This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.mft File: Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.mft (raw, json) Hash identifier: F2AkDLxSqvl5twVDte9b88i8tqw/JnNLyu8WEbX50ww= Subject key identifier: 1A:64:5C:C0:F2:33:76:62:8C:9E:84:9B:F3:0E:1D:02:D5:46:A9:A1 Authority key identifier: 3E:DD:1C:F4:37:00:85:B6:D2:57:14:09:14:36:F6:68:60:28:D5:58 Certificate issuer: /CN=3edd1cf4370085b6d25714091436f6686028d558 Certificate serial: 019AF31D3F926F2EE4275E9C77B06D5F63F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.mft Manifest number: 0216 Signing time: Sat 06 Dec 2025 10:02:51 +0000 Manifest this update: Sat 06 Dec 2025 10:02:51 +0000 Manifest next update: Sun 07 Dec 2025 10:02:51 +0000 Files and hashes: 1: Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.crl (hash: Wn+jeR5j/sVPLCc93KPP1xlQe0BBAm6BisAZVIgy8aE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.crl rsync://rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.mft rsync://rpki.ripe.net/repository/DEFAULT/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:3f:92:6f:2e:e4:27:5e:9c:77:b0:6d:5f:63:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3edd1cf4370085b6d25714091436f6686028d558 Validity Not Before: Dec 6 10:02:51 2025 GMT Not After : Dec 7 10:02:51 2025 GMT Subject: CN=1a645cc0f23376628c9e849bf30e1d02d546a9a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:13:3b:38:0e:89:39:29:4c:87:90:a7:66:46: 80:8d:08:dd:7a:8c:47:ac:99:f3:73:bc:74:6b:45: af:71:ba:47:ff:5a:b9:dc:e5:52:67:9c:23:09:d7: f1:ba:f4:00:53:27:c4:c6:51:8c:4f:75:b0:14:bc: da:eb:b3:f7:9d:2c:78:d1:60:96:3b:1b:4e:04:93: 06:02:12:e3:66:f2:be:49:29:3e:9b:68:49:dd:10: 84:65:87:c9:15:71:87:10:3a:28:c0:1e:63:b7:4b: 3c:84:c6:1f:40:91:17:46:bf:22:7e:b9:d4:45:c2: 46:d4:dd:74:6b:7f:d4:ee:8c:d7:89:5c:49:b8:f8: 5b:d0:98:cb:18:ca:6b:70:53:c8:89:79:1e:6b:d0: 8b:6c:43:63:df:2b:68:f8:91:02:74:a9:d4:29:1d: e2:a3:1f:41:3f:ca:c4:05:b7:51:ee:4d:f9:78:b3: b3:b1:db:9a:b2:08:a7:37:f8:81:96:85:6a:96:d6: d5:7c:2f:4f:e5:ff:e9:e5:85:c0:64:7a:7d:b8:10: cc:92:9c:37:b7:dc:93:ef:64:bd:2c:84:0e:68:ee: 65:1e:ca:b3:a9:28:d2:cd:47:b7:00:6c:f7:19:3a: e7:1f:4f:66:c7:16:ea:2e:6f:0b:82:b9:85:9a:22: 1b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:64:5C:C0:F2:33:76:62:8C:9E:84:9B:F3:0E:1D:02:D5:46:A9:A1 X509v3 Authority Key Identifier: keyid:3E:DD:1C:F4:37:00:85:B6:D2:57:14:09:14:36:F6:68:60:28:D5:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:57:5c:c4:5c:68:fd:04:b8:d7:74:2a:7e:c3:84:33:25:97: f3:58:ee:39:2d:51:b1:63:af:4e:f0:39:cd:cc:8a:55:31:e9: 07:bd:a0:df:d6:db:4f:b6:15:4e:02:0d:f9:00:7c:84:01:55: 0b:e3:47:b6:3a:e6:50:38:4e:1d:17:62:7f:b1:99:fc:e1:a3: 96:1f:90:af:5f:22:8c:1d:98:0d:42:82:0d:79:f2:6c:8c:fb: 5e:c8:c0:25:37:70:bb:04:ae:a3:81:f3:af:56:fd:8b:57:c7: 3c:6c:1e:ef:f6:c2:f9:56:3e:ff:37:05:e9:7a:13:f5:9b:1c: b3:2a:0a:77:8c:eb:a7:fe:ec:1d:9b:8f:05:1f:4a:83:6c:55: 63:92:91:74:4e:63:db:f9:2e:97:4e:cc:9a:52:41:a8:b5:55: 33:a2:4c:8e:d6:c0:91:55:7e:ca:eb:6b:7b:32:1e:09:b6:c7: 6b:4c:3f:b2:eb:e8:45:f1:19:2f:d0:c6:fa:85:f7:44:e2:b7: 0e:d9:fe:b9:a8:c0:00:20:b5:b2:60:8c:7c:1a:e2:8a:59:4e: 76:db:e0:d9:93:c9:44:d7:6a:55:ab:85:7d:dc:ba:93:3f:cb: 11:e4:78:50:80:77:77:0d:1d:08:44:ef:6e:0a:2f:57:da:d6: 8d:f7:92:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHT+Sby7kJ16cd7BtX2P5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZGQxY2Y0MzcwMDg1YjZkMjU3MTQwOTE0MzZmNjY4NjAy OGQ1NTgwHhcNMjUxMjA2MTAwMjUxWhcNMjUxMjA3MTAwMjUxWjAzMTEwLwYDVQQD EygxYTY0NWNjMGYyMzM3NjYyOGM5ZTg0OWJmMzBlMWQwMmQ1NDZhOWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBM7OA6JOSlMh5CnZkaAjQjdeoxH rJnzc7x0a0WvcbpH/1q53OVSZ5wjCdfxuvQAUyfExlGMT3WwFLza67P3nSx40WCW OxtOBJMGAhLjZvK+SSk+m2hJ3RCEZYfJFXGHEDoowB5jt0s8hMYfQJEXRr8ifrnU RcJG1N10a3/U7ozXiVxJuPhb0JjLGMprcFPIiXkea9CLbENj3yto+JECdKnUKR3i ox9BP8rEBbdR7k35eLOzsduasginN/iBloVqltbVfC9P5f/p5YXAZHp9uBDMkpw3 t9yT72S9LIQOaO5lHsqzqSjSzUe3AGz3GTrnH09mxxbqLm8LgrmFmiIbBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBpkXMDyM3ZijJ6Em/MOHQLVRqmhMB8GA1UdIwQY MBaAFD7dHPQ3AIW20lcUCRQ29mhgKNVYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHQwYzlEY0FoYmJTVnhRSkZEYjJhR0FvMVZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9hMjU4YmYtNzlkZS00YzI4LThhMGYt ZThlZDkyN2M1NWE0LzEvUHQwYzlEY0FoYmJTVnhRSkZEYjJhR0FvMVZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9hMjU4YmYtNzlkZS00YzI4LThhMGYtZThlZDkyN2M1NWE0 LzEvUHQwYzlEY0FoYmJTVnhRSkZEYjJhR0FvMVZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASldcxFxo /QS413QqfsOEMyWX81juOS1RsWOvTvA5zcyKVTHpB72g39bbT7YVTgIN+QB8hAFV C+NHtjrmUDhOHRdif7GZ/OGjlh+Qr18ijB2YDUKCDXnybIz7XsjAJTdwuwSuo4Hz r1b9i1fHPGwe7/bC+VY+/zcF6XoT9ZscsyoKd4zrp/7sHZuPBR9Kg2xVY5KRdE5j 2/kul07MmlJBqLVVM6JMjtbAkVV+yutrezIeCbbHa0w/suvoRfEZL9DG+oX3ROK3 Dtn+uajAACC1smCMfBriillOdtvg2ZPJRNdqVauFfdy6kz/LEeR4UIB3dw0dCETv bgovV9rWjfeS9Q== -----END CERTIFICATE-----Generated at Sat Dec 6 17:52:58 2025 by rpki-client