This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft File: PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft (raw, json) Hash identifier: 6p5nYVNuWTp+4v1rPUcx/XQYhacKBYDrnyWF33uuZp4= Subject key identifier: CD:53:F6:3F:8A:B4:43:A3:CD:AD:9E:C5:EF:D4:2E:AB:14:29:DA:2D Authority key identifier: 3C:4E:E9:11:0B:85:FD:DE:3E:B6:E4:46:25:41:BA:BC:32:36:E8:BA Certificate issuer: /CN=3c4ee9110b85fdde3eb6e4462541babc3236e8ba Certificate serial: 019B36B3F38449EFA25F39D54F87DE1EBAEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7pEQuF_d4-tuRGJUG6vDI26Lo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft Manifest number: 0EF6 Signing time: Fri 19 Dec 2025 13:02:01 +0000 Manifest this update: Fri 19 Dec 2025 13:02:01 +0000 Manifest next update: Sat 20 Dec 2025 13:02:01 +0000 Files and hashes: 1: FYDxNKC7eVGhTXJyh7DYdQpF13Q.roa (hash: QGlq0akFOdxYp0jPfxez742IAGFVAdJ6BpKN9aAo6FU=) 2: PE7pEQuF_d4-tuRGJUG6vDI26Lo.crl (hash: eIyAwfMdPaLS3CaevRd5gD6ovV+Md1x3VpytuAY1sAM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft rsync://rpki.ripe.net/repository/DEFAULT/PE7pEQuF_d4-tuRGJUG6vDI26Lo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b3:f3:84:49:ef:a2:5f:39:d5:4f:87:de:1e:ba:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4ee9110b85fdde3eb6e4462541babc3236e8ba Validity Not Before: Dec 19 13:02:01 2025 GMT Not After : Dec 20 13:02:01 2025 GMT Subject: CN=cd53f63f8ab443a3cdad9ec5efd42eab1429da2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:68:ab:40:5a:d5:cf:f7:9a:5b:e4:38:a8:23: 75:8a:be:2f:a3:23:43:1e:40:f8:5b:62:06:3d:f2: 8f:52:14:27:94:60:f8:3a:40:1e:1c:6b:80:bc:cb: 0a:56:cd:72:a8:3c:da:78:7d:ff:63:52:21:2f:77: cd:bf:47:65:8a:da:92:47:1f:40:0f:9c:60:3e:62: 88:23:ce:19:5c:f1:3a:dc:7a:82:b1:d2:1e:88:b6: e4:5e:2c:91:6c:d0:e3:73:59:06:cf:41:4d:af:0c: 2d:92:02:f3:f8:e7:1f:50:8c:a8:76:17:83:f8:97: 27:8f:f4:2c:fc:ae:75:4c:a3:b5:ed:37:df:96:3a: 7e:e1:3a:97:6b:8a:0c:a9:5d:74:df:77:cc:49:4c: 44:0e:06:c5:b5:03:09:08:45:d8:e8:5f:de:ee:aa: c1:55:a5:cc:59:1e:25:22:af:dd:15:8f:c7:9b:ba: 9f:39:2e:a4:de:66:90:7e:f6:98:61:05:e4:ee:af: a7:17:2c:03:4a:6b:4e:2d:7a:0c:54:68:04:8d:05: 73:c0:37:7c:f9:78:bb:c1:f1:cc:1f:ce:b0:6e:73: 47:79:c3:84:ab:d0:18:81:f6:3d:6c:50:b0:03:6c: 7d:06:39:ae:df:d7:2b:68:99:1d:cf:eb:68:c4:ba: 89:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:53:F6:3F:8A:B4:43:A3:CD:AD:9E:C5:EF:D4:2E:AB:14:29:DA:2D X509v3 Authority Key Identifier: keyid:3C:4E:E9:11:0B:85:FD:DE:3E:B6:E4:46:25:41:BA:BC:32:36:E8:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7pEQuF_d4-tuRGJUG6vDI26Lo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:00:14:b3:8d:73:79:98:5b:d2:20:4a:e8:73:5f:24:a4:40: d4:0d:36:5b:f6:93:9f:71:e1:6f:f2:e7:8d:39:da:44:fe:fe: df:76:0d:86:06:93:6b:09:72:49:cf:79:05:9e:a4:66:47:7f: 8b:d4:e6:be:56:df:23:25:eb:1c:0f:83:d9:5b:a7:f5:70:97: 26:69:d2:c8:4e:6f:b9:44:22:b2:c8:6e:27:cf:52:2a:41:5f: f4:86:52:f1:c7:90:91:bf:67:78:5c:f7:70:33:f0:0f:02:de: 5d:5c:b8:28:6b:cb:b5:6e:47:96:6f:ea:bc:9d:f1:d9:94:49: 1c:0a:0c:11:5b:38:1f:86:5e:cc:06:50:fb:f0:af:c2:16:eb: 22:e2:c2:c7:0f:f6:2a:fc:5c:39:b3:94:45:f6:7d:bc:fa:b2: 3f:5a:4c:10:49:6a:08:ae:6d:d9:e6:3f:fa:3b:fa:a9:a8:e5: 6e:7a:09:df:f1:1f:e1:49:aa:42:3f:ea:7a:0c:f4:af:86:0b: af:9f:7f:2f:99:1a:e9:0a:ec:d1:d5:ad:92:c7:25:d7:ae:10: 3f:92:24:69:19:da:0f:94:15:06:ef:5e:2c:ab:d9:17:e9:88: 3f:73:9a:92:45:ef:05:ab:b4:4e:65:2f:23:f5:cf:0d:6b:dc: 3e:1a:ac:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2s/OESe+iXznVT4feHrruMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjNGVlOTExMGI4NWZkZGUzZWI2ZTQ0NjI1NDFiYWJjMzIz NmU4YmEwHhcNMjUxMjE5MTMwMjAxWhcNMjUxMjIwMTMwMjAxWjAzMTEwLwYDVQQD EyhjZDUzZjYzZjhhYjQ0M2EzY2RhZDllYzVlZmQ0MmVhYjE0MjlkYTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWirQFrVz/eaW+Q4qCN1ir4voyND HkD4W2IGPfKPUhQnlGD4OkAeHGuAvMsKVs1yqDzaeH3/Y1IhL3fNv0dlitqSRx9A D5xgPmKII84ZXPE63HqCsdIeiLbkXiyRbNDjc1kGz0FNrwwtkgLz+OcfUIyodheD +Jcnj/Qs/K51TKO17Tffljp+4TqXa4oMqV1033fMSUxEDgbFtQMJCEXY6F/e7qrB VaXMWR4lIq/dFY/Hm7qfOS6k3maQfvaYYQXk7q+nFywDSmtOLXoMVGgEjQVzwDd8 +Xi7wfHMH86wbnNHecOEq9AYgfY9bFCwA2x9Bjmu39craJkdz+toxLqJ+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM1T9j+KtEOjza2exe/ULqsUKdotMB8GA1UdIwQY MBaAFDxO6RELhf3ePrbkRiVBurwyNui6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEU3cEVRdUZfZDQtdHVSR0pVRzZ2REkyNkxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9kZDE4ZDAtZDFhMi00NmQ0LTg0NjQt Yzk0YThmMmUzMjMwLzEvUEU3cEVRdUZfZDQtdHVSR0pVRzZ2REkyNkxvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9kZDE4ZDAtZDFhMi00NmQ0LTg0NjQtYzk0YThmMmUzMjMw LzEvUEU3cEVRdUZfZDQtdHVSR0pVRzZ2REkyNkxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOwAUs41z eZhb0iBK6HNfJKRA1A02W/aTn3Hhb/LnjTnaRP7+33YNhgaTawlySc95BZ6kZkd/ i9TmvlbfIyXrHA+D2Vun9XCXJmnSyE5vuUQisshuJ89SKkFf9IZS8ceQkb9neFz3 cDPwDwLeXVy4KGvLtW5Hlm/qvJ3x2ZRJHAoMEVs4H4ZezAZQ+/CvwhbrIuLCxw/2 KvxcObOURfZ9vPqyP1pMEElqCK5t2eY/+jv6qajlbnoJ3/Ef4UmqQj/qegz0r4YL r59/L5ka6Qrs0dWtkscl164QP5IkaRnaD5QVBu9eLKvZF+mIP3OakkXvBau0TmUv I/XPDWvcPhqs1w== -----END CERTIFICATE-----Generated at Fri Dec 19 15:45:58 2025 by rpki-client