This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5cac1e-831d-4d9e-9a22-1eef11a8dddf/1/PidqxRoTJAHbTNdB2GalRiKg0Vw.mft File: PidqxRoTJAHbTNdB2GalRiKg0Vw.mft (raw, json) Hash identifier: 2VmORGwyXImEeA01JpNti8DsiHrBP+QoAEzrt5v2TDc= Subject key identifier: 68:1A:10:79:88:F0:10:18:23:13:55:45:D1:30:A5:9B:0B:89:EE:B1 Authority key identifier: 3E:27:6A:C5:1A:13:24:01:DB:4C:D7:41:D8:66:A5:46:22:A0:D1:5C Certificate issuer: /CN=3e276ac51a132401db4cd741d866a54622a0d15c Certificate serial: 019B337AEC0DFD583B0CADFA2857BC705B55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PidqxRoTJAHbTNdB2GalRiKg0Vw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/5cac1e-831d-4d9e-9a22-1eef11a8dddf/1/PidqxRoTJAHbTNdB2GalRiKg0Vw.mft Manifest number: 14A6 Signing time: Thu 18 Dec 2025 22:00:52 +0000 Manifest this update: Thu 18 Dec 2025 22:00:52 +0000 Manifest next update: Fri 19 Dec 2025 22:00:52 +0000 Files and hashes: 1: PidqxRoTJAHbTNdB2GalRiKg0Vw.crl (hash: jb0qLUXe6mKVH5Gx69uKbxWrNw8yAWUPZF03/8pQa1Y=) 2: mmsyAnMHt_dbYyNaAmRzOf1ER00.roa (hash: Z0B0gLnq6WYbQAuekKr8EymO3fzsvhfiIyL1pWQiz74=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/5cac1e-831d-4d9e-9a22-1eef11a8dddf/1/PidqxRoTJAHbTNdB2GalRiKg0Vw.crl rsync://rpki.ripe.net/repository/DEFAULT/32/5cac1e-831d-4d9e-9a22-1eef11a8dddf/1/PidqxRoTJAHbTNdB2GalRiKg0Vw.mft rsync://rpki.ripe.net/repository/DEFAULT/PidqxRoTJAHbTNdB2GalRiKg0Vw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7a:ec:0d:fd:58:3b:0c:ad:fa:28:57:bc:70:5b:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e276ac51a132401db4cd741d866a54622a0d15c Validity Not Before: Dec 18 22:00:52 2025 GMT Not After : Dec 19 22:00:52 2025 GMT Subject: CN=681a107988f0101823135545d130a59b0b89eeb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4b:52:1b:73:5c:6f:22:62:05:a5:d4:e9:31: ae:9f:29:7d:90:ad:3a:23:3b:b3:c1:40:76:65:4c: bc:22:ae:d8:d2:29:09:ac:5c:a0:51:42:d9:a3:3f: ae:cf:d4:20:9b:99:4f:24:ef:b8:77:41:69:a5:2e: 36:bb:0b:7b:9f:b7:45:73:92:22:55:ca:4a:b8:fe: 60:73:6d:fc:6d:26:85:de:27:8e:83:b7:24:b4:a4: 94:5f:3d:6e:bf:38:de:ff:20:99:17:4e:bc:ae:14: 82:3d:ee:b6:eb:9f:5d:b8:21:db:6c:6f:3d:78:d4: 81:76:c1:ae:f8:7a:b5:f0:9c:1f:9f:67:05:9c:25: 49:c9:35:69:1e:87:0f:f6:f2:9c:66:05:4b:9f:76: 49:11:a3:1b:34:d8:26:20:3d:17:89:42:4d:76:a3: 16:3f:aa:f8:bf:80:ef:27:8d:9a:21:ff:db:fe:4e: d9:03:bb:f8:5c:f4:81:2f:d6:85:3c:ce:1c:96:1f: 43:d7:ef:fc:7c:25:7c:02:78:32:d8:8d:1a:2c:1b: 56:89:9e:be:12:60:e4:5b:93:0f:ba:eb:09:08:90: 85:6c:a2:fc:2f:1d:18:4b:3c:d4:3a:de:5d:1e:82: 6c:ff:99:13:d1:01:b6:52:15:ed:7e:a3:04:5c:14: 40:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:1A:10:79:88:F0:10:18:23:13:55:45:D1:30:A5:9B:0B:89:EE:B1 X509v3 Authority Key Identifier: keyid:3E:27:6A:C5:1A:13:24:01:DB:4C:D7:41:D8:66:A5:46:22:A0:D1:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PidqxRoTJAHbTNdB2GalRiKg0Vw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5cac1e-831d-4d9e-9a22-1eef11a8dddf/1/PidqxRoTJAHbTNdB2GalRiKg0Vw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5cac1e-831d-4d9e-9a22-1eef11a8dddf/1/PidqxRoTJAHbTNdB2GalRiKg0Vw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:46:ef:9e:d0:d5:40:b3:e0:1d:ea:09:88:22:8b:1d:f8:31: aa:5a:bf:f8:a9:f1:de:af:88:81:16:1a:47:3f:4b:1a:7d:b8: 30:e1:e0:c2:0e:07:56:e9:fa:ea:22:2d:d7:b8:6d:b8:26:8b: 79:6d:cc:5f:6b:4e:ee:bf:cf:ff:11:19:89:61:32:e2:7a:00: 1d:d6:2b:1a:36:c2:4a:35:91:e6:c7:e5:1f:44:1f:ad:d6:b5: 88:a1:cc:4c:f6:e4:9d:9c:2f:fc:e5:29:17:fa:f3:c6:1d:d5: 50:4f:9b:ff:d0:f0:b6:bf:be:dc:01:9f:27:c9:f8:14:5e:84: 63:14:40:80:95:13:f6:b9:1e:45:73:9f:2b:d8:75:90:87:5b: 4a:b6:d5:4a:9a:79:3f:7c:09:d8:a2:fc:38:93:a1:17:95:97: d9:33:f1:98:45:da:fe:5a:d4:1e:d6:c7:7a:e2:79:5a:95:66: af:db:a1:d1:71:48:b2:19:1c:aa:45:58:5e:f4:36:9c:39:a9: 23:35:1d:3c:bb:38:d7:66:3d:b7:b7:11:0d:5a:b9:60:2e:50: 12:98:95:6f:3d:0c:7a:9a:83:35:3b:8b:33:b7:62:17:81:17: 5b:68:63:87:c3:73:87:bc:ac:22:32:bf:6b:c9:e4:c5:5b:6e: 3f:5a:1d:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszeuwN/Vg7DK36KFe8cFtVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMjc2YWM1MWExMzI0MDFkYjRjZDc0MWQ4NjZhNTQ2MjJh MGQxNWMwHhcNMjUxMjE4MjIwMDUyWhcNMjUxMjE5MjIwMDUyWjAzMTEwLwYDVQQD Eyg2ODFhMTA3OTg4ZjAxMDE4MjMxMzU1NDVkMTMwYTU5YjBiODllZWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlktSG3NcbyJiBaXU6TGunyl9kK06 IzuzwUB2ZUy8Iq7Y0ikJrFygUULZoz+uz9Qgm5lPJO+4d0FppS42uwt7n7dFc5Ii VcpKuP5gc238bSaF3ieOg7cktKSUXz1uvzje/yCZF068rhSCPe62659duCHbbG89 eNSBdsGu+Hq18Jwfn2cFnCVJyTVpHocP9vKcZgVLn3ZJEaMbNNgmID0XiUJNdqMW P6r4v4DvJ42aIf/b/k7ZA7v4XPSBL9aFPM4clh9D1+/8fCV8Angy2I0aLBtWiZ6+ EmDkW5MPuusJCJCFbKL8Lx0YSzzUOt5dHoJs/5kT0QG2UhXtfqMEXBRAZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGgaEHmI8BAYIxNVRdEwpZsLie6xMB8GA1UdIwQY MBaAFD4nasUaEyQB20zXQdhmpUYioNFcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGlkcXhSb1RKQUhiVE5kQjJHYWxSaUtnMFZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi81Y2FjMWUtODMxZC00ZDllLTlhMjIt MWVlZjExYThkZGRmLzEvUGlkcXhSb1RKQUhiVE5kQjJHYWxSaUtnMFZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi81Y2FjMWUtODMxZC00ZDllLTlhMjItMWVlZjExYThkZGRm LzEvUGlkcXhSb1RKQUhiVE5kQjJHYWxSaUtnMFZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANEbvntDV QLPgHeoJiCKLHfgxqlq/+Knx3q+IgRYaRz9LGn24MOHgwg4HVun66iIt17htuCaL eW3MX2tO7r/P/xEZiWEy4noAHdYrGjbCSjWR5sflH0Qfrda1iKHMTPbknZwv/OUp F/rzxh3VUE+b/9Dwtr++3AGfJ8n4FF6EYxRAgJUT9rkeRXOfK9h1kIdbSrbVSpp5 P3wJ2KL8OJOhF5WX2TPxmEXa/lrUHtbHeuJ5WpVmr9uh0XFIshkcqkVYXvQ2nDmp IzUdPLs412Y9t7cRDVq5YC5QEpiVbz0MepqDNTuLM7diF4EXW2hjh8Nzh7ysIjK/ a8nkxVtuP1odRw== -----END CERTIFICATE-----Generated at Fri Dec 19 07:33:31 2025 by rpki-client