This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft File: pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft (raw, json) Hash identifier: x7rbpyZb8P9QTBezX85h77V5kfWYkPyCDIU0HPJrWZQ= Subject key identifier: 85:4D:B8:82:76:AE:B3:86:81:21:4D:44:89:46:49:D4:14:C6:D9:DC Authority key identifier: A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4 Certificate issuer: /CN=a647893fb5b348e68a66d55a28f278cbf3931df4 Certificate serial: 019B4A034431845DD4A0481FE82F9DEF0D7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft Manifest number: 0B82 Signing time: Tue 23 Dec 2025 07:01:26 +0000 Manifest this update: Tue 23 Dec 2025 07:01:26 +0000 Manifest next update: Wed 24 Dec 2025 07:01:26 +0000 Files and hashes: 1: pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl (hash: dKa0DLqS7Eq1oSs4jJYTIlV4VUwfFsEoEsabagcg5tg=) 2: po_LVWpbKXE3R88IVy-uZ3WJPNw.roa (hash: K+p2Dato5TDcm+bOMSRlFPytRWT6WZtTR14LVyHGo2g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:03:44:31:84:5d:d4:a0:48:1f:e8:2f:9d:ef:0d:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a647893fb5b348e68a66d55a28f278cbf3931df4 Validity Not Before: Dec 23 07:01:26 2025 GMT Not After : Dec 24 07:01:26 2025 GMT Subject: CN=854db88276aeb38681214d44894649d414c6d9dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b8:8e:fd:ea:65:76:c3:14:c7:32:cb:32:e0: a3:a6:f7:ae:82:4f:7c:3a:94:68:b5:8c:79:00:04: 42:22:97:39:76:d6:ad:4a:29:c8:ec:ea:10:b8:89: 2f:35:a8:86:fd:56:12:f0:a0:d0:e0:62:ba:d1:49: 4d:4f:0b:8b:74:58:f9:3c:0f:c6:05:45:19:ce:40: d4:0a:dd:36:47:72:af:e4:83:a5:bf:bf:66:34:5d: 7a:38:74:d9:fe:66:8b:2c:b9:f1:95:46:aa:8f:c2: 7c:6c:62:c8:49:e3:8c:8e:1f:52:10:7f:82:33:17: 88:ad:a4:13:c2:56:30:d5:21:59:36:3c:21:01:8e: 60:4a:8c:45:5f:13:db:27:5b:65:60:8d:f9:d2:03: 96:58:42:f9:89:96:d7:e3:66:46:61:5f:bd:67:cf: c8:d9:6c:23:e7:8d:a4:b4:bb:81:52:b8:07:fe:de: ac:09:2e:09:cd:c1:9d:4e:f3:87:30:09:43:0d:d1: 3d:a3:f5:ac:c3:3f:8e:d7:de:a7:7c:de:8a:99:f6: 30:20:6d:5b:35:d9:9b:9b:c2:92:b2:89:67:07:10: 90:43:7c:a6:75:c6:00:5a:15:d8:39:e3:3a:26:30: a7:75:5b:b7:f1:04:c8:5e:e1:12:27:1e:a7:55:4d: 78:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:4D:B8:82:76:AE:B3:86:81:21:4D:44:89:46:49:D4:14:C6:D9:DC X509v3 Authority Key Identifier: keyid:A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:b5:b1:75:79:23:7f:52:b8:e1:5a:9f:d9:4d:14:64:0d:71: 56:c7:d0:bd:ca:1b:b3:9b:9c:01:f5:29:b4:73:bb:f3:1c:45: ab:bc:e0:df:47:ca:bc:5b:ed:b5:64:58:ea:d9:91:db:d8:fa: bc:59:c2:a5:54:ce:e9:3b:00:58:80:1b:43:19:5a:14:63:be: ff:07:b4:11:10:8e:21:db:6f:e9:c1:8a:96:cc:c0:0d:9c:04: 60:23:b4:fb:7e:39:a6:57:a9:e2:ea:56:c5:03:4d:78:b0:e2: 1b:ee:8b:ae:30:09:16:79:aa:1d:63:e9:4a:47:04:2f:42:33: 43:fe:76:ea:39:71:5f:f6:19:6e:4a:09:01:8f:6f:9f:fb:65: 89:40:f6:cd:13:66:64:73:d6:ea:10:88:1f:6c:88:fc:e4:6d: 99:74:af:a5:05:f8:c9:6c:55:61:34:6d:4f:89:d8:ea:a0:7e: 43:53:c6:04:4e:bc:1f:86:26:53:c4:fc:74:f3:98:70:79:b0: fd:b8:7c:29:a3:9b:84:7f:c2:14:a3:dd:d5:76:8d:1e:8c:27: af:84:50:82:3e:e3:63:2a:84:f5:33:53:6e:bc:3d:8c:43:e7: ad:b8:e9:d9:22:24:a6:b3:e4:ba:71:8b:cb:00:c2:e1:5f:dd: c5:c3:5b:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKA0QxhF3UoEgf6C+d7w16MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NDc4OTNmYjViMzQ4ZTY4YTY2ZDU1YTI4ZjI3OGNiZjM5 MzFkZjQwHhcNMjUxMjIzMDcwMTI2WhcNMjUxMjI0MDcwMTI2WjAzMTEwLwYDVQQD Eyg4NTRkYjg4Mjc2YWViMzg2ODEyMTRkNDQ4OTQ2NDlkNDE0YzZkOWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7iO/epldsMUxzLLMuCjpveugk98 OpRotYx5AARCIpc5dtatSinI7OoQuIkvNaiG/VYS8KDQ4GK60UlNTwuLdFj5PA/G BUUZzkDUCt02R3Kv5IOlv79mNF16OHTZ/maLLLnxlUaqj8J8bGLISeOMjh9SEH+C MxeIraQTwlYw1SFZNjwhAY5gSoxFXxPbJ1tlYI350gOWWEL5iZbX42ZGYV+9Z8/I 2Wwj542ktLuBUrgH/t6sCS4JzcGdTvOHMAlDDdE9o/Wswz+O196nfN6KmfYwIG1b Ndmbm8KSsolnBxCQQ3ymdcYAWhXYOeM6JjCndVu38QTIXuESJx6nVU149wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIVNuIJ2rrOGgSFNRIlGSdQUxtncMB8GA1UdIwQY MBaAFKZHiT+1s0jmimbVWijyeMvzkx30MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGtlSlA3V3pTT2FLWnRWYUtQSjR5X09USGZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kYThjYjEtMWJmYy00M2ZkLWEwZDIt ZDYyNDQ5NmRkY2M4LzEvcGtlSlA3V3pTT2FLWnRWYUtQSjR5X09USGZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9kYThjYjEtMWJmYy00M2ZkLWEwZDItZDYyNDQ5NmRkY2M4 LzEvcGtlSlA3V3pTT2FLWnRWYUtQSjR5X09USGZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP7WxdXkj f1K44Vqf2U0UZA1xVsfQvcobs5ucAfUptHO78xxFq7zg30fKvFvttWRY6tmR29j6 vFnCpVTO6TsAWIAbQxlaFGO+/we0ERCOIdtv6cGKlszADZwEYCO0+345plep4upW xQNNeLDiG+6LrjAJFnmqHWPpSkcEL0IzQ/526jlxX/YZbkoJAY9vn/tliUD2zRNm ZHPW6hCIH2yI/ORtmXSvpQX4yWxVYTRtT4nY6qB+Q1PGBE68H4YmU8T8dPOYcHmw /bh8KaObhH/CFKPd1XaNHownr4RQgj7jYyqE9TNTbrw9jEPnrbjp2SIkprPkunGL ywDC4V/dxcNbaQ== -----END CERTIFICATE-----Generated at Tue Dec 23 17:17:54 2025 by rpki-client