This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft File: PseNgibLWq_xXGdSWvK4q8t7X5I.mft (raw, json) Hash identifier: CGQDWRh1aHRwyVpjR+8qBofQ7Eaeph/lG0LglfYIvTs= Subject key identifier: 69:C5:A0:17:D9:64:08:8E:EB:C0:DC:0E:38:F7:0C:D8:5A:08:92:C7 Authority key identifier: 3E:C7:8D:82:26:CB:5A:AF:F1:5C:67:52:5A:F2:B8:AB:CB:7B:5F:92 Certificate issuer: /CN=3ec78d8226cb5aaff15c67525af2b8abcb7b5f92 Certificate serial: 019AF31CA6026B515FF70A5CB766486F75C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 10:02:12 +0000 Manifest this update: Sat 06 Dec 2025 10:02:12 +0000 Manifest next update: Sun 07 Dec 2025 10:02:12 +0000 Files and hashes: 1: PseNgibLWq_xXGdSWvK4q8t7X5I.crl (hash: 83KennnL39o1JuefEg1FgLr2d62TEEK4P9zuE0ouVrk=) 2: RGavrFD9QlH9mvEK00LE9vM0Ylo.roa (hash: in3DOj7fuK/tRP2Np73D85wEHXvdsqUOTjKtL4z+mG4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:a6:02:6b:51:5f:f7:0a:5c:b7:66:48:6f:75:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ec78d8226cb5aaff15c67525af2b8abcb7b5f92 Validity Not Before: Dec 6 10:02:12 2025 GMT Not After : Dec 7 10:02:12 2025 GMT Subject: CN=69c5a017d964088eebc0dc0e38f70cd85a0892c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ec:5e:ae:93:98:41:16:4c:9d:b4:3e:c2:e3: 0e:3f:cd:2a:db:14:55:47:80:b3:d9:e9:52:35:fa: 3c:d8:be:85:ce:7e:3e:72:f7:e2:d0:d1:97:61:fc: 90:69:5a:3f:f4:48:15:29:d9:7d:7e:6f:34:4c:83: 0d:30:8e:34:1d:ff:79:ff:86:a3:87:3f:2d:f9:34: 66:b0:5f:f2:8c:43:47:d7:1b:12:81:9e:d8:2e:df: 9b:bd:6b:42:b9:49:40:54:51:1d:f7:3d:cd:9f:b6: c2:86:d4:f6:2a:b5:fa:3f:a5:96:05:b5:bf:4a:21: 24:25:53:2d:a6:3c:5c:d8:f1:6d:35:cc:f6:20:e5: 1c:0e:63:62:db:58:7a:7d:a8:90:66:38:41:52:d4: 07:af:9e:40:55:5e:15:d7:1c:83:09:b2:ed:02:1d: 44:0b:c5:c7:6d:1f:6b:3e:2f:55:3a:c6:e0:12:45: 4a:ef:bf:17:11:73:41:09:e1:d0:df:8f:27:02:7b: 45:f9:4b:64:37:4a:a8:c8:e1:92:c8:a9:c0:9a:dd: a9:9f:36:30:6d:af:92:ab:e1:9f:7f:c2:c4:5f:1a: 13:ea:a7:b7:cd:f8:26:2f:d0:5d:a8:45:6e:0c:ba: ac:73:4a:b0:b8:16:1c:1d:46:9b:76:a8:7d:91:97: d0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:C5:A0:17:D9:64:08:8E:EB:C0:DC:0E:38:F7:0C:D8:5A:08:92:C7 X509v3 Authority Key Identifier: keyid:3E:C7:8D:82:26:CB:5A:AF:F1:5C:67:52:5A:F2:B8:AB:CB:7B:5F:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:f2:a1:a5:ed:fe:7d:03:09:a9:09:d5:88:30:20:86:21:fd: eb:88:15:fa:5d:eb:23:0d:db:6c:ff:d1:27:5c:d0:15:ce:89: 19:8c:cc:98:35:a9:56:76:c5:46:ed:e6:1d:c3:05:fe:1b:a8: 42:82:ca:c0:29:0d:0f:24:4f:e4:0e:44:0a:c6:2d:50:e6:75: cc:06:79:2f:84:ee:da:6a:eb:fd:9f:ce:e1:bf:44:9c:f2:14: 6b:19:0e:b2:c1:19:ee:e4:bc:2f:96:07:8d:9e:cc:c5:1d:07: 95:d4:9d:bb:9f:8f:f4:bc:67:82:fc:15:9e:0c:f4:f7:fb:b1: 67:87:78:77:c3:c9:20:e4:3a:b9:bb:06:02:75:b0:fe:71:20: 67:e7:0b:95:e2:05:b9:8e:32:51:93:6a:d1:02:93:03:4a:70: b0:19:91:47:10:ba:4e:40:b6:52:79:c3:fb:f3:c4:ca:a1:1d: 6b:0d:0b:a1:d6:23:53:3d:7b:f8:9c:2c:2a:42:2e:4e:20:99: 86:eb:9a:c9:5d:f5:27:20:ec:d5:f6:ec:d2:6a:1b:7a:8e:8b: 4f:9e:3b:78:8b:48:c6:8b:52:5b:11:f9:05:32:d4:71:ee:6f: 91:91:8a:f7:93:66:83:65:54:3f:11:7c:f6:07:78:cd:11:c7: 20:c8:5b:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHKYCa1Ff9wpct2ZIb3XFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYzc4ZDgyMjZjYjVhYWZmMTVjNjc1MjVhZjJiOGFiY2I3 YjVmOTIwHhcNMjUxMjA2MTAwMjEyWhcNMjUxMjA3MTAwMjEyWjAzMTEwLwYDVQQD Eyg2OWM1YTAxN2Q5NjQwODhlZWJjMGRjMGUzOGY3MGNkODVhMDg5MmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOxerpOYQRZMnbQ+wuMOP80q2xRV R4Cz2elSNfo82L6Fzn4+cvfi0NGXYfyQaVo/9EgVKdl9fm80TIMNMI40Hf95/4aj hz8t+TRmsF/yjENH1xsSgZ7YLt+bvWtCuUlAVFEd9z3Nn7bChtT2KrX6P6WWBbW/ SiEkJVMtpjxc2PFtNcz2IOUcDmNi21h6faiQZjhBUtQHr55AVV4V1xyDCbLtAh1E C8XHbR9rPi9VOsbgEkVK778XEXNBCeHQ348nAntF+UtkN0qoyOGSyKnAmt2pnzYw ba+Sq+Gff8LEXxoT6qe3zfgmL9BdqEVuDLqsc0qwuBYcHUabdqh9kZfQLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGnFoBfZZAiO68DcDjj3DNhaCJLHMB8GA1UdIwQY MBaAFD7HjYImy1qv8VxnUlryuKvLe1+SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHNlTmdpYkxXcV94WEdkU1d2SzRxOHQ3WDVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9kYjM3NDEtNDM0ZC00YjVhLTg5MGIt MjA1OGM3MDM2N2FhLzEvUHNlTmdpYkxXcV94WEdkU1d2SzRxOHQ3WDVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9kYjM3NDEtNDM0ZC00YjVhLTg5MGItMjA1OGM3MDM2N2Fh LzEvUHNlTmdpYkxXcV94WEdkU1d2SzRxOHQ3WDVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIfKhpe3+ fQMJqQnViDAghiH964gV+l3rIw3bbP/RJ1zQFc6JGYzMmDWpVnbFRu3mHcMF/huo QoLKwCkNDyRP5A5ECsYtUOZ1zAZ5L4Tu2mrr/Z/O4b9EnPIUaxkOssEZ7uS8L5YH jZ7MxR0HldSdu5+P9LxngvwVngz09/uxZ4d4d8PJIOQ6ubsGAnWw/nEgZ+cLleIF uY4yUZNq0QKTA0pwsBmRRxC6TkC2UnnD+/PEyqEdaw0LodYjUz17+JwsKkIuTiCZ huuayV31JyDs1fbs0mobeo6LT547eItIxotSWxH5BTLUce5vkZGK95Nmg2VUPxF8 9gd4zRHHIMhbcw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:33:22 2025 by rpki-client