This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft File: PComfc4HIjjpwEUV5n65kmcuNRs.mft (raw, json) Hash identifier: Ow+1yvVccmty918Rz2PknF2h9Finok691BXuyyzRa00= Subject key identifier: EF:C9:8C:C3:42:7C:45:0F:2F:82:3C:EE:5D:D9:EA:B1:A3:CB:59:F7 Authority key identifier: 3C:2A:26:7D:CE:07:22:38:E9:C0:45:15:E6:7E:B9:92:67:2E:35:1B Certificate issuer: /CN=3c2a267dce072238e9c04515e67eb992672e351b Certificate serial: 019B2B8B381DB48A0FA4566FBECB616AB99A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PComfc4HIjjpwEUV5n65kmcuNRs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft Manifest number: 1780 Signing time: Wed 17 Dec 2025 09:01:42 +0000 Manifest this update: Wed 17 Dec 2025 09:01:42 +0000 Manifest next update: Thu 18 Dec 2025 09:01:42 +0000 Files and hashes: 1: PComfc4HIjjpwEUV5n65kmcuNRs.crl (hash: 0fQMHjGF0sWn2LXrOSjihMogne3F5PYE6RYHfg37gpE=) 2: ZGY0lWkEYWemqocgFCB9t9qlPGA.roa (hash: fiVljxbXsWOkY42tbBEX2UBc5QCY0m1ysP8nQ4McSh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.crl rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft rsync://rpki.ripe.net/repository/DEFAULT/PComfc4HIjjpwEUV5n65kmcuNRs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8b:38:1d:b4:8a:0f:a4:56:6f:be:cb:61:6a:b9:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c2a267dce072238e9c04515e67eb992672e351b Validity Not Before: Dec 17 09:01:42 2025 GMT Not After : Dec 18 09:01:42 2025 GMT Subject: CN=efc98cc3427c450f2f823cee5dd9eab1a3cb59f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7c:57:84:d2:17:8b:45:cd:9f:46:3c:33:96: 70:e5:5c:6a:f5:fe:c7:4b:d7:b1:4e:9d:e2:30:59: a1:29:b8:d2:74:ad:3a:c2:e2:de:75:4b:62:d8:2b: 55:79:02:e5:c5:6b:ae:c3:ce:86:43:92:4b:a5:36: 6b:eb:97:89:28:87:39:ad:29:d9:26:be:6b:be:5a: 29:0a:d9:09:3f:d6:b3:0e:81:04:f7:3f:13:ee:2a: 7c:13:17:fb:7a:ec:b0:0a:be:8c:66:c9:d7:70:f7: 42:18:a3:0c:86:52:f8:2e:ff:32:01:6a:6d:17:3d: 98:b8:fc:66:2e:d2:28:37:63:10:ef:18:52:62:4e: af:31:dc:11:d7:b7:68:74:5e:41:c7:43:1f:8b:5a: 94:1d:1c:d9:b9:8f:77:d8:87:aa:40:70:53:1f:2b: 22:08:e1:77:7f:35:8b:c8:97:8e:54:7a:13:ea:fd: 1f:35:8b:41:33:c5:2a:ca:b2:8b:af:72:d7:4b:05: ca:b8:5e:2c:4b:a1:a1:55:d9:f3:77:f3:c5:c3:94: 34:9f:0f:df:0a:93:15:e4:81:4c:67:95:4f:93:34: 61:cf:98:04:14:d4:b9:b3:45:99:0d:4c:c5:e8:54: 8a:9d:21:62:66:1b:4b:77:ff:6a:c5:af:b4:fb:c8: f5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:C9:8C:C3:42:7C:45:0F:2F:82:3C:EE:5D:D9:EA:B1:A3:CB:59:F7 X509v3 Authority Key Identifier: keyid:3C:2A:26:7D:CE:07:22:38:E9:C0:45:15:E6:7E:B9:92:67:2E:35:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PComfc4HIjjpwEUV5n65kmcuNRs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:f9:f1:1d:7f:57:ff:0a:97:a8:50:2f:4c:5a:26:77:3d:bc: 8d:66:7d:c2:9b:73:58:2c:67:b5:3b:dd:e1:e3:a7:17:84:f8: fd:b9:09:86:35:91:28:84:91:0c:7c:fa:26:f1:ea:e8:23:d9: 05:6f:32:e6:e5:98:b6:b1:55:de:52:61:d6:0f:eb:b7:02:23: a4:0e:48:0e:3b:18:d1:84:41:d7:45:f6:f9:cc:06:97:88:77: f7:7a:e6:4d:8f:a3:eb:09:20:0c:59:b3:0a:49:ea:3a:30:07: d1:3f:3c:f1:54:d1:0b:bf:cf:9b:0f:64:eb:ed:b8:e7:8c:38: 73:fc:ac:b8:31:a7:a8:ff:03:7f:e2:44:59:41:f3:22:9f:27: 22:75:96:c8:3e:41:e7:04:85:6b:70:58:84:19:dc:f6:3f:15: 62:5d:b6:20:89:4f:ea:95:25:04:4e:b9:3f:98:4a:62:56:76: 62:44:09:40:58:1c:0a:37:23:50:29:d2:83:5c:6f:e8:dd:eb: f9:f4:08:92:32:da:03:d7:be:d4:85:76:36:39:7f:3c:4e:9a: 46:68:a8:61:99:66:5d:53:bb:a4:be:10:9c:64:a5:85:ca:e0: e2:62:29:da:46:09:de:b7:29:fa:c8:6c:bf:aa:77:10:70:5e: 47:60:97:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrizgdtIoPpFZvvstharmaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMmEyNjdkY2UwNzIyMzhlOWMwNDUxNWU2N2ViOTkyNjcy ZTM1MWIwHhcNMjUxMjE3MDkwMTQyWhcNMjUxMjE4MDkwMTQyWjAzMTEwLwYDVQQD EyhlZmM5OGNjMzQyN2M0NTBmMmY4MjNjZWU1ZGQ5ZWFiMWEzY2I1OWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXxXhNIXi0XNn0Y8M5Zw5Vxq9f7H S9exTp3iMFmhKbjSdK06wuLedUti2CtVeQLlxWuuw86GQ5JLpTZr65eJKIc5rSnZ Jr5rvlopCtkJP9azDoEE9z8T7ip8Exf7euywCr6MZsnXcPdCGKMMhlL4Lv8yAWpt Fz2YuPxmLtIoN2MQ7xhSYk6vMdwR17dodF5Bx0Mfi1qUHRzZuY932IeqQHBTHysi COF3fzWLyJeOVHoT6v0fNYtBM8UqyrKLr3LXSwXKuF4sS6GhVdnzd/PFw5Q0nw/f CpMV5IFMZ5VPkzRhz5gEFNS5s0WZDUzF6FSKnSFiZhtLd/9qxa+0+8j1awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO/JjMNCfEUPL4I87l3Z6rGjy1n3MB8GA1UdIwQY MBaAFDwqJn3OByI46cBFFeZ+uZJnLjUbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUENvbWZjNEhJampwd0VVVjVuNjVrbWN1TlJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jZDZhN2ItMTU4MC00MTAyLTlhYTYt YTRiNmUzZDBkODMwLzEvUENvbWZjNEhJampwd0VVVjVuNjVrbWN1TlJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9jZDZhN2ItMTU4MC00MTAyLTlhYTYtYTRiNmUzZDBkODMw LzEvUENvbWZjNEhJampwd0VVVjVuNjVrbWN1TlJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVPnxHX9X /wqXqFAvTFomdz28jWZ9wptzWCxntTvd4eOnF4T4/bkJhjWRKISRDHz6JvHq6CPZ BW8y5uWYtrFV3lJh1g/rtwIjpA5IDjsY0YRB10X2+cwGl4h393rmTY+j6wkgDFmz CknqOjAH0T888VTRC7/Pmw9k6+2454w4c/ysuDGnqP8Df+JEWUHzIp8nInWWyD5B 5wSFa3BYhBnc9j8VYl22IIlP6pUlBE65P5hKYlZ2YkQJQFgcCjcjUCnSg1xv6N3r +fQIkjLaA9e+1IV2Njl/PE6aRmioYZlmXVO7pL4QnGSlhcrg4mIp2kYJ3rcp+shs v6p3EHBeR2CX1g== -----END CERTIFICATE-----Generated at Wed Dec 17 17:55:27 2025 by rpki-client