This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft File: pKB83NCVA-z-Pml8wyZphRga6Co.mft (raw, json) Hash identifier: zabSgqpnRFH8oael0lun63XDMtJCQYlT3XdEYYYFkd0= Subject key identifier: 18:09:FA:57:EA:8C:2B:A6:A6:4E:A7:A7:F1:25:0D:F9:A5:BA:31:6B Authority key identifier: A4:A0:7C:DC:D0:95:03:EC:FE:3E:69:7C:C3:26:69:85:18:1A:E8:2A Certificate issuer: /CN=a4a07cdcd09503ecfe3e697cc3266985181ae82a Certificate serial: 019B413730901C420D59CFFDD96EB9D01322 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft Manifest number: 142C Signing time: Sun 21 Dec 2025 14:01:34 +0000 Manifest this update: Sun 21 Dec 2025 14:01:34 +0000 Manifest next update: Mon 22 Dec 2025 14:01:34 +0000 Files and hashes: 1: Hp2ljcULzg53pBCXbKt3KAlFkVw.roa (hash: qsDz5TZedLiWJnxlNWk1Ko36qqmg6+ybGLmJSNA11KU=) 2: pKB83NCVA-z-Pml8wyZphRga6Co.crl (hash: k97txO8spXyrPgLCtk0tMEsMPo8J75Uk4RFnQGp3ylk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.crl rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:37:30:90:1c:42:0d:59:cf:fd:d9:6e:b9:d0:13:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4a07cdcd09503ecfe3e697cc3266985181ae82a Validity Not Before: Dec 21 14:01:34 2025 GMT Not After : Dec 22 14:01:34 2025 GMT Subject: CN=1809fa57ea8c2ba6a64ea7a7f1250df9a5ba316b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7e:98:99:68:03:aa:cd:50:a3:0b:cc:2a:5b: c5:8c:3f:5d:9c:c1:4e:65:72:c8:3a:26:13:cf:5f: e1:20:d0:d9:f9:b6:bf:56:73:6a:c7:00:a3:3b:72: 65:af:48:6f:25:74:85:ae:c3:d4:c3:f0:e4:8f:4a: 73:23:5f:ce:0e:6c:9a:ee:d0:77:97:d9:9c:2a:d2: 7a:1e:a3:00:25:80:32:93:1c:64:a5:de:94:cb:51: 76:45:4e:d8:ac:ce:61:f2:51:54:89:1b:05:ab:d9: 73:06:c8:06:e8:63:8c:52:1b:bd:07:b7:19:87:b4: 3d:76:ac:39:59:db:da:7b:38:b2:f6:6f:e1:a2:32: d7:27:44:41:7d:fe:d9:75:c5:9d:74:f0:13:3b:09: 29:f9:23:9d:9d:c2:25:7d:bd:b0:f9:0a:09:37:f0: ac:63:30:52:d8:5d:95:a5:4c:10:fa:d8:26:9e:7b: 6f:90:6a:00:30:58:bc:ad:14:a3:5e:96:ea:82:ba: 82:90:aa:47:84:fb:8c:57:c8:c7:f0:f5:2e:b3:03: ce:03:ea:c4:71:ab:cb:77:c5:1b:f0:63:84:a9:3c: a5:3d:21:d7:19:a9:a5:9e:14:57:78:20:eb:04:77: e4:c9:6f:89:64:80:29:d4:80:93:16:db:5d:d9:1b: 2a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:09:FA:57:EA:8C:2B:A6:A6:4E:A7:A7:F1:25:0D:F9:A5:BA:31:6B X509v3 Authority Key Identifier: keyid:A4:A0:7C:DC:D0:95:03:EC:FE:3E:69:7C:C3:26:69:85:18:1A:E8:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:1e:1d:46:65:63:ad:8b:20:ea:e3:93:a1:a3:19:a2:9a:ea: 94:0c:2f:c0:e9:4e:bf:41:94:08:f0:c4:50:dd:41:7f:cc:d0: 33:f4:29:06:0b:d4:c1:22:94:d0:cf:51:40:e2:d5:d3:7c:67: 77:c1:03:3d:4a:21:68:ea:51:86:28:9d:38:e6:39:2e:0a:95: 69:f3:4a:d9:49:9a:75:b9:c6:6e:a8:9f:48:9b:e4:6e:cb:2a: 28:43:d9:98:80:b3:fe:9b:79:28:9f:97:9f:1d:4f:b5:55:55: 3e:25:7c:c9:78:e8:c7:85:aa:2f:6e:77:cc:93:0c:63:b2:db: 6b:3e:53:1d:de:8f:84:74:a7:fb:ea:34:e8:4f:51:f1:a8:ab: 1b:36:36:4f:5f:6f:64:1e:39:ef:5b:8e:a6:18:e5:02:e9:17: 77:3c:5a:7f:78:a1:46:11:13:80:da:ea:80:f7:5d:7d:cf:a0: 3e:a1:84:3f:ce:5d:b2:f4:96:51:73:0a:e6:0b:16:88:54:c5: 64:e9:93:56:50:75:03:42:ea:a1:7d:75:7d:31:c4:2a:04:6b: 18:22:1d:19:46:a9:ee:a2:bf:a7:d6:50:d3:07:3e:2c:83:e4: 5a:40:c1:08:28:6a:a0:4c:b3:e5:b4:b0:54:87:95:e1:b5:01: 2b:d7:53:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNzCQHEINWc/92W650BMiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YTA3Y2RjZDA5NTAzZWNmZTNlNjk3Y2MzMjY2OTg1MTgx YWU4MmEwHhcNMjUxMjIxMTQwMTM0WhcNMjUxMjIyMTQwMTM0WjAzMTEwLwYDVQQD EygxODA5ZmE1N2VhOGMyYmE2YTY0ZWE3YTdmMTI1MGRmOWE1YmEzMTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp36YmWgDqs1QowvMKlvFjD9dnMFO ZXLIOiYTz1/hINDZ+ba/VnNqxwCjO3Jlr0hvJXSFrsPUw/Dkj0pzI1/ODmya7tB3 l9mcKtJ6HqMAJYAykxxkpd6Uy1F2RU7YrM5h8lFUiRsFq9lzBsgG6GOMUhu9B7cZ h7Q9dqw5Wdvaeziy9m/hojLXJ0RBff7ZdcWddPATOwkp+SOdncIlfb2w+QoJN/Cs YzBS2F2VpUwQ+tgmnntvkGoAMFi8rRSjXpbqgrqCkKpHhPuMV8jH8PUuswPOA+rE cavLd8Ub8GOEqTylPSHXGamlnhRXeCDrBHfkyW+JZIAp1ICTFttd2RsqUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBgJ+lfqjCumpk6np/ElDfmlujFrMB8GA1UdIwQY MBaAFKSgfNzQlQPs/j5pfMMmaYUYGugqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEtCODNOQ1ZBLXotUG1sOHd5WnBoUmdhNkNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9kODU0OGMtMzBiMS00OGE0LWFlMjgt ZDZiMGJjOTBmMmY1LzEvcEtCODNOQ1ZBLXotUG1sOHd5WnBoUmdhNkNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9kODU0OGMtMzBiMS00OGE0LWFlMjgtZDZiMGJjOTBmMmY1 LzEvcEtCODNOQ1ZBLXotUG1sOHd5WnBoUmdhNkNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmB4dRmVj rYsg6uOToaMZoprqlAwvwOlOv0GUCPDEUN1Bf8zQM/QpBgvUwSKU0M9RQOLV03xn d8EDPUohaOpRhiidOOY5LgqVafNK2UmadbnGbqifSJvkbssqKEPZmICz/pt5KJ+X nx1PtVVVPiV8yXjox4WqL253zJMMY7Lbaz5THd6PhHSn++o06E9R8airGzY2T19v ZB4571uOphjlAukXdzxaf3ihRhETgNrqgPddfc+gPqGEP85dsvSWUXMK5gsWiFTF ZOmTVlB1A0LqoX11fTHEKgRrGCIdGUap7qK/p9ZQ0wc+LIPkWkDBCChqoEyz5bSw VIeV4bUBK9dTqg== -----END CERTIFICATE-----Generated at Sun Dec 21 22:16:28 2025 by rpki-client