This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft File: pQl6FWrvL4L_E7PBav9vfhbbAsg.mft (raw, json) Hash identifier: FIZBzLe/NymGzyaZuqp8ljUbJGXWChw7C7F1iiZZ/PE= Subject key identifier: 7F:3F:D3:82:D2:8F:A7:D0:DC:F0:DF:E7:BB:1A:4B:EE:DE:EE:74:FE Authority key identifier: A5:09:7A:15:6A:EF:2F:82:FF:13:B3:C1:6A:FF:6F:7E:16:DB:02:C8 Certificate issuer: /CN=a5097a156aef2f82ff13b3c16aff6f7e16db02c8 Certificate serial: 019B3F118F15BA1FFF1B0DFB69CD8AE3E5F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft Manifest number: 064F Signing time: Sun 21 Dec 2025 04:01:13 +0000 Manifest this update: Sun 21 Dec 2025 04:01:13 +0000 Manifest next update: Mon 22 Dec 2025 04:01:13 +0000 Files and hashes: 1: T0GLC9ivgiSJVwGQ5KIOLCKOjqs.roa (hash: FKLm57miA/xZK8gsx+DBE/lZzuzN5GXUjYHQsCWDe8M=) 2: pQl6FWrvL4L_E7PBav9vfhbbAsg.crl (hash: VNTpgQdfNYvsTNM+AHetmd5XIL5b1Z2cXB86SI5lQgU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:8f:15:ba:1f:ff:1b:0d:fb:69:cd:8a:e3:e5:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5097a156aef2f82ff13b3c16aff6f7e16db02c8 Validity Not Before: Dec 21 04:01:13 2025 GMT Not After : Dec 22 04:01:13 2025 GMT Subject: CN=7f3fd382d28fa7d0dcf0dfe7bb1a4beedeee74fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e9:bc:24:28:24:af:3c:cd:99:f0:19:e5:e2: 75:5b:23:96:1e:31:fa:ef:7d:42:c8:f2:e9:ce:6e: b8:5a:64:56:cc:3b:c0:b1:67:1e:15:a6:35:02:b1: 4f:c3:d4:a8:46:59:c5:60:16:d5:2b:ac:a8:c9:6d: 31:17:d8:54:d4:57:4c:4b:a6:43:ef:ac:8a:c2:2d: e9:16:76:5a:6b:55:60:46:17:9f:fd:8c:6c:c2:08: f8:ba:45:a5:b2:38:2d:10:9a:8c:c3:36:08:ba:8b: 04:9b:2e:1e:d7:dc:3e:10:5b:78:a4:d9:be:77:e2: fb:20:f5:c0:7b:d4:3b:35:96:80:fd:e8:17:ee:1c: 00:e9:1e:66:38:db:25:c0:ef:a9:18:ed:8a:b1:02: 28:cf:6b:ab:b3:14:68:e9:f5:52:95:b7:5b:53:44: 5a:fb:49:6e:94:ce:0e:bb:3c:ce:a6:27:3e:71:a8: e0:21:86:88:13:2d:9a:3a:13:54:1c:e8:35:b4:89: 47:48:b8:8b:1c:79:f0:09:0b:6d:e8:4e:4d:6f:b7: 3c:77:c7:55:66:6b:63:14:be:89:09:40:9b:bd:98: bb:ec:54:3e:43:9d:e9:06:30:ef:ca:93:fe:c4:d0: 2d:0e:88:99:42:16:66:77:4e:b4:2a:8f:89:59:27: fb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:3F:D3:82:D2:8F:A7:D0:DC:F0:DF:E7:BB:1A:4B:EE:DE:EE:74:FE X509v3 Authority Key Identifier: keyid:A5:09:7A:15:6A:EF:2F:82:FF:13:B3:C1:6A:FF:6F:7E:16:DB:02:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:9b:c3:38:c3:f9:cf:0e:8d:a4:84:13:4a:21:4c:84:3e:60: f0:63:09:2b:0c:f5:a9:92:a0:09:19:42:9b:2a:f8:3e:30:70: e6:52:fd:c3:51:c9:94:45:06:b9:5a:08:2a:73:68:70:d4:b7: 05:69:1a:aa:02:f2:1a:1e:ff:c5:a7:39:64:89:5e:4b:7a:6b: b2:4b:52:c5:d7:2e:f9:2c:f4:27:ee:5c:f4:52:b2:7a:cf:96: 08:2a:cd:df:45:76:a9:2e:63:61:a1:ca:39:c7:ba:ec:24:28: 04:65:5b:e2:1a:c3:66:90:22:ae:e9:66:1f:78:3f:a4:cc:88: 6f:1f:82:72:37:09:27:91:7b:fc:84:f9:18:12:d0:05:bc:ea: 9b:aa:15:b3:0a:52:27:6c:d2:ed:3b:45:73:f7:48:f6:7a:5c: c0:4c:f8:32:6d:3d:ed:a1:68:75:82:e6:6f:1a:f6:80:95:22: 16:c3:75:a4:18:6a:8a:cf:fb:de:f2:46:d2:64:96:03:39:b7: f1:26:5f:fa:26:9b:7b:de:06:fa:62:09:70:ba:93:be:d3:b3: dd:7e:71:97:91:97:27:00:17:50:30:05:7a:f1:ad:f2:d8:1e: 7d:c4:96:f2:76:17:ab:26:76:72:48:88:d2:2e:60:45:ca:a9: 84:a5:6a:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EY8Vuh//Gw37ac2K4+XwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MDk3YTE1NmFlZjJmODJmZjEzYjNjMTZhZmY2ZjdlMTZk YjAyYzgwHhcNMjUxMjIxMDQwMTEzWhcNMjUxMjIyMDQwMTEzWjAzMTEwLwYDVQQD Eyg3ZjNmZDM4MmQyOGZhN2QwZGNmMGRmZTdiYjFhNGJlZWRlZWU3NGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4um8JCgkrzzNmfAZ5eJ1WyOWHjH6 731CyPLpzm64WmRWzDvAsWceFaY1ArFPw9SoRlnFYBbVK6yoyW0xF9hU1FdMS6ZD 76yKwi3pFnZaa1VgRhef/Yxswgj4ukWlsjgtEJqMwzYIuosEmy4e19w+EFt4pNm+ d+L7IPXAe9Q7NZaA/egX7hwA6R5mONslwO+pGO2KsQIoz2ursxRo6fVSlbdbU0Ra +0lulM4OuzzOpic+cajgIYaIEy2aOhNUHOg1tIlHSLiLHHnwCQtt6E5Nb7c8d8dV ZmtjFL6JCUCbvZi77FQ+Q53pBjDvypP+xNAtDoiZQhZmd060Ko+JWSf7YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH8/04LSj6fQ3PDf57saS+7e7nT+MB8GA1UdIwQY MBaAFKUJehVq7y+C/xOzwWr/b34W2wLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFFsNkZXcnZMNExfRTdQQmF2OXZmaGJiQXNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi80MmY3ZjgtNzQwNy00MzJkLWJiYjUt MGQzMzk3MDdjYjg4LzEvcFFsNkZXcnZMNExfRTdQQmF2OXZmaGJiQXNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi80MmY3ZjgtNzQwNy00MzJkLWJiYjUtMGQzMzk3MDdjYjg4 LzEvcFFsNkZXcnZMNExfRTdQQmF2OXZmaGJiQXNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlpvDOMP5 zw6NpIQTSiFMhD5g8GMJKwz1qZKgCRlCmyr4PjBw5lL9w1HJlEUGuVoIKnNocNS3 BWkaqgLyGh7/xac5ZIleS3prsktSxdcu+Sz0J+5c9FKyes+WCCrN30V2qS5jYaHK Oce67CQoBGVb4hrDZpAirulmH3g/pMyIbx+CcjcJJ5F7/IT5GBLQBbzqm6oVswpS J2zS7TtFc/dI9npcwEz4Mm097aFodYLmbxr2gJUiFsN1pBhqis/73vJG0mSWAzm3 8SZf+iabe94G+mIJcLqTvtOz3X5xl5GXJwAXUDAFevGt8tgefcSW8nYXqyZ2ckiI 0i5gRcqphKVqEw== -----END CERTIFICATE-----Generated at Sun Dec 21 09:00:29 2025 by rpki-client