This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft File: pe6Sbx8VN7m-detLnXkt9B0lzZk.mft (raw, json) Hash identifier: n2Rm0bBjMFczxGGMjrHfUN0ZVavSM76b9hKoSKs8rXI= Subject key identifier: DD:EE:B0:DF:8D:A9:64:2D:0A:26:32:1D:FB:2C:CF:28:49:97:1B:98 Authority key identifier: A5:EE:92:6F:1F:15:37:B9:BE:75:EB:4B:9D:79:2D:F4:1D:25:CD:99 Certificate issuer: /CN=a5ee926f1f1537b9be75eb4b9d792df41d25cd99 Certificate serial: 019AF209936C2600A30A502EC3A82BA60705 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft Manifest number: 0E38 Signing time: Sat 06 Dec 2025 05:01:45 +0000 Manifest this update: Sat 06 Dec 2025 05:01:45 +0000 Manifest next update: Sun 07 Dec 2025 05:01:45 +0000 Files and hashes: 1: WDPyyXGbTlVNzNvHMt_u6jFAfDs.roa (hash: Io6wRfSHyznIog5I1/syrGcc1ZOg6epQfuj3AIJAZhg=) 2: pe6Sbx8VN7m-detLnXkt9B0lzZk.crl (hash: lxc2NPW3JWGNMcBDw77Xc5P33xs5EDMKRc1oFfzr5eg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.crl rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:93:6c:26:00:a3:0a:50:2e:c3:a8:2b:a6:07:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5ee926f1f1537b9be75eb4b9d792df41d25cd99 Validity Not Before: Dec 6 05:01:45 2025 GMT Not After : Dec 7 05:01:45 2025 GMT Subject: CN=ddeeb0df8da9642d0a26321dfb2ccf2849971b98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:dc:7f:80:2b:a3:78:49:84:fe:92:63:ff:93: ee:af:34:0e:7d:24:87:37:a9:7d:0f:c6:62:a1:07: f9:fc:26:a6:86:8d:c1:c1:77:39:bb:4a:05:4a:63: 2b:f3:58:8b:b7:57:29:71:2c:50:2f:6e:11:b1:9f: bd:80:15:7e:38:17:85:f7:bd:df:b9:81:02:db:98: e4:b1:23:13:4c:90:e3:68:90:45:b4:63:a8:48:1f: 5c:72:eb:3e:9a:18:02:2f:f1:fe:f4:87:54:3b:56: e4:a9:70:a1:94:51:f5:9b:4e:be:7c:0e:b0:59:d4: 37:8b:29:71:20:24:24:61:a6:47:42:f5:2f:3c:be: 5d:90:94:5d:b5:f6:b8:b1:32:82:6d:40:78:7b:e1: 2e:6b:70:be:dc:8e:da:b5:c0:85:d6:1d:06:4b:e3: 67:3d:18:b0:1a:4c:f9:9a:e8:d8:70:4d:7b:5d:51: 09:7b:5d:be:72:d2:e2:04:85:c0:9c:97:df:bc:29: cf:02:34:68:c2:26:ad:47:7a:5b:31:5f:31:c0:37: bc:31:ee:0e:b0:d1:49:ed:ee:80:c7:25:6b:89:6b: be:7c:9e:11:13:e0:e7:2d:24:c6:3e:fd:ef:c2:11: c8:19:bc:4a:0e:b7:26:1a:21:6b:bf:f0:61:5a:c2: 4e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:EE:B0:DF:8D:A9:64:2D:0A:26:32:1D:FB:2C:CF:28:49:97:1B:98 X509v3 Authority Key Identifier: keyid:A5:EE:92:6F:1F:15:37:B9:BE:75:EB:4B:9D:79:2D:F4:1D:25:CD:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:b8:23:38:94:2b:f3:14:19:00:e0:8c:a1:34:13:87:b8:e1: 34:e3:d7:e8:18:65:c8:7a:41:41:59:18:cd:aa:68:07:e1:86: e7:56:41:30:75:48:b4:16:43:2c:45:bd:9e:07:31:e2:8d:f3: 45:b7:b3:a0:50:a3:e9:e6:ca:0a:f2:fd:1a:53:37:11:10:eb: 38:b3:1b:6a:69:dd:1a:1c:62:fc:1a:a5:7b:ac:37:4b:59:af: e3:14:fe:b9:3d:6c:5c:75:da:33:c1:e8:90:30:3c:0a:b4:60: 23:80:9e:a4:87:e9:20:82:1c:61:fa:6a:a6:a7:64:20:d1:da: c7:e9:a5:ee:27:ef:0d:6d:5d:29:aa:0e:28:1c:95:3d:1e:84: 91:cb:d9:9c:b7:b2:0c:87:bb:ff:a4:8a:85:83:8a:8b:99:dd: 90:a0:dd:26:37:31:4b:5d:12:77:31:3e:15:6e:d6:cf:24:70: 0a:b5:5d:3b:7d:82:e7:89:7b:d9:f5:40:89:f2:f6:72:36:fd: ea:81:dc:40:d7:fe:ba:c2:a2:a0:74:56:44:33:22:69:9e:f4: 75:01:bc:e1:54:8d:00:9f:47:42:d0:57:be:b9:f9:4d:b2:c1: 0d:22:b4:85:7a:9d:f6:71:01:f7:df:e6:5f:55:1c:b1:df:70: 3d:af:bb:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCZNsJgCjClAuw6grpgcFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1ZWU5MjZmMWYxNTM3YjliZTc1ZWI0YjlkNzkyZGY0MWQy NWNkOTkwHhcNMjUxMjA2MDUwMTQ1WhcNMjUxMjA3MDUwMTQ1WjAzMTEwLwYDVQQD EyhkZGVlYjBkZjhkYTk2NDJkMGEyNjMyMWRmYjJjY2YyODQ5OTcxYjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dx/gCujeEmE/pJj/5PurzQOfSSH N6l9D8ZioQf5/Camho3BwXc5u0oFSmMr81iLt1cpcSxQL24RsZ+9gBV+OBeF973f uYEC25jksSMTTJDjaJBFtGOoSB9ccus+mhgCL/H+9IdUO1bkqXChlFH1m06+fA6w WdQ3iylxICQkYaZHQvUvPL5dkJRdtfa4sTKCbUB4e+Eua3C+3I7atcCF1h0GS+Nn PRiwGkz5mujYcE17XVEJe12+ctLiBIXAnJffvCnPAjRowiatR3pbMV8xwDe8Me4O sNFJ7e6AxyVriWu+fJ4RE+DnLSTGPv3vwhHIGbxKDrcmGiFrv/BhWsJOAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN3usN+NqWQtCiYyHfsszyhJlxuYMB8GA1UdIwQY MBaAFKXukm8fFTe5vnXrS515LfQdJc2ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGU2U2J4OFZON20tZGV0TG5Ya3Q5QjBselprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9hODdhZWMtYmVhYS00YWViLWE0OGUt OGYzNGJkMzkxZDE4LzEvcGU2U2J4OFZON20tZGV0TG5Ya3Q5QjBselprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9hODdhZWMtYmVhYS00YWViLWE0OGUtOGYzNGJkMzkxZDE4 LzEvcGU2U2J4OFZON20tZGV0TG5Ya3Q5QjBselprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAobgjOJQr 8xQZAOCMoTQTh7jhNOPX6BhlyHpBQVkYzapoB+GG51ZBMHVItBZDLEW9ngcx4o3z RbezoFCj6ebKCvL9GlM3ERDrOLMbamndGhxi/Bqle6w3S1mv4xT+uT1sXHXaM8Ho kDA8CrRgI4CepIfpIIIcYfpqpqdkINHax+ml7ifvDW1dKaoOKByVPR6EkcvZnLey DIe7/6SKhYOKi5ndkKDdJjcxS10SdzE+FW7WzyRwCrVdO32C54l72fVAifL2cjb9 6oHcQNf+usKioHRWRDMiaZ70dQG84VSNAJ9HQtBXvrn5TbLBDSK0hXqd9nEB99/m X1Ucsd9wPa+79g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:01:19 2025 by rpki-client