This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft File: Psb9kdKkNl09wWch_t9pIXK7MHM.mft (raw, json) Hash identifier: MnT0aB5G7j54GbMmChnraqT+U13pfE/wjQbSleKe/HY= Subject key identifier: 49:3B:90:10:A8:BD:9E:F1:DC:68:6B:89:59:6E:BE:C6:04:7A:AB:BC Authority key identifier: 3E:C6:FD:91:D2:A4:36:5D:3D:C1:67:21:FE:DF:69:21:72:BB:30:73 Certificate issuer: /CN=3ec6fd91d2a4365d3dc16721fedf692172bb3073 Certificate serial: 019AF12D99113F9A1EE9ED65F37FCEA6CB9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft Manifest number: 14A5 Signing time: Sat 06 Dec 2025 01:01:28 +0000 Manifest this update: Sat 06 Dec 2025 01:01:28 +0000 Manifest next update: Sun 07 Dec 2025 01:01:28 +0000 Files and hashes: 1: 0OYfvohoTXtpi59LO0J22cI1s3U.roa (hash: s7dK6PK+eP+XDZZ2HKEucZtuMEm89+4+6MLOTTKFjE0=) 2: Psb9kdKkNl09wWch_t9pIXK7MHM.crl (hash: ed/SeFQda4EQW+3CEu5u18LHFq+L82/4xJNIJlxzv3g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.crl rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:99:11:3f:9a:1e:e9:ed:65:f3:7f:ce:a6:cb:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ec6fd91d2a4365d3dc16721fedf692172bb3073 Validity Not Before: Dec 6 01:01:28 2025 GMT Not After : Dec 7 01:01:28 2025 GMT Subject: CN=493b9010a8bd9ef1dc686b89596ebec6047aabbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5d:6d:a2:08:42:c6:d4:8f:63:d5:21:84:98: 09:17:ac:94:07:87:16:87:f6:46:70:b8:eb:2c:49: 7f:4a:42:0a:80:da:c1:38:d9:71:26:ca:bd:99:55: 9f:f4:2c:23:7e:b9:67:8b:27:65:72:2b:b4:c6:3a: ce:96:c2:0a:37:72:a6:68:6c:e5:32:9f:bf:41:3e: 1e:b9:ab:55:99:e2:dc:96:04:f8:25:ce:ff:7b:a7: 7c:4d:3d:bc:63:a2:66:f8:08:7d:ca:f1:a3:a7:f3: 29:85:e8:e2:24:e3:9c:15:33:6c:a7:92:cc:ae:0b: bd:7c:22:15:c0:ec:6b:a8:b1:1c:46:55:ac:3d:b9: cc:ee:90:d6:61:31:4c:d4:39:06:fe:d2:89:cd:e4: 7c:f0:2a:0c:b6:a3:a4:71:e8:b7:67:c1:a4:45:48: f9:1d:5f:0e:f9:4c:14:99:d7:c5:7c:ec:67:36:89: 08:de:5c:a0:6b:da:85:34:11:68:0a:6b:9c:5d:ed: 30:2d:5b:cb:50:30:db:b5:5a:2a:23:f7:e2:0f:4e: 45:45:2b:06:5a:ee:7b:8a:9b:bc:dd:25:cf:8b:d1: 43:89:1f:26:1c:d3:b8:69:18:28:63:21:fe:fe:19: 3f:7f:7e:06:10:14:d1:2e:27:01:73:19:8a:df:9b: fe:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:3B:90:10:A8:BD:9E:F1:DC:68:6B:89:59:6E:BE:C6:04:7A:AB:BC X509v3 Authority Key Identifier: keyid:3E:C6:FD:91:D2:A4:36:5D:3D:C1:67:21:FE:DF:69:21:72:BB:30:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:f3:0f:ed:62:c6:9e:9c:42:90:26:d4:c0:5c:f7:eb:62:6e: 59:c5:ed:b4:16:fb:68:04:7c:31:a2:50:b9:da:b2:e2:3f:7b: 01:7a:62:bc:08:06:69:4e:07:fb:71:bf:6d:ca:c5:fd:00:1b: ea:21:58:5c:11:53:25:31:7e:51:7e:4f:c7:34:1f:10:4b:31: 44:30:61:69:f3:2b:a4:f1:21:00:d1:35:79:e7:75:14:86:da: 26:b6:36:7e:19:9e:94:c6:2a:66:09:04:f8:0d:be:ec:18:f2: 42:43:dd:65:83:f9:67:ef:11:5c:3c:3b:ff:cd:03:74:9e:f1: 12:39:a9:db:bc:3e:11:7a:66:9e:c1:92:26:a1:81:aa:b9:7d: 0c:c9:92:0a:57:18:ee:a0:d1:98:79:ce:5a:74:4a:a1:99:82: 2f:e3:07:d4:3b:45:01:1f:af:1d:76:dc:e3:88:06:b4:4e:72: 2d:6d:e0:05:20:24:52:f6:27:12:60:a4:fa:af:db:9e:bc:68: 50:91:78:cb:9e:b4:f7:16:81:89:47:43:01:3f:a2:55:e4:8c: 91:b5:5e:f9:3b:24:ca:2c:93:2e:c0:a3:e3:69:be:51:f0:21: 66:ce:f5:99:1c:04:01:53:3d:6b:fd:70:67:b1:cc:5d:69:dd: ab:93:86:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLZkRP5oe6e1l83/OpsufMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYzZmZDkxZDJhNDM2NWQzZGMxNjcyMWZlZGY2OTIxNzJi YjMwNzMwHhcNMjUxMjA2MDEwMTI4WhcNMjUxMjA3MDEwMTI4WjAzMTEwLwYDVQQD Eyg0OTNiOTAxMGE4YmQ5ZWYxZGM2ODZiODk1OTZlYmVjNjA0N2FhYmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqV1toghCxtSPY9UhhJgJF6yUB4cW h/ZGcLjrLEl/SkIKgNrBONlxJsq9mVWf9Cwjfrlniydlciu0xjrOlsIKN3KmaGzl Mp+/QT4euatVmeLclgT4Jc7/e6d8TT28Y6Jm+Ah9yvGjp/MphejiJOOcFTNsp5LM rgu9fCIVwOxrqLEcRlWsPbnM7pDWYTFM1DkG/tKJzeR88CoMtqOkcei3Z8GkRUj5 HV8O+UwUmdfFfOxnNokI3lyga9qFNBFoCmucXe0wLVvLUDDbtVoqI/fiD05FRSsG Wu57ipu83SXPi9FDiR8mHNO4aRgoYyH+/hk/f34GEBTRLicBcxmK35v+HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEk7kBCovZ7x3GhriVluvsYEequ8MB8GA1UdIwQY MBaAFD7G/ZHSpDZdPcFnIf7faSFyuzBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHNiOWtkS2tObDA5d1djaF90OXBJWEs3TUhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC80Y2RhNDctMzg0YS00MzU0LWJjYjQt YmVmMzU2MDViY2Q0LzEvUHNiOWtkS2tObDA5d1djaF90OXBJWEs3TUhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC80Y2RhNDctMzg0YS00MzU0LWJjYjQtYmVmMzU2MDViY2Q0 LzEvUHNiOWtkS2tObDA5d1djaF90OXBJWEs3TUhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYfMP7WLG npxCkCbUwFz362JuWcXttBb7aAR8MaJQudqy4j97AXpivAgGaU4H+3G/bcrF/QAb 6iFYXBFTJTF+UX5PxzQfEEsxRDBhafMrpPEhANE1eed1FIbaJrY2fhmelMYqZgkE +A2+7BjyQkPdZYP5Z+8RXDw7/80DdJ7xEjmp27w+EXpmnsGSJqGBqrl9DMmSClcY 7qDRmHnOWnRKoZmCL+MH1DtFAR+vHXbc44gGtE5yLW3gBSAkUvYnEmCk+q/bnrxo UJF4y5609xaBiUdDAT+iVeSMkbVe+TskyiyTLsCj42m+UfAhZs71mRwEAVM9a/1w Z7HMXWndq5OGmw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:21:44 2025 by rpki-client