This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.mft File: pnac0wPoTc03o3XW52tgKfzDZ7Q.mft (raw, json) Hash identifier: V9vzDQ4dSy4ccbontzLx7XLq4LTVD+G5ULOEpGC4iyg= Subject key identifier: 2D:37:A7:68:6F:57:67:81:5E:CC:4D:A2:EC:2F:27:AE:DD:1A:8C:4F Authority key identifier: A6:76:9C:D3:03:E8:4D:CD:37:A3:75:D6:E7:6B:60:29:FC:C3:67:B4 Certificate issuer: /CN=a6769cd303e84dcd37a375d6e76b6029fcc367b4 Certificate serial: 019AF72F6D6420480A8A29D7A342838D5F38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnac0wPoTc03o3XW52tgKfzDZ7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.mft Manifest number: EF Signing time: Sun 07 Dec 2025 05:01:11 +0000 Manifest this update: Sun 07 Dec 2025 05:01:11 +0000 Manifest next update: Mon 08 Dec 2025 05:01:11 +0000 Files and hashes: 1: EE9b_IGVAxMVGIMQVaokUb3eWtk.roa (hash: v5264EvTSTGFV4n/KSp3fqpJgAmsmpyri2CC0Ruz9ng=) 2: pnac0wPoTc03o3XW52tgKfzDZ7Q.crl (hash: IqVf8lCT6BO7MKl7y2fAdHGw0yrmN8Z/FpttSECGPq0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/pnac0wPoTc03o3XW52tgKfzDZ7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 05:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:2f:6d:64:20:48:0a:8a:29:d7:a3:42:83:8d:5f:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6769cd303e84dcd37a375d6e76b6029fcc367b4 Validity Not Before: Dec 7 05:01:11 2025 GMT Not After : Dec 8 05:01:11 2025 GMT Subject: CN=2d37a7686f5767815ecc4da2ec2f27aedd1a8c4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:29:c0:ab:19:ed:40:25:e0:11:d5:db:61:09: 92:34:89:ee:01:cb:25:75:4e:80:16:9b:e3:9f:6f: a3:8d:59:fb:fd:38:25:88:c6:97:c5:1e:f1:8c:7f: f4:7e:ca:82:1d:5e:99:1c:91:e7:72:a4:6c:76:a2: 56:da:60:76:a6:79:d0:9a:26:07:91:bc:b7:e0:f9: 92:96:ad:4b:16:02:4a:7f:50:39:74:50:59:6a:00: d5:6c:ea:a4:45:d2:5b:14:fd:6b:a6:b3:92:25:67: 1d:18:ec:86:63:fa:3e:2c:a6:aa:e7:8e:2d:fd:7a: 2c:61:6e:79:18:b0:53:25:b0:ec:8f:e6:0b:65:fa: e6:e6:03:7d:0e:98:f7:28:af:59:e7:94:d3:b7:43: 9d:2b:92:d5:f2:94:52:52:8a:bc:10:75:6c:df:41: 82:d3:e7:bc:79:04:a6:93:1d:7b:2b:f9:62:41:e5: a3:5f:fc:a2:5a:e3:fa:6b:19:ef:0d:a0:19:f5:c2: 7c:87:d2:61:af:8c:0b:20:aa:3d:21:6e:5e:84:1f: 6e:ba:29:06:7e:3e:af:28:f5:5d:82:57:1a:e1:17: 7c:4e:b0:6c:44:cc:1a:36:c7:0b:97:d5:5a:8e:bc: f7:1d:30:e5:b4:f9:d8:6e:f0:71:d3:d1:5d:6f:1b: e4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:37:A7:68:6F:57:67:81:5E:CC:4D:A2:EC:2F:27:AE:DD:1A:8C:4F X509v3 Authority Key Identifier: keyid:A6:76:9C:D3:03:E8:4D:CD:37:A3:75:D6:E7:6B:60:29:FC:C3:67:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnac0wPoTc03o3XW52tgKfzDZ7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:e2:46:3a:12:c4:80:0d:d3:42:14:45:35:8d:1e:15:8a:34: bb:b2:96:5a:b1:23:7d:d9:03:9f:50:3e:a9:ba:ee:b8:30:c7: f0:bb:a9:68:98:e8:66:e0:06:8f:04:87:64:e6:da:31:4b:99: 5d:88:62:34:15:e0:ef:3a:d3:b8:af:61:20:08:73:d8:35:0b: a6:0a:7b:ab:9d:0f:3f:58:9d:76:87:b3:f1:5f:c4:91:ad:93: 2d:81:d4:b8:2a:78:12:f3:9d:df:d5:62:9f:c7:18:d8:34:97: 56:a7:73:ca:91:9f:10:c8:55:2a:82:1a:b8:c3:c2:9b:2c:03: c3:c6:91:66:ed:bb:cb:a8:bb:a6:e1:35:c6:5d:25:1e:e4:75: 43:00:d9:17:dc:29:37:7f:cb:74:48:49:9a:cd:db:55:6f:4a: 57:52:87:a1:60:ae:b1:97:17:df:e7:92:3f:dd:2a:b9:bf:80: 3a:2c:8d:af:be:25:74:56:6b:60:72:0e:a9:fa:bc:5f:82:2f: 63:34:f6:96:8b:c9:2b:23:0d:02:fc:dd:45:57:65:63:bb:05: 1d:a9:4d:60:0e:bb:f2:a3:6d:0b:95:b1:78:2b:57:e8:c2:7e: 23:3e:b6:08:65:03:f8:04:b9:f9:80:cd:4c:f8:1c:b2:8f:08: 66:8f:8d:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr3L21kIEgKiinXo0KDjV84MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NzY5Y2QzMDNlODRkY2QzN2EzNzVkNmU3NmI2MDI5ZmNj MzY3YjQwHhcNMjUxMjA3MDUwMTExWhcNMjUxMjA4MDUwMTExWjAzMTEwLwYDVQQD EygyZDM3YTc2ODZmNTc2NzgxNWVjYzRkYTJlYzJmMjdhZWRkMWE4YzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSnAqxntQCXgEdXbYQmSNInuAcsl dU6AFpvjn2+jjVn7/TgliMaXxR7xjH/0fsqCHV6ZHJHncqRsdqJW2mB2pnnQmiYH kby34PmSlq1LFgJKf1A5dFBZagDVbOqkRdJbFP1rprOSJWcdGOyGY/o+LKaq544t /XosYW55GLBTJbDsj+YLZfrm5gN9Dpj3KK9Z55TTt0OdK5LV8pRSUoq8EHVs30GC 0+e8eQSmkx17K/liQeWjX/yiWuP6axnvDaAZ9cJ8h9Jhr4wLIKo9IW5ehB9uuikG fj6vKPVdglca4Rd8TrBsRMwaNscLl9Vajrz3HTDltPnYbvBx09FdbxvkVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC03p2hvV2eBXsxNouwvJ67dGoxPMB8GA1UdIwQY MBaAFKZ2nNMD6E3NN6N11udrYCn8w2e0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcG5hYzB3UG9UYzAzbzNYVzUydGdLZnpEWjdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wMjM3YmMtOWQ1ZC00ZGI0LWFmOWIt OTdhN2I5MzI3Nzg3LzEvcG5hYzB3UG9UYzAzbzNYVzUydGdLZnpEWjdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8wMjM3YmMtOWQ1ZC00ZGI0LWFmOWItOTdhN2I5MzI3Nzg3 LzEvcG5hYzB3UG9UYzAzbzNYVzUydGdLZnpEWjdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN+JGOhLE gA3TQhRFNY0eFYo0u7KWWrEjfdkDn1A+qbruuDDH8LupaJjoZuAGjwSHZObaMUuZ XYhiNBXg7zrTuK9hIAhz2DULpgp7q50PP1iddoez8V/Eka2TLYHUuCp4EvOd39Vi n8cY2DSXVqdzypGfEMhVKoIauMPCmywDw8aRZu27y6i7puE1xl0lHuR1QwDZF9wp N3/LdEhJms3bVW9KV1KHoWCusZcX3+eSP90qub+AOiyNr74ldFZrYHIOqfq8X4Iv YzT2lovJKyMNAvzdRVdlY7sFHalNYA678qNtC5WxeCtX6MJ+Iz62CGUD+AS5+YDN TPgcso8IZo+NhA== -----END CERTIFICATE-----Generated at Sun Dec 7 12:03:02 2025 by rpki-client