This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft File: pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft (raw, json) Hash identifier: LkW7B2SXRxo1Ednb4HL8BKV5HwGO4JctY2TGnK1xXes= Subject key identifier: A9:D6:8D:26:37:95:FE:18:E2:7F:06:68:4F:AB:FE:EE:EB:6A:F8:86 Authority key identifier: A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB Certificate issuer: /CN=a4a37878c14f216c32649819ea428a58225504fb Certificate serial: 019B405B18D267FD08060BCFCA261E2E16F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft Manifest number: 0732 Signing time: Sun 21 Dec 2025 10:01:10 +0000 Manifest this update: Sun 21 Dec 2025 10:01:10 +0000 Manifest next update: Mon 22 Dec 2025 10:01:10 +0000 Files and hashes: 1: pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl (hash: VMVsv3gB40bqxgaj9mNANOjv1zEYuz18qAAq7H6qUfo=) 2: ro12KKiX-LBkOFDMXKVrhIyQ9tA.roa (hash: 3rfI99WFfWKHo+rtyifcnFcBumsIBP/guPHdSOGN9zM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:18:d2:67:fd:08:06:0b:cf:ca:26:1e:2e:16:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4a37878c14f216c32649819ea428a58225504fb Validity Not Before: Dec 21 10:01:10 2025 GMT Not After : Dec 22 10:01:10 2025 GMT Subject: CN=a9d68d263795fe18e27f06684fabfeeeeb6af886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:37:0c:4f:dd:b5:2e:10:4a:fb:fe:31:a3:62: 7b:18:9e:6f:b1:57:de:ca:a7:31:4b:fe:0b:6e:a8: 4b:03:0f:c7:e0:33:4e:13:32:4d:b4:6a:da:02:f8: b6:26:d2:7d:79:c5:e9:c1:b2:bb:0a:9e:b1:66:aa: 35:84:d1:44:93:70:18:68:ad:91:5f:55:36:ce:bb: 2b:59:47:ce:00:2b:d4:65:5b:9e:c7:2c:87:bb:b3: 3e:d8:15:b6:30:18:f5:ef:a1:53:33:b8:3a:27:b1: b3:a8:7f:d4:0c:be:f5:83:79:fe:86:d3:9d:09:0b: 21:1a:d6:fb:ad:34:cf:dd:39:5d:aa:8b:25:e0:c4: 06:ef:05:24:b1:90:b9:82:f4:02:18:3d:38:23:b2: 2c:a3:c0:f4:eb:13:76:2a:fe:4e:71:58:b9:c3:1d: 79:f1:5a:24:ed:e6:7c:89:fb:85:b4:76:2b:e7:47: 50:1a:5d:21:48:51:16:53:25:f2:99:32:b1:73:9f: 60:09:42:c1:3e:aa:2e:1c:ed:fb:67:0e:67:e0:18: b5:2f:f9:fe:17:f5:2d:98:f7:4c:a1:62:ec:35:b3: 8c:0d:99:56:1e:37:7d:d8:3f:da:29:91:99:ce:ac: 43:c5:58:fd:70:d1:2e:51:3c:b3:95:46:88:dc:c2: 8e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D6:8D:26:37:95:FE:18:E2:7F:06:68:4F:AB:FE:EE:EB:6A:F8:86 X509v3 Authority Key Identifier: keyid:A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:10:56:8f:b8:b5:5d:8a:a4:5b:e2:88:15:2a:b9:63:31:2c: 91:e3:cd:13:25:1e:0a:a9:e0:c0:ee:97:f4:a4:9e:e1:f3:bc: 4c:90:d0:4f:9e:67:e5:c9:86:b2:b1:58:98:e5:fb:0e:d6:16: 4f:69:c7:a8:7c:88:5a:3b:77:8c:18:d3:8b:54:4a:3e:da:a3: 30:fe:98:94:6b:35:7d:1f:db:76:64:d7:8b:30:2b:f8:06:33: 9d:ca:9b:49:da:23:59:04:ac:ec:f7:3c:94:cb:99:73:a7:2b: 4d:6c:99:30:18:4f:95:20:fa:c7:f8:7d:06:8b:87:b4:b8:7f: ca:6d:2b:92:62:fc:80:e1:1f:dd:fb:2d:1f:cf:52:7d:e3:6b: c0:b5:89:ad:2c:c8:d6:97:19:8f:d3:2f:ee:12:72:9a:a0:d9: 94:ee:56:a3:9e:9a:3d:de:e6:ac:60:0f:8c:fc:4d:7e:64:c2: 16:b4:e2:11:d9:a1:90:6f:c1:b6:22:3d:a5:33:e4:79:ae:cc: 51:83:a6:03:80:87:4f:fc:3f:26:30:5a:7b:8b:c2:e8:1a:59: c3:bb:95:28:14:26:ed:ff:11:2e:45:82:88:e8:71:68:72:99: 25:77:92:db:c9:fc:07:b7:22:0a:da:ff:3c:ab:1e:b9:4b:11: 0c:0f:7c:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWxjSZ/0IBgvPyiYeLhbyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YTM3ODc4YzE0ZjIxNmMzMjY0OTgxOWVhNDI4YTU4MjI1 NTA0ZmIwHhcNMjUxMjIxMTAwMTEwWhcNMjUxMjIyMTAwMTEwWjAzMTEwLwYDVQQD EyhhOWQ2OGQyNjM3OTVmZTE4ZTI3ZjA2Njg0ZmFiZmVlZWViNmFmODg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjcMT921LhBK+/4xo2J7GJ5vsVfe yqcxS/4LbqhLAw/H4DNOEzJNtGraAvi2JtJ9ecXpwbK7Cp6xZqo1hNFEk3AYaK2R X1U2zrsrWUfOACvUZVuexyyHu7M+2BW2MBj176FTM7g6J7GzqH/UDL71g3n+htOd CQshGtb7rTTP3Tldqosl4MQG7wUksZC5gvQCGD04I7Iso8D06xN2Kv5OcVi5wx15 8Vok7eZ8ifuFtHYr50dQGl0hSFEWUyXymTKxc59gCULBPqouHO37Zw5n4Bi1L/n+ F/UtmPdMoWLsNbOMDZlWHjd92D/aKZGZzqxDxVj9cNEuUTyzlUaI3MKOQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKnWjSY3lf4Y4n8GaE+r/u7raviGMB8GA1UdIwQY MBaAFKSjeHjBTyFsMmSYGepCilgiVQT7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEtONGVNRlBJV3d5WkpnWjZrS0tXQ0pWQlBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9lNjA2ZmItMTA3Zi00Mjk2LTg4NzAt NGIwZTBhYzhkMjI5LzEvcEtONGVNRlBJV3d5WkpnWjZrS0tXQ0pWQlBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9lNjA2ZmItMTA3Zi00Mjk2LTg4NzAtNGIwZTBhYzhkMjI5 LzEvcEtONGVNRlBJV3d5WkpnWjZrS0tXQ0pWQlBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqRBWj7i1 XYqkW+KIFSq5YzEskePNEyUeCqngwO6X9KSe4fO8TJDQT55n5cmGsrFYmOX7DtYW T2nHqHyIWjt3jBjTi1RKPtqjMP6YlGs1fR/bdmTXizAr+AYzncqbSdojWQSs7Pc8 lMuZc6crTWyZMBhPlSD6x/h9BouHtLh/ym0rkmL8gOEf3fstH89SfeNrwLWJrSzI 1pcZj9Mv7hJymqDZlO5Wo56aPd7mrGAPjPxNfmTCFrTiEdmhkG/BtiI9pTPkea7M UYOmA4CHT/w/JjBae4vC6BpZw7uVKBQm7f8RLkWCiOhxaHKZJXeS28n8B7ciCtr/ PKseuUsRDA985g== -----END CERTIFICATE-----Generated at Sun Dec 21 15:20:23 2025 by rpki-client