This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.mft File: pkWmgpYFxtWOTgwadHTAo_MGjW4.mft (raw, json) Hash identifier: ahNKoAxssNuHf7QHS8ZcJqRbaTvrkz1jNIzIi6xCeuE= Subject key identifier: 84:1E:04:6F:0F:F0:93:55:10:48:B9:FA:AA:19:E2:9F:CD:8B:63:46 Authority key identifier: A6:45:A6:82:96:05:C6:D5:8E:4E:0C:1A:74:74:C0:A3:F3:06:8D:6E Certificate issuer: /CN=a645a6829605c6d58e4e0c1a7474c0a3f3068d6e Certificate serial: 019B2553155811BB75EB1A9CD9428A299374 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkWmgpYFxtWOTgwadHTAo_MGjW4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.mft Manifest number: 11 Signing time: Tue 16 Dec 2025 04:02:40 +0000 Manifest this update: Tue 16 Dec 2025 04:02:40 +0000 Manifest next update: Wed 17 Dec 2025 04:02:40 +0000 Files and hashes: 1: 4YqUfZCeiEUJuCY-psjsNuWtksw.asa (hash: sR1+4a2yNEE9K27sk1iLMEzEGkqFA/HBPoWU5NgO9QU=) 2: pkWmgpYFxtWOTgwadHTAo_MGjW4.crl (hash: zBSLqQfMawRp2EQ0ZiIi52/8C7vZlG19sRbOAihrGzQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.mft rsync://rpki.ripe.net/repository/DEFAULT/pkWmgpYFxtWOTgwadHTAo_MGjW4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:53:15:58:11:bb:75:eb:1a:9c:d9:42:8a:29:93:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a645a6829605c6d58e4e0c1a7474c0a3f3068d6e Validity Not Before: Dec 16 04:02:40 2025 GMT Not After : Dec 17 04:02:40 2025 GMT Subject: CN=841e046f0ff093551048b9faaa19e29fcd8b6346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4a:79:72:1d:c5:0e:fc:69:fc:e9:f7:f5:43: 77:3d:54:60:c1:4e:73:80:8c:79:81:82:e9:8d:e6: 59:1c:e9:ba:d3:9d:35:31:9f:f2:d9:91:14:95:a0: 33:c5:f4:00:c3:dd:9c:15:0b:f4:91:99:f5:fe:3f: cc:bd:bb:e8:7a:25:6b:83:d1:ab:9a:0f:60:6e:ee: e7:51:b7:6b:43:14:9d:ca:0b:d6:a3:3b:d1:39:cb: 7c:f5:16:1c:58:62:c3:f7:c9:72:97:01:1f:cc:14: 36:f6:77:51:1c:d3:c8:99:2a:d8:ad:0c:45:a6:a8: 5d:50:e3:23:33:00:ba:b7:b2:8f:c4:b6:45:bc:b5: ee:04:7f:14:24:a6:a9:2f:2b:76:1a:b4:c6:2a:f1: 1f:59:ce:1a:31:f6:a7:2a:c9:71:1e:13:8b:a6:7f: 28:6a:34:01:9d:0e:f0:4d:84:1e:d2:d4:3a:1f:fb: 0b:d8:c2:65:e1:d8:3b:40:c6:96:75:ab:ab:7d:54: 1c:00:bd:20:1f:05:58:5e:20:4a:fc:a9:9d:2d:a5: bb:91:f8:05:37:80:5a:6c:88:1d:ba:8d:1f:08:64: b8:a0:77:cf:36:2f:35:25:d1:39:4d:c4:bf:52:f6: 28:8c:b6:2b:c7:97:aa:b8:ee:60:d6:8b:85:d7:f1: 28:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:1E:04:6F:0F:F0:93:55:10:48:B9:FA:AA:19:E2:9F:CD:8B:63:46 X509v3 Authority Key Identifier: keyid:A6:45:A6:82:96:05:C6:D5:8E:4E:0C:1A:74:74:C0:A3:F3:06:8D:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkWmgpYFxtWOTgwadHTAo_MGjW4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:2d:15:bf:d5:6d:c2:eb:d5:5c:fa:83:77:b3:aa:ce:47:5a: 88:27:8a:45:a1:cc:be:d1:6c:bc:c6:7e:a5:72:1d:f8:1c:4e: 63:1f:64:08:b5:4c:89:38:eb:1e:02:0f:17:84:b0:1a:16:c8: a0:9d:78:7a:ab:0f:3b:96:4a:37:89:25:cb:d1:a4:75:47:0e: 82:f8:07:ae:78:27:c4:36:dc:4a:97:e9:11:1b:fe:ad:24:95: c8:68:b5:76:b5:77:eb:4c:09:34:c4:ab:1b:95:47:53:32:53: 06:25:8f:67:ea:a7:a2:d5:8c:ea:a6:74:59:e9:c2:10:f1:86: b8:0b:2d:dd:3a:4c:ea:47:4a:28:b1:be:88:ba:ab:c1:10:3f: bc:df:bd:d6:d2:09:c5:38:00:04:c5:24:4f:44:d5:1e:fa:aa: d1:65:f9:a7:85:eb:5e:f9:84:80:fd:d1:b5:fb:91:bc:c7:29: 65:3c:75:c8:3e:39:3f:d7:d0:4f:a6:a9:c8:e4:33:03:6c:66: d3:a3:8e:1b:4c:b0:18:2e:8f:f6:6a:9f:3d:89:b7:1f:96:dd: 3f:35:31:cd:c5:f6:91:38:10:2a:36:b6:7c:69:52:ba:e3:6b: 12:5d:87:48:0c:8d:35:51:89:5e:52:1f:66:5d:9e:9b:e7:07: 0e:14:2d:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUxVYEbt16xqc2UKKKZN0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NDVhNjgyOTYwNWM2ZDU4ZTRlMGMxYTc0NzRjMGEzZjMw NjhkNmUwHhcNMjUxMjE2MDQwMjQwWhcNMjUxMjE3MDQwMjQwWjAzMTEwLwYDVQQD Eyg4NDFlMDQ2ZjBmZjA5MzU1MTA0OGI5ZmFhYTE5ZTI5ZmNkOGI2MzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkp5ch3FDvxp/On39UN3PVRgwU5z gIx5gYLpjeZZHOm60501MZ/y2ZEUlaAzxfQAw92cFQv0kZn1/j/MvbvoeiVrg9Gr mg9gbu7nUbdrQxSdygvWozvROct89RYcWGLD98lylwEfzBQ29ndRHNPImSrYrQxF pqhdUOMjMwC6t7KPxLZFvLXuBH8UJKapLyt2GrTGKvEfWc4aMfanKslxHhOLpn8o ajQBnQ7wTYQe0tQ6H/sL2MJl4dg7QMaWdaurfVQcAL0gHwVYXiBK/KmdLaW7kfgF N4BabIgduo0fCGS4oHfPNi81JdE5TcS/UvYojLYrx5equO5g1ouF1/EotwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIQeBG8P8JNVEEi5+qoZ4p/Ni2NGMB8GA1UdIwQY MBaAFKZFpoKWBcbVjk4MGnR0wKPzBo1uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGtXbWdwWUZ4dFdPVGd3YWRIVEFvX01Halc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9lNDIwOTctNTU2MS00YjdlLTk0NTgt MmQ4ZjNiNmUxYjk0LzEvcGtXbWdwWUZ4dFdPVGd3YWRIVEFvX01Halc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9lNDIwOTctNTU2MS00YjdlLTk0NTgtMmQ4ZjNiNmUxYjk0 LzEvcGtXbWdwWUZ4dFdPVGd3YWRIVEFvX01Halc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbC0Vv9Vt wuvVXPqDd7OqzkdaiCeKRaHMvtFsvMZ+pXId+BxOYx9kCLVMiTjrHgIPF4SwGhbI oJ14eqsPO5ZKN4kly9GkdUcOgvgHrngnxDbcSpfpERv+rSSVyGi1drV360wJNMSr G5VHUzJTBiWPZ+qnotWM6qZ0WenCEPGGuAst3TpM6kdKKLG+iLqrwRA/vN+91tIJ xTgABMUkT0TVHvqq0WX5p4XrXvmEgP3RtfuRvMcpZTx1yD45P9fQT6apyOQzA2xm 06OOG0ywGC6P9mqfPYm3H5bdPzUxzcX2kTgQKja2fGlSuuNrEl2HSAyNNVGJXlIf Zl2em+cHDhQt1g== -----END CERTIFICATE-----Generated at Tue Dec 16 09:38:33 2025 by rpki-client