This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft File: Pc9PDCdz75iQD5w1kHXMph0XwLM.mft (raw, json) Hash identifier: O7LBR/rKChHhRz/MhUcOZadBQGfyP3yd5FFw9Kz8lBg= Subject key identifier: 97:94:3C:1D:4F:96:21:8C:40:9A:A3:D3:9A:F7:C2:D4:4E:65:3F:D5 Authority key identifier: 3D:CF:4F:0C:27:73:EF:98:90:0F:9C:35:90:75:CC:A6:1D:17:C0:B3 Certificate issuer: /CN=3dcf4f0c2773ef98900f9c359075cca61d17c0b3 Certificate serial: 019B2BF876F1D490AC48F782D217FCC5C7F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pc9PDCdz75iQD5w1kHXMph0XwLM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft Manifest number: 177B Signing time: Wed 17 Dec 2025 11:01:02 +0000 Manifest this update: Wed 17 Dec 2025 11:01:02 +0000 Manifest next update: Thu 18 Dec 2025 11:01:02 +0000 Files and hashes: 1: Pc9PDCdz75iQD5w1kHXMph0XwLM.crl (hash: gZfCfsK9Vkjdsm8m0IDtT9qRX8UjgWUUDXfO6X/t7XM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.crl rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft rsync://rpki.ripe.net/repository/DEFAULT/Pc9PDCdz75iQD5w1kHXMph0XwLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:76:f1:d4:90:ac:48:f7:82:d2:17:fc:c5:c7:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3dcf4f0c2773ef98900f9c359075cca61d17c0b3 Validity Not Before: Dec 17 11:01:02 2025 GMT Not After : Dec 18 11:01:02 2025 GMT Subject: CN=97943c1d4f96218c409aa3d39af7c2d44e653fd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:dd:85:06:96:e8:1a:0b:9c:08:0b:24:b1:75: 51:47:f7:0d:1f:9b:82:e3:f4:da:33:de:ef:7d:4b: 68:81:6e:ce:53:10:a6:9e:9b:d2:50:4d:d6:ec:dc: 25:80:67:79:0b:ab:0d:1c:61:04:df:09:cf:59:01: a3:aa:af:95:e9:fb:66:6c:31:b6:c5:66:5c:4c:72: 29:de:98:f5:7d:a2:f6:50:7a:a8:d8:d0:ec:a0:c8: ed:7b:02:8f:03:86:4f:77:f4:dd:24:16:77:f6:e6: ad:ab:f9:65:5d:a1:d5:da:8f:ba:a5:d8:08:06:df: 47:c6:9d:47:32:bb:9b:e9:9e:dc:6f:12:06:20:e3: d7:29:83:b0:2a:37:1c:08:ad:31:38:81:d8:24:cf: c5:1a:7c:1e:34:a2:30:be:9f:e9:2b:22:d1:20:fb: d9:89:f2:5d:af:f6:0e:77:d9:3b:53:69:72:56:58: 08:c8:ab:a9:7a:13:aa:e6:0e:42:2c:b9:40:97:15: b0:10:a7:83:d9:1f:80:92:48:8d:e4:ea:82:46:03: 9a:ad:2d:db:27:36:67:a9:c7:e9:6d:1d:96:78:62: 91:36:c6:df:0b:e3:6e:3e:25:7a:8b:35:f4:ff:10: d6:6d:49:20:75:9c:04:15:ac:49:df:5e:4c:ce:7f: 2f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:94:3C:1D:4F:96:21:8C:40:9A:A3:D3:9A:F7:C2:D4:4E:65:3F:D5 X509v3 Authority Key Identifier: keyid:3D:CF:4F:0C:27:73:EF:98:90:0F:9C:35:90:75:CC:A6:1D:17:C0:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pc9PDCdz75iQD5w1kHXMph0XwLM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:74:d6:9a:f6:0f:97:b2:fe:bf:1f:44:67:ad:27:29:5d:88: 6f:38:3a:ea:1c:23:00:de:f8:ef:ba:fd:4c:34:ca:f5:d4:30: ae:47:42:e1:7a:a5:4b:e7:eb:c3:93:3b:88:1a:cb:44:c3:f8: 5a:72:fa:da:78:f1:70:cd:b2:bd:af:ba:ce:a1:e3:bf:33:ed: 12:b3:35:c1:bb:30:45:7f:8f:1d:4e:9b:1c:7c:26:70:27:66: e9:46:46:d5:64:8a:14:04:b1:16:ba:a7:49:e6:96:c6:f3:83: 4f:6b:a2:6e:56:cc:cb:74:62:5f:58:3f:94:a7:64:87:86:d1: 15:9a:6d:19:06:bb:09:45:ab:bc:90:c0:6c:9c:c6:47:42:0a: f7:44:46:86:09:2d:7f:d7:1e:00:bd:7e:03:ab:d9:70:66:83: 12:31:51:79:b4:b5:89:a2:71:b6:28:41:a0:a2:23:8f:f8:4e: c1:35:a0:6a:02:ed:af:78:07:fa:5d:52:35:7c:82:ef:0a:78: 1a:d9:74:b0:e9:58:1c:ac:82:e3:0f:55:e9:0f:c6:e0:f2:7a: 60:96:2a:06:26:4c:06:6a:39:d2:fd:b7:02:c7:eb:a2:95:7e: 7f:f0:61:b3:1c:6e:72:38:07:8b:24:ab:ba:f3:c7:e6:b4:0f: da:59:e6:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+Hbx1JCsSPeC0hf8xcf1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkY2Y0ZjBjMjc3M2VmOTg5MDBmOWMzNTkwNzVjY2E2MWQx N2MwYjMwHhcNMjUxMjE3MTEwMTAyWhcNMjUxMjE4MTEwMTAyWjAzMTEwLwYDVQQD Eyg5Nzk0M2MxZDRmOTYyMThjNDA5YWEzZDM5YWY3YzJkNDRlNjUzZmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkN2FBpboGgucCAsksXVRR/cNH5uC 4/TaM97vfUtogW7OUxCmnpvSUE3W7NwlgGd5C6sNHGEE3wnPWQGjqq+V6ftmbDG2 xWZcTHIp3pj1faL2UHqo2NDsoMjtewKPA4ZPd/TdJBZ39uatq/llXaHV2o+6pdgI Bt9Hxp1HMrub6Z7cbxIGIOPXKYOwKjccCK0xOIHYJM/FGnweNKIwvp/pKyLRIPvZ ifJdr/YOd9k7U2lyVlgIyKupehOq5g5CLLlAlxWwEKeD2R+AkkiN5OqCRgOarS3b JzZnqcfpbR2WeGKRNsbfC+NuPiV6izX0/xDWbUkgdZwEFaxJ315Mzn8vuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJeUPB1PliGMQJqj05r3wtROZT/VMB8GA1UdIwQY MBaAFD3PTwwnc++YkA+cNZB1zKYdF8CzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGM5UERDZHo3NWlRRDV3MWtIWE1waDBYd0xNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8wOTgxNzItYzk4YS00OGZjLWFmYzYt M2JkZTczOTZiN2I0LzEvUGM5UERDZHo3NWlRRDV3MWtIWE1waDBYd0xNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8wOTgxNzItYzk4YS00OGZjLWFmYzYtM2JkZTczOTZiN2I0 LzEvUGM5UERDZHo3NWlRRDV3MWtIWE1waDBYd0xNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACnTWmvYP l7L+vx9EZ60nKV2Ibzg66hwjAN7477r9TDTK9dQwrkdC4XqlS+frw5M7iBrLRMP4 WnL62njxcM2yva+6zqHjvzPtErM1wbswRX+PHU6bHHwmcCdm6UZG1WSKFASxFrqn SeaWxvODT2uiblbMy3RiX1g/lKdkh4bRFZptGQa7CUWrvJDAbJzGR0IK90RGhgkt f9ceAL1+A6vZcGaDEjFRebS1iaJxtihBoKIjj/hOwTWgagLtr3gH+l1SNXyC7wp4 Gtl0sOlYHKyC4w9V6Q/G4PJ6YJYqBiZMBmo50v23AsfropV+f/BhsxxucjgHiySr uvPH5rQP2lnm/A== -----END CERTIFICATE-----Generated at Wed Dec 17 18:28:16 2025 by rpki-client