This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft File: pqxtBp2PtzL0_pK04TzX3E05OkI.mft (raw, json) Hash identifier: pJEbDQwM4RjDoAhNzJw3LJXLNKs0sVnF9iHKNsOAykI= Subject key identifier: B4:F9:AF:92:22:C7:0A:89:53:44:02:8D:45:67:A2:42:D5:64:17:63 Authority key identifier: A6:AC:6D:06:9D:8F:B7:32:F4:FE:92:B4:E1:3C:D7:DC:4D:39:3A:42 Certificate issuer: /CN=a6ac6d069d8fb732f4fe92b4e13cd7dc4d393a42 Certificate serial: 019B5419304EA8694E1DEF5D7FB8B3B41596 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft Manifest number: 0D07 Signing time: Thu 25 Dec 2025 06:01:35 +0000 Manifest this update: Thu 25 Dec 2025 06:01:35 +0000 Manifest next update: Fri 26 Dec 2025 06:01:35 +0000 Files and hashes: 1: kORzGbUwfQz_reUfKxE-VKML1Ko.roa (hash: LJNSK27C7NQtNI1BCy3DsB/OzJxofkAzOY3Bw0ai+Lk=) 2: pqxtBp2PtzL0_pK04TzX3E05OkI.crl (hash: +mXEyhkOwUQ5AXBKyAs/y5qgsnLgPOFbqX4aHKNiZko=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:19:30:4e:a8:69:4e:1d:ef:5d:7f:b8:b3:b4:15:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6ac6d069d8fb732f4fe92b4e13cd7dc4d393a42 Validity Not Before: Dec 25 06:01:35 2025 GMT Not After : Dec 26 06:01:35 2025 GMT Subject: CN=b4f9af9222c70a895344028d4567a242d5641763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c1:88:56:55:c0:fa:b5:15:d6:61:e6:6b:90: 72:60:56:c3:44:80:f8:cf:5f:cd:2b:f3:5e:06:bc: f2:ad:17:b4:4d:d6:dd:64:2e:84:6c:c5:ee:01:9e: 3e:53:1f:f4:bd:fd:93:05:41:ae:3e:d7:ba:06:43: 17:fd:84:85:5e:b0:51:dc:f4:77:aa:b5:0e:17:05: 89:cf:15:7c:0a:10:c6:03:1a:2f:33:32:65:b6:9e: ae:c5:1a:57:ff:c6:4e:22:cf:bc:d9:04:33:3b:d3: 25:5d:55:cd:c4:38:d8:ce:e1:6b:df:58:40:c4:65: 8c:8c:0a:07:ba:14:c6:19:04:28:7e:35:fa:c3:4a: 0f:33:8e:7c:51:6b:66:aa:18:ce:38:a2:08:83:ae: 14:f4:47:57:e9:39:86:85:a1:f4:d6:98:2e:5a:00: be:94:d8:22:c7:27:df:4b:8a:44:cb:cb:87:69:dd: 5c:14:cf:65:cb:ed:6c:f5:af:ac:9b:84:a4:66:30: 52:b1:f6:1f:84:b7:56:85:8f:ea:c9:cd:95:44:ed: 2b:87:06:54:25:55:a6:4c:b2:e9:f0:81:cd:d6:0f: 36:1c:6b:b3:89:39:c2:43:a4:5c:74:1d:32:a7:83: 7d:9c:3c:8d:71:b1:f2:3a:cf:7c:1d:38:06:a4:f5: 03:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:F9:AF:92:22:C7:0A:89:53:44:02:8D:45:67:A2:42:D5:64:17:63 X509v3 Authority Key Identifier: keyid:A6:AC:6D:06:9D:8F:B7:32:F4:FE:92:B4:E1:3C:D7:DC:4D:39:3A:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:d6:e9:43:60:88:e7:3e:a3:b2:b3:07:21:70:ef:53:5f:50: 89:65:52:3f:a9:2f:6f:99:d0:27:8d:a7:2f:a4:55:1e:1d:8d: 6c:d1:63:ef:1a:95:4c:8a:75:f7:54:e7:d4:72:1e:c6:d5:e0: 22:63:6a:a0:8d:e8:43:3e:09:2a:72:94:17:d0:76:98:7b:2d: 71:a4:72:4d:91:4a:56:0c:d7:8f:0b:15:f3:5d:f4:b1:a7:39: 14:7a:2c:32:26:27:ef:fa:ec:d8:57:53:19:a8:cf:9c:6b:a1: e6:66:99:31:d8:cd:fc:93:14:9e:35:08:d8:9f:97:46:e1:66: 24:ff:b8:d3:0e:93:d4:14:b1:e7:13:29:df:3d:c0:ee:c9:7e: 2b:63:e9:c3:dc:2b:8f:17:e9:75:18:e7:0c:53:f6:f4:12:6e: 10:10:00:59:62:f7:d2:6c:af:60:fc:b6:67:97:ca:b8:39:6c: a4:94:da:75:5c:8e:b7:11:86:40:19:de:52:98:d7:33:f1:1f: 52:47:fe:e0:d9:b2:d9:67:07:6d:fd:41:00:aa:49:1d:eb:09: e1:c9:71:26:45:1d:dd:bc:66:45:16:0a:01:d5:39:d6:6e:61: e7:6b:9d:97:c1:a4:af:1f:7f:cc:42:c2:9f:79:a9:c6:57:5d: 0f:ec:c2:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUGTBOqGlOHe9df7iztBWWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2YWM2ZDA2OWQ4ZmI3MzJmNGZlOTJiNGUxM2NkN2RjNGQz OTNhNDIwHhcNMjUxMjI1MDYwMTM1WhcNMjUxMjI2MDYwMTM1WjAzMTEwLwYDVQQD EyhiNGY5YWY5MjIyYzcwYTg5NTM0NDAyOGQ0NTY3YTI0MmQ1NjQxNzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosGIVlXA+rUV1mHma5ByYFbDRID4 z1/NK/NeBrzyrRe0TdbdZC6EbMXuAZ4+Ux/0vf2TBUGuPte6BkMX/YSFXrBR3PR3 qrUOFwWJzxV8ChDGAxovMzJltp6uxRpX/8ZOIs+82QQzO9MlXVXNxDjYzuFr31hA xGWMjAoHuhTGGQQofjX6w0oPM458UWtmqhjOOKIIg64U9EdX6TmGhaH01pguWgC+ lNgixyffS4pEy8uHad1cFM9ly+1s9a+sm4SkZjBSsfYfhLdWhY/qyc2VRO0rhwZU JVWmTLLp8IHN1g82HGuziTnCQ6RcdB0yp4N9nDyNcbHyOs98HTgGpPUDCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLT5r5IixwqJU0QCjUVnokLVZBdjMB8GA1UdIwQY MBaAFKasbQadj7cy9P6StOE819xNOTpCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHF4dEJwMlB0ekwwX3BLMDRUelgzRTA1T2tJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9jMDlmMDItNzUxMC00MmVhLWIyODEt YmZhMDNhNjY4NTc3LzEvcHF4dEJwMlB0ekwwX3BLMDRUelgzRTA1T2tJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9jMDlmMDItNzUxMC00MmVhLWIyODEtYmZhMDNhNjY4NTc3 LzEvcHF4dEJwMlB0ekwwX3BLMDRUelgzRTA1T2tJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF9bpQ2CI 5z6jsrMHIXDvU19QiWVSP6kvb5nQJ42nL6RVHh2NbNFj7xqVTIp191Tn1HIextXg ImNqoI3oQz4JKnKUF9B2mHstcaRyTZFKVgzXjwsV8130sac5FHosMiYn7/rs2FdT GajPnGuh5maZMdjN/JMUnjUI2J+XRuFmJP+40w6T1BSx5xMp3z3A7sl+K2Ppw9wr jxfpdRjnDFP29BJuEBAAWWL30myvYPy2Z5fKuDlspJTadVyOtxGGQBneUpjXM/Ef Ukf+4Nmy2WcHbf1BAKpJHesJ4clxJkUd3bxmRRYKAdU51m5h52udl8Gkrx9/zELC n3mpxlddD+zCMw== -----END CERTIFICATE-----Generated at Thu Dec 25 13:05:15 2025 by rpki-client