This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft File: pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft (raw, json) Hash identifier: vXQQOHmK9z23HQk31cuYY69dbqJ3JzGD+wRY32oDO4E= Subject key identifier: C2:21:6F:9D:4C:4F:A3:1D:54:80:46:F6:38:C8:34:1A:A8:D1:92:CE Authority key identifier: A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4 Certificate issuer: /CN=a647893fb5b348e68a66d55a28f278cbf3931df4 Certificate serial: 019B3E6DFC0B2323B2C9FF67779D51090B20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft Manifest number: 0B7C Signing time: Sun 21 Dec 2025 01:02:33 +0000 Manifest this update: Sun 21 Dec 2025 01:02:33 +0000 Manifest next update: Mon 22 Dec 2025 01:02:33 +0000 Files and hashes: 1: pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl (hash: yFQx6ekSeQ55PEIaUqFzYlg5ksk/k5Ms+eDpNSjSNYU=) 2: po_LVWpbKXE3R88IVy-uZ3WJPNw.roa (hash: K+p2Dato5TDcm+bOMSRlFPytRWT6WZtTR14LVyHGo2g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:fc:0b:23:23:b2:c9:ff:67:77:9d:51:09:0b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a647893fb5b348e68a66d55a28f278cbf3931df4 Validity Not Before: Dec 21 01:02:33 2025 GMT Not After : Dec 22 01:02:33 2025 GMT Subject: CN=c2216f9d4c4fa31d548046f638c8341aa8d192ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:20:0d:e8:6a:8f:79:89:38:01:d1:a1:56:aa: 37:87:70:b6:fb:70:bc:8a:08:8c:08:3f:7b:73:9d: cb:69:90:20:0c:45:e8:e7:0f:91:92:8a:1a:d1:ef: 94:a5:43:31:89:ce:53:da:cb:06:57:52:5c:ba:3e: fb:b7:11:f9:b3:39:55:9b:58:43:a4:d8:c9:95:af: 5a:2f:aa:b1:76:7a:9e:08:2c:1b:7a:3a:a8:b7:c2: af:7b:60:b5:49:e0:ad:e2:8b:0c:24:43:76:94:b9: dd:4e:49:64:3d:76:b0:36:b3:65:7d:2f:2d:8c:a3: c5:a0:9e:a8:72:a5:1a:ec:1b:bd:d7:35:af:85:33: d0:e2:f1:f3:72:95:c1:47:4f:a8:55:36:88:11:84: 34:c5:4a:79:e7:f7:88:6a:1b:27:c6:8c:0b:53:ea: c7:c6:af:79:4a:59:06:cb:1d:a0:52:79:af:33:8e: 4d:e4:74:05:da:7a:30:f7:fe:1f:15:ec:99:c4:57: 09:e2:0e:d5:e9:7b:11:7e:73:a9:1d:a7:56:30:0b: 87:85:9c:c2:ff:dd:09:26:6f:da:f2:33:32:a1:6c: 04:ea:78:25:a6:5b:92:ea:34:76:81:e6:7e:4d:a4: 4c:d0:1d:94:4b:49:22:b1:e6:a8:0a:7e:2d:cf:10: 3c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:21:6F:9D:4C:4F:A3:1D:54:80:46:F6:38:C8:34:1A:A8:D1:92:CE X509v3 Authority Key Identifier: keyid:A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:aa:fc:3d:de:60:ea:72:f8:c4:a3:8f:25:5e:0b:c2:dd:cf: 60:e4:2f:f0:34:9b:0d:d5:5c:b4:20:64:38:73:e4:30:12:8a: 1e:71:67:b2:87:fa:08:70:08:f3:a7:b2:09:88:ec:c8:0d:26: c6:73:a3:6d:4d:0f:45:1e:f7:43:1a:04:34:16:e9:7e:c2:4f: b2:14:61:13:c1:72:d7:c2:0c:63:fb:31:2c:50:be:b5:43:fa: 5e:56:d8:f9:73:26:0b:8a:82:7d:42:61:41:18:2c:35:bd:67: d4:c0:10:11:26:e0:b7:5b:15:3f:18:bf:fd:7b:65:66:ce:8f: 2a:e4:39:35:d4:a8:07:9f:b4:5d:aa:59:4e:dc:fe:9d:0c:72: 0a:ff:9e:57:22:c0:f5:09:53:29:43:e7:b4:d1:3e:f3:6a:28: f3:88:47:ca:d6:b0:52:1c:b1:44:4c:55:4f:12:90:95:90:ef: a3:51:12:6d:85:98:4f:4c:f8:83:d9:44:72:b4:a9:09:e0:3b: f8:0e:e7:9f:85:c4:27:98:d3:fe:9e:78:e5:ec:44:7d:24:a4: d0:02:b5:57:0c:d8:22:2f:66:b7:33:81:f9:fd:ba:4b:7c:ac: 65:2e:2e:cf:13:29:96:ad:ad:95:aa:50:26:c2:6c:86:bc:f6: 09:60:ca:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bfwLIyOyyf9nd51RCQsgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NDc4OTNmYjViMzQ4ZTY4YTY2ZDU1YTI4ZjI3OGNiZjM5 MzFkZjQwHhcNMjUxMjIxMDEwMjMzWhcNMjUxMjIyMDEwMjMzWjAzMTEwLwYDVQQD EyhjMjIxNmY5ZDRjNGZhMzFkNTQ4MDQ2ZjYzOGM4MzQxYWE4ZDE5MmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyAN6GqPeYk4AdGhVqo3h3C2+3C8 igiMCD97c53LaZAgDEXo5w+Rkooa0e+UpUMxic5T2ssGV1Jcuj77txH5szlVm1hD pNjJla9aL6qxdnqeCCwbejqot8Kve2C1SeCt4osMJEN2lLndTklkPXawNrNlfS8t jKPFoJ6ocqUa7Bu91zWvhTPQ4vHzcpXBR0+oVTaIEYQ0xUp55/eIahsnxowLU+rH xq95SlkGyx2gUnmvM45N5HQF2now9/4fFeyZxFcJ4g7V6XsRfnOpHadWMAuHhZzC /90JJm/a8jMyoWwE6nglpluS6jR2geZ+TaRM0B2US0kiseaoCn4tzxA8lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMIhb51MT6MdVIBG9jjINBqo0ZLOMB8GA1UdIwQY MBaAFKZHiT+1s0jmimbVWijyeMvzkx30MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGtlSlA3V3pTT2FLWnRWYUtQSjR5X09USGZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kYThjYjEtMWJmYy00M2ZkLWEwZDIt ZDYyNDQ5NmRkY2M4LzEvcGtlSlA3V3pTT2FLWnRWYUtQSjR5X09USGZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9kYThjYjEtMWJmYy00M2ZkLWEwZDItZDYyNDQ5NmRkY2M4 LzEvcGtlSlA3V3pTT2FLWnRWYUtQSjR5X09USGZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgar8Pd5g 6nL4xKOPJV4Lwt3PYOQv8DSbDdVctCBkOHPkMBKKHnFnsof6CHAI86eyCYjsyA0m xnOjbU0PRR73QxoENBbpfsJPshRhE8Fy18IMY/sxLFC+tUP6XlbY+XMmC4qCfUJh QRgsNb1n1MAQESbgt1sVPxi//XtlZs6PKuQ5NdSoB5+0XapZTtz+nQxyCv+eVyLA 9QlTKUPntNE+82oo84hHytawUhyxRExVTxKQlZDvo1ESbYWYT0z4g9lEcrSpCeA7 +A7nn4XEJ5jT/p545exEfSSk0AK1VwzYIi9mtzOB+f26S3ysZS4uzxMplq2tlapQ JsJshrz2CWDKQA== -----END CERTIFICATE-----Generated at Sun Dec 21 10:34:25 2025 by rpki-client