This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft File: pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft (raw, json) Hash identifier: wMxFmmHUJi0Y7gdXvHxS4FAA+KvxEKA384Nk3w2IClk= Subject key identifier: 33:2A:6C:3B:24:20:19:06:B4:79:1D:E8:94:89:7F:4A:E0:F3:ED:F8 Authority key identifier: A4:F6:D6:57:C0:FA:21:82:8D:31:35:07:35:4D:EC:14:81:58:0E:D6 Certificate issuer: /CN=a4f6d657c0fa21828d313507354dec1481580ed6 Certificate serial: 019B3F7EE2AC78A645928D856DD80582355B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft Manifest number: 0124 Signing time: Sun 21 Dec 2025 06:00:38 +0000 Manifest this update: Sun 21 Dec 2025 06:00:38 +0000 Manifest next update: Mon 22 Dec 2025 06:00:38 +0000 Files and hashes: 1: alAqnpdWmlZswzu0_tz6FMnDdhY.roa (hash: M7Rrc8n9kYkHNkPjYV4H2sgmRO3YC2Zds6sffNzRLow=) 2: nDjykDgCRY5PJeZrLhezjP3d1sg.roa (hash: f6z3v4pV6tnSGxv48rgOnvHwC9qgyyjVMA6AIzAEA7k=) 3: pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl (hash: RRaDR81990PP5ubgjDbQArAdehYJ3SkERN6HhV2OfTs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 06:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7e:e2:ac:78:a6:45:92:8d:85:6d:d8:05:82:35:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4f6d657c0fa21828d313507354dec1481580ed6 Validity Not Before: Dec 21 06:00:38 2025 GMT Not After : Dec 22 06:00:38 2025 GMT Subject: CN=332a6c3b24201906b4791de894897f4ae0f3edf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:47:bd:56:41:a5:df:05:f0:96:2a:f9:a0:98: 96:ac:40:16:e2:bb:06:db:ca:b1:3b:1f:bd:1b:f6: 08:7a:81:bc:a9:29:4e:d7:9e:d4:ef:b0:69:d1:6c: 88:e9:42:64:03:1e:e3:74:9a:48:e3:c5:92:23:a8: a9:2f:e6:a2:33:cc:a4:1f:86:cd:d7:01:17:f5:c5: 6d:20:c4:0f:07:f8:d4:7f:a6:21:e2:30:f5:65:3b: 78:e1:62:50:90:21:c1:67:a9:de:37:2a:bb:85:02: 47:e0:fd:d3:cb:c0:7d:40:74:d4:ce:6b:8d:f3:13: e3:09:d5:3f:e1:e2:ef:40:41:ad:a1:e8:15:ba:13: 85:d7:7d:3a:c2:2a:c8:68:81:94:d5:2c:10:c6:8a: d2:38:aa:cd:4d:b8:7a:e7:3d:05:2c:c6:d6:14:8b: fe:33:68:2d:c1:9b:f1:b3:80:34:54:08:b6:06:bf: 99:2b:2b:59:be:e5:70:4e:4e:a0:6d:a6:d5:b9:c1: 1b:2e:16:9b:c8:32:f0:28:a3:ce:e3:00:aa:35:62: 89:17:ba:c5:c9:31:e1:54:e5:71:99:90:b8:65:2c: 5c:2b:be:c6:09:0d:d6:c9:07:3c:1a:92:6d:28:3b: eb:b6:06:30:31:a9:7a:13:ae:15:72:00:91:c0:c1: cb:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:2A:6C:3B:24:20:19:06:B4:79:1D:E8:94:89:7F:4A:E0:F3:ED:F8 X509v3 Authority Key Identifier: keyid:A4:F6:D6:57:C0:FA:21:82:8D:31:35:07:35:4D:EC:14:81:58:0E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:bc:b4:4c:c4:ae:6f:57:ae:68:00:f0:9b:be:2c:78:a3:8f: 2c:bd:55:00:cd:7a:ef:14:38:ab:c0:87:09:0e:d1:a1:69:f2: e2:bc:8c:59:66:e5:a1:63:2a:d5:f1:b5:14:f5:9d:f4:0b:df: f1:0b:2e:25:72:05:d4:72:79:bc:fb:a1:3c:fa:83:cd:1f:db: 2a:38:d9:84:0d:3c:7a:76:e5:2f:82:0e:98:fe:b3:2a:62:6b: 0d:47:fb:62:d5:8f:36:ef:bd:4b:74:48:43:b4:e1:a1:48:75: 38:ea:53:dd:ae:8b:9a:4a:a6:e2:0b:c1:e0:53:4a:14:cf:84: 3c:4f:e1:34:6b:75:66:17:89:b7:b0:d1:02:69:d2:5e:8a:e7: f6:34:8c:1a:bf:2f:a4:6d:ea:68:24:72:20:49:98:70:49:06: ed:51:2c:96:eb:f0:c9:13:c4:dd:c1:48:ad:ab:5f:d3:e6:03: 10:f7:83:81:eb:68:4d:7c:25:68:fb:f0:e4:49:b1:3c:af:98: c2:30:73:97:73:b9:97:9e:4e:1e:4c:e8:2f:c0:e4:d8:6b:19: 1a:dd:e7:d5:4a:02:5e:05:d9:2e:fc:53:af:2e:04:e5:d0:9f: 72:a5:f2:e0:39:33:4d:3e:ef:76:a4:dd:9f:78:93:2e:9a:1f: f4:e1:4b:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fuKseKZFko2FbdgFgjVbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZjZkNjU3YzBmYTIxODI4ZDMxMzUwNzM1NGRlYzE0ODE1 ODBlZDYwHhcNMjUxMjIxMDYwMDM4WhcNMjUxMjIyMDYwMDM4WjAzMTEwLwYDVQQD EygzMzJhNmMzYjI0MjAxOTA2YjQ3OTFkZTg5NDg5N2Y0YWUwZjNlZGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzke9VkGl3wXwlir5oJiWrEAW4rsG 28qxOx+9G/YIeoG8qSlO157U77Bp0WyI6UJkAx7jdJpI48WSI6ipL+aiM8ykH4bN 1wEX9cVtIMQPB/jUf6Yh4jD1ZTt44WJQkCHBZ6neNyq7hQJH4P3Ty8B9QHTUzmuN 8xPjCdU/4eLvQEGtoegVuhOF1306wirIaIGU1SwQxorSOKrNTbh65z0FLMbWFIv+ M2gtwZvxs4A0VAi2Br+ZKytZvuVwTk6gbabVucEbLhabyDLwKKPO4wCqNWKJF7rF yTHhVOVxmZC4ZSxcK77GCQ3WyQc8GpJtKDvrtgYwMal6E64VcgCRwMHL1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDMqbDskIBkGtHkd6JSJf0rg8+34MB8GA1UdIwQY MBaAFKT21lfA+iGCjTE1BzVN7BSBWA7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFBiV1Y4RDZJWUtOTVRVSE5VM3NGSUZZRHRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8yMzkzOTctMzQ3Ny00Mzc5LWFjNDYt NWMyNzYzNjQ4ZjFjLzEvcFBiV1Y4RDZJWUtOTVRVSE5VM3NGSUZZRHRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8yMzkzOTctMzQ3Ny00Mzc5LWFjNDYtNWMyNzYzNjQ4ZjFj LzEvcFBiV1Y4RDZJWUtOTVRVSE5VM3NGSUZZRHRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVby0TMSu b1euaADwm74seKOPLL1VAM167xQ4q8CHCQ7RoWny4ryMWWbloWMq1fG1FPWd9Avf 8QsuJXIF1HJ5vPuhPPqDzR/bKjjZhA08enblL4IOmP6zKmJrDUf7YtWPNu+9S3RI Q7ThoUh1OOpT3a6Lmkqm4gvB4FNKFM+EPE/hNGt1ZheJt7DRAmnSXorn9jSMGr8v pG3qaCRyIEmYcEkG7VEsluvwyRPE3cFIratf0+YDEPeDgetoTXwlaPvw5EmxPK+Y wjBzl3O5l55OHkzoL8Dk2GsZGt3n1UoCXgXZLvxTry4E5dCfcqXy4DkzTT7vdqTd n3iTLpof9OFL0A== -----END CERTIFICATE-----Generated at Sun Dec 21 16:01:24 2025 by rpki-client