This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft File: PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft (raw, json) Hash identifier: bwldh8Ps+sJdSI76asd9CRfCytyu7U4GhtRuWpgcPzI= Subject key identifier: 30:EA:E3:A0:99:F9:77:A0:86:42:14:4D:54:42:DB:93:58:C0:79:B8 Authority key identifier: 3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4 Certificate issuer: /CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4 Certificate serial: 019AF61C3E9EF35C00DDA762A522275C97A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft Manifest number: 10FF Signing time: Sun 07 Dec 2025 00:00:37 +0000 Manifest this update: Sun 07 Dec 2025 00:00:37 +0000 Manifest next update: Mon 08 Dec 2025 00:00:37 +0000 Files and hashes: 1: 9fywOGNsk6OIfuzuy-reOW9V4kc.roa (hash: b/vhaQiKQhhebnkpqZc4spciDDH3KeMp+AUrKHHSWv4=) 2: PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl (hash: wGCefxV+1at+Xiz1jGcXm7dmzWIoNhEa4P9maOo3Dic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:3e:9e:f3:5c:00:dd:a7:62:a5:22:27:5c:97:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4 Validity Not Before: Dec 7 00:00:37 2025 GMT Not After : Dec 8 00:00:37 2025 GMT Subject: CN=30eae3a099f977a08642144d5442db9358c079b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c8:3c:3b:c8:9a:23:38:6e:82:91:b5:fc:f3: 05:6e:32:bb:ab:51:d3:94:eb:fd:75:61:9c:33:a3: fd:43:ae:39:dc:44:c3:9c:dd:b1:cf:93:97:5c:96: 3c:e8:f2:17:85:32:eb:89:70:2d:59:6a:f7:6a:7d: f7:d6:de:b3:87:8f:c1:6b:3d:84:f4:a7:fb:16:e0: a7:fc:60:95:ca:29:b1:5f:7b:c0:18:0a:e3:cb:11: d7:28:30:26:2c:03:b7:58:69:b1:ae:e2:f0:bf:b4: d5:a9:3d:b2:30:2b:d5:26:f6:72:59:6c:23:90:79: 82:ff:a7:5a:1c:58:84:55:1e:cf:30:a7:62:20:21: 4b:4e:30:dc:b2:65:2c:36:08:3e:e1:78:4f:33:16: cb:98:d9:7b:dc:4c:15:7e:69:ef:25:35:4a:cf:35: 9c:f7:fa:5c:34:c9:47:72:e1:bd:aa:88:37:c0:d8: 1e:d7:69:02:74:25:f8:3a:c5:03:67:17:31:7d:f3: 3e:44:9e:c6:41:04:b3:f7:ca:d7:1d:8c:4a:a0:65: 8b:a8:83:5d:3f:a2:77:ac:99:ac:ad:99:5a:84:50: 07:0d:46:05:0b:ee:0f:ab:58:d2:3a:78:66:fd:17: b9:4c:16:95:a6:c2:57:f8:f1:c8:d2:62:ea:9c:3e: b8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:EA:E3:A0:99:F9:77:A0:86:42:14:4D:54:42:DB:93:58:C0:79:B8 X509v3 Authority Key Identifier: keyid:3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:e7:7e:76:d6:b9:d9:44:72:59:e7:b6:c8:de:f6:d1:11:e8: 3c:1f:bf:06:1c:8d:d8:59:f7:c5:01:83:03:c0:45:68:f7:8f: 72:69:14:aa:2e:da:23:56:e6:04:c4:1a:2a:d6:c6:59:ca:58: 22:a3:2d:98:8c:4e:24:c2:ac:c8:8c:6b:8f:f6:3a:d5:70:f1: 44:c8:9e:3a:e2:ef:8a:f8:69:1e:28:9c:5b:c0:fe:f5:60:6c: 04:83:56:d3:a0:eb:f2:09:c8:fa:e8:7b:05:60:aa:36:e4:70: 7f:4c:65:38:60:9c:45:b3:3e:11:e3:e0:3c:05:d9:99:1a:a1: 3d:23:7f:84:6e:12:36:b8:da:0f:17:78:7a:c0:4b:50:ea:66: e6:a7:9d:30:45:8d:dc:af:ab:29:32:35:94:c1:1e:be:f4:24: 29:37:39:2b:e3:31:d5:c3:ab:b8:de:57:81:74:8a:9a:05:94: 21:94:8c:20:cb:50:c5:02:7a:35:7d:60:16:98:1d:9f:b4:9a: 5f:ec:fe:cb:6b:48:a6:47:80:ea:7a:a8:f3:e7:69:09:5a:6c: ea:c2:9f:da:72:25:63:76:eb:4f:56:2a:ce:55:25:65:bb:74: c6:54:80:99:1d:6f:7d:d1:ef:5c:ba:47:17:47:5e:a9:7e:9e: 16:2d:fa:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HD6e81wA3adipSInXJenMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYTU1NDA5OGM3YTg4YWEzNDI2NGI5MmQ4YmYyMjU3ZWMw YmNkYTQwHhcNMjUxMjA3MDAwMDM3WhcNMjUxMjA4MDAwMDM3WjAzMTEwLwYDVQQD EygzMGVhZTNhMDk5Zjk3N2EwODY0MjE0NGQ1NDQyZGI5MzU4YzA3OWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMg8O8iaIzhugpG1/PMFbjK7q1HT lOv9dWGcM6P9Q6453ETDnN2xz5OXXJY86PIXhTLriXAtWWr3an331t6zh4/Baz2E 9Kf7FuCn/GCVyimxX3vAGArjyxHXKDAmLAO3WGmxruLwv7TVqT2yMCvVJvZyWWwj kHmC/6daHFiEVR7PMKdiICFLTjDcsmUsNgg+4XhPMxbLmNl73EwVfmnvJTVKzzWc 9/pcNMlHcuG9qog3wNge12kCdCX4OsUDZxcxffM+RJ7GQQSz98rXHYxKoGWLqINd P6J3rJmsrZlahFAHDUYFC+4Pq1jSOnhm/Re5TBaVpsJX+PHI0mLqnD64fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDDq46CZ+XeghkIUTVRC25NYwHm4MB8GA1UdIwQY MBaAFD6lVAmMeoiqNCZLkti/IlfsC82kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHFWVUNZeDZpS28wSmt1UzJMOGlWLXdMemFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy80NzY3Y2UtNDQ0OC00MzZiLWE5MTAt NjZkZTk4NjVkYmFjLzEvUHFWVUNZeDZpS28wSmt1UzJMOGlWLXdMemFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy80NzY3Y2UtNDQ0OC00MzZiLWE5MTAtNjZkZTk4NjVkYmFj LzEvUHFWVUNZeDZpS28wSmt1UzJMOGlWLXdMemFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM+d+dta5 2URyWee2yN720RHoPB+/BhyN2Fn3xQGDA8BFaPePcmkUqi7aI1bmBMQaKtbGWcpY IqMtmIxOJMKsyIxrj/Y61XDxRMieOuLvivhpHiicW8D+9WBsBINW06Dr8gnI+uh7 BWCqNuRwf0xlOGCcRbM+EePgPAXZmRqhPSN/hG4SNrjaDxd4esBLUOpm5qedMEWN 3K+rKTI1lMEevvQkKTc5K+Mx1cOruN5XgXSKmgWUIZSMIMtQxQJ6NX1gFpgdn7Sa X+z+y2tIpkeA6nqo8+dpCVps6sKf2nIlY3brT1YqzlUlZbt0xlSAmR1vfdHvXLpH F0deqX6eFi36NA== -----END CERTIFICATE-----Generated at Sun Dec 7 03:42:22 2025 by rpki-client