This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft File: PesQRGPpILRVQravGifVlQ6G6aA.mft (raw, json) Hash identifier: lEv6FvvLZueSXxceTfIg+oGa4r9PE6nWheE4tyWNCSo= Subject key identifier: 10:58:13:E1:A1:CD:65:5E:CE:F5:0B:A3:AA:7D:07:F4:D5:0C:72:09 Authority key identifier: 3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0 Certificate issuer: /CN=3deb104463e920b45542b6af1a27d5950e86e9a0 Certificate serial: 019AF98BA5198E4597A35BCFAABDD9DBD58A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft Manifest number: 1536 Signing time: Sun 07 Dec 2025 16:01:09 +0000 Manifest this update: Sun 07 Dec 2025 16:01:09 +0000 Manifest next update: Mon 08 Dec 2025 16:01:09 +0000 Files and hashes: 1: 1-gBlmRElwFozsXlk-zODgtGpAuA.roa (hash: xVfyWKViH35Kce9xfyzBsAu8tiyl2DKuvLolO3h9f4s=) 2: 3X_OCsm4wSXVQQmIGXvbWiOwwPk.roa (hash: uAifQhxv7JsH18zEmjWnpWg6H+QdTkCHwp4ioEB51v8=) 3: CGYCoXePbFBrriJrNgrZF9Uefow.roa (hash: KPb5usKgdYQ3JpgKFKA1WlcbtVkuv48+f5lB1B8M9IA=) 4: PesQRGPpILRVQravGifVlQ6G6aA.crl (hash: D3Vzh3jparR6OugdRTKKU15UUts0OYe6Yci9RwvZH+c=) 5: PyMiLV0wnNJXQTQMDEPMVXWx9ZQ.roa (hash: gY7gqfT3zhDP3uAkWWCqVVxfWQ7GvCSgS8lQh0U5EGA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.crl rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 16:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:8b:a5:19:8e:45:97:a3:5b:cf:aa:bd:d9:db:d5:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3deb104463e920b45542b6af1a27d5950e86e9a0 Validity Not Before: Dec 7 16:01:09 2025 GMT Not After : Dec 8 16:01:09 2025 GMT Subject: CN=105813e1a1cd655ecef50ba3aa7d07f4d50c7209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4c:79:71:7a:fb:6c:02:d9:09:73:33:24:12: 62:9e:7f:eb:97:a7:27:59:a7:af:11:f3:a2:e4:6e: a2:b0:58:dc:3f:c8:2b:3d:c8:ac:2e:9e:2f:86:5b: c8:f1:f1:cc:b5:18:bb:3a:28:92:da:a1:e3:71:21: 7f:95:ad:2b:91:59:68:29:12:0e:ab:16:d9:fe:d2: 0a:50:c9:9d:4e:71:1e:67:a2:46:29:35:e1:c2:c6: 9e:a8:54:bf:f9:3c:f0:74:07:9f:77:ac:8d:9e:95: ec:f9:09:a4:5b:f9:d0:1a:a8:30:bf:61:b1:00:c4: fe:c1:ec:2d:4b:fd:8b:cd:8b:14:fc:fe:09:a3:41: b4:ea:48:e7:ac:47:8a:9f:fa:fb:50:44:97:85:72: 6f:92:cd:90:5d:d0:80:d9:57:c8:e2:c3:98:d1:1f: 94:f3:b8:49:a1:1a:74:76:b5:7c:30:77:48:e5:98: ee:7b:d5:9d:b4:0a:4e:88:78:e4:67:60:e7:7c:05: 22:ba:95:45:fe:98:80:b9:06:fb:e4:7f:2e:48:32: b8:ef:10:75:57:cb:df:1e:ff:5d:46:9d:dd:ce:98: b7:a0:6e:1f:8e:f3:ec:36:35:da:8d:af:ea:2b:3e: 73:d8:2b:34:4d:07:5c:dc:0a:35:56:34:b8:7a:65: 78:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:58:13:E1:A1:CD:65:5E:CE:F5:0B:A3:AA:7D:07:F4:D5:0C:72:09 X509v3 Authority Key Identifier: keyid:3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:a9:ec:3e:13:76:ad:64:f9:8b:d8:ff:17:bc:df:6d:6d:d6: 72:26:6c:11:c7:d5:81:c1:d9:7b:44:f7:86:3c:a8:d1:4c:71: f8:2b:e5:0d:74:b1:9b:68:d9:2a:fa:e5:ab:60:2b:bd:19:71: 23:2b:93:7b:4c:d5:e2:bc:9f:57:e4:aa:33:1c:ed:c6:19:79: f0:b0:fc:9e:10:36:bb:80:7d:3c:93:19:e9:84:c6:ed:30:f1: db:12:63:1b:d1:99:b5:b7:2d:cb:82:e8:9a:de:1c:ac:2b:e3: fb:b0:a1:db:7a:cb:02:3d:b9:14:69:c1:b8:5d:97:5a:0e:fe: 40:c9:e4:55:c9:dc:f5:ba:69:68:fc:80:b2:6e:f0:57:12:2c: 8f:0d:8b:a1:8a:70:41:06:1a:11:c5:30:6b:3f:10:9e:13:69: 0c:01:7a:35:ec:c0:6e:74:46:34:f0:04:eb:c8:6b:94:c0:c5: d3:48:67:0d:b8:46:d6:68:4b:1f:83:43:13:37:ec:1a:d0:e3: 79:7b:0e:99:8a:86:e2:a3:fa:43:c1:76:7c:3c:08:ce:e9:05: 1b:a3:cc:dc:45:76:17:90:be:f6:19:a1:39:5b:ea:af:ff:67: 23:fd:ef:61:eb:bd:2e:3f:90:4a:f8:27:fc:d0:23:1f:db:d6: 25:7b:a4:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr5i6UZjkWXo1vPqr3Z29WKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkZWIxMDQ0NjNlOTIwYjQ1NTQyYjZhZjFhMjdkNTk1MGU4 NmU5YTAwHhcNMjUxMjA3MTYwMTA5WhcNMjUxMjA4MTYwMTA5WjAzMTEwLwYDVQQD EygxMDU4MTNlMWExY2Q2NTVlY2VmNTBiYTNhYTdkMDdmNGQ1MGM3MjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEx5cXr7bALZCXMzJBJinn/rl6cn WaevEfOi5G6isFjcP8grPcisLp4vhlvI8fHMtRi7OiiS2qHjcSF/la0rkVloKRIO qxbZ/tIKUMmdTnEeZ6JGKTXhwsaeqFS/+TzwdAefd6yNnpXs+QmkW/nQGqgwv2Gx AMT+wewtS/2LzYsU/P4Jo0G06kjnrEeKn/r7UESXhXJvks2QXdCA2VfI4sOY0R+U 87hJoRp0drV8MHdI5Zjue9WdtApOiHjkZ2DnfAUiupVF/piAuQb75H8uSDK47xB1 V8vfHv9dRp3dzpi3oG4fjvPsNjXaja/qKz5z2Cs0TQdc3Ao1VjS4emV4/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBBYE+GhzWVezvULo6p9B/TVDHIJMB8GA1UdIwQY MBaAFD3rEERj6SC0VUK2rxon1ZUOhumgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGVzUVJHUHBJTFJWUXJhdkdpZlZsUTZHNmFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9jNjg2YjMtZTdhOS00ZjljLTg0MmMt MTE5ZDhiZjcxN2JiLzEvUGVzUVJHUHBJTFJWUXJhdkdpZlZsUTZHNmFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9jNjg2YjMtZTdhOS00ZjljLTg0MmMtMTE5ZDhiZjcxN2Ji LzEvUGVzUVJHUHBJTFJWUXJhdkdpZlZsUTZHNmFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMKnsPhN2 rWT5i9j/F7zfbW3WciZsEcfVgcHZe0T3hjyo0Uxx+CvlDXSxm2jZKvrlq2ArvRlx IyuTe0zV4ryfV+SqMxztxhl58LD8nhA2u4B9PJMZ6YTG7TDx2xJjG9GZtbcty4Lo mt4crCvj+7Ch23rLAj25FGnBuF2XWg7+QMnkVcnc9bppaPyAsm7wVxIsjw2LoYpw QQYaEcUwaz8QnhNpDAF6NezAbnRGNPAE68hrlMDF00hnDbhG1mhLH4NDEzfsGtDj eXsOmYqG4qP6Q8F2fDwIzukFG6PM3EV2F5C+9hmhOVvqr/9nI/3vYeu9Lj+QSvgn /NAjH9vWJXuk1g== -----END CERTIFICATE-----Generated at Sun Dec 7 21:55:23 2025 by rpki-client