This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft File: PksGq_B-6qwRslmgj-Fx1mvSgw0.mft (raw, json) Hash identifier: da3EIn5bR8EfbfPDBCPbNd1+fhAt1nVNKm8h77gKRUo= Subject key identifier: 24:1E:A0:EA:DC:B2:F3:2D:26:87:52:31:8B:B1:76:A8:16:B1:A8:B9 Authority key identifier: 3E:4B:06:AB:F0:7E:EA:AC:11:B2:59:A0:8F:E1:71:D6:6B:D2:83:0D Certificate issuer: /CN=3e4b06abf07eeaac11b259a08fe171d66bd2830d Certificate serial: 019B51BC278287B2532F2F8E6B2F62F7AF34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft Manifest number: 0728 Signing time: Wed 24 Dec 2025 19:00:43 +0000 Manifest this update: Wed 24 Dec 2025 19:00:43 +0000 Manifest next update: Thu 25 Dec 2025 19:00:43 +0000 Files and hashes: 1: 75tUj24Sz1np7niKzvR12f9WWo0.roa (hash: 37+oOch5GIb73IinVFHvfdIOejO/FeSmIhgqOGWbqGU=) 2: PksGq_B-6qwRslmgj-Fx1mvSgw0.crl (hash: uu/QqYn0wOdhgyjQlHEDdEZ1gAPkJ/zeI/u+U7OBtY8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.crl rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft rsync://rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:27:82:87:b2:53:2f:2f:8e:6b:2f:62:f7:af:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e4b06abf07eeaac11b259a08fe171d66bd2830d Validity Not Before: Dec 24 19:00:43 2025 GMT Not After : Dec 25 19:00:43 2025 GMT Subject: CN=241ea0eadcb2f32d268752318bb176a816b1a8b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b1:14:c7:2d:8c:9c:b3:ef:7b:df:e4:4a:ad: 2a:55:77:eb:23:ae:68:1a:32:9d:53:18:1a:37:52: 07:10:9f:b2:fe:e4:1c:30:48:06:65:d7:8c:4b:67: 91:d5:73:56:28:f1:da:51:fa:f8:41:fa:f2:08:eb: fd:48:4d:40:52:81:b1:49:15:ce:1e:4c:c6:3a:90: 5e:5b:7d:12:55:7b:6f:67:d1:19:ce:35:52:bf:f4: e9:7b:a4:84:04:b7:73:86:e1:da:e7:50:90:09:38: 5d:a9:ac:b5:a5:4a:05:5b:bd:2d:18:a0:40:d3:5a: d5:6a:80:1d:d1:7d:1e:88:8c:d5:e6:bc:6f:15:f2: 87:6d:4b:51:07:72:3b:90:55:c7:60:04:58:44:c2: 78:3a:97:6a:65:c5:d3:35:46:3f:86:89:db:46:03: 45:6a:82:9d:0f:6a:4f:cc:63:0c:10:94:69:ed:50: 0d:e9:56:16:42:e8:3e:92:3c:02:ea:99:a1:4a:9a: c3:22:06:d7:de:3a:ce:a8:0b:22:65:03:76:80:31: 91:4b:96:83:b9:f3:ac:a7:17:4a:15:2b:15:c7:04: bd:fb:49:be:17:2a:f0:0b:51:1e:db:f8:3f:33:5d: 64:85:c0:05:ba:09:d8:fa:cd:df:f7:da:e0:eb:85: 2e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:1E:A0:EA:DC:B2:F3:2D:26:87:52:31:8B:B1:76:A8:16:B1:A8:B9 X509v3 Authority Key Identifier: keyid:3E:4B:06:AB:F0:7E:EA:AC:11:B2:59:A0:8F:E1:71:D6:6B:D2:83:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:7b:c2:9c:3f:ed:54:f9:aa:a3:62:c3:3c:5a:77:c1:3c:85: 43:c1:16:26:0e:d7:fd:dc:de:2e:34:60:64:31:38:af:2c:62: a8:e1:4e:94:62:b9:89:43:8d:41:d3:62:3f:df:5d:32:eb:aa: 50:c2:4e:b4:a4:c1:1b:77:b1:92:c1:a1:9a:cd:c7:e0:d4:2b: 6e:e3:2b:4d:9a:37:d9:46:49:2c:02:3a:22:4e:d6:b4:12:50: 55:5b:07:1d:bf:75:62:b7:e2:94:da:17:0f:1e:ff:3f:ae:d9: 05:d7:f7:83:9e:af:6d:08:d9:e2:8a:6b:f6:2b:75:45:83:43: f6:03:6a:24:33:4b:e0:40:ed:2d:3f:4b:db:9a:8d:4a:b0:7a: 09:d4:48:e8:65:4d:9f:bd:1d:da:0d:3c:17:63:cd:3e:5b:6b: 5a:33:53:dd:9b:23:6f:08:90:03:97:44:3c:e3:06:95:0b:07: 68:aa:83:08:6b:cf:a6:93:73:9a:a7:a1:0e:c8:3c:15:9d:98: 4a:af:21:3d:02:dc:bb:19:5a:d1:de:10:be:04:bf:5d:45:99: 90:f7:d7:56:3c:e5:6d:2d:fa:ba:97:6b:f8:ef:8d:74:42:2d: 47:fa:eb:5f:b4:3f:49:41:40:16:1c:8c:f3:6d:e6:27:b4:55: 3a:e3:d7:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvCeCh7JTLy+Oay9i9680MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNGIwNmFiZjA3ZWVhYWMxMWIyNTlhMDhmZTE3MWQ2NmJk MjgzMGQwHhcNMjUxMjI0MTkwMDQzWhcNMjUxMjI1MTkwMDQzWjAzMTEwLwYDVQQD EygyNDFlYTBlYWRjYjJmMzJkMjY4NzUyMzE4YmIxNzZhODE2YjFhOGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLEUxy2MnLPve9/kSq0qVXfrI65o GjKdUxgaN1IHEJ+y/uQcMEgGZdeMS2eR1XNWKPHaUfr4QfryCOv9SE1AUoGxSRXO HkzGOpBeW30SVXtvZ9EZzjVSv/Tpe6SEBLdzhuHa51CQCThdqay1pUoFW70tGKBA 01rVaoAd0X0eiIzV5rxvFfKHbUtRB3I7kFXHYARYRMJ4OpdqZcXTNUY/honbRgNF aoKdD2pPzGMMEJRp7VAN6VYWQug+kjwC6pmhSprDIgbX3jrOqAsiZQN2gDGRS5aD ufOspxdKFSsVxwS9+0m+FyrwC1Ee2/g/M11khcAFugnY+s3f99rg64UuBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCQeoOrcsvMtJodSMYuxdqgWsai5MB8GA1UdIwQY MBaAFD5LBqvwfuqsEbJZoI/hcdZr0oMNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGtzR3FfQi02cXdSc2xtZ2otRngxbXZTZ3cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS80ODM0ODctMmZjNS00MGY2LTk0Zjct NTMwMTc3YzAyZGNjLzEvUGtzR3FfQi02cXdSc2xtZ2otRngxbXZTZ3cwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS80ODM0ODctMmZjNS00MGY2LTk0ZjctNTMwMTc3YzAyZGNj LzEvUGtzR3FfQi02cXdSc2xtZ2otRngxbXZTZ3cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1HvCnD/t VPmqo2LDPFp3wTyFQ8EWJg7X/dzeLjRgZDE4ryxiqOFOlGK5iUONQdNiP99dMuuq UMJOtKTBG3exksGhms3H4NQrbuMrTZo32UZJLAI6Ik7WtBJQVVsHHb91YrfilNoX Dx7/P67ZBdf3g56vbQjZ4opr9it1RYND9gNqJDNL4EDtLT9L25qNSrB6CdRI6GVN n70d2g08F2PNPltrWjNT3ZsjbwiQA5dEPOMGlQsHaKqDCGvPppNzmqehDsg8FZ2Y Sq8hPQLcuxla0d4QvgS/XUWZkPfXVjzlbS36updr+O+NdEItR/rrX7Q/SUFAFhyM 823mJ7RVOuPXpw== -----END CERTIFICATE-----Generated at Wed Dec 24 23:21:11 2025 by rpki-client