This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.mft File: pKgNKvhhtwo37AUOAT5t-6lMiz0.mft (raw, json) Hash identifier: KdG1GXrk6zQNNFnwuqafizU78CyXP3Myy02mDTplfZE= Subject key identifier: CE:83:8F:53:66:41:AE:FE:74:99:19:77:FB:9C:6F:C2:BB:EB:F7:92 Authority key identifier: A4:A8:0D:2A:F8:61:B7:0A:37:EC:05:0E:01:3E:6D:FB:A9:4C:8B:3D Certificate issuer: /CN=a4a80d2af861b70a37ec050e013e6dfba94c8b3d Certificate serial: 019B6AD78DF93E1F406A1F04A4181D6FBEBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKgNKvhhtwo37AUOAT5t-6lMiz0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.mft Manifest number: 1044 Signing time: Mon 29 Dec 2025 16:01:09 +0000 Manifest this update: Mon 29 Dec 2025 16:01:09 +0000 Manifest next update: Tue 30 Dec 2025 16:01:09 +0000 Files and hashes: 1: pKgNKvhhtwo37AUOAT5t-6lMiz0.crl (hash: jRIv5uHr4Kk6V14GAkziuwAjQjpfDmPIgEPTyGIj6VQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.mft rsync://rpki.ripe.net/repository/DEFAULT/pKgNKvhhtwo37AUOAT5t-6lMiz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:d7:8d:f9:3e:1f:40:6a:1f:04:a4:18:1d:6f:be:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4a80d2af861b70a37ec050e013e6dfba94c8b3d Validity Not Before: Dec 29 16:01:09 2025 GMT Not After : Dec 30 16:01:09 2025 GMT Subject: CN=ce838f536641aefe74991977fb9c6fc2bbebf792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:96:db:a8:d6:1b:43:51:0f:ff:9d:0d:27:f1: e6:6b:35:87:ab:67:95:1f:75:f2:c2:0c:63:0a:a3: 2d:82:ce:fd:a4:ce:64:9f:cc:2a:8b:b0:d8:4e:50: 3e:dc:0f:75:a7:c3:c4:ca:ce:68:c1:e6:14:72:62: 4e:5f:7a:fd:0d:8f:5c:48:ce:53:2e:c6:e7:8e:4b: 37:0a:cc:c7:6c:53:19:47:55:08:9b:3f:b1:10:48: 4c:00:6d:50:9f:f9:32:46:29:0a:0d:8a:61:6a:85: f5:7d:18:76:c7:44:19:54:bf:23:f0:29:b8:82:8e: 7c:dc:ac:88:73:41:3f:7f:30:af:e2:c1:4d:ed:a9: fd:c0:2e:4b:30:b8:c6:b8:61:be:33:67:83:58:6e: bb:85:f2:a4:01:67:a8:f1:3a:8a:c4:93:33:2f:cb: 5f:df:b1:35:4b:0c:99:33:4e:1e:32:a3:71:eb:2c: 93:4b:f6:fb:e9:02:f2:72:d1:5b:7a:59:85:c2:22: 51:b6:da:80:ac:e1:69:48:60:f5:9a:ef:72:5f:5a: 7d:13:df:a5:c5:fd:3f:95:79:4f:cf:04:61:dc:6e: e7:af:a8:eb:3a:d6:50:24:28:a3:e9:2a:9f:4e:17: a1:aa:b1:ec:83:50:bb:1b:8e:c1:56:6b:25:0b:ca: cb:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:83:8F:53:66:41:AE:FE:74:99:19:77:FB:9C:6F:C2:BB:EB:F7:92 X509v3 Authority Key Identifier: keyid:A4:A8:0D:2A:F8:61:B7:0A:37:EC:05:0E:01:3E:6D:FB:A9:4C:8B:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKgNKvhhtwo37AUOAT5t-6lMiz0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:b6:2b:34:e3:03:7d:8d:0d:d4:3c:84:97:09:24:e2:bd:d4: 0a:fe:a1:cd:22:51:d4:81:92:1d:dd:af:ed:00:99:b1:8d:06: 09:8e:0d:9a:89:19:54:27:94:e3:50:8a:82:25:69:cc:9d:fa: c8:db:90:d0:00:f0:2c:ae:b1:72:9f:66:71:54:f6:8c:9b:99: 24:c0:91:1e:56:68:26:60:3b:11:99:5d:28:a5:70:98:50:a7: 7a:9c:a8:ae:54:12:85:11:23:92:13:c6:a9:64:e4:8f:7b:1d: a0:5e:65:02:22:69:9b:64:1a:8b:d7:db:73:40:b2:51:5e:fb: f4:15:3e:20:cf:8b:b1:36:92:4f:a3:65:23:de:9f:23:ca:4a: 68:5d:a1:39:d1:d0:ee:bc:ab:42:24:9e:18:ea:fd:82:ec:be: f5:14:90:da:88:fc:98:13:3e:3e:e5:e5:34:ee:33:99:5d:9b: e4:af:45:a7:64:79:01:2a:1e:40:c1:bd:b5:ef:46:ec:1d:2c: d3:65:5b:dd:98:47:28:c0:72:1a:f5:7a:58:2d:a8:65:b5:0f: f6:b4:8a:04:2e:ca:99:33:b5:17:98:6f:b9:1e:af:e2:d9:b8: cb:ab:b9:f4:48:62:5c:7b:51:ec:52:c4:4a:2d:29:29:3f:28: 9b:90:c2:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtq1435Ph9Aah8EpBgdb769MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YTgwZDJhZjg2MWI3MGEzN2VjMDUwZTAxM2U2ZGZiYTk0 YzhiM2QwHhcNMjUxMjI5MTYwMTA5WhcNMjUxMjMwMTYwMTA5WjAzMTEwLwYDVQQD EyhjZTgzOGY1MzY2NDFhZWZlNzQ5OTE5NzdmYjljNmZjMmJiZWJmNzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5bbqNYbQ1EP/50NJ/HmazWHq2eV H3XywgxjCqMtgs79pM5kn8wqi7DYTlA+3A91p8PEys5oweYUcmJOX3r9DY9cSM5T Lsbnjks3CszHbFMZR1UImz+xEEhMAG1Qn/kyRikKDYphaoX1fRh2x0QZVL8j8Cm4 go583KyIc0E/fzCv4sFN7an9wC5LMLjGuGG+M2eDWG67hfKkAWeo8TqKxJMzL8tf 37E1SwyZM04eMqNx6yyTS/b76QLyctFbelmFwiJRttqArOFpSGD1mu9yX1p9E9+l xf0/lXlPzwRh3G7nr6jrOtZQJCij6SqfThehqrHsg1C7G47BVmslC8rLQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6Dj1NmQa7+dJkZd/ucb8K76/eSMB8GA1UdIwQY MBaAFKSoDSr4YbcKN+wFDgE+bfupTIs9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEtnTkt2aGh0d28zN0FVT0FUNXQtNmxNaXowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9lYzYyMjUtZDZhNy00MThhLWIwMmYt NjIzNGVhMDllMTg2LzEvcEtnTkt2aGh0d28zN0FVT0FUNXQtNmxNaXowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9lYzYyMjUtZDZhNy00MThhLWIwMmYtNjIzNGVhMDllMTg2 LzEvcEtnTkt2aGh0d28zN0FVT0FUNXQtNmxNaXowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHrYrNOMD fY0N1DyElwkk4r3UCv6hzSJR1IGSHd2v7QCZsY0GCY4NmokZVCeU41CKgiVpzJ36 yNuQ0ADwLK6xcp9mcVT2jJuZJMCRHlZoJmA7EZldKKVwmFCnepyorlQShREjkhPG qWTkj3sdoF5lAiJpm2Qai9fbc0CyUV779BU+IM+LsTaST6NlI96fI8pKaF2hOdHQ 7ryrQiSeGOr9guy+9RSQ2oj8mBM+PuXlNO4zmV2b5K9Fp2R5ASoeQMG9te9G7B0s 02Vb3ZhHKMByGvV6WC2oZbUP9rSKBC7KmTO1F5hvuR6v4tm4y6u59EhiXHtR7FLE Si0pKT8om5DCfg== -----END CERTIFICATE-----Generated at Mon Dec 29 22:47:51 2025 by rpki-client