This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft File: PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft (raw, json) Hash identifier: awjzEmvO3jNiScKPKoTutgH8qlS3Oy1/VQR3Ol3Bcmg= Subject key identifier: 98:A7:8A:8A:95:D9:6A:68:DF:8C:A3:85:10:4A:D1:69:7E:A1:45:F8 Authority key identifier: 3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E Certificate issuer: /CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e Certificate serial: 019AF12D0ED5FA2E046010802A57C6643E6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft Manifest number: 164B Signing time: Sat 06 Dec 2025 01:00:53 +0000 Manifest this update: Sat 06 Dec 2025 01:00:53 +0000 Manifest next update: Sun 07 Dec 2025 01:00:53 +0000 Files and hashes: 1: PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl (hash: Y68HxDxNwgFgUuICm8ut4GnHAJ9O48fWxp1wgxZI9VY=) 2: qGeya0gXk3lefb1rAtWCYxucLVU.roa (hash: ZiFD9y1WchAi6R0j+XTv/ZogMIEXrTeY8kphQnBKVUA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:0e:d5:fa:2e:04:60:10:80:2a:57:c6:64:3e:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e Validity Not Before: Dec 6 01:00:53 2025 GMT Not After : Dec 7 01:00:53 2025 GMT Subject: CN=98a78a8a95d96a68df8ca385104ad1697ea145f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ba:ae:45:0d:4b:21:6e:4a:ed:39:af:7e:d3: 00:fd:19:f4:b1:dc:94:7e:5d:e8:69:96:3e:77:74: da:95:8b:93:28:d0:cf:70:4a:4a:f8:03:b1:ee:32: 39:20:3c:53:6e:b1:90:2c:61:60:87:20:e3:6f:ee: 34:e6:ac:5e:57:06:06:65:da:2a:8a:59:c3:b7:57: eb:a8:2e:af:09:3b:95:07:f1:59:12:fd:eb:5f:c5: ff:c2:5f:a8:fb:5f:c2:b2:2d:0e:71:30:d7:89:23: 85:69:82:4d:fa:da:0a:23:5f:75:86:85:0a:3a:2a: 3c:8f:1c:cb:6b:db:29:05:51:d4:cc:78:ad:b1:6e: a9:a5:2e:2f:c1:d4:e5:e9:85:d0:af:87:e8:ea:7c: ec:95:c4:fb:f5:48:02:be:c3:19:4d:6e:5c:e8:b0: d7:30:d8:a1:5d:74:17:64:83:c0:18:0b:5d:2d:62: e9:81:50:b1:4b:5f:cf:0b:85:16:fa:0b:14:12:36: f4:1d:50:52:55:1a:70:1c:cd:90:d3:7f:2d:57:53: 0d:e1:7f:b9:16:a6:cc:4f:32:09:b8:ee:1a:ac:ba: f4:60:00:99:be:30:b3:42:02:2e:d4:a2:db:b1:ce: 5e:db:ca:0d:87:16:62:15:3a:62:a9:95:bf:ff:21: ee:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A7:8A:8A:95:D9:6A:68:DF:8C:A3:85:10:4A:D1:69:7E:A1:45:F8 X509v3 Authority Key Identifier: keyid:3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:be:1b:bf:52:ea:80:38:e3:25:7c:88:44:72:ac:68:91:8c: ba:83:17:fc:80:b2:fc:93:02:9b:30:cf:01:48:1e:c8:13:50: 97:a7:e1:71:9d:e2:1e:f5:09:7c:e0:27:f5:f6:80:2a:58:d9: b3:2b:4a:ee:c8:de:5b:43:d8:f5:c1:b5:ab:b7:07:37:e8:5f: 57:fa:b2:0b:5c:4f:3f:ee:64:bf:cb:54:ce:a9:c7:d1:7d:8c: c4:92:42:ba:72:d1:74:1b:3d:8c:28:24:1a:d6:fb:1e:74:d0: 40:80:22:a0:0d:bc:bf:74:60:f4:58:46:56:cb:e1:fb:fc:fc: b2:9a:8c:6d:52:98:37:bf:f2:df:86:47:f9:f6:6e:c5:ad:b8: cb:8f:5e:f9:1e:aa:f3:db:17:12:3e:ad:8f:ae:b3:36:61:8e: 03:b9:95:81:87:6a:9a:a5:54:33:20:a4:8a:bb:d7:f4:da:a5: f9:93:59:07:4f:45:38:1d:a3:bc:c3:49:18:43:c1:f4:c2:30: bf:b8:e8:1a:0e:6e:b6:20:aa:24:c5:1c:17:9e:79:94:6c:14: 85:41:0c:45:00:fb:e1:e6:e0:6f:eb:0d:20:9e:f1:a9:af:b3: 9f:99:84:bf:ad:f5:91:23:43:7e:16:5d:93:ed:9d:a3:98:9b: 97:99:c1:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLQ7V+i4EYBCAKlfGZD5sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYzE0Y2M2MDdkMWYwMjgzODQ4ZjlhODE1ZGJlNjc1ZTIz MzlhN2UwHhcNMjUxMjA2MDEwMDUzWhcNMjUxMjA3MDEwMDUzWjAzMTEwLwYDVQQD Eyg5OGE3OGE4YTk1ZDk2YTY4ZGY4Y2EzODUxMDRhZDE2OTdlYTE0NWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbquRQ1LIW5K7TmvftMA/Rn0sdyU fl3oaZY+d3TalYuTKNDPcEpK+AOx7jI5IDxTbrGQLGFghyDjb+405qxeVwYGZdoq ilnDt1frqC6vCTuVB/FZEv3rX8X/wl+o+1/Csi0OcTDXiSOFaYJN+toKI191hoUK Oio8jxzLa9spBVHUzHitsW6ppS4vwdTl6YXQr4fo6nzslcT79UgCvsMZTW5c6LDX MNihXXQXZIPAGAtdLWLpgVCxS1/PC4UW+gsUEjb0HVBSVRpwHM2Q038tV1MN4X+5 FqbMTzIJuO4arLr0YACZvjCzQgIu1KLbsc5e28oNhxZiFTpiqZW//yHuGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJinioqV2Wpo34yjhRBK0Wl+oUX4MB8GA1UdIwQY MBaAFD7BTMYH0fAoOEj5qBXb5nXiM5p+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHNGTXhnZlI4Q2c0U1Btb0Zkdm1kZUl6bW40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy83NTRiZDYtZmQ2YS00ZGM2LWE5Mjct NzY5YTBjNWVlYTBkLzEvUHNGTXhnZlI4Q2c0U1Btb0Zkdm1kZUl6bW40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy83NTRiZDYtZmQ2YS00ZGM2LWE5MjctNzY5YTBjNWVlYTBk LzEvUHNGTXhnZlI4Q2c0U1Btb0Zkdm1kZUl6bW40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApb4bv1Lq gDjjJXyIRHKsaJGMuoMX/ICy/JMCmzDPAUgeyBNQl6fhcZ3iHvUJfOAn9faAKljZ sytK7sjeW0PY9cG1q7cHN+hfV/qyC1xPP+5kv8tUzqnH0X2MxJJCunLRdBs9jCgk Gtb7HnTQQIAioA28v3Rg9FhGVsvh+/z8spqMbVKYN7/y34ZH+fZuxa24y49e+R6q 89sXEj6tj66zNmGOA7mVgYdqmqVUMyCkirvX9Nql+ZNZB09FOB2jvMNJGEPB9MIw v7joGg5utiCqJMUcF555lGwUhUEMRQD74ebgb+sNIJ7xqa+zn5mEv631kSNDfhZd k+2do5ibl5nB/A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:05 2025 by rpki-client