This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6a2919-e1cb-4e64-bf5d-68e1b173511e/1/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.mft File: PT7Ypi7oWbzmjUAWMZ4IKiBIRac.mft (raw, json) Hash identifier: k94CVb1VJtiyQv1Y+QMSw9fXSMIcEkWptpVeHA07S9g= Subject key identifier: 36:8D:99:52:AD:26:53:40:15:A4:5D:FE:EC:84:A2:07:15:EA:41:F5 Authority key identifier: 3D:3E:D8:A6:2E:E8:59:BC:E6:8D:40:16:31:9E:08:2A:20:48:45:A7 Certificate issuer: /CN=3d3ed8a62ee859bce68d4016319e082a204845a7 Certificate serial: 019AF1D1F58931EAD21551D90F5165BF0697 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6a2919-e1cb-4e64-bf5d-68e1b173511e/1/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.mft Manifest number: 022A Signing time: Sat 06 Dec 2025 04:01:00 +0000 Manifest this update: Sat 06 Dec 2025 04:01:00 +0000 Manifest next update: Sun 07 Dec 2025 04:01:00 +0000 Files and hashes: 1: H1o_SCjiFLHrkWrzG2YBUqyvibU.roa (hash: wUnzCOO08Zj5zj+Xms5OeZCPttJSOF6uH3iX57ElDhc=) 2: PT7Ypi7oWbzmjUAWMZ4IKiBIRac.crl (hash: hKv7d0Mc2N3YK4olkK6KJr8scPfoYv0dKytkyJAv8Do=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6a2919-e1cb-4e64-bf5d-68e1b173511e/1/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/6a2919-e1cb-4e64-bf5d-68e1b173511e/1/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.mft rsync://rpki.ripe.net/repository/DEFAULT/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:f5:89:31:ea:d2:15:51:d9:0f:51:65:bf:06:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d3ed8a62ee859bce68d4016319e082a204845a7 Validity Not Before: Dec 6 04:01:00 2025 GMT Not After : Dec 7 04:01:00 2025 GMT Subject: CN=368d9952ad26534015a45dfeec84a20715ea41f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:97:63:25:c1:d4:fe:a1:d2:e8:bc:a0:56:f6: 57:e4:6c:f3:06:d6:31:5c:d5:7c:46:32:37:d9:25: ad:b6:85:cd:52:ad:99:38:96:42:5a:f0:17:0e:f1: 6f:09:31:a0:43:78:31:51:3e:6b:a8:b3:04:0c:81: bb:e2:1b:cc:a9:7f:31:84:94:a1:b6:ce:06:8a:9e: aa:68:4d:f2:c2:a9:34:10:4b:4c:18:20:e5:0b:6b: 9e:33:17:1f:98:29:a8:68:d2:4b:3f:9f:c1:ba:9b: cd:40:e9:08:35:ba:88:86:32:72:8d:11:82:42:6d: d8:aa:1d:27:e1:ae:7d:54:e9:5f:40:86:f8:b8:a7: 3c:66:aa:8a:00:ab:57:63:05:76:9e:b2:95:45:d7: 2e:9e:da:bc:22:b8:5a:44:8c:13:8c:0b:c9:e4:db: bb:a1:4e:f6:e4:d4:1f:f4:1a:1a:d1:b4:d7:3d:b1: 95:db:6a:1f:0f:d9:95:2c:2d:47:d2:0e:65:97:22: 43:4a:94:41:a6:3e:70:e0:d2:22:90:5b:c5:67:98: 06:a2:ce:a0:dc:24:7e:d6:9b:83:3c:d4:32:7f:ac: 00:96:35:89:a4:3b:89:27:03:78:33:ef:bd:58:1b: 73:8d:cf:28:54:14:65:0f:ec:9a:b7:f3:39:40:60: da:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:8D:99:52:AD:26:53:40:15:A4:5D:FE:EC:84:A2:07:15:EA:41:F5 X509v3 Authority Key Identifier: keyid:3D:3E:D8:A6:2E:E8:59:BC:E6:8D:40:16:31:9E:08:2A:20:48:45:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a2919-e1cb-4e64-bf5d-68e1b173511e/1/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a2919-e1cb-4e64-bf5d-68e1b173511e/1/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:04:58:46:3c:6b:5f:d0:fc:b0:a0:fe:23:dd:6b:be:cc:f7: 44:a5:ba:4c:b9:ca:96:d8:b7:5e:11:a5:56:74:a2:7d:80:87: ce:32:cc:8d:19:f1:17:78:db:4a:25:4b:95:7a:e2:6d:5c:0f: 6f:0c:51:e3:72:1a:12:ff:8c:7f:f7:c5:14:87:9a:4b:ce:81: 34:21:1f:6d:19:d4:73:80:b6:18:bc:56:dd:06:5c:2f:79:aa: 9f:2f:1d:fa:73:5d:50:56:c4:4b:af:2f:bf:c8:6d:39:06:1c: 8e:eb:43:33:89:60:d4:5d:69:e5:cd:7c:b4:86:55:a0:52:0f: 73:69:26:8b:8b:f8:ac:a5:3c:9b:a9:7d:83:fb:cb:e2:4d:a0: 52:2a:b6:d6:d9:2c:e8:70:4b:cb:a7:25:bf:9d:09:34:01:d0: f6:bd:fd:ba:33:60:55:9c:2e:ed:74:29:09:5e:a6:cd:41:68: 53:29:ee:16:11:c4:97:1d:cc:9d:37:b9:99:11:e6:5c:8b:6a: 4d:f6:2d:08:bd:9d:31:52:d2:15:b5:56:43:58:cf:98:89:6a: 46:ba:0b:04:e2:7f:6f:c8:cb:12:ff:70:ce:dc:b6:8a:62:2a: 56:a2:27:6e:ab:c1:f4:d5:3d:dd:7c:b4:73:49:52:0b:1b:fa: de:fb:23:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0fWJMerSFVHZD1FlvwaXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkM2VkOGE2MmVlODU5YmNlNjhkNDAxNjMxOWUwODJhMjA0 ODQ1YTcwHhcNMjUxMjA2MDQwMTAwWhcNMjUxMjA3MDQwMTAwWjAzMTEwLwYDVQQD EygzNjhkOTk1MmFkMjY1MzQwMTVhNDVkZmVlYzg0YTIwNzE1ZWE0MWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZdjJcHU/qHS6LygVvZX5GzzBtYx XNV8RjI32SWttoXNUq2ZOJZCWvAXDvFvCTGgQ3gxUT5rqLMEDIG74hvMqX8xhJSh ts4Gip6qaE3ywqk0EEtMGCDlC2ueMxcfmCmoaNJLP5/BupvNQOkINbqIhjJyjRGC Qm3Yqh0n4a59VOlfQIb4uKc8ZqqKAKtXYwV2nrKVRdcuntq8IrhaRIwTjAvJ5Nu7 oU725NQf9Boa0bTXPbGV22ofD9mVLC1H0g5llyJDSpRBpj5w4NIikFvFZ5gGos6g 3CR+1puDPNQyf6wAljWJpDuJJwN4M++9WBtzjc8oVBRlD+yat/M5QGDaOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDaNmVKtJlNAFaRd/uyEogcV6kH1MB8GA1UdIwQY MBaAFD0+2KYu6Fm85o1AFjGeCCogSEWnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFQ3WXBpN29XYnptalVBV01aNElLaUJJUmFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi82YTI5MTktZTFjYi00ZTY0LWJmNWQt NjhlMWIxNzM1MTFlLzEvUFQ3WXBpN29XYnptalVBV01aNElLaUJJUmFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi82YTI5MTktZTFjYi00ZTY0LWJmNWQtNjhlMWIxNzM1MTFl LzEvUFQ3WXBpN29XYnptalVBV01aNElLaUJJUmFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUQRYRjxr X9D8sKD+I91rvsz3RKW6TLnKlti3XhGlVnSifYCHzjLMjRnxF3jbSiVLlXribVwP bwxR43IaEv+Mf/fFFIeaS86BNCEfbRnUc4C2GLxW3QZcL3mqny8d+nNdUFbES68v v8htOQYcjutDM4lg1F1p5c18tIZVoFIPc2kmi4v4rKU8m6l9g/vL4k2gUiq21tks 6HBLy6clv50JNAHQ9r39ujNgVZwu7XQpCV6mzUFoUynuFhHElx3MnTe5mRHmXItq TfYtCL2dMVLSFbVWQ1jPmIlqRroLBOJ/b8jLEv9wzty2imIqVqInbqvB9NU93Xy0 c0lSCxv63vsjrA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:04 2025 by rpki-client