This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft File: PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft (raw, json) Hash identifier: uXqpMrkI0Z7EDTyWIUuLkxnWFSdv/7RsAgeMAMHbjXs= Subject key identifier: 4A:17:2C:A3:18:EB:E6:29:42:D9:DB:8B:45:60:02:D4:8A:F9:CE:B1 Authority key identifier: 3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8 Certificate issuer: /CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8 Certificate serial: 019AF12E799705C46D80F5D3E5BC0FD93E08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft Manifest number: 119F Signing time: Sat 06 Dec 2025 01:02:25 +0000 Manifest this update: Sat 06 Dec 2025 01:02:25 +0000 Manifest next update: Sun 07 Dec 2025 01:02:25 +0000 Files and hashes: 1: I8U89O9tJpiXMO1-8M-1h4tHDe0.roa (hash: grEqNQsgQL87eOOxL5f7rnMv8IQ+ZhiUxpZ5tEaDHVs=) 2: PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl (hash: ySIsXCzIInYJkXw3kp330qUQb3v+vxdZ+C+Cs9S20Ak=) 3: k0e8XrkRjigLyVCK_c8tyoDjXqU.roa (hash: VlaMdbNDNwgFwQ8MfYZ/SEPVePx9cKrNfoX/5Qh79Ow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:79:97:05:c4:6d:80:f5:d3:e5:bc:0f:d9:3e:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8 Validity Not Before: Dec 6 01:02:25 2025 GMT Not After : Dec 7 01:02:25 2025 GMT Subject: CN=4a172ca318ebe62942d9db8b456002d48af9ceb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:33:06:54:ba:63:8c:d3:e6:ed:84:2b:1b:f1: 0c:36:2f:bb:4f:f0:07:d3:7f:7e:03:82:73:f6:8f: 31:e6:a8:ee:ff:7b:81:90:50:52:e5:56:36:9e:74: 8b:5f:5e:62:f1:73:42:d7:be:9c:19:17:a5:c9:c2: cb:bf:9a:ac:b8:2f:ee:3d:57:9d:11:6c:b5:61:6c: 72:1d:ed:df:f4:bd:1d:a7:99:8a:09:71:77:f4:1e: b3:fa:f2:16:bc:fb:99:c6:9f:58:ab:14:10:19:2f: 5f:22:bb:bd:53:8c:98:2b:4c:bb:e6:bd:9d:40:60: c5:7d:e2:43:e0:f3:91:d5:10:dc:ba:cd:ee:93:79: 56:88:be:e4:a7:64:10:48:97:eb:f8:05:37:7d:07: 88:a3:28:16:2e:59:d9:75:53:14:32:2f:58:bd:7c: 61:3c:e2:2a:97:83:52:1f:9d:c3:0d:8b:34:00:a8: 96:9b:a4:35:b4:6e:d3:98:0e:24:5a:ea:45:79:59: ba:69:ec:73:68:d4:60:a9:4f:9d:74:3e:a9:cf:b9: 69:1c:d7:b1:1f:a7:d6:56:cd:57:e4:85:ab:66:80: 3b:a8:a2:e0:0a:b2:42:14:fc:29:15:40:7d:c0:95: 44:f1:a8:a9:3f:81:83:02:64:26:ee:e6:ef:5b:e5: 7b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:17:2C:A3:18:EB:E6:29:42:D9:DB:8B:45:60:02:D4:8A:F9:CE:B1 X509v3 Authority Key Identifier: keyid:3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:c3:c3:f3:58:38:6c:d3:af:46:17:80:dc:72:00:fe:bb:bb: f7:d1:96:1a:7f:92:eb:1f:dd:d4:1b:05:36:8d:a5:ee:f8:fd: a3:2f:a7:3d:4b:b0:c8:fc:e8:3e:19:ae:df:f7:94:4d:c5:f6: 07:68:dc:77:a4:f8:cc:37:08:88:4e:4a:75:d9:37:b5:f7:45: 55:d0:fe:8d:81:93:36:27:7e:6e:bb:07:ae:b5:87:1d:b5:80: 54:e7:54:b5:4c:cc:76:3f:d7:d6:d9:a7:98:fb:64:53:6f:41: ca:d8:ef:54:e4:6a:e1:41:e4:4f:a6:28:a7:98:7c:a7:c9:ab: 2d:ef:b2:24:87:c6:0e:31:9d:af:01:e1:c6:f6:5a:22:9c:d4: 72:57:68:75:2b:e3:07:57:46:4a:fa:45:f2:56:33:0d:59:d7: ed:00:c1:e2:4a:aa:dd:42:3a:72:36:a2:9b:dc:ae:19:b8:dd: 33:43:5b:01:af:18:93:8e:ba:73:a7:b1:f5:8f:84:22:61:9c: 11:bc:53:3d:1b:f4:2f:be:42:6e:7e:84:84:4d:6c:2f:86:18: 69:57:d8:8a:21:8a:86:0b:4f:5f:f1:35:6d:d0:a8:5a:35:41: 14:1c:7f:1f:44:a2:0c:bc:8c:d2:57:77:1f:38:f5:37:b1:93: 65:01:cb:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLnmXBcRtgPXT5bwP2T4IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkZmEyOTM2OGM4YmU2OWM4ZWRkNWFhMTkzNTU3ZmNiYTJh NTdlYzgwHhcNMjUxMjA2MDEwMjI1WhcNMjUxMjA3MDEwMjI1WjAzMTEwLwYDVQQD Eyg0YTE3MmNhMzE4ZWJlNjI5NDJkOWRiOGI0NTYwMDJkNDhhZjljZWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDMGVLpjjNPm7YQrG/EMNi+7T/AH 039+A4Jz9o8x5qju/3uBkFBS5VY2nnSLX15i8XNC176cGRelycLLv5qsuC/uPVed EWy1YWxyHe3f9L0dp5mKCXF39B6z+vIWvPuZxp9YqxQQGS9fIru9U4yYK0y75r2d QGDFfeJD4POR1RDcus3uk3lWiL7kp2QQSJfr+AU3fQeIoygWLlnZdVMUMi9YvXxh POIql4NSH53DDYs0AKiWm6Q1tG7TmA4kWupFeVm6aexzaNRgqU+ddD6pz7lpHNex H6fWVs1X5IWrZoA7qKLgCrJCFPwpFUB9wJVE8aipP4GDAmQm7ubvW+V7yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEoXLKMY6+YpQtnbi0VgAtSK+c6xMB8GA1UdIwQY MBaAFD36KTaMi+acjt1aoZNVf8uipX7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGZvcE5veUw1cHlPM1ZxaGsxVl95NktsZnNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8yZDRmN2YtMTZlNy00ZmU2LWExODkt YmQ1OGQwMDIxYTA5LzEvUGZvcE5veUw1cHlPM1ZxaGsxVl95NktsZnNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8yZDRmN2YtMTZlNy00ZmU2LWExODktYmQ1OGQwMDIxYTA5 LzEvUGZvcE5veUw1cHlPM1ZxaGsxVl95NktsZnNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ8PD81g4 bNOvRheA3HIA/ru799GWGn+S6x/d1BsFNo2l7vj9oy+nPUuwyPzoPhmu3/eUTcX2 B2jcd6T4zDcIiE5Kddk3tfdFVdD+jYGTNid+brsHrrWHHbWAVOdUtUzMdj/X1tmn mPtkU29BytjvVORq4UHkT6Yop5h8p8mrLe+yJIfGDjGdrwHhxvZaIpzUcldodSvj B1dGSvpF8lYzDVnX7QDB4kqq3UI6cjaim9yuGbjdM0NbAa8Yk466c6ex9Y+EImGc EbxTPRv0L75Cbn6EhE1sL4YYaVfYiiGKhgtPX/E1bdCoWjVBFBx/H0SiDLyM0ld3 Hzj1N7GTZQHL+w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:08:57 2025 by rpki-client