This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft File: pQnoZXbAZeFL--6PZSq2wnnM3hI.mft (raw, json) Hash identifier: RNOaDHf2q1ZmCDlTUhT84keBurVYrqus2oRMnwVWckU= Subject key identifier: 72:67:51:30:BA:C7:A1:23:62:16:FD:B7:04:64:85:FF:F7:44:04:B8 Authority key identifier: A5:09:E8:65:76:C0:65:E1:4B:FB:EE:8F:65:2A:B6:C2:79:CC:DE:12 Certificate issuer: /CN=a509e86576c065e14bfbee8f652ab6c279ccde12 Certificate serial: 019B65E7E293179C5EAFBA8964DE537B9DD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft Manifest number: 10DA Signing time: Sun 28 Dec 2025 17:00:54 +0000 Manifest this update: Sun 28 Dec 2025 17:00:54 +0000 Manifest next update: Mon 29 Dec 2025 17:00:54 +0000 Files and hashes: 1: eoOnLGiO6CFkl49Rw92BKVWZ1YY.roa (hash: 5KK2WxAAZ4SHFL6JTNlCRgBRKCCitoVvyQFa3VeriMw=) 2: pQnoZXbAZeFL--6PZSq2wnnM3hI.crl (hash: vz3KBk+p0haCjpMCrOTmb5srvv1NXvrV3Fi+y2IrAuc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.crl rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 17:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:e7:e2:93:17:9c:5e:af:ba:89:64:de:53:7b:9d:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a509e86576c065e14bfbee8f652ab6c279ccde12 Validity Not Before: Dec 28 17:00:54 2025 GMT Not After : Dec 29 17:00:54 2025 GMT Subject: CN=72675130bac7a1236216fdb7046485fff74404b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:07:a8:74:56:4a:f7:2f:50:d8:f1:58:74:1d: a1:b4:71:bc:c6:51:8c:69:1a:6f:79:22:43:db:0c: f3:72:90:8b:ac:e8:b2:26:19:33:87:9d:3f:97:61: 45:92:5d:00:58:8b:b0:6c:8e:6b:12:78:ad:d1:9f: 44:e5:2b:b9:02:2e:e6:f5:e2:53:b2:e1:7a:31:45: ce:01:fb:70:b1:aa:ba:20:c2:14:24:d1:19:2e:44: f7:85:6f:0b:d5:d7:03:b7:01:18:b6:6c:63:0a:99: e4:82:95:27:9c:19:62:22:40:e4:81:16:13:d0:84: 7e:25:32:01:4e:85:3b:45:ee:ed:1b:7b:da:62:fd: 4e:23:fb:44:f8:39:b5:ab:cc:05:83:03:58:a6:07: 71:30:82:49:4e:19:24:16:a9:c0:a8:d4:ba:5e:c0: 3d:a3:b1:6d:7f:e5:74:40:e3:c5:1a:78:40:7c:1e: f2:23:2a:7b:c1:0e:f5:e4:bf:60:c1:ee:7e:9e:04: 5f:8c:b7:8c:44:f4:32:e1:bb:94:24:66:6f:12:10: c8:78:91:99:22:43:ad:08:69:a8:38:57:5f:a4:f4: 48:ea:81:35:7c:64:aa:08:e4:16:d1:36:a5:3d:09: 5a:0f:a6:0e:92:bf:b1:93:05:f5:1d:86:8a:29:42: 8e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:67:51:30:BA:C7:A1:23:62:16:FD:B7:04:64:85:FF:F7:44:04:B8 X509v3 Authority Key Identifier: keyid:A5:09:E8:65:76:C0:65:E1:4B:FB:EE:8F:65:2A:B6:C2:79:CC:DE:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:2c:57:59:e5:c8:fe:99:7c:b6:a6:d6:29:56:26:a0:b1:4e: 0c:ea:99:0c:ea:b0:9f:6e:d4:32:99:45:61:dc:66:8d:46:e2: 28:8c:29:0a:c4:fd:2e:17:9e:27:6e:01:6b:bd:eb:62:13:15: 25:bc:e7:91:5c:f3:09:28:af:8e:f3:4c:d3:57:98:29:a0:56: 81:6d:f2:92:1e:be:94:d7:ff:d7:af:97:48:8c:25:78:48:47: 33:c2:b9:47:e5:fc:06:86:6e:68:81:56:3b:d4:a6:70:69:d4: 82:92:17:3c:27:ad:81:b7:48:dc:79:67:56:4d:12:11:af:34: ee:21:cc:11:50:48:9b:52:cc:6e:db:5a:43:69:49:0b:97:06: 5f:6d:a6:25:1a:16:b2:41:5f:e1:80:5a:f0:5d:da:90:d0:c2: 49:5d:90:05:7f:ed:17:01:eb:e6:45:83:62:3c:44:9a:54:76: c7:0b:b3:9e:16:62:0e:21:d3:b0:eb:89:bb:f3:8d:e8:a9:1b: fb:10:db:6b:52:b5:58:d2:e2:83:f3:c5:a4:08:b8:4e:54:bf: 1f:5b:4e:86:39:62:86:70:c6:6d:9d:0c:e4:da:36:4c:62:93: 98:28:8b:5c:b3:8c:7f:35:c8:cb:e2:e5:89:8b:7b:34:c0:25: 4b:f4:dd:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtl5+KTF5xer7qJZN5Te53VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MDllODY1NzZjMDY1ZTE0YmZiZWU4ZjY1MmFiNmMyNzlj Y2RlMTIwHhcNMjUxMjI4MTcwMDU0WhcNMjUxMjI5MTcwMDU0WjAzMTEwLwYDVQQD Eyg3MjY3NTEzMGJhYzdhMTIzNjIxNmZkYjcwNDY0ODVmZmY3NDQwNGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgeodFZK9y9Q2PFYdB2htHG8xlGM aRpveSJD2wzzcpCLrOiyJhkzh50/l2FFkl0AWIuwbI5rEnit0Z9E5Su5Ai7m9eJT suF6MUXOAftwsaq6IMIUJNEZLkT3hW8L1dcDtwEYtmxjCpnkgpUnnBliIkDkgRYT 0IR+JTIBToU7Re7tG3vaYv1OI/tE+Dm1q8wFgwNYpgdxMIJJThkkFqnAqNS6XsA9 o7Ftf+V0QOPFGnhAfB7yIyp7wQ715L9gwe5+ngRfjLeMRPQy4buUJGZvEhDIeJGZ IkOtCGmoOFdfpPRI6oE1fGSqCOQW0TalPQlaD6YOkr+xkwX1HYaKKUKOrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHJnUTC6x6EjYhb9twRkhf/3RAS4MB8GA1UdIwQY MBaAFKUJ6GV2wGXhS/vuj2UqtsJ5zN4SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFFub1pYYkFaZUZMLS02UFpTcTJ3bm5NM2hJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8wMTQyNDUtODY4NS00YWYzLTkzODct YTBmNTc0MmIxYjA0LzEvcFFub1pYYkFaZUZMLS02UFpTcTJ3bm5NM2hJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8wMTQyNDUtODY4NS00YWYzLTkzODctYTBmNTc0MmIxYjA0 LzEvcFFub1pYYkFaZUZMLS02UFpTcTJ3bm5NM2hJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgyxXWeXI /pl8tqbWKVYmoLFODOqZDOqwn27UMplFYdxmjUbiKIwpCsT9LheeJ24Ba73rYhMV JbznkVzzCSivjvNM01eYKaBWgW3ykh6+lNf/16+XSIwleEhHM8K5R+X8BoZuaIFW O9SmcGnUgpIXPCetgbdI3HlnVk0SEa807iHMEVBIm1LMbttaQ2lJC5cGX22mJRoW skFf4YBa8F3akNDCSV2QBX/tFwHr5kWDYjxEmlR2xwuznhZiDiHTsOuJu/ON6Kkb +xDba1K1WNLig/PFpAi4TlS/H1tOhjlihnDGbZ0M5No2TGKTmCiLXLOMfzXIy+Ll iYt7NMAlS/TdPw== -----END CERTIFICATE-----Generated at Mon Dec 29 01:10:55 2025 by rpki-client