This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft File: pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft (raw, json) Hash identifier: 9oAZbz+1pyJDZqHAfCXWYtdOTsEH3HDjZKue4NDoGZ8= Subject key identifier: A7:F2:0B:45:A4:06:54:AC:16:FE:92:1F:07:AF:DE:CD:56:54:21:7E Authority key identifier: A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4 Certificate issuer: /CN=a647893fb5b348e68a66d55a28f278cbf3931df4 Certificate serial: 019B405BDE9EDA71A662F69BFBAC6E577387 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft Manifest number: 0B7D Signing time: Sun 21 Dec 2025 10:02:01 +0000 Manifest this update: Sun 21 Dec 2025 10:02:01 +0000 Manifest next update: Mon 22 Dec 2025 10:02:01 +0000 Files and hashes: 1: pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl (hash: VGj+rsifR/s0tGSnma3U+DPgxC+ZeVkFRYkyVIeYiio=) 2: po_LVWpbKXE3R88IVy-uZ3WJPNw.roa (hash: K+p2Dato5TDcm+bOMSRlFPytRWT6WZtTR14LVyHGo2g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:de:9e:da:71:a6:62:f6:9b:fb:ac:6e:57:73:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a647893fb5b348e68a66d55a28f278cbf3931df4 Validity Not Before: Dec 21 10:02:01 2025 GMT Not After : Dec 22 10:02:01 2025 GMT Subject: CN=a7f20b45a40654ac16fe921f07afdecd5654217e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:84:99:b3:b2:7c:12:5a:c1:b7:41:36:ce:8c: 7d:29:35:12:20:90:72:c2:fe:47:c3:ca:f2:7d:16: a8:a2:69:f0:52:fc:7b:81:ff:aa:76:82:db:2a:65: dc:70:e7:2e:f0:b9:7d:0b:33:3f:77:fd:14:f4:36: 27:c8:ba:71:b7:b9:91:0f:d2:96:6e:94:51:d0:cb: 59:a9:d8:6b:82:6c:c9:90:4b:0e:6e:28:51:b6:c3: f5:f3:82:c7:53:01:0b:4f:9a:7e:0e:6f:3c:5c:38: 70:ab:9c:88:04:c8:09:81:19:7c:92:16:2c:03:20: f1:5b:fa:12:82:59:6f:16:e2:ef:37:af:e4:83:e9: 22:3a:5d:0b:73:38:5e:9d:9b:c4:b3:7c:19:19:44: 6b:94:c1:2c:88:19:64:5e:57:c5:a3:e0:35:13:7b: c5:38:c5:ab:6a:f8:60:23:fc:db:59:3b:53:04:27: 7f:8d:de:cc:7e:d8:8a:2e:61:4b:32:cf:9b:77:bc: 32:ce:0f:bb:f4:09:97:8b:fe:9c:1a:72:15:c7:31: 69:c2:89:18:d2:c9:0a:1e:8d:40:ce:5f:17:0a:31: a3:f9:79:05:00:34:be:87:10:20:d1:d5:1b:a8:a4: 16:b9:07:c7:d6:be:80:5a:1e:cc:69:cd:e4:51:bf: 09:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F2:0B:45:A4:06:54:AC:16:FE:92:1F:07:AF:DE:CD:56:54:21:7E X509v3 Authority Key Identifier: keyid:A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:d0:84:cb:0b:1d:b9:70:4d:77:d9:78:1f:cc:9a:a9:a8:08: 08:bf:e1:b1:5e:98:5b:27:cf:79:88:20:03:38:49:81:72:22: 75:43:95:7a:ab:a3:90:c1:cb:97:56:68:e2:85:3e:d2:5d:bf: 43:92:d6:3f:f0:32:52:ec:e2:dd:0e:03:51:82:6e:0b:5c:ab: a2:32:aa:39:fe:bd:c8:40:5e:e2:81:39:ab:b1:6f:94:66:51: b3:b9:9a:7a:7d:c1:0c:ef:1a:67:bb:51:42:6d:81:09:64:f4: 53:73:c2:64:2a:6c:1e:c9:6e:a5:93:dd:c1:4d:79:b7:19:94: 4e:56:28:07:22:02:25:00:12:f4:f7:28:1d:9c:7e:9b:50:4b: e2:87:b9:17:04:9d:0d:98:60:2f:e4:e9:af:47:e3:fb:9d:8d: ec:ee:99:30:3d:68:68:2f:45:ee:49:82:2f:44:87:23:4b:a9: 63:a6:eb:84:67:77:72:69:49:7c:96:70:f5:97:a1:11:da:35: 91:d8:35:de:66:eb:a0:e2:00:86:77:b9:a2:44:71:d3:e9:06: 3b:09:23:53:71:f1:3b:cd:31:70:4f:fd:85:7e:7b:dc:03:2b: c0:9e:30:a8:86:59:9b:09:e0:78:61:c9:e0:74:d5:56:83:64: eb:d3:d0:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW96e2nGmYvab+6xuV3OHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NDc4OTNmYjViMzQ4ZTY4YTY2ZDU1YTI4ZjI3OGNiZjM5 MzFkZjQwHhcNMjUxMjIxMTAwMjAxWhcNMjUxMjIyMTAwMjAxWjAzMTEwLwYDVQQD EyhhN2YyMGI0NWE0MDY1NGFjMTZmZTkyMWYwN2FmZGVjZDU2NTQyMTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsISZs7J8ElrBt0E2zox9KTUSIJBy wv5Hw8ryfRaoomnwUvx7gf+qdoLbKmXccOcu8Ll9CzM/d/0U9DYnyLpxt7mRD9KW bpRR0MtZqdhrgmzJkEsObihRtsP184LHUwELT5p+Dm88XDhwq5yIBMgJgRl8khYs AyDxW/oSgllvFuLvN6/kg+kiOl0LczhenZvEs3wZGURrlMEsiBlkXlfFo+A1E3vF OMWravhgI/zbWTtTBCd/jd7MftiKLmFLMs+bd7wyzg+79AmXi/6cGnIVxzFpwokY 0skKHo1Azl8XCjGj+XkFADS+hxAg0dUbqKQWuQfH1r6AWh7Mac3kUb8JzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKfyC0WkBlSsFv6SHwev3s1WVCF+MB8GA1UdIwQY MBaAFKZHiT+1s0jmimbVWijyeMvzkx30MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGtlSlA3V3pTT2FLWnRWYUtQSjR5X09USGZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kYThjYjEtMWJmYy00M2ZkLWEwZDIt ZDYyNDQ5NmRkY2M4LzEvcGtlSlA3V3pTT2FLWnRWYUtQSjR5X09USGZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9kYThjYjEtMWJmYy00M2ZkLWEwZDItZDYyNDQ5NmRkY2M4 LzEvcGtlSlA3V3pTT2FLWnRWYUtQSjR5X09USGZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPNCEywsd uXBNd9l4H8yaqagICL/hsV6YWyfPeYggAzhJgXIidUOVequjkMHLl1Zo4oU+0l2/ Q5LWP/AyUuzi3Q4DUYJuC1yrojKqOf69yEBe4oE5q7FvlGZRs7maen3BDO8aZ7tR Qm2BCWT0U3PCZCpsHslupZPdwU15txmUTlYoByICJQAS9PcoHZx+m1BL4oe5FwSd DZhgL+Tpr0fj+52N7O6ZMD1oaC9F7kmCL0SHI0upY6brhGd3cmlJfJZw9ZehEdo1 kdg13mbroOIAhne5okRx0+kGOwkjU3HxO80xcE/9hX573AMrwJ4wqIZZmwngeGHJ 4HTVVoNk69PQ7Q== -----END CERTIFICATE-----Generated at Sun Dec 21 12:03:05 2025 by rpki-client