This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft File: pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft (raw, json) Hash identifier: vB+ClDDGaLHNtJZDZju6NU6KhknAsqlP5XfW/5VmWkA= Subject key identifier: 33:29:3A:56:5D:DA:0B:23:BF:C4:69:17:AB:8B:D7:40:D5:AF:60:30 Authority key identifier: A4:C9:3A:B3:64:C8:78:32:E7:77:62:26:EE:E6:C1:31:DB:E1:53:BB Certificate issuer: /CN=a4c93ab364c87832e7776226eee6c131dbe153bb Certificate serial: 019B68E96522B50B2E03470F9CCF0C3F8B09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft Manifest number: 17A0 Signing time: Mon 29 Dec 2025 07:01:24 +0000 Manifest this update: Mon 29 Dec 2025 07:01:24 +0000 Manifest next update: Tue 30 Dec 2025 07:01:24 +0000 Files and hashes: 1: pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl (hash: YDCR7lA325+Y50jnxG0j4mlOxk9Yv6Os5f5V5y0BdDg=) 2: pV9OuJfGvboWa4RSwyOam_iwesY.roa (hash: RTkqdqbXmblScuzpz+Ud/Jj/+DA6UotPUIkNIsu6BJ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 07:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:e9:65:22:b5:0b:2e:03:47:0f:9c:cf:0c:3f:8b:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4c93ab364c87832e7776226eee6c131dbe153bb Validity Not Before: Dec 29 07:01:24 2025 GMT Not After : Dec 30 07:01:24 2025 GMT Subject: CN=33293a565dda0b23bfc46917ab8bd740d5af6030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2b:66:e1:fd:69:9d:23:1f:b9:3b:20:b2:a4: 7a:02:22:6f:be:f0:5a:4c:ae:24:fb:63:46:2d:3b: 54:4c:19:01:db:d7:27:1f:c9:a4:f2:68:5e:37:d2: 2d:15:71:ab:3c:69:f2:8f:3d:ee:84:6a:95:c8:f4: 89:ec:bd:86:30:71:ee:6c:65:3a:44:ac:a3:fb:a1: 3e:13:7b:fd:9b:02:66:b3:a4:2b:a8:f6:41:52:33: 80:19:f4:30:79:f1:0e:ab:8c:a1:14:b5:c9:ad:bd: 15:b2:b3:21:4a:05:af:b7:d9:5c:18:fa:d6:c1:06: 8c:df:3c:86:ff:4c:7e:9c:8d:13:8f:42:4b:48:ad: 08:79:a5:f6:8c:3c:aa:81:cf:1b:4f:62:82:fa:ab: 00:ca:9a:91:2b:8f:17:34:53:ee:85:c9:2a:0c:a2: 24:67:c9:39:7d:dc:f1:f6:68:43:0d:1f:0d:44:6e: bf:56:35:b2:6f:8c:a7:44:7e:98:40:43:40:bd:f8: ed:5a:5d:9c:85:fd:fa:58:ea:76:66:2e:22:56:d6: 74:c2:25:43:a0:e6:59:92:60:61:6d:0b:b1:70:1b: cc:ec:90:cd:87:6e:87:16:ed:b0:9f:ef:94:8b:3d: 25:7e:07:0d:ae:82:46:bb:0d:43:09:92:77:0c:3b: 34:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:29:3A:56:5D:DA:0B:23:BF:C4:69:17:AB:8B:D7:40:D5:AF:60:30 X509v3 Authority Key Identifier: keyid:A4:C9:3A:B3:64:C8:78:32:E7:77:62:26:EE:E6:C1:31:DB:E1:53:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:30:4a:b8:1f:f5:2f:bd:0f:bb:6c:6a:75:09:32:cb:fd:7e: 43:03:66:ba:af:4f:a8:b2:2c:5d:ed:10:58:b3:eb:52:3a:ab: 2d:57:d2:39:84:78:11:e0:25:88:c2:9b:f7:88:4a:ac:e0:d9: 37:0d:a8:b4:18:bf:6e:40:3b:ee:6e:00:03:a9:5f:dd:1e:4d: 3b:7a:bc:db:f5:f6:96:76:30:a5:dd:32:99:bb:73:8a:4f:df: 95:01:8e:99:10:a6:0a:f2:3d:7f:b9:57:b2:3c:1e:ce:f4:4e: ac:ea:ff:40:d9:88:bc:3b:1e:f9:1c:c7:bb:92:4f:73:e3:6e: 1d:1f:18:20:fe:0a:e1:b3:84:b8:28:5f:88:1c:e0:90:1b:30: e9:d2:c2:3e:34:55:4c:78:d0:e6:6f:7b:37:d7:19:5b:ef:88: ae:8e:5f:9d:d7:f8:55:db:4d:6c:b0:1b:48:98:e3:fa:1e:de: be:96:9c:e0:cf:f5:d6:c2:e7:ca:3e:b0:c6:67:5e:5b:4b:8a: 10:c3:11:80:9f:7a:10:7f:57:57:fd:93:8a:d3:57:0b:0f:5d: 61:04:03:68:c2:bc:ec:09:d9:1c:5c:5b:3f:71:73:df:9d:e5: 09:75:c4:a9:7a:ce:a9:e1:2c:37:57:e9:7e:8a:fa:38:3a:20: 19:2b:33:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZto6WUitQsuA0cPnM8MP4sJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YzkzYWIzNjRjODc4MzJlNzc3NjIyNmVlZTZjMTMxZGJl MTUzYmIwHhcNMjUxMjI5MDcwMTI0WhcNMjUxMjMwMDcwMTI0WjAzMTEwLwYDVQQD EygzMzI5M2E1NjVkZGEwYjIzYmZjNDY5MTdhYjhiZDc0MGQ1YWY2MDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuitm4f1pnSMfuTsgsqR6AiJvvvBa TK4k+2NGLTtUTBkB29cnH8mk8mheN9ItFXGrPGnyjz3uhGqVyPSJ7L2GMHHubGU6 RKyj+6E+E3v9mwJms6QrqPZBUjOAGfQwefEOq4yhFLXJrb0VsrMhSgWvt9lcGPrW wQaM3zyG/0x+nI0Tj0JLSK0IeaX2jDyqgc8bT2KC+qsAypqRK48XNFPuhckqDKIk Z8k5fdzx9mhDDR8NRG6/VjWyb4ynRH6YQENAvfjtWl2chf36WOp2Zi4iVtZ0wiVD oOZZkmBhbQuxcBvM7JDNh26HFu2wn++Uiz0lfgcNroJGuw1DCZJ3DDs0PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDMpOlZd2gsjv8RpF6uL10DVr2AwMB8GA1UdIwQY MBaAFKTJOrNkyHgy53diJu7mwTHb4VO7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE1rNnMyVEllRExuZDJJbTd1YkJNZHZoVTdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy80OWRmZWEtYzc4OS00NDAxLWEyNTEt ZTI1MzNjZGQyNWFmLzEvcE1rNnMyVEllRExuZDJJbTd1YkJNZHZoVTdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy80OWRmZWEtYzc4OS00NDAxLWEyNTEtZTI1MzNjZGQyNWFm LzEvcE1rNnMyVEllRExuZDJJbTd1YkJNZHZoVTdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqTBKuB/1 L70Pu2xqdQkyy/1+QwNmuq9PqLIsXe0QWLPrUjqrLVfSOYR4EeAliMKb94hKrODZ Nw2otBi/bkA77m4AA6lf3R5NO3q82/X2lnYwpd0ymbtzik/flQGOmRCmCvI9f7lX sjwezvROrOr/QNmIvDse+RzHu5JPc+NuHR8YIP4K4bOEuChfiBzgkBsw6dLCPjRV THjQ5m97N9cZW++Iro5fndf4VdtNbLAbSJjj+h7evpac4M/11sLnyj6wxmdeW0uK EMMRgJ96EH9XV/2TitNXCw9dYQQDaMK87AnZHFxbP3Fz353lCXXEqXrOqeEsN1fp for6ODogGSsziQ== -----END CERTIFICATE-----Generated at Mon Dec 29 16:14:52 2025 by rpki-client