This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft File: Ps1TxmQkw_Npyojuevdq2yXhhFE.mft (raw, json) Hash identifier: C/bk7u1AK6gkPKC2SS2jGGJsWZbVfnK47SDoidu41/M= Subject key identifier: 5F:18:A5:75:7F:17:37:20:CB:FA:4F:88:0D:00:82:D4:31:F5:1B:DB Authority key identifier: 3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51 Certificate issuer: /CN=3ecd53c66424c3f369ca88ee7af76adb25e18451 Certificate serial: 019AF208F05183094BFCF435C7DD1DB298A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft Manifest number: 1129 Signing time: Sat 06 Dec 2025 05:01:03 +0000 Manifest this update: Sat 06 Dec 2025 05:01:03 +0000 Manifest next update: Sun 07 Dec 2025 05:01:03 +0000 Files and hashes: 1: NFHPImufF3uRqUgALoiOKsyNAWY.roa (hash: P38WvGerxAQEhXHw97XFuU4GA9ZzpqGUq811jnutzZs=) 2: Ps1TxmQkw_Npyojuevdq2yXhhFE.crl (hash: xn9MOVM179urMdz74LpuL3kRKIw2QGDnDRq+7Mg21ZQ=) 3: mI6j4UadWN59Ry8sBr4KvB0K8Yc.roa (hash: OgHmwZEN5FVoA8wv5XCNl8ngdl4mQaBcOydLvBf7mUc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:f0:51:83:09:4b:fc:f4:35:c7:dd:1d:b2:98:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ecd53c66424c3f369ca88ee7af76adb25e18451 Validity Not Before: Dec 6 05:01:03 2025 GMT Not After : Dec 7 05:01:03 2025 GMT Subject: CN=5f18a5757f173720cbfa4f880d0082d431f51bdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fb:8a:55:93:db:d2:3a:50:35:fa:c1:59:fe: 54:30:88:cf:90:a9:37:39:f8:66:4e:f8:87:3f:a2: f5:da:2d:c1:2b:68:46:9c:76:64:b2:33:af:46:e1: 8e:0f:22:5b:65:12:06:75:01:94:55:68:36:a4:5b: c3:4e:db:12:23:b2:b4:48:87:2e:53:dd:1b:ca:35: 6f:bf:c8:c9:5f:50:e5:4b:1d:b7:58:63:9a:f6:bf: 41:ee:d0:b1:44:0f:24:2a:4e:cc:de:36:d0:ae:b5: a8:6a:d4:bf:cb:69:b0:ef:7a:b8:ad:f3:9d:7c:0d: 3b:51:c5:9d:0f:b7:57:ae:17:14:9a:f9:c8:96:d8: ac:d4:c8:79:a1:9c:80:3b:44:ed:7b:c2:d2:00:31: e4:f8:4f:36:0a:86:2a:de:21:c8:62:a8:20:7d:7e: e3:61:89:88:fd:d4:24:83:3c:59:2b:a1:31:6c:d4: fd:88:a9:4f:a7:00:0e:c7:df:2a:f0:1b:2a:e5:77: fd:84:16:1b:a4:48:10:f9:e6:ca:c7:42:06:25:f6: d1:df:53:79:6f:ab:54:c7:44:8c:88:d3:99:81:81: d0:b6:ce:d6:f4:4b:63:89:72:21:e5:4a:b1:f9:36: 04:dd:a6:77:8d:ca:5b:9e:7e:a8:41:1e:4f:39:7f: 28:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:18:A5:75:7F:17:37:20:CB:FA:4F:88:0D:00:82:D4:31:F5:1B:DB X509v3 Authority Key Identifier: keyid:3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:31:0b:b1:9a:90:b4:4e:a6:5d:35:30:a6:b3:e7:cb:cc:6b: 38:e0:f0:f0:3d:ee:6b:7f:2a:e8:ee:1a:24:44:b7:ce:5b:4e: 50:6c:8b:12:01:c8:36:7d:2d:e3:eb:8e:4f:a0:89:c4:63:46: 76:a5:6b:97:b0:5e:20:f0:44:43:d8:52:a4:06:a1:76:8e:4d: 91:3d:a2:e3:ce:c1:d9:86:1f:7d:c1:47:71:c4:b1:21:70:dd: ce:7a:6c:e5:0d:e7:06:f2:49:5b:b4:33:c3:1d:4b:00:ed:c6: 82:69:90:52:c0:09:83:f0:78:5c:1b:e1:05:f1:c9:40:15:e0: 2b:95:c7:99:9a:28:03:3b:7a:25:9e:4a:17:4e:82:f0:40:99: ee:9f:c6:f1:5e:88:e0:d2:aa:e7:0a:ec:e7:04:c0:02:2e:38: 97:65:fc:f7:28:5c:5f:d6:19:bb:1f:62:48:25:36:d5:14:e5: ea:23:fd:5c:53:eb:54:55:7c:9c:e3:60:11:a7:5d:6c:2b:d8: d8:a9:35:b0:dd:49:3a:45:58:30:6f:13:48:3e:47:5b:32:99: 4e:4c:63:7a:c6:a9:8f:22:9c:e7:34:41:e2:e0:6b:7b:b7:3c: c1:dd:3f:35:9f:1b:a0:0f:c5:ff:c2:62:c4:d7:23:57:8d:1c: 21:15:d7:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCPBRgwlL/PQ1x90dspigMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlY2Q1M2M2NjQyNGMzZjM2OWNhODhlZTdhZjc2YWRiMjVl MTg0NTEwHhcNMjUxMjA2MDUwMTAzWhcNMjUxMjA3MDUwMTAzWjAzMTEwLwYDVQQD Eyg1ZjE4YTU3NTdmMTczNzIwY2JmYTRmODgwZDAwODJkNDMxZjUxYmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufuKVZPb0jpQNfrBWf5UMIjPkKk3 OfhmTviHP6L12i3BK2hGnHZksjOvRuGODyJbZRIGdQGUVWg2pFvDTtsSI7K0SIcu U90byjVvv8jJX1DlSx23WGOa9r9B7tCxRA8kKk7M3jbQrrWoatS/y2mw73q4rfOd fA07UcWdD7dXrhcUmvnIltis1Mh5oZyAO0Tte8LSADHk+E82CoYq3iHIYqggfX7j YYmI/dQkgzxZK6ExbNT9iKlPpwAOx98q8Bsq5Xf9hBYbpEgQ+ebKx0IGJfbR31N5 b6tUx0SMiNOZgYHQts7W9EtjiXIh5Uqx+TYE3aZ3jcpbnn6oQR5POX8ozQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF8YpXV/Fzcgy/pPiA0AgtQx9RvbMB8GA1UdIwQY MBaAFD7NU8ZkJMPzacqI7nr3atsl4YRRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHMxVHhtUWt3X05weW9qdWV2ZHEyeVhoaEZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lNjVhZGEtNGQ0YS00MDRkLTg3MDAt YzIyNTY4MDRlOTIyLzEvUHMxVHhtUWt3X05weW9qdWV2ZHEyeVhoaEZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9lNjVhZGEtNGQ0YS00MDRkLTg3MDAtYzIyNTY4MDRlOTIy LzEvUHMxVHhtUWt3X05weW9qdWV2ZHEyeVhoaEZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMDELsZqQ tE6mXTUwprPny8xrOODw8D3ua38q6O4aJES3zltOUGyLEgHINn0t4+uOT6CJxGNG dqVrl7BeIPBEQ9hSpAahdo5NkT2i487B2YYffcFHccSxIXDdznps5Q3nBvJJW7Qz wx1LAO3GgmmQUsAJg/B4XBvhBfHJQBXgK5XHmZooAzt6JZ5KF06C8ECZ7p/G8V6I 4NKq5wrs5wTAAi44l2X89yhcX9YZux9iSCU21RTl6iP9XFPrVFV8nONgEaddbCvY 2Kk1sN1JOkVYMG8TSD5HWzKZTkxjesapjyKc5zRB4uBre7c8wd0/NZ8boA/F/8Ji xNcjV40cIRXXbQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:30 2025 by rpki-client