This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft File: PN4kcMhWOUlIej54dDxUTJnsimQ.mft (raw, json) Hash identifier: bYDEoOP5hif8/YQE9zCMd/ndfE56E+vYD2NbIc9oC/A= Subject key identifier: E5:68:B3:8A:36:B3:74:D0:AC:0B:2C:69:36:38:F6:43:EE:19:EA:76 Authority key identifier: 3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64 Certificate issuer: /CN=3cde2470c8563949487a3e78743c544c99ec8a64 Certificate serial: 019B416DB5CE2366AB3B28892D3A15A420F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft Manifest number: 0A0D Signing time: Sun 21 Dec 2025 15:01:07 +0000 Manifest this update: Sun 21 Dec 2025 15:01:07 +0000 Manifest next update: Mon 22 Dec 2025 15:01:07 +0000 Files and hashes: 1: MR6yCa9ahiYB6kt7eFUEnhRZgj0.roa (hash: Q5fLGdiN5URjuSRi8W7fkSayIUiVGY1nf+0ovyfMZAw=) 2: PN4kcMhWOUlIej54dDxUTJnsimQ.crl (hash: RQae99PNaQYg/2otEcOD6wErIhg29kMgPLW/QCSI2s4=) 3: sFFOUDvWTzfSymlwSYpDyp4rZVo.roa (hash: hd1EPhU6XZRPUxka9ECqkCcKF9k2GizgSrw0eDBr9g4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:b5:ce:23:66:ab:3b:28:89:2d:3a:15:a4:20:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cde2470c8563949487a3e78743c544c99ec8a64 Validity Not Before: Dec 21 15:01:07 2025 GMT Not After : Dec 22 15:01:07 2025 GMT Subject: CN=e568b38a36b374d0ac0b2c693638f643ee19ea76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:f2:92:67:35:26:79:c6:01:28:40:db:e2:b6: f3:04:fa:f0:3d:5d:1e:34:96:d5:f6:2d:9d:fd:ca: 19:e0:00:58:94:3c:ac:7e:18:68:30:85:24:e5:40: 36:db:82:7d:ae:ac:b0:79:81:9b:db:ff:7e:75:e8: a8:0f:cc:f6:de:5f:32:ea:94:7d:7e:f6:a7:4c:64: f2:08:f9:e1:06:9b:2f:37:44:2f:e6:80:39:be:7a: 6f:2c:1f:fc:d1:82:2e:59:7f:19:ce:0d:dd:cf:50: 6e:3d:74:57:7d:e6:cc:96:ce:32:6c:e0:80:15:64: 46:bb:18:fd:0e:3c:a7:39:a8:5c:5a:5d:18:74:cb: 08:23:5b:f4:47:c4:2c:b6:f1:2a:24:50:f9:94:b1: ac:a8:e2:6e:9a:e9:7c:e7:59:7e:de:43:90:d4:dd: b0:d3:2d:64:34:dd:0b:95:76:e5:e1:17:f4:1c:e7: 39:e9:b1:51:53:d0:d7:c7:d9:d2:70:54:11:18:c3: 78:7f:d5:d4:56:33:ba:8c:0b:2e:57:52:ab:6b:f4: 23:39:9b:30:14:f3:7b:4f:fb:30:6c:7a:22:1c:23: 4e:16:49:13:ca:db:32:ac:73:25:56:31:20:03:f6: d7:e8:6c:1f:23:e2:1e:b9:1a:9f:68:e5:21:27:89: c3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:68:B3:8A:36:B3:74:D0:AC:0B:2C:69:36:38:F6:43:EE:19:EA:76 X509v3 Authority Key Identifier: keyid:3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:c0:3e:ca:50:3e:8d:5b:fa:0c:d3:6b:d7:7c:3e:84:02:cc: c5:c1:37:05:57:5c:65:8e:87:fd:1f:39:89:db:89:49:d8:b9: c0:f0:33:81:82:65:0e:b3:a2:8b:bb:2f:05:38:83:60:cc:ec: 3e:9f:67:1d:d4:d6:eb:f0:e0:f4:cc:bf:60:60:af:44:61:e8: 51:01:54:8d:6a:f4:46:9e:fd:9d:d4:ad:ff:b6:3f:41:14:5c: d7:f8:a0:4b:07:07:d9:97:e8:14:3c:14:8c:84:ae:bc:d0:6d: 8d:35:44:29:f9:2c:ca:ef:e5:ef:87:2f:fa:9b:91:7e:3c:cb: ca:f4:00:5e:ce:db:8f:42:d9:1f:9b:8e:41:ad:a4:a5:8f:69: 81:34:f3:82:18:5b:6a:69:79:f3:00:ef:3f:ae:ab:1d:4b:79: 52:d9:4a:bd:04:a3:a7:46:ac:dd:0f:ee:c6:68:85:57:e6:1d: 93:82:87:1d:7d:81:eb:63:08:79:ab:b2:49:86:15:f2:94:99: ea:a3:c0:71:3c:0d:ce:0a:db:41:75:02:e6:8c:84:5e:63:ee: 82:1f:3d:a9:52:74:e5:f1:52:7d:ec:bc:9f:89:ae:57:9d:07: 3c:78:ae:34:6b:3d:7f:50:3a:49:b0:33:cb:86:c7:bf:4d:9a: 7f:06:b7:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbbXOI2arOyiJLToVpCDwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjZGUyNDcwYzg1NjM5NDk0ODdhM2U3ODc0M2M1NDRjOTll YzhhNjQwHhcNMjUxMjIxMTUwMTA3WhcNMjUxMjIyMTUwMTA3WjAzMTEwLwYDVQQD EyhlNTY4YjM4YTM2YjM3NGQwYWMwYjJjNjkzNjM4ZjY0M2VlMTllYTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+PKSZzUmecYBKEDb4rbzBPrwPV0e NJbV9i2d/coZ4ABYlDysfhhoMIUk5UA224J9rqyweYGb2/9+deioD8z23l8y6pR9 fvanTGTyCPnhBpsvN0Qv5oA5vnpvLB/80YIuWX8Zzg3dz1BuPXRXfebMls4ybOCA FWRGuxj9DjynOahcWl0YdMsII1v0R8QstvEqJFD5lLGsqOJumul851l+3kOQ1N2w 0y1kNN0LlXbl4Rf0HOc56bFRU9DXx9nScFQRGMN4f9XUVjO6jAsuV1Kra/QjOZsw FPN7T/swbHoiHCNOFkkTytsyrHMlVjEgA/bX6GwfI+IeuRqfaOUhJ4nDOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOVos4o2s3TQrAssaTY49kPuGep2MB8GA1UdIwQY MBaAFDzeJHDIVjlJSHo+eHQ8VEyZ7IpkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUE40a2NNaFdPVWxJZWo1NGREeFVUSm5zaW1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9mYTc5Y2YtOGM0Yy00MDk0LWExZjUt NDQxNzFiMmY1OTllLzEvUE40a2NNaFdPVWxJZWo1NGREeFVUSm5zaW1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9mYTc5Y2YtOGM0Yy00MDk0LWExZjUtNDQxNzFiMmY1OTll LzEvUE40a2NNaFdPVWxJZWo1NGREeFVUSm5zaW1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIsA+ylA+ jVv6DNNr13w+hALMxcE3BVdcZY6H/R85iduJSdi5wPAzgYJlDrOii7svBTiDYMzs Pp9nHdTW6/Dg9My/YGCvRGHoUQFUjWr0Rp79ndSt/7Y/QRRc1/igSwcH2ZfoFDwU jISuvNBtjTVEKfksyu/l74cv+puRfjzLyvQAXs7bj0LZH5uOQa2kpY9pgTTzghhb aml58wDvP66rHUt5UtlKvQSjp0as3Q/uxmiFV+Ydk4KHHX2B62MIeauySYYV8pSZ 6qPAcTwNzgrbQXUC5oyEXmPugh89qVJ05fFSfey8n4muV50HPHiuNGs9f1A6SbAz y4bHv02afwa3OA== -----END CERTIFICATE-----Generated at Sun Dec 21 17:27:46 2025 by rpki-client