This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft File: PxckOVmdfaUleXiZvyE7jmNVSRQ.mft (raw, json) Hash identifier: P8GdxGAh7uspiRcQrdknORnii50cJ5I6cE8MfIdZXxc= Subject key identifier: 3F:EE:36:32:D6:3E:A9:BC:09:F2:20:38:F5:AC:58:C9:56:3E:3C:C8 Authority key identifier: 3F:17:24:39:59:9D:7D:A5:25:79:78:99:BF:21:3B:8E:63:55:49:14 Certificate issuer: /CN=3f172439599d7da525797899bf213b8e63554914 Certificate serial: 019AF0BF6DAA11CFEEF6CFD922A2FAF60EFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxckOVmdfaUleXiZvyE7jmNVSRQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft Manifest number: 16F2 Signing time: Fri 05 Dec 2025 23:01:08 +0000 Manifest this update: Fri 05 Dec 2025 23:01:08 +0000 Manifest next update: Sat 06 Dec 2025 23:01:08 +0000 Files and hashes: 1: ET0yOb6N2KPn9sEOeciwveLzfFQ.roa (hash: 5UaUVXzPjnKQ9N0meCwxNszuKgkyrbDITbh3/+eJ6rg=) 2: PxckOVmdfaUleXiZvyE7jmNVSRQ.crl (hash: l06VjduHSXW43x3fJj0fEGnrwmJNwYj4ZZ+qdvk+VCE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.crl rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PxckOVmdfaUleXiZvyE7jmNVSRQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:6d:aa:11:cf:ee:f6:cf:d9:22:a2:fa:f6:0e:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f172439599d7da525797899bf213b8e63554914 Validity Not Before: Dec 5 23:01:08 2025 GMT Not After : Dec 6 23:01:08 2025 GMT Subject: CN=3fee3632d63ea9bc09f22038f5ac58c9563e3cc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e0:73:21:e3:5b:b9:aa:2b:5f:69:58:6b:54: 59:5d:89:ad:5f:e4:98:5d:dd:49:c2:0a:7e:5a:e5: 9a:89:75:81:f4:e4:75:a6:1e:16:e7:b7:c8:96:44: 48:cf:1e:e5:0e:7d:d0:23:37:04:67:fd:30:c6:90: 6f:21:13:74:3e:e3:08:48:0d:c0:7b:c4:72:fb:9e: 7d:73:b4:9d:a2:a9:c2:ef:de:46:8a:e8:a2:76:b0: 2d:68:5b:c1:f9:6c:99:24:2f:cb:be:6d:20:31:c0: a2:70:e0:47:07:1e:3d:ed:7a:ae:c1:4a:9e:7a:10: b1:c4:47:74:59:87:f8:f1:32:d2:8d:1f:c5:ca:3a: 74:f7:e9:45:10:d8:cf:88:95:4d:5e:0f:0d:6f:37: 07:91:cc:bc:b5:41:84:34:4a:1d:a4:dd:80:f3:6b: 17:c1:c8:93:d0:8a:70:74:c2:2f:71:a1:cb:86:9e: a3:1a:c3:1a:d4:3c:77:03:cd:93:d8:f0:e4:31:6d: fd:29:bf:91:d3:f8:0a:e9:a9:78:df:6e:b1:12:fb: e1:3f:9b:d1:32:c9:a0:8c:a3:d2:79:c9:00:c1:06: de:e9:53:c9:04:3f:f6:c7:ec:f8:38:0e:aa:59:1e: 0f:b1:64:04:ea:c2:4d:fd:53:10:b7:bd:db:a0:5a: 18:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:EE:36:32:D6:3E:A9:BC:09:F2:20:38:F5:AC:58:C9:56:3E:3C:C8 X509v3 Authority Key Identifier: keyid:3F:17:24:39:59:9D:7D:A5:25:79:78:99:BF:21:3B:8E:63:55:49:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxckOVmdfaUleXiZvyE7jmNVSRQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:80:0d:d8:2b:93:47:b7:38:f4:54:d8:cf:da:a7:71:38:2d: 8e:dc:fa:e0:40:27:ec:50:3a:eb:d9:2b:d5:90:7b:99:7f:30: 90:03:69:9a:23:00:90:46:1e:17:6d:de:12:40:2c:7f:e0:13: 9b:d7:99:b4:af:a3:57:cf:aa:84:7a:71:12:fb:9c:4d:16:d6: ad:4e:a0:d9:ac:ec:d1:46:ee:55:95:9b:36:fb:6a:19:49:7c: ef:03:01:d5:64:3a:7d:10:cb:1a:d5:31:de:b0:04:ed:33:19: 93:34:da:c3:64:ee:b9:4e:59:15:86:74:70:5f:b4:1b:53:7a: a5:64:2a:99:d2:c6:f6:dd:71:c4:35:0e:7f:46:bf:02:66:2e: b2:02:f8:56:75:05:ee:65:34:46:6a:8d:ea:f6:d1:13:f0:41: 17:04:03:0b:f4:b8:d2:e7:26:b2:df:cf:18:0e:59:31:89:e5: 67:44:b5:99:b9:8a:54:0e:3f:1b:f2:11:4b:d4:75:0c:b4:4d: 4c:00:bc:9d:f1:f6:92:8c:ac:73:e0:7a:c0:8d:5f:aa:69:d6: c4:95:7c:09:4d:ae:8a:a8:0a:24:87:10:3f:c9:71:ad:83:f0: dc:33:17:a4:10:f7:6d:2e:69:19:30:40:c5:72:cd:ba:87:3b: 03:6b:4c:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv22qEc/u9s/ZIqL69g7+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmMTcyNDM5NTk5ZDdkYTUyNTc5Nzg5OWJmMjEzYjhlNjM1 NTQ5MTQwHhcNMjUxMjA1MjMwMTA4WhcNMjUxMjA2MjMwMTA4WjAzMTEwLwYDVQQD EygzZmVlMzYzMmQ2M2VhOWJjMDlmMjIwMzhmNWFjNThjOTU2M2UzY2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOBzIeNbuaorX2lYa1RZXYmtX+SY Xd1Jwgp+WuWaiXWB9OR1ph4W57fIlkRIzx7lDn3QIzcEZ/0wxpBvIRN0PuMISA3A e8Ry+559c7SdoqnC795GiuiidrAtaFvB+WyZJC/Lvm0gMcCicOBHBx497XquwUqe ehCxxEd0WYf48TLSjR/Fyjp09+lFENjPiJVNXg8NbzcHkcy8tUGENEodpN2A82sX wciT0IpwdMIvcaHLhp6jGsMa1Dx3A82T2PDkMW39Kb+R0/gK6al4326xEvvhP5vR MsmgjKPSeckAwQbe6VPJBD/2x+z4OA6qWR4PsWQE6sJN/VMQt73boFoYaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD/uNjLWPqm8CfIgOPWsWMlWPjzIMB8GA1UdIwQY MBaAFD8XJDlZnX2lJXl4mb8hO45jVUkUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHhja09WbWRmYVVsZVhpWnZ5RTdqbU5WU1JRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi85ZjlhYTktMDljMC00OGNjLWIwYTEt ODg3MzMxZWZiNzE1LzEvUHhja09WbWRmYVVsZVhpWnZ5RTdqbU5WU1JRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi85ZjlhYTktMDljMC00OGNjLWIwYTEtODg3MzMxZWZiNzE1 LzEvUHhja09WbWRmYVVsZVhpWnZ5RTdqbU5WU1JRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgYAN2CuT R7c49FTYz9qncTgtjtz64EAn7FA669kr1ZB7mX8wkANpmiMAkEYeF23eEkAsf+AT m9eZtK+jV8+qhHpxEvucTRbWrU6g2azs0UbuVZWbNvtqGUl87wMB1WQ6fRDLGtUx 3rAE7TMZkzTaw2TuuU5ZFYZ0cF+0G1N6pWQqmdLG9t1xxDUOf0a/AmYusgL4VnUF 7mU0RmqN6vbRE/BBFwQDC/S40ucmst/PGA5ZMYnlZ0S1mbmKVA4/G/IRS9R1DLRN TAC8nfH2koysc+B6wI1fqmnWxJV8CU2uiqgKJIcQP8lxrYPw3DMXpBD3bS5pGTBA xXLNuoc7A2tMtQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:22:04 2025 by rpki-client