This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft File: Pc9PDCdz75iQD5w1kHXMph0XwLM.mft (raw, json) Hash identifier: vblRUhg0eJ1fRwwEQlIWqhNMHCnUzkg1AxDzm0VY7/k= Subject key identifier: 5E:F4:0C:D9:77:CB:A2:71:9D:39:D3:F0:0E:BB:CE:F9:04:0F:97:DE Authority key identifier: 3D:CF:4F:0C:27:73:EF:98:90:0F:9C:35:90:75:CC:A6:1D:17:C0:B3 Certificate issuer: /CN=3dcf4f0c2773ef98900f9c359075cca61d17c0b3 Certificate serial: 019B2DE6B03A6F6A0A583844F9D9E6ADF1DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pc9PDCdz75iQD5w1kHXMph0XwLM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft Manifest number: 177C Signing time: Wed 17 Dec 2025 20:00:51 +0000 Manifest this update: Wed 17 Dec 2025 20:00:51 +0000 Manifest next update: Thu 18 Dec 2025 20:00:51 +0000 Files and hashes: 1: Pc9PDCdz75iQD5w1kHXMph0XwLM.crl (hash: fTJNXbTDfjPYLL6FEe09AXLuh2EK49h7sV5QHcWF6qw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.crl rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft rsync://rpki.ripe.net/repository/DEFAULT/Pc9PDCdz75iQD5w1kHXMph0XwLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:e6:b0:3a:6f:6a:0a:58:38:44:f9:d9:e6:ad:f1:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3dcf4f0c2773ef98900f9c359075cca61d17c0b3 Validity Not Before: Dec 17 20:00:51 2025 GMT Not After : Dec 18 20:00:51 2025 GMT Subject: CN=5ef40cd977cba2719d39d3f00ebbcef9040f97de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b5:0a:3b:99:53:08:42:35:56:85:ea:0b:bc: 19:77:52:09:c8:15:d9:4c:6a:8e:94:d9:e9:09:08: 3c:2a:46:a3:5d:45:78:bb:da:4b:99:67:ee:a5:4a: 84:45:af:35:0b:73:36:a5:91:70:77:80:60:83:42: e4:38:37:ba:5d:7c:c9:eb:00:39:aa:5b:f5:38:b7: 91:d3:61:be:2c:55:4a:7e:85:21:41:37:2a:36:04: 95:91:62:0d:93:97:53:bf:8b:c9:91:92:85:40:49: 1c:1c:74:72:b7:32:26:a5:86:8a:fb:17:69:a7:cb: 53:eb:31:5b:8d:d7:c0:70:68:80:6d:5f:71:6e:a1: 9e:c2:5b:b5:cc:a8:ef:95:85:49:f3:3e:5f:29:5d: b0:01:2f:7c:cc:f0:d3:c0:31:19:2a:68:97:33:52: 72:ae:80:7e:96:44:fb:16:21:a5:08:94:63:7c:3a: c9:36:ca:47:43:09:dd:51:18:e1:67:44:53:24:db: 67:05:29:77:75:72:81:fe:79:46:6f:e6:16:5c:0d: 8e:82:8a:e4:77:ad:98:a0:29:61:58:79:c0:48:5a: 3c:1c:d5:61:67:21:46:48:6e:fd:7e:ad:a7:b1:8c: 90:78:09:aa:d1:33:95:52:45:85:f9:3f:43:70:38: 0c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:F4:0C:D9:77:CB:A2:71:9D:39:D3:F0:0E:BB:CE:F9:04:0F:97:DE X509v3 Authority Key Identifier: keyid:3D:CF:4F:0C:27:73:EF:98:90:0F:9C:35:90:75:CC:A6:1D:17:C0:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pc9PDCdz75iQD5w1kHXMph0XwLM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:2a:ea:80:f2:e7:38:e1:a2:12:47:3c:01:26:cb:1a:26:d2: 5f:95:3d:dd:50:27:16:59:16:64:e1:23:07:63:df:78:f5:d2: 45:d8:0e:fa:e6:5f:d7:f6:c8:04:fb:1d:9e:0a:89:a0:0e:71: e0:cf:56:a6:a7:f1:5e:75:57:d8:0b:1d:b7:0f:40:63:38:a0: 5d:eb:f8:94:dd:d4:6a:2b:85:52:01:7d:16:f4:76:63:e0:f5: 09:cf:ec:28:b3:c1:dd:42:34:4d:9d:a1:d5:b8:88:20:10:5a: 27:e4:3c:f0:e5:ac:ac:34:08:c2:b5:1b:64:e6:b6:22:78:14: 01:cd:22:48:69:a3:ab:d2:86:33:cc:1c:45:c6:a3:7a:57:1a: 19:80:f1:a5:82:04:0a:7e:1b:15:27:46:c2:0a:21:e9:42:f8: 2a:42:9c:5c:c7:ef:5e:51:ff:2e:99:f9:67:07:87:65:25:c2: 5b:a3:c5:c7:cf:d0:3b:f5:20:2c:b4:e3:1a:ac:1e:e2:2b:9c: 64:26:ca:18:f4:fa:5f:5c:7b:ac:c0:34:06:27:85:f4:32:b3: 9c:04:19:de:84:77:9b:6d:f0:f2:8f:49:30:b5:66:54:f2:8d: d2:0f:61:3f:f5:4f:f0:d6:cd:1f:fd:e5:df:3a:83:40:4a:92: da:0e:dd:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZst5rA6b2oKWDhE+dnmrfHeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkY2Y0ZjBjMjc3M2VmOTg5MDBmOWMzNTkwNzVjY2E2MWQx N2MwYjMwHhcNMjUxMjE3MjAwMDUxWhcNMjUxMjE4MjAwMDUxWjAzMTEwLwYDVQQD Eyg1ZWY0MGNkOTc3Y2JhMjcxOWQzOWQzZjAwZWJiY2VmOTA0MGY5N2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrUKO5lTCEI1VoXqC7wZd1IJyBXZ TGqOlNnpCQg8KkajXUV4u9pLmWfupUqERa81C3M2pZFwd4Bgg0LkODe6XXzJ6wA5 qlv1OLeR02G+LFVKfoUhQTcqNgSVkWINk5dTv4vJkZKFQEkcHHRytzImpYaK+xdp p8tT6zFbjdfAcGiAbV9xbqGewlu1zKjvlYVJ8z5fKV2wAS98zPDTwDEZKmiXM1Jy roB+lkT7FiGlCJRjfDrJNspHQwndURjhZ0RTJNtnBSl3dXKB/nlGb+YWXA2Ogork d62YoClhWHnASFo8HNVhZyFGSG79fq2nsYyQeAmq0TOVUkWF+T9DcDgM4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF70DNl3y6JxnTnT8A67zvkED5feMB8GA1UdIwQY MBaAFD3PTwwnc++YkA+cNZB1zKYdF8CzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGM5UERDZHo3NWlRRDV3MWtIWE1waDBYd0xNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8wOTgxNzItYzk4YS00OGZjLWFmYzYt M2JkZTczOTZiN2I0LzEvUGM5UERDZHo3NWlRRDV3MWtIWE1waDBYd0xNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8wOTgxNzItYzk4YS00OGZjLWFmYzYtM2JkZTczOTZiN2I0 LzEvUGM5UERDZHo3NWlRRDV3MWtIWE1waDBYd0xNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvyrqgPLn OOGiEkc8ASbLGibSX5U93VAnFlkWZOEjB2PfePXSRdgO+uZf1/bIBPsdngqJoA5x 4M9WpqfxXnVX2Asdtw9AYzigXev4lN3UaiuFUgF9FvR2Y+D1Cc/sKLPB3UI0TZ2h 1biIIBBaJ+Q88OWsrDQIwrUbZOa2IngUAc0iSGmjq9KGM8wcRcajelcaGYDxpYIE Cn4bFSdGwgoh6UL4KkKcXMfvXlH/Lpn5ZweHZSXCW6PFx8/QO/UgLLTjGqwe4iuc ZCbKGPT6X1x7rMA0BieF9DKznAQZ3oR3m23w8o9JMLVmVPKN0g9hP/VP8NbNH/3l 3zqDQEqS2g7d4Q== -----END CERTIFICATE-----Generated at Thu Dec 18 05:00:05 2025 by rpki-client