This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.mft File: PKap1LWSRrTjNhThpLWRthGOihU.mft (raw, json) Hash identifier: K49pYC2u0cUAeihhhZmiBoP06rIQLudzIJmYCFN3crk= Subject key identifier: FA:24:37:23:C8:71:7A:71:76:22:A7:C3:39:4F:92:34:9E:98:D4:FC Authority key identifier: 3C:A6:A9:D4:B5:92:46:B4:E3:36:14:E1:A4:B5:91:B6:11:8E:8A:15 Certificate issuer: /CN=3ca6a9d4b59246b4e33614e1a4b591b6118e8a15 Certificate serial: 019B4A03DC824E571DB4D6F8369A5A123416 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKap1LWSRrTjNhThpLWRthGOihU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.mft Manifest number: 1332 Signing time: Tue 23 Dec 2025 07:02:05 +0000 Manifest this update: Tue 23 Dec 2025 07:02:05 +0000 Manifest next update: Wed 24 Dec 2025 07:02:05 +0000 Files and hashes: 1: PKap1LWSRrTjNhThpLWRthGOihU.crl (hash: OGRndoI8KeRRAbq8Vq2pElgQzf7J2QDhpxqkcaAXVJA=) 2: Szhjvm0y4QI0uwIjWJbCdPZPvps.roa (hash: Y0iaHG2LAJbIgjzTxyOFn6Uuz+FyO1yYuNhr0qnz3To=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.crl rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.mft rsync://rpki.ripe.net/repository/DEFAULT/PKap1LWSRrTjNhThpLWRthGOihU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:03:dc:82:4e:57:1d:b4:d6:f8:36:9a:5a:12:34:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ca6a9d4b59246b4e33614e1a4b591b6118e8a15 Validity Not Before: Dec 23 07:02:05 2025 GMT Not After : Dec 24 07:02:05 2025 GMT Subject: CN=fa243723c8717a717622a7c3394f92349e98d4fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:82:0d:31:e2:09:d8:b3:21:f1:71:d1:16:64: 38:ff:ba:50:ac:3c:d2:7d:a7:3b:9e:aa:5c:30:0d: 48:0d:4b:c3:f8:07:02:67:8c:ae:c1:3a:34:68:ad: a9:8b:68:82:cd:ed:e8:65:7a:a5:68:21:31:11:ab: 40:25:c4:de:51:9a:dc:ca:f9:f5:d0:e1:19:94:0b: e1:78:a9:52:a6:9b:51:cc:d3:4b:6c:a7:e8:6a:12: 93:41:7b:b4:5f:14:2d:91:ca:29:94:16:f2:7f:d4: 09:45:1b:3a:ab:d9:24:ae:2f:ee:94:df:a3:22:0c: 0d:ed:18:c1:31:79:ec:87:67:a6:23:d6:89:5a:c6: bc:22:28:d6:86:b0:03:55:d7:27:bc:52:7e:03:aa: ed:29:9a:0f:e3:87:de:5a:a1:2a:4f:34:a4:e6:c9: 2d:38:f8:b8:6b:1f:ef:15:bf:6e:2e:ab:3e:f9:b0: 7c:b5:9c:5f:29:a4:a3:3d:d2:93:cd:5d:76:73:37: 45:6d:00:78:29:72:a3:0a:10:13:c6:dc:20:8a:0e: 39:2d:6b:ce:c7:3a:8f:3a:c7:bf:a5:9c:b0:2b:33: 17:5a:45:b8:5b:00:66:28:c8:18:32:a6:59:a5:32: 7f:fd:76:38:d7:7a:8e:40:10:c9:a7:3b:33:0b:9f: 95:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:24:37:23:C8:71:7A:71:76:22:A7:C3:39:4F:92:34:9E:98:D4:FC X509v3 Authority Key Identifier: keyid:3C:A6:A9:D4:B5:92:46:B4:E3:36:14:E1:A4:B5:91:B6:11:8E:8A:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKap1LWSRrTjNhThpLWRthGOihU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:ee:47:31:2f:db:8d:e5:3c:e8:74:70:fe:31:e1:05:af:0c: 43:b1:d6:39:4b:ba:4d:a6:64:77:8d:0f:2a:8d:7d:e2:44:76: 65:61:69:38:de:67:d1:53:db:84:94:81:15:82:2a:f2:8d:63: 0c:e2:09:ac:3c:b1:f1:cd:29:4a:7f:28:61:a8:e0:2a:a3:fe: 72:f9:6d:ef:b6:a5:e6:9d:1c:86:ba:c8:65:32:c5:39:0f:83: e1:f7:67:fe:49:c7:11:ab:d7:71:83:9f:94:de:c5:f8:5b:ac: cf:d1:2d:e3:30:d1:67:3c:ad:0d:6e:c9:6e:19:d0:b7:56:6b: 18:c1:32:e1:b9:5c:01:31:7f:d2:36:fe:ec:e6:a9:ea:5c:0a: ca:2d:b4:07:d8:56:07:39:13:ce:0e:09:d0:ff:e1:82:41:6e: d9:44:fa:c4:27:2e:2d:ff:a1:68:41:bb:89:70:e2:09:86:81: d3:a4:b0:af:9c:30:86:bf:2c:55:df:ee:93:34:b8:d9:83:07: 48:58:29:a8:96:c8:33:dd:e1:88:e1:cb:74:87:4a:9a:3a:3b: 15:0d:93:a3:c5:97:c5:78:fa:a5:9d:6a:59:61:e1:36:8c:53: 67:df:ee:76:1c:75:0a:9c:3b:9d:1d:d1:a4:6f:e6:3f:54:74: 73:3e:cb:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKA9yCTlcdtNb4NppaEjQWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjYTZhOWQ0YjU5MjQ2YjRlMzM2MTRlMWE0YjU5MWI2MTE4 ZThhMTUwHhcNMjUxMjIzMDcwMjA1WhcNMjUxMjI0MDcwMjA1WjAzMTEwLwYDVQQD EyhmYTI0MzcyM2M4NzE3YTcxNzYyMmE3YzMzOTRmOTIzNDllOThkNGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoINMeIJ2LMh8XHRFmQ4/7pQrDzS fac7nqpcMA1IDUvD+AcCZ4yuwTo0aK2pi2iCze3oZXqlaCExEatAJcTeUZrcyvn1 0OEZlAvheKlSpptRzNNLbKfoahKTQXu0XxQtkcoplBbyf9QJRRs6q9kkri/ulN+j IgwN7RjBMXnsh2emI9aJWsa8IijWhrADVdcnvFJ+A6rtKZoP44feWqEqTzSk5skt OPi4ax/vFb9uLqs++bB8tZxfKaSjPdKTzV12czdFbQB4KXKjChATxtwgig45LWvO xzqPOse/pZywKzMXWkW4WwBmKMgYMqZZpTJ//XY413qOQBDJpzszC5+VOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPokNyPIcXpxdiKnwzlPkjSemNT8MB8GA1UdIwQY MBaAFDymqdS1kka04zYU4aS1kbYRjooVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEthcDFMV1NSclRqTmhUaHBMV1J0aEdPaWhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9kZDY1MTgtYmYzNS00YzU4LWI4MWIt OTRiMTQ5M2RmMWYyLzEvUEthcDFMV1NSclRqTmhUaHBMV1J0aEdPaWhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9kZDY1MTgtYmYzNS00YzU4LWI4MWItOTRiMTQ5M2RmMWYy LzEvUEthcDFMV1NSclRqTmhUaHBMV1J0aEdPaWhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN+5HMS/b jeU86HRw/jHhBa8MQ7HWOUu6TaZkd40PKo194kR2ZWFpON5n0VPbhJSBFYIq8o1j DOIJrDyx8c0pSn8oYajgKqP+cvlt77al5p0chrrIZTLFOQ+D4fdn/knHEavXcYOf lN7F+Fusz9Et4zDRZzytDW7JbhnQt1ZrGMEy4blcATF/0jb+7Oap6lwKyi20B9hW BzkTzg4J0P/hgkFu2UT6xCcuLf+haEG7iXDiCYaB06Swr5wwhr8sVd/ukzS42YMH SFgpqJbIM93hiOHLdIdKmjo7FQ2To8WXxXj6pZ1qWWHhNoxTZ9/udhx1Cpw7nR3R pG/mP1R0cz7Lpg== -----END CERTIFICATE-----Generated at Tue Dec 23 09:21:17 2025 by rpki-client