This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft File: PComfc4HIjjpwEUV5n65kmcuNRs.mft (raw, json) Hash identifier: 71nELQkCav/Nl1tc7XXusoah5cbk7bTF6PHeKMqMCtI= Subject key identifier: A5:9C:2C:5A:CC:C3:05:F9:08:2B:A7:DE:5B:36:A0:19:DE:B3:35:2B Authority key identifier: 3C:2A:26:7D:CE:07:22:38:E9:C0:45:15:E6:7E:B9:92:67:2E:35:1B Certificate issuer: /CN=3c2a267dce072238e9c04515e67eb992672e351b Certificate serial: 019AF19A9A55BDDC0E4DF3BEA8A236EA8F1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PComfc4HIjjpwEUV5n65kmcuNRs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 03:00:32 +0000 Manifest this update: Sat 06 Dec 2025 03:00:32 +0000 Manifest next update: Sun 07 Dec 2025 03:00:32 +0000 Files and hashes: 1: PComfc4HIjjpwEUV5n65kmcuNRs.crl (hash: ZwhMfXzWdxkWTPvLw7LNpnubd2TNR/kVtODAiXR82go=) 2: ZGY0lWkEYWemqocgFCB9t9qlPGA.roa (hash: fiVljxbXsWOkY42tbBEX2UBc5QCY0m1ysP8nQ4McSh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.crl rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft rsync://rpki.ripe.net/repository/DEFAULT/PComfc4HIjjpwEUV5n65kmcuNRs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:9a:55:bd:dc:0e:4d:f3:be:a8:a2:36:ea:8f:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c2a267dce072238e9c04515e67eb992672e351b Validity Not Before: Dec 6 03:00:32 2025 GMT Not After : Dec 7 03:00:32 2025 GMT Subject: CN=a59c2c5accc305f9082ba7de5b36a019deb3352b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:04:94:f2:9f:b9:66:23:1b:c7:f0:e0:7d:3a: 91:68:fd:71:79:0f:22:c9:3d:cd:f3:ec:53:64:b2: b7:45:4e:87:41:f3:aa:b2:fe:ba:2c:a3:83:da:63: 51:af:90:a0:a3:29:f7:82:7c:4b:fa:e5:ae:86:e3: fb:64:aa:9e:6c:54:93:25:2b:19:07:1a:5b:77:af: 1f:18:75:8f:8d:df:b0:92:60:39:01:4e:fa:9c:de: 42:8f:60:47:98:d3:6e:83:8e:9c:6d:46:57:5a:9d: a6:72:bc:a6:2e:c6:a4:1c:f1:34:a8:6b:75:96:57: d0:02:70:de:c5:33:dc:76:3f:5d:1b:c8:65:95:a7: cd:33:8c:15:bd:90:19:91:8e:c2:fd:91:31:1d:1a: 05:bb:a6:e4:b8:24:98:f6:9d:d0:e6:30:89:f5:9f: 60:95:65:0e:58:28:0b:1c:e4:0e:34:8a:a1:6e:54: d7:85:c5:f3:2d:e3:52:2b:c6:79:e9:fb:43:7c:12: c0:e0:c2:a5:88:ce:99:0f:6d:2a:58:81:45:32:22: e4:30:17:10:cd:f6:cc:0b:d6:68:6f:c2:c9:80:94: f5:63:db:26:d3:12:d1:37:8d:24:de:f2:08:5f:ca: c6:10:4c:95:e3:93:57:06:35:2b:1b:5b:97:33:bc: cd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:9C:2C:5A:CC:C3:05:F9:08:2B:A7:DE:5B:36:A0:19:DE:B3:35:2B X509v3 Authority Key Identifier: keyid:3C:2A:26:7D:CE:07:22:38:E9:C0:45:15:E6:7E:B9:92:67:2E:35:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PComfc4HIjjpwEUV5n65kmcuNRs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:5f:e2:4c:ce:15:0f:a4:38:02:29:1c:4b:80:9a:c0:44:24: f9:69:9b:eb:75:24:ab:de:84:84:37:b4:7a:38:29:db:2f:f7: 2f:67:44:1e:27:ef:52:92:b0:c5:b9:a7:4b:43:79:9a:7d:51: d9:84:02:64:e2:5c:b8:41:83:45:57:68:e4:d2:c9:05:3d:7a: b5:2f:1a:2e:43:5f:d6:5e:66:b7:7f:62:72:17:61:d4:0f:8d: 40:5a:df:ca:02:a8:b1:56:a6:8a:46:92:ab:d1:90:c9:f4:2e: 6e:e3:ca:fe:30:ed:da:5a:3e:2a:50:9b:f3:b1:81:b5:a2:1b: 1f:1a:e3:27:b4:05:bf:d7:54:1e:af:9b:cc:44:f3:3b:22:5e: 23:b4:69:b7:39:9d:3b:a7:69:71:14:a8:1c:27:9f:1d:01:80: e1:03:37:a6:19:8f:39:80:e4:f7:23:ba:47:dd:17:c7:68:3d: be:87:dd:b8:b3:34:aa:2b:32:4f:18:63:93:4a:b5:4e:24:6e: d3:66:bc:70:43:3a:94:0e:8f:0c:28:25:53:48:56:4a:3c:17: 28:76:28:03:8b:48:d4:98:9b:b0:76:8d:f3:03:7b:fd:de:3a: 27:cf:32:8b:e2:55:6e:06:7d:6a:5a:bb:68:e7:d1:c9:00:f3: 8c:64:4f:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmppVvdwOTfO+qKI26o8bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMmEyNjdkY2UwNzIyMzhlOWMwNDUxNWU2N2ViOTkyNjcy ZTM1MWIwHhcNMjUxMjA2MDMwMDMyWhcNMjUxMjA3MDMwMDMyWjAzMTEwLwYDVQQD EyhhNTljMmM1YWNjYzMwNWY5MDgyYmE3ZGU1YjM2YTAxOWRlYjMzNTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyASU8p+5ZiMbx/DgfTqRaP1xeQ8i yT3N8+xTZLK3RU6HQfOqsv66LKOD2mNRr5Cgoyn3gnxL+uWuhuP7ZKqebFSTJSsZ Bxpbd68fGHWPjd+wkmA5AU76nN5Cj2BHmNNug46cbUZXWp2mcrymLsakHPE0qGt1 llfQAnDexTPcdj9dG8hllafNM4wVvZAZkY7C/ZExHRoFu6bkuCSY9p3Q5jCJ9Z9g lWUOWCgLHOQONIqhblTXhcXzLeNSK8Z56ftDfBLA4MKliM6ZD20qWIFFMiLkMBcQ zfbMC9Zob8LJgJT1Y9sm0xLRN40k3vIIX8rGEEyV45NXBjUrG1uXM7zNLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWcLFrMwwX5CCun3ls2oBneszUrMB8GA1UdIwQY MBaAFDwqJn3OByI46cBFFeZ+uZJnLjUbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUENvbWZjNEhJampwd0VVVjVuNjVrbWN1TlJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jZDZhN2ItMTU4MC00MTAyLTlhYTYt YTRiNmUzZDBkODMwLzEvUENvbWZjNEhJampwd0VVVjVuNjVrbWN1TlJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9jZDZhN2ItMTU4MC00MTAyLTlhYTYtYTRiNmUzZDBkODMw LzEvUENvbWZjNEhJampwd0VVVjVuNjVrbWN1TlJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHV/iTM4V D6Q4AikcS4CawEQk+Wmb63Ukq96EhDe0ejgp2y/3L2dEHifvUpKwxbmnS0N5mn1R 2YQCZOJcuEGDRVdo5NLJBT16tS8aLkNf1l5mt39ichdh1A+NQFrfygKosVamikaS q9GQyfQubuPK/jDt2lo+KlCb87GBtaIbHxrjJ7QFv9dUHq+bzETzOyJeI7Rptzmd O6dpcRSoHCefHQGA4QM3phmPOYDk9yO6R90Xx2g9vofduLM0qisyTxhjk0q1TiRu 02a8cEM6lA6PDCglU0hWSjwXKHYoA4tI1JibsHaN8wN7/d46J88yi+JVbgZ9alq7 aOfRyQDzjGRP0g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:37 2025 by rpki-client