This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft File: pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft (raw, json) Hash identifier: c75li9v4wdKKVWn1CrcHWJxtjwMtP98Vo9HEs9Loh4s= Subject key identifier: A4:1F:16:66:20:8E:93:DC:B3:A7:53:A7:93:A4:91:3C:49:0A:E9:12 Authority key identifier: A4:AA:9B:CD:06:EA:6C:56:5D:D9:07:CA:04:E5:07:7D:68:C0:66:4F Certificate issuer: /CN=a4aa9bcd06ea6c565dd907ca04e5077d68c0664f Certificate serial: 019B26D2710C92E00BD0B1234EB11569E0F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKqbzQbqbFZd2QfKBOUHfWjAZk8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft Manifest number: 177B Signing time: Tue 16 Dec 2025 11:01:24 +0000 Manifest this update: Tue 16 Dec 2025 11:01:24 +0000 Manifest next update: Wed 17 Dec 2025 11:01:24 +0000 Files and hashes: 1: pKqbzQbqbFZd2QfKBOUHfWjAZk8.crl (hash: W7c5C0PCBHP3bN+Zl8cw2LIUT0De4CbJ5GmXamI9czM=) 2: vUo_vlJ6sLUoSusR9Owa3qVO6yc.roa (hash: tQbWOVu74034awYo0QKVFApUcQf9SPwefFwA/Lt3iQE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.crl rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft rsync://rpki.ripe.net/repository/DEFAULT/pKqbzQbqbFZd2QfKBOUHfWjAZk8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 11:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:d2:71:0c:92:e0:0b:d0:b1:23:4e:b1:15:69:e0:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4aa9bcd06ea6c565dd907ca04e5077d68c0664f Validity Not Before: Dec 16 11:01:24 2025 GMT Not After : Dec 17 11:01:24 2025 GMT Subject: CN=a41f1666208e93dcb3a753a793a4913c490ae912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:cd:f2:69:9e:a2:69:88:e3:ae:91:8e:18:71: 7e:34:dc:cb:71:56:4b:87:9c:4a:1b:f3:aa:51:70: 48:ca:6c:af:59:c5:95:32:de:38:3f:33:c2:f0:df: fa:b6:4e:1f:d0:ed:93:04:25:80:4b:da:dc:00:f0: 00:c9:bd:82:14:1a:9b:f2:1f:4f:8a:bd:89:be:a1: 5a:f0:38:c3:10:7a:8f:c6:e6:71:b1:90:1d:79:f3: 5f:42:c1:af:16:a1:6b:7c:79:c8:fe:8e:95:57:b6: 17:27:72:11:a7:e3:f2:e0:51:11:bf:a5:75:2b:e6: 2a:2d:8a:a0:2b:11:7a:fb:d3:cf:8b:be:a8:9a:3e: 57:8f:c8:38:31:31:42:a1:6f:1f:10:6c:77:ae:fd: b4:a6:de:15:73:34:ef:4c:f0:2d:30:b4:41:80:ef: 67:b2:e7:6a:f4:6d:e5:eb:a6:0d:18:b8:98:e9:dc: 32:6d:96:4b:38:13:38:df:1e:c3:ca:fc:e6:4c:5f: 93:b5:5d:ff:bd:da:3e:98:a7:f4:c0:f2:93:26:e2: 61:79:29:1e:3e:d3:b8:5c:b2:28:62:ac:25:90:96: 42:34:33:c3:35:bc:34:1d:87:f8:d0:d5:2a:d3:f2: ac:7c:13:ec:70:28:75:9a:6e:6d:fb:d1:69:b3:88: df:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:1F:16:66:20:8E:93:DC:B3:A7:53:A7:93:A4:91:3C:49:0A:E9:12 X509v3 Authority Key Identifier: keyid:A4:AA:9B:CD:06:EA:6C:56:5D:D9:07:CA:04:E5:07:7D:68:C0:66:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKqbzQbqbFZd2QfKBOUHfWjAZk8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:3c:7d:d3:70:5c:32:e8:80:35:2a:c9:73:00:e6:17:8d:25: 45:cd:b1:20:15:76:14:80:4b:19:e4:bc:27:f9:a8:0e:a3:b8: e0:be:59:ef:f4:0f:a1:45:f7:d7:1b:8e:50:f6:6b:51:da:8f: b4:3e:61:e9:6f:46:b0:4f:49:fc:7f:0e:4b:6b:17:22:37:91: 41:6f:55:0e:02:25:e0:fd:da:d4:92:ac:bf:15:ab:b7:06:1a: 4c:fa:3d:d2:89:5e:90:d5:b1:db:40:9e:14:0a:61:19:88:be: b1:cb:58:4d:19:c5:13:bc:84:3b:63:77:4f:21:e7:2c:11:82: 70:d9:9c:3b:95:43:c5:9a:a6:45:0e:82:da:12:50:4e:d9:30: 3b:61:a0:1a:97:2d:ee:c9:c6:f6:c7:e8:4c:5f:70:81:8a:c0: fc:2c:30:a6:35:13:40:2b:0b:75:be:8f:3b:ee:a3:60:38:87: a0:9c:59:b9:01:3c:d8:af:dd:fb:39:b2:9c:1b:d8:9c:da:6a: da:8c:80:1e:0f:5b:bd:b6:5f:14:56:08:ef:b7:99:83:24:42: 6f:5d:75:aa:af:0e:0a:78:17:37:52:95:f2:b5:80:00:3f:d9: 1f:3e:a8:88:ca:5b:15:2e:a4:73:1e:61:32:30:b0:33:e5:8b: 1f:dc:18:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsm0nEMkuAL0LEjTrEVaeD0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YWE5YmNkMDZlYTZjNTY1ZGQ5MDdjYTA0ZTUwNzdkNjhj MDY2NGYwHhcNMjUxMjE2MTEwMTI0WhcNMjUxMjE3MTEwMTI0WjAzMTEwLwYDVQQD EyhhNDFmMTY2NjIwOGU5M2RjYjNhNzUzYTc5M2E0OTEzYzQ5MGFlOTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7c3yaZ6iaYjjrpGOGHF+NNzLcVZL h5xKG/OqUXBIymyvWcWVMt44PzPC8N/6tk4f0O2TBCWAS9rcAPAAyb2CFBqb8h9P ir2JvqFa8DjDEHqPxuZxsZAdefNfQsGvFqFrfHnI/o6VV7YXJ3IRp+Py4FERv6V1 K+YqLYqgKxF6+9PPi76omj5Xj8g4MTFCoW8fEGx3rv20pt4VczTvTPAtMLRBgO9n sudq9G3l66YNGLiY6dwybZZLOBM43x7DyvzmTF+TtV3/vdo+mKf0wPKTJuJheSke PtO4XLIoYqwlkJZCNDPDNbw0HYf40NUq0/KsfBPscCh1mm5t+9Fps4jf2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQfFmYgjpPcs6dTp5OkkTxJCukSMB8GA1UdIwQY MBaAFKSqm80G6mxWXdkHygTlB31owGZPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEtxYnpRYnFiRlpkMlFmS0JPVUhmV2pBWms4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8wNTJmNGMtYmUzYy00ZDE5LWFhMDQt MGFiOGRkOWViYWIxLzEvcEtxYnpRYnFiRlpkMlFmS0JPVUhmV2pBWms4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8wNTJmNGMtYmUzYy00ZDE5LWFhMDQtMGFiOGRkOWViYWIx LzEvcEtxYnpRYnFiRlpkMlFmS0JPVUhmV2pBWms4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIjx903Bc MuiANSrJcwDmF40lRc2xIBV2FIBLGeS8J/moDqO44L5Z7/QPoUX31xuOUPZrUdqP tD5h6W9GsE9J/H8OS2sXIjeRQW9VDgIl4P3a1JKsvxWrtwYaTPo90olekNWx20Ce FAphGYi+sctYTRnFE7yEO2N3TyHnLBGCcNmcO5VDxZqmRQ6C2hJQTtkwO2GgGpct 7snG9sfoTF9wgYrA/CwwpjUTQCsLdb6PO+6jYDiHoJxZuQE82K/d+zmynBvYnNpq 2oyAHg9bvbZfFFYI77eZgyRCb111qq8OCngXN1KV8rWAAD/ZHz6oiMpbFS6kcx5h MjCwM+WLH9wYWA== -----END CERTIFICATE-----Generated at Tue Dec 16 17:43:45 2025 by rpki-client