This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft File: pQl6FWrvL4L_E7PBav9vfhbbAsg.mft (raw, json) Hash identifier: lZaFp0XEuPJgf/Bt1WjOR3EYg1IS+P4OD5nSRVplbBE= Subject key identifier: 2F:64:A7:D4:87:36:25:6B:46:53:0F:0F:C9:89:07:A1:6E:22:D1:B4 Authority key identifier: A5:09:7A:15:6A:EF:2F:82:FF:13:B3:C1:6A:FF:6F:7E:16:DB:02:C8 Certificate issuer: /CN=a5097a156aef2f82ff13b3c16aff6f7e16db02c8 Certificate serial: 019B337AD4E0A452C046E58D4BA6222FC2AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft Manifest number: 0649 Signing time: Thu 18 Dec 2025 22:00:46 +0000 Manifest this update: Thu 18 Dec 2025 22:00:46 +0000 Manifest next update: Fri 19 Dec 2025 22:00:46 +0000 Files and hashes: 1: T0GLC9ivgiSJVwGQ5KIOLCKOjqs.roa (hash: FKLm57miA/xZK8gsx+DBE/lZzuzN5GXUjYHQsCWDe8M=) 2: pQl6FWrvL4L_E7PBav9vfhbbAsg.crl (hash: 5TqwwWO2ItR5Z3W/qeLyOVJTNHymAFXKHq6wcv1jQmA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7a:d4:e0:a4:52:c0:46:e5:8d:4b:a6:22:2f:c2:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5097a156aef2f82ff13b3c16aff6f7e16db02c8 Validity Not Before: Dec 18 22:00:46 2025 GMT Not After : Dec 19 22:00:46 2025 GMT Subject: CN=2f64a7d48736256b46530f0fc98907a16e22d1b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:46:f7:a1:6e:d4:a9:8c:a7:83:58:e5:4e:ef: c1:49:54:73:79:1c:68:64:7c:64:5a:f2:86:5c:f4: d3:09:4d:4f:81:9d:16:29:39:74:e6:eb:1e:ef:bb: 39:eb:6d:10:96:17:16:d5:02:9e:9c:50:d8:76:b9: 20:28:2b:75:48:ec:33:35:b3:2c:42:ec:ec:59:12: 95:bf:77:e7:b1:af:cb:a5:d7:60:30:2f:da:73:39: 2c:92:f3:c7:14:66:d8:59:6a:23:97:72:d4:fd:7b: 5d:43:e7:89:e5:dc:8f:3d:45:3d:ff:55:15:c8:08: d2:38:1d:e5:0c:41:01:eb:30:0d:34:30:c5:11:cd: d7:eb:41:5f:b8:2d:af:c9:5f:be:0c:de:68:bd:d2: f6:1f:1e:f5:7a:2b:8a:ca:49:bc:48:e7:1d:2f:cd: dc:f0:4c:f9:36:10:a4:d5:80:a7:f9:08:c5:b6:4c: d4:01:ef:13:1b:af:77:21:ad:58:24:9a:34:a1:aa: 57:e6:98:19:8a:48:ac:f7:d8:46:f4:f5:bc:71:92: 61:cc:75:da:d5:fb:3e:a9:ee:38:a0:85:68:6f:bf: f5:75:c6:4c:86:87:77:5d:53:07:00:cc:c9:00:2e: 25:c2:7e:29:b3:71:07:98:7b:d6:8c:b6:9b:3d:27: ad:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:64:A7:D4:87:36:25:6B:46:53:0F:0F:C9:89:07:A1:6E:22:D1:B4 X509v3 Authority Key Identifier: keyid:A5:09:7A:15:6A:EF:2F:82:FF:13:B3:C1:6A:FF:6F:7E:16:DB:02:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:b2:53:87:5c:cc:be:12:dc:cd:88:4e:eb:07:38:b7:a2:0e: 82:d8:fc:c8:6c:f9:d2:1d:0b:8c:73:0e:e9:1e:6e:7b:69:01: c9:f4:e1:77:22:e4:ae:db:f2:29:3c:e2:3e:f5:cd:b9:b2:ea: 0e:2d:49:f1:d7:56:dc:5d:f9:f8:b2:94:d9:14:c6:32:e2:04: cb:8c:3f:e9:d6:1c:b5:bd:88:37:dc:a6:a3:87:89:a6:49:fb: 76:1e:53:83:99:a6:82:79:38:66:be:6c:86:ba:09:2f:7c:3a: f2:cc:af:eb:ad:04:25:eb:7f:25:a2:f7:42:8d:9f:fb:68:22: 04:4e:ea:1e:3e:fc:9b:11:49:41:7c:da:c8:54:ea:22:9f:50: 52:49:06:81:e8:46:88:85:43:79:75:f3:a5:a2:23:75:82:f6: ae:d4:30:d8:17:ea:67:8d:55:f6:0e:e4:a9:74:90:18:fd:c6: 0f:04:0b:af:10:0c:80:ce:e9:b0:a9:38:e8:ec:53:09:cd:7b: 52:bb:b6:6a:87:8e:19:43:bb:2d:bf:37:2f:bb:af:50:b8:a1: 59:35:d6:0f:9c:37:c1:2f:da:4e:cc:0d:d9:1a:57:eb:90:1a: 82:8f:c9:d0:93:68:cb:22:04:0f:c0:ec:f8:79:81:c9:20:86: c5:2b:bd:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszetTgpFLARuWNS6YiL8KvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MDk3YTE1NmFlZjJmODJmZjEzYjNjMTZhZmY2ZjdlMTZk YjAyYzgwHhcNMjUxMjE4MjIwMDQ2WhcNMjUxMjE5MjIwMDQ2WjAzMTEwLwYDVQQD EygyZjY0YTdkNDg3MzYyNTZiNDY1MzBmMGZjOTg5MDdhMTZlMjJkMWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ub3oW7UqYyng1jlTu/BSVRzeRxo ZHxkWvKGXPTTCU1PgZ0WKTl05use77s5620QlhcW1QKenFDYdrkgKCt1SOwzNbMs QuzsWRKVv3fnsa/LpddgMC/aczkskvPHFGbYWWojl3LU/XtdQ+eJ5dyPPUU9/1UV yAjSOB3lDEEB6zANNDDFEc3X60FfuC2vyV++DN5ovdL2Hx71eiuKykm8SOcdL83c 8Ez5NhCk1YCn+QjFtkzUAe8TG693Ia1YJJo0oapX5pgZikis99hG9PW8cZJhzHXa 1fs+qe44oIVob7/1dcZMhod3XVMHAMzJAC4lwn4ps3EHmHvWjLabPSetFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC9kp9SHNiVrRlMPD8mJB6FuItG0MB8GA1UdIwQY MBaAFKUJehVq7y+C/xOzwWr/b34W2wLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFFsNkZXcnZMNExfRTdQQmF2OXZmaGJiQXNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi80MmY3ZjgtNzQwNy00MzJkLWJiYjUt MGQzMzk3MDdjYjg4LzEvcFFsNkZXcnZMNExfRTdQQmF2OXZmaGJiQXNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi80MmY3ZjgtNzQwNy00MzJkLWJiYjUtMGQzMzk3MDdjYjg4 LzEvcFFsNkZXcnZMNExfRTdQQmF2OXZmaGJiQXNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZLJTh1zM vhLczYhO6wc4t6IOgtj8yGz50h0LjHMO6R5ue2kByfThdyLkrtvyKTziPvXNubLq Di1J8ddW3F35+LKU2RTGMuIEy4w/6dYctb2IN9ymo4eJpkn7dh5Tg5mmgnk4Zr5s hroJL3w68syv660EJet/JaL3Qo2f+2giBE7qHj78mxFJQXzayFTqIp9QUkkGgehG iIVDeXXzpaIjdYL2rtQw2BfqZ41V9g7kqXSQGP3GDwQLrxAMgM7psKk46OxTCc17 Uru2aoeOGUO7Lb83L7uvULihWTXWD5w3wS/aTswN2RpX65Aago/J0JNoyyIED8Ds +HmBySCGxSu91A== -----END CERTIFICATE-----Generated at Fri Dec 19 01:58:44 2025 by rpki-client