3M6d/I+NV31u9DiRPSW7ii0E NKhj2JIGCl/VPXVTqc81aESrGKmVuUWsPdiDfrx/4spKyhKjnyP36t6kDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGWEm1j9ewwfHDKlf9aaXLssgpLqMB8GA1UdIwQY MBaAFKTJOrNkyHgy53diJu7mwTHb4VO7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE1rNnMyVEllRExuZDJJbTd1YkJNZHZoVTdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy80OWRmZWEtYzc4OS00NDAxLWEyNTEt ZTI1MzNjZGQyNWFmLzEvcE1rNnMyVEllRExuZDJJbTd1YkJNZHZoVTdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy80OWRmZWEtYzc4OS00NDAxLWEyNTEtZTI1MzNjZGQyNWFm LzEvcE1rNnMyVEllRExuZDJJbTd1YkJNZHZoVTdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIxA0CKET Ouj9PllUmSt+PDiO3DW9p59EZz6iYmRfedTxbRQCwD6Q4U+QR2JZL4O+qoqyX0t+ xc1ttYQeGFGkBYWaEgNDV5rcXqk4ACoCzdWVbhh5LUek+uQ8NtmGoaw/JapDTC78 h6jxShitds7VKA8U43dAh0ABg7/0UGGyrN4VCC5HkxSPvhgQDKsW+t8n471I9M49 mIjMHkKsHDMlYye/GokZGqO9fXXpFggdWAu85S72OA6JvnUgnGpDOg3Kq/W4+OAd c+GEsqWIJ+M0glucn+VCSVWjBHKdb3m2GMk+EHaOWi359gk5KvxNkQnQp50EfGMu qmLZmjpdp6Mzpg== -----END CERTIFICATE-----Generated at Tue Dec 16 08:56:41 2025 by rpki-client