This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft File: PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft (raw, json) Hash identifier: 5svOCfDdCnxHuHrW6TemH3RwvWPlRO7o26802q5twf0= Subject key identifier: 73:3E:A8:70:5F:53:F3:F7:3C:A4:99:A1:46:4F:D1:22:ED:DF:EC:21 Authority key identifier: 3D:E2:68:1D:DA:00:70:2A:75:97:A7:12:57:E1:4F:7A:72:5E:89:0E Certificate issuer: /CN=3de2681dda00702a7597a71257e14f7a725e890e Certificate serial: 019AF2AD9C3E219917F5E72C6915402EF9F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft Manifest number: 0C19 Signing time: Sat 06 Dec 2025 08:00:55 +0000 Manifest this update: Sat 06 Dec 2025 08:00:55 +0000 Manifest next update: Sun 07 Dec 2025 08:00:55 +0000 Files and hashes: 1: 3bt8Km81z8fgEHaLeSOeYgfebxU.roa (hash: pKoz7jrxy/U6s9br1hGRmLBPhCh8rgMf271vqsN5GJk=) 2: 4Mdmn6MaRoFLUycUXlZaFSGboEs.roa (hash: C9ut+tYKUryPFgIx2+ThOOLJz+YjKuj147RuRXfxtis=) 3: H7RDadMRjVcvma8PhFugcKUdoT0.roa (hash: 6sD2c8/NrghCekThtfpslB8AAW0einNgCY8Rjyouu9I=) 4: Oioxvop9FV5K4rtOSvh02jeAj-g.roa (hash: 1Oax9rdfDuKch357rIzJmOSBUOYvQbkuoDRF8in9c8A=) 5: P0-q-BdDXYrwKYDCUC5gegtCTZE.roa (hash: oO/hx6p/KCHt0e0eW15T8NOjsXnklfDaMDxz69ADiuE=) 6: PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl (hash: +SzExBvvKjZDCH01l//+ZUu7EoU5yu45OK8KRX2OVOg=) 7: ceFPC_Zj6p3cuB8qXQeMqvZfZa4.roa (hash: 01KlZ4a2kJZ4Ly4Y7K5EQ5UlAiINB2ZUF09ye0hG3lc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:9c:3e:21:99:17:f5:e7:2c:69:15:40:2e:f9:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3de2681dda00702a7597a71257e14f7a725e890e Validity Not Before: Dec 6 08:00:55 2025 GMT Not After : Dec 7 08:00:55 2025 GMT Subject: CN=733ea8705f53f3f73ca499a1464fd122eddfec21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7c:95:e5:48:21:d2:8f:bc:fe:34:e1:3c:28: ff:6f:8d:ac:15:c9:9b:64:20:0d:a5:b0:2c:e9:50: 2c:e0:58:fb:8a:1b:f0:98:f5:aa:d0:be:18:2b:73: 5e:07:81:fa:6c:36:ea:0c:04:f1:4c:4f:0f:7a:f6: c8:a9:f6:ec:b7:69:0a:b8:39:ca:bf:52:9e:90:67: f8:22:73:2a:1c:8d:aa:e5:51:95:72:ae:b7:f5:e8: 36:39:b5:8d:18:6a:fc:b6:b3:e7:ca:c3:19:8f:de: 50:09:d2:57:16:d4:e7:9c:bb:d5:60:f0:cf:96:c1: 02:d1:4a:20:b0:a0:cd:53:15:24:b6:5d:cb:2a:e8: ae:f0:c5:3c:37:e5:0e:3b:98:a7:d5:c9:3d:bf:3a: 71:1d:13:43:4f:b4:15:29:e7:2d:52:87:59:f0:27: 81:41:07:8e:1a:82:30:f5:af:30:5e:7c:c2:dc:97: 16:c1:e3:fa:21:28:7c:4b:ab:c4:52:95:54:d7:e9: 21:a2:a8:2f:f7:a5:03:12:7b:16:2b:35:27:29:69: f1:21:8d:43:a6:c8:1b:a9:a9:55:ab:c5:1c:36:4a: 7c:0e:16:ef:0f:e1:83:d6:50:44:fd:44:3d:c3:e2: c0:4e:00:45:c3:f6:11:29:57:c9:c8:85:1c:0f:87: 49:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:3E:A8:70:5F:53:F3:F7:3C:A4:99:A1:46:4F:D1:22:ED:DF:EC:21 X509v3 Authority Key Identifier: keyid:3D:E2:68:1D:DA:00:70:2A:75:97:A7:12:57:E1:4F:7A:72:5E:89:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:62:9e:42:3b:5c:73:59:20:9c:84:4f:5e:d8:fb:36:0e:8e: 41:f3:75:58:16:41:ea:34:2f:25:b0:bc:8b:77:e3:5f:8f:0d: 74:d0:99:30:3c:e0:ea:10:a9:03:e9:5b:b6:48:12:f4:ad:20: cd:70:f9:73:0c:72:d0:d2:fb:45:cf:9e:a4:02:e7:45:ca:29: d1:14:ac:1a:f2:4c:9b:66:76:33:cd:25:59:82:8b:91:93:8d: 1f:47:49:cd:b3:1b:5f:bd:97:c1:72:63:25:c7:f1:e9:04:72: 9d:2b:e2:d7:0c:d0:f2:db:e7:4c:c5:fc:70:ed:b5:d4:82:50: d9:d0:37:82:fd:48:be:36:2d:03:8c:fd:0d:3a:13:6f:ee:17: 50:38:43:2c:7b:97:6f:13:a5:4a:16:16:20:12:69:76:7e:05: 76:be:d1:92:92:a0:b5:86:1b:d6:a2:98:19:60:ac:e6:64:e2: 08:a8:46:95:f6:5c:1e:fc:48:04:b3:fe:b7:51:77:51:0d:4c: 56:be:52:e5:88:34:dd:39:7c:de:7a:18:c9:67:31:06:9d:04: bc:3d:e9:57:0a:ca:3f:11:9d:48:40:27:fa:ee:97:c8:73:83: d0:85:c4:46:db:c0:51:ba:53:af:ba:94:66:99:24:27:94:f8: a6:06:02:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrZw+IZkX9ecsaRVALvnxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkZTI2ODFkZGEwMDcwMmE3NTk3YTcxMjU3ZTE0ZjdhNzI1 ZTg5MGUwHhcNMjUxMjA2MDgwMDU1WhcNMjUxMjA3MDgwMDU1WjAzMTEwLwYDVQQD Eyg3MzNlYTg3MDVmNTNmM2Y3M2NhNDk5YTE0NjRmZDEyMmVkZGZlYzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnyV5Ugh0o+8/jThPCj/b42sFcmb ZCANpbAs6VAs4Fj7ihvwmPWq0L4YK3NeB4H6bDbqDATxTE8PevbIqfbst2kKuDnK v1KekGf4InMqHI2q5VGVcq639eg2ObWNGGr8trPnysMZj95QCdJXFtTnnLvVYPDP lsEC0UogsKDNUxUktl3LKuiu8MU8N+UOO5in1ck9vzpxHRNDT7QVKectUodZ8CeB QQeOGoIw9a8wXnzC3JcWweP6ISh8S6vEUpVU1+khoqgv96UDEnsWKzUnKWnxIY1D psgbqalVq8UcNkp8DhbvD+GD1lBE/UQ9w+LATgBFw/YRKVfJyIUcD4dJNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHM+qHBfU/P3PKSZoUZP0SLt3+whMB8GA1UdIwQY MBaAFD3iaB3aAHAqdZenElfhT3pyXokOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGVKb0hkb0FjQ3AxbDZjU1YtRlBlbkplaVE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8zNmQ2ZTQtOGQ3Ny00OGQ1LWFmYjYt ZTBhYzcyNjNkYjEyLzEvUGVKb0hkb0FjQ3AxbDZjU1YtRlBlbkplaVE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8zNmQ2ZTQtOGQ3Ny00OGQ1LWFmYjYtZTBhYzcyNjNkYjEy LzEvUGVKb0hkb0FjQ3AxbDZjU1YtRlBlbkplaVE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWWKeQjtc c1kgnIRPXtj7Ng6OQfN1WBZB6jQvJbC8i3fjX48NdNCZMDzg6hCpA+lbtkgS9K0g zXD5cwxy0NL7Rc+epALnRcop0RSsGvJMm2Z2M80lWYKLkZONH0dJzbMbX72XwXJj Jcfx6QRynSvi1wzQ8tvnTMX8cO211IJQ2dA3gv1IvjYtA4z9DToTb+4XUDhDLHuX bxOlShYWIBJpdn4Fdr7RkpKgtYYb1qKYGWCs5mTiCKhGlfZcHvxIBLP+t1F3UQ1M Vr5S5Yg03Tl83noYyWcxBp0EvD3pVwrKPxGdSEAn+u6XyHOD0IXERtvAUbpTr7qU ZpkkJ5T4pgYCNA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:59:19 2025 by rpki-client