This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.mft File: PxyTi7IGo4ltBkwIUvqYhf8s69k.mft (raw, json) Hash identifier: v4+hnRXF+l+yBd/bgwkWTM/RXtDIjTxHQIjQTkh8FmU= Subject key identifier: 6E:09:02:83:F3:31:A1:7B:09:74:90:1D:BE:28:AE:42:0B:D3:8F:17 Authority key identifier: 3F:1C:93:8B:B2:06:A3:89:6D:06:4C:08:52:FA:98:85:FF:2C:EB:D9 Certificate issuer: /CN=3f1c938bb206a3896d064c0852fa9885ff2cebd9 Certificate serial: 019B2363E9CC9FDFE3051BC868734F81452E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxyTi7IGo4ltBkwIUvqYhf8s69k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.mft Manifest number: 04AA Signing time: Mon 15 Dec 2025 19:01:48 +0000 Manifest this update: Mon 15 Dec 2025 19:01:48 +0000 Manifest next update: Tue 16 Dec 2025 19:01:48 +0000 Files and hashes: 1: PxyTi7IGo4ltBkwIUvqYhf8s69k.crl (hash: QaUdI37VVdgGe9CfQL/TlqRa0eSw7VB5A3qOQULHmMU=) 2: Qtry2kaoKZp9d0kAKEVlWC9a8yA.roa (hash: 4P/5LEPA+7GLBNpRQSC8l1dlaoBUTtizVxJtdSJCc5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.crl rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.mft rsync://rpki.ripe.net/repository/DEFAULT/PxyTi7IGo4ltBkwIUvqYhf8s69k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:63:e9:cc:9f:df:e3:05:1b:c8:68:73:4f:81:45:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f1c938bb206a3896d064c0852fa9885ff2cebd9 Validity Not Before: Dec 15 19:01:48 2025 GMT Not After : Dec 16 19:01:48 2025 GMT Subject: CN=6e090283f331a17b0974901dbe28ae420bd38f17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:84:ef:ff:38:a9:b1:50:a3:3b:dd:e5:d8:bd: f2:a6:be:fe:fe:20:82:bd:e2:80:be:33:c4:50:c7: b0:d7:6f:88:31:f6:d6:41:65:10:42:f5:62:9c:60: 8c:09:12:4f:97:2b:27:84:09:97:d7:1b:68:65:48: 47:10:bb:aa:4b:59:b4:35:32:7d:bd:24:b4:be:0b: 32:59:f5:4e:8c:8c:2b:45:31:94:42:a1:61:f8:5c: 81:f3:ca:c0:62:15:44:7a:fc:f6:06:5f:82:bb:6d: eb:e2:b8:54:db:d2:c2:ee:b9:73:2d:0c:86:17:ec: f3:58:84:4c:47:49:c7:66:b0:65:32:e3:6e:e0:be: ab:33:fd:d9:fa:8b:11:90:45:99:df:54:81:eb:44: 33:7b:b9:e6:6a:34:99:8c:34:85:03:31:b6:c9:00: 57:f3:2d:25:04:48:55:c1:f1:58:61:96:2e:30:25: 23:fd:91:62:7b:e6:58:e4:2f:1a:97:33:17:c9:4b: 62:67:c1:d7:83:9a:6a:82:18:78:50:56:77:9d:43: 0d:2e:11:7d:d4:52:ce:e6:c4:84:dd:86:06:bb:58: 03:79:64:91:fb:0c:61:13:4f:2a:5c:98:2a:9b:4a: 97:15:8a:1d:1c:6a:3c:63:7c:79:6e:93:53:53:9b: 4b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:09:02:83:F3:31:A1:7B:09:74:90:1D:BE:28:AE:42:0B:D3:8F:17 X509v3 Authority Key Identifier: keyid:3F:1C:93:8B:B2:06:A3:89:6D:06:4C:08:52:FA:98:85:FF:2C:EB:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxyTi7IGo4ltBkwIUvqYhf8s69k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:fa:12:31:d3:f9:dd:f2:40:f6:97:06:a3:ee:11:71:a9:9f: 9f:71:18:2a:2a:59:9a:eb:a9:92:38:a1:c3:e4:e6:99:7b:f7: e6:1e:aa:53:92:e8:fe:ed:aa:f4:25:63:a0:44:06:3a:7c:ed: 11:69:e0:a2:12:d1:75:5c:27:2b:f3:7a:82:26:d5:b4:1d:e5: ae:d5:47:04:69:3f:9e:c2:e8:df:7c:ad:9d:f4:f4:f7:18:84: 60:75:4f:d4:3a:cf:cf:60:bd:ee:dc:19:9b:e6:f3:1d:3e:9f: 46:c2:6d:be:59:47:a9:4b:88:36:3e:19:45:a4:b5:da:a9:3c: 1a:e8:e1:5a:12:dc:2e:23:33:57:1f:60:16:9e:7e:4a:9f:42: 44:4c:3f:df:ad:6b:00:a0:ef:0a:4b:99:e3:dc:9b:ea:26:bb: 88:2e:0f:88:ba:82:0d:b8:f6:9f:3b:c6:92:a3:d6:1c:2f:88: 82:da:75:5b:fc:3c:89:f6:a0:77:6c:53:6b:04:ac:b2:53:90: c2:41:ef:a5:e7:ec:5a:4f:27:de:f8:84:a7:88:b0:cc:28:2a: 70:25:d7:88:59:ea:9f:eb:08:a0:17:9b:44:e9:96:63:28:d9: 36:b8:56:55:fb:09:0a:00:61:4c:90:ec:2e:f7:62:0b:ea:4d: 7c:6e:89:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjY+nMn9/jBRvIaHNPgUUuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmMWM5MzhiYjIwNmEzODk2ZDA2NGMwODUyZmE5ODg1ZmYy Y2ViZDkwHhcNMjUxMjE1MTkwMTQ4WhcNMjUxMjE2MTkwMTQ4WjAzMTEwLwYDVQQD Eyg2ZTA5MDI4M2YzMzFhMTdiMDk3NDkwMWRiZTI4YWU0MjBiZDM4ZjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4Tv/zipsVCjO93l2L3ypr7+/iCC veKAvjPEUMew12+IMfbWQWUQQvVinGCMCRJPlysnhAmX1xtoZUhHELuqS1m0NTJ9 vSS0vgsyWfVOjIwrRTGUQqFh+FyB88rAYhVEevz2Bl+Cu23r4rhU29LC7rlzLQyG F+zzWIRMR0nHZrBlMuNu4L6rM/3Z+osRkEWZ31SB60Qze7nmajSZjDSFAzG2yQBX 8y0lBEhVwfFYYZYuMCUj/ZFie+ZY5C8alzMXyUtiZ8HXg5pqghh4UFZ3nUMNLhF9 1FLO5sSE3YYGu1gDeWSR+wxhE08qXJgqm0qXFYodHGo8Y3x5bpNTU5tLgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG4JAoPzMaF7CXSQHb4orkIL048XMB8GA1UdIwQY MBaAFD8ck4uyBqOJbQZMCFL6mIX/LOvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHh5VGk3SUdvNGx0Qmt3SVV2cVloZjhzNjlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zYjI0OWMtYjQwZS00ZmI5LThmZjQt ZTA1MjYwMzNhNDg0LzEvUHh5VGk3SUdvNGx0Qmt3SVV2cVloZjhzNjlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8zYjI0OWMtYjQwZS00ZmI5LThmZjQtZTA1MjYwMzNhNDg0 LzEvUHh5VGk3SUdvNGx0Qmt3SVV2cVloZjhzNjlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAffoSMdP5 3fJA9pcGo+4Rcamfn3EYKipZmuupkjihw+TmmXv35h6qU5Lo/u2q9CVjoEQGOnzt EWngohLRdVwnK/N6gibVtB3lrtVHBGk/nsLo33ytnfT09xiEYHVP1DrPz2C97twZ m+bzHT6fRsJtvllHqUuINj4ZRaS12qk8GujhWhLcLiMzVx9gFp5+Sp9CREw/361r AKDvCkuZ49yb6ia7iC4PiLqCDbj2nzvGkqPWHC+Igtp1W/w8ifagd2xTawSsslOQ wkHvpefsWk8n3viEp4iwzCgqcCXXiFnqn+sIoBebROmWYyjZNrhWVfsJCgBhTJDs LvdiC+pNfG6JBw== -----END CERTIFICATE-----Generated at Tue Dec 16 00:26:51 2025 by rpki-client