This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft File: PvMl70y6pmzHH_zGiAh3524Umv0.mft (raw, json) Hash identifier: 7TdJWYVUOTBQWpI/CRmPYSs/jx5HS1KqAtl8cZOG4F4= Subject key identifier: BE:AE:43:23:7C:10:77:08:9B:49:0D:5D:48:C6:C1:18:77:B5:41:82 Authority key identifier: 3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD Certificate issuer: /CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd Certificate serial: 019B337B1965CB50D76C65CAE305F3DD1444 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft Manifest number: 1788 Signing time: Thu 18 Dec 2025 22:01:03 +0000 Manifest this update: Thu 18 Dec 2025 22:01:03 +0000 Manifest next update: Fri 19 Dec 2025 22:01:03 +0000 Files and hashes: 1: 2dLH0vNFJnWg2lZelybNLzc06cc.roa (hash: r/Z+8xB7CHc6LECAv+vBuRY+QqUaeEKJ5DtFzihx2Zs=) 2: PvMl70y6pmzHH_zGiAh3524Umv0.crl (hash: 407ZeIi/Rq2WB6ldDgI6vGkwaCTbb84sjE5Vzkqdjic=) 3: THythJBp9HlvhR4Ucra3aB5a1rw.roa (hash: s/hqAL5pfO/TIJ20hhiLhrBaWL37u8uzz5dP4J4SZhw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:19:65:cb:50:d7:6c:65:ca:e3:05:f3:dd:14:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd Validity Not Before: Dec 18 22:01:03 2025 GMT Not After : Dec 19 22:01:03 2025 GMT Subject: CN=beae43237c1077089b490d5d48c6c11877b54182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:22:29:c0:6f:48:fe:77:0d:78:50:88:f0:ed: 2e:1e:8b:de:0e:9f:42:0a:02:c0:f5:d3:e1:c6:69: f3:5f:d1:e1:8b:a1:c0:e6:e0:0c:f9:d3:80:31:1d: 23:30:3e:3d:d4:0b:31:53:85:03:60:9b:a4:22:e4: 07:66:1c:61:a0:fb:ec:86:3a:94:83:d4:2d:bc:ff: 2c:c6:86:97:4d:f4:f3:42:04:ba:1e:7a:76:79:74: 36:1b:f0:a0:b9:95:30:46:1e:1a:20:5a:9b:8c:89: f2:36:4c:c1:0f:75:1e:86:2f:7e:63:6d:78:90:26: 73:d7:72:f9:12:26:d4:6b:1c:7f:93:2d:38:c1:73: 80:59:46:bf:0d:f8:eb:01:67:77:c2:a4:55:c4:9b: 84:0b:61:e9:87:e1:ea:8b:e5:21:c3:09:4f:06:14: 48:48:0f:06:aa:cf:44:4c:6c:a9:49:76:a5:c8:50: 63:0e:d1:d7:10:b4:0c:85:a7:75:5e:03:ff:d6:29: d5:4e:e6:ad:d4:a3:2f:73:03:0a:25:e8:87:da:6e: 57:e0:b3:21:9e:e2:90:4c:05:89:dc:68:99:d8:5c: f8:cf:28:d6:14:ce:78:df:46:12:06:9d:cc:0e:e4: b3:01:c6:9c:d4:fa:f1:b7:32:c5:c0:53:ad:af:54: 36:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:AE:43:23:7C:10:77:08:9B:49:0D:5D:48:C6:C1:18:77:B5:41:82 X509v3 Authority Key Identifier: keyid:3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:bd:f1:f7:5b:16:98:48:91:7c:f7:9b:b9:a3:53:df:90:0f: f7:7c:ca:24:bf:0f:c7:3a:f6:7c:e9:2d:46:e4:d5:ab:35:3f: e7:3b:fc:bf:ca:1b:72:52:a9:e3:a8:a8:0f:10:65:09:b5:1b: 3a:cd:90:0c:08:36:68:9e:a7:59:ea:59:96:d8:b9:22:6e:be: 69:75:5b:76:a2:18:76:b7:0d:22:20:e4:a4:9c:8d:ea:24:75: a4:90:57:14:26:56:bd:f1:46:41:81:4f:12:89:a5:ce:b5:62: 18:a1:63:c7:0d:53:e2:18:9e:fa:a8:0a:23:8c:e8:09:8b:86: c0:e6:15:98:86:3c:8e:50:27:2c:be:b0:7e:7b:ed:38:fb:1e: 58:3e:70:b3:42:04:ac:e5:1f:86:3f:cd:39:7c:22:d0:b0:ff: 03:2c:bb:75:45:59:93:6f:f7:ad:ef:1d:ee:31:2b:af:08:3b: d1:7e:91:49:d0:45:77:a6:06:7c:e6:08:cf:49:c6:9e:57:4a: 9c:34:1a:8d:7c:35:d8:e7:6a:a8:aa:6e:5f:4d:6f:06:ab:60: 8c:58:d0:31:ea:47:12:e4:be:79:29:24:1e:eb:3b:20:41:b8: 4f:23:d5:02:12:07:3b:04:e2:9a:4d:da:4e:66:06:1f:eb:5d: fe:db:db:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszexlly1DXbGXK4wXz3RREMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZjMyNWVmNGNiYWE2NmNjNzFmZmNjNjg4MDg3N2U3NmUx NDlhZmQwHhcNMjUxMjE4MjIwMTAzWhcNMjUxMjE5MjIwMTAzWjAzMTEwLwYDVQQD EyhiZWFlNDMyMzdjMTA3NzA4OWI0OTBkNWQ0OGM2YzExODc3YjU0MTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iIpwG9I/ncNeFCI8O0uHoveDp9C CgLA9dPhxmnzX9Hhi6HA5uAM+dOAMR0jMD491AsxU4UDYJukIuQHZhxhoPvshjqU g9QtvP8sxoaXTfTzQgS6Hnp2eXQ2G/CguZUwRh4aIFqbjInyNkzBD3Uehi9+Y214 kCZz13L5EibUaxx/ky04wXOAWUa/DfjrAWd3wqRVxJuEC2Hph+Hqi+UhwwlPBhRI SA8Gqs9ETGypSXalyFBjDtHXELQMhad1XgP/1inVTuat1KMvcwMKJeiH2m5X4LMh nuKQTAWJ3GiZ2Fz4zyjWFM5430YSBp3MDuSzAcac1PrxtzLFwFOtr1Q2pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL6uQyN8EHcIm0kNXUjGwRh3tUGCMB8GA1UdIwQY MBaAFD7zJe9MuqZsxx/8xogId+duFJr9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHZNbDcweTZwbXpISF96R2lBaDM1MjRVbXYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80ZmQwOTAtNmZhZS00YTZhLThmOWUt MzRkNzE0ODVjNTQ3LzEvUHZNbDcweTZwbXpISF96R2lBaDM1MjRVbXYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS80ZmQwOTAtNmZhZS00YTZhLThmOWUtMzRkNzE0ODVjNTQ3 LzEvUHZNbDcweTZwbXpISF96R2lBaDM1MjRVbXYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZr3x91sW mEiRfPebuaNT35AP93zKJL8Pxzr2fOktRuTVqzU/5zv8v8obclKp46ioDxBlCbUb Os2QDAg2aJ6nWepZlti5Im6+aXVbdqIYdrcNIiDkpJyN6iR1pJBXFCZWvfFGQYFP EomlzrViGKFjxw1T4hie+qgKI4zoCYuGwOYVmIY8jlAnLL6wfnvtOPseWD5ws0IE rOUfhj/NOXwi0LD/Ayy7dUVZk2/3re8d7jErrwg70X6RSdBFd6YGfOYIz0nGnldK nDQajXw12OdqqKpuX01vBqtgjFjQMepHEuS+eSkkHus7IEG4TyPVAhIHOwTimk3a TmYGH+td/tvbVQ== -----END CERTIFICATE-----Generated at Fri Dec 19 01:22:53 2025 by rpki-client