This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft File: PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft (raw, json) Hash identifier: GW1hPLWEV9QdNYx5FsyhJVuTJ6CxG88kV0Zm6wgsAgw= Subject key identifier: B6:A6:43:86:3C:66:AB:21:CC:E9:4C:FE:7F:87:F2:55:0E:00:9A:51 Authority key identifier: 3D:0B:E4:AE:38:73:55:54:CD:11:81:0A:9C:7D:20:30:19:04:01:98 Certificate issuer: /CN=3d0be4ae38735554cd11810a9c7d203019040198 Certificate serial: 019B2551A4DC555E249A207736E7C4D7CE96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQvkrjhzVVTNEYEKnH0gMBkEAZg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft Manifest number: 015E Signing time: Tue 16 Dec 2025 04:01:06 +0000 Manifest this update: Tue 16 Dec 2025 04:01:06 +0000 Manifest next update: Wed 17 Dec 2025 04:01:06 +0000 Files and hashes: 1: PQvkrjhzVVTNEYEKnH0gMBkEAZg.crl (hash: /UWQkpFVivFMPhfJDjyWV3exC3w4+H2djuTCfi5O+sk=) 2: wNteWWTd3kO9_LbLgZ8L_st_1hk.asa (hash: i8d+j1Jn/9FgwtGIJwS6enHk4LM9vnpGJ8E77jZ6FWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft rsync://rpki.ripe.net/repository/DEFAULT/PQvkrjhzVVTNEYEKnH0gMBkEAZg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 04:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:51:a4:dc:55:5e:24:9a:20:77:36:e7:c4:d7:ce:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d0be4ae38735554cd11810a9c7d203019040198 Validity Not Before: Dec 16 04:01:06 2025 GMT Not After : Dec 17 04:01:06 2025 GMT Subject: CN=b6a643863c66ab21cce94cfe7f87f2550e009a51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:29:44:c2:1e:38:9c:5e:14:c6:91:fb:07:d4: 96:af:30:26:1f:c7:b1:23:0f:6e:8e:34:ea:14:ca: e7:c0:40:ee:8b:dd:c6:2d:1a:7a:2c:93:cf:1a:6d: 30:4a:ab:2f:d2:df:47:08:b7:c7:4f:47:3a:fb:10: 88:8e:b1:13:f0:a9:20:e7:e3:45:e2:9b:73:e4:65: 61:96:2a:4a:d6:2a:f2:aa:ce:7a:4f:fb:40:a8:6a: 6e:2b:c2:16:a1:d3:c8:ca:46:8e:94:d6:54:f8:c3: fd:b9:ea:50:60:fb:f0:3c:a8:97:7f:81:52:bd:93: 6c:44:34:16:11:cf:bc:dd:71:47:5a:08:89:37:ed: ac:3b:29:da:c0:55:6d:7e:8b:14:1a:fa:c6:06:d7: 9a:15:fb:d2:83:db:b8:27:53:df:3b:b1:2a:f8:64: 33:e1:04:68:89:e4:03:d2:7c:72:e7:ba:fa:af:0a: cf:5b:b1:f2:3a:f2:31:06:ea:08:97:78:ba:e5:ea: c9:67:30:b1:de:95:c2:55:15:ef:10:35:1f:a0:3a: 58:42:8f:2c:9f:2e:be:24:90:98:60:e5:d7:2a:ee: 65:24:be:df:da:55:ee:d8:c4:21:1b:46:ae:f1:2c: bf:fc:70:60:38:cc:99:56:da:d6:e1:0e:10:a3:55: da:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A6:43:86:3C:66:AB:21:CC:E9:4C:FE:7F:87:F2:55:0E:00:9A:51 X509v3 Authority Key Identifier: keyid:3D:0B:E4:AE:38:73:55:54:CD:11:81:0A:9C:7D:20:30:19:04:01:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQvkrjhzVVTNEYEKnH0gMBkEAZg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:15:f6:fd:77:65:bc:10:58:e3:59:8c:fd:07:f6:78:b2:b6: 2e:d7:6f:a0:8e:d6:d6:c2:7a:27:5f:4e:9f:ab:79:51:0d:d5: 9f:b0:1f:94:7d:41:ad:5a:06:d1:ad:ec:4a:18:91:81:13:98: 7b:b8:ec:1e:fb:16:fb:1a:5b:79:ad:82:04:a2:45:0d:01:ce: a6:71:4a:12:27:ac:88:b3:65:56:da:23:37:5a:8c:87:a3:6a: 49:68:5c:c4:5d:77:86:10:e2:6a:4f:76:eb:7d:35:cf:a2:b0: 7f:fa:2e:80:5f:d5:c3:1d:53:5a:bc:52:94:69:07:f5:dc:5d: d3:70:e6:b1:30:84:f3:87:c4:10:80:8f:25:c5:8b:65:8d:4a: 90:ba:f5:59:e5:17:a5:4e:a4:f2:a7:20:d6:58:6f:d3:d6:2a: 63:a8:29:db:ca:62:8d:eb:ef:00:a6:d6:7a:4d:38:47:5b:d9: b8:d6:0e:11:9f:56:b9:c7:71:7d:ed:8d:8f:74:6e:c9:7a:dd: 44:85:e9:80:f0:34:35:82:8f:b7:f9:84:00:56:b3:86:68:94: 23:71:62:f9:c3:e5:9d:f7:01:b9:62:1c:c4:cf:99:99:f4:bf: 7c:3f:0f:32:e9:51:c7:d7:14:39:0b:21:d2:e0:b0:63:ff:c9: c6:a6:1a:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUaTcVV4kmiB3NufE186WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkMGJlNGFlMzg3MzU1NTRjZDExODEwYTljN2QyMDMwMTkw NDAxOTgwHhcNMjUxMjE2MDQwMTA2WhcNMjUxMjE3MDQwMTA2WjAzMTEwLwYDVQQD EyhiNmE2NDM4NjNjNjZhYjIxY2NlOTRjZmU3Zjg3ZjI1NTBlMDA5YTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyylEwh44nF4UxpH7B9SWrzAmH8ex Iw9ujjTqFMrnwEDui93GLRp6LJPPGm0wSqsv0t9HCLfHT0c6+xCIjrET8Kkg5+NF 4ptz5GVhlipK1iryqs56T/tAqGpuK8IWodPIykaOlNZU+MP9uepQYPvwPKiXf4FS vZNsRDQWEc+83XFHWgiJN+2sOynawFVtfosUGvrGBteaFfvSg9u4J1PfO7Eq+GQz 4QRoieQD0nxy57r6rwrPW7HyOvIxBuoIl3i65erJZzCx3pXCVRXvEDUfoDpYQo8s ny6+JJCYYOXXKu5lJL7f2lXu2MQhG0au8Sy//HBgOMyZVtrW4Q4Qo1XajQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLamQ4Y8ZqshzOlM/n+H8lUOAJpRMB8GA1UdIwQY MBaAFD0L5K44c1VUzRGBCpx9IDAZBAGYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFF2a3JqaHpWVlRORVlFS25IMGdNQmtFQVpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kNDA0YTAtNzgwZC00M2M4LWI3MjEt ZmQyZWI1NDk3YjVjLzEvUFF2a3JqaHpWVlRORVlFS25IMGdNQmtFQVpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kNDA0YTAtNzgwZC00M2M4LWI3MjEtZmQyZWI1NDk3YjVj LzEvUFF2a3JqaHpWVlRORVlFS25IMGdNQmtFQVpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASxX2/Xdl vBBY41mM/Qf2eLK2LtdvoI7W1sJ6J19On6t5UQ3Vn7AflH1BrVoG0a3sShiRgROY e7jsHvsW+xpbea2CBKJFDQHOpnFKEiesiLNlVtojN1qMh6NqSWhcxF13hhDiak92 6301z6Kwf/ougF/Vwx1TWrxSlGkH9dxd03DmsTCE84fEEICPJcWLZY1KkLr1WeUX pU6k8qcg1lhv09YqY6gp28pijevvAKbWek04R1vZuNYOEZ9Wucdxfe2Nj3RuyXrd RIXpgPA0NYKPt/mEAFazhmiUI3Fi+cPlnfcBuWIcxM+ZmfS/fD8PMulRx9cUOQsh 0uCwY//JxqYaHg== -----END CERTIFICATE-----Generated at Tue Dec 16 12:28:27 2025 by rpki-client