This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft File: PvMl70y6pmzHH_zGiAh3524Umv0.mft (raw, json) Hash identifier: mvqrA+wKMtWq+hQR9cRFUzlAIXFbQl4UHn+lmAAy9K0= Subject key identifier: 1E:DD:D2:BD:82:CA:42:6E:8B:65:D9:C3:83:B6:CF:C8:1F:FA:4D:F7 Authority key identifier: 3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD Certificate issuer: /CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd Certificate serial: 019AF1D19C761DD3AB58123495D5C2F7149D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 04:00:37 +0000 Manifest this update: Sat 06 Dec 2025 04:00:37 +0000 Manifest next update: Sun 07 Dec 2025 04:00:37 +0000 Files and hashes: 1: 2dLH0vNFJnWg2lZelybNLzc06cc.roa (hash: r/Z+8xB7CHc6LECAv+vBuRY+QqUaeEKJ5DtFzihx2Zs=) 2: PvMl70y6pmzHH_zGiAh3524Umv0.crl (hash: 5yPMMnH/J7Ks5naObMReSlJq18Dz8iLftab9jwxnwHk=) 3: THythJBp9HlvhR4Ucra3aB5a1rw.roa (hash: s/hqAL5pfO/TIJ20hhiLhrBaWL37u8uzz5dP4J4SZhw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:9c:76:1d:d3:ab:58:12:34:95:d5:c2:f7:14:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd Validity Not Before: Dec 6 04:00:37 2025 GMT Not After : Dec 7 04:00:37 2025 GMT Subject: CN=1eddd2bd82ca426e8b65d9c383b6cfc81ffa4df7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fd:53:00:38:50:c0:f4:de:5f:02:82:3d:12: f8:f2:0c:d4:41:22:23:4a:d5:08:b6:1a:73:e6:ad: 93:4f:20:af:a7:c6:19:e6:a8:c0:12:34:c7:92:33: eb:d8:ee:b8:d6:75:98:de:ab:23:62:6a:dc:bf:7b: 30:6d:6e:f9:1f:16:52:a1:9b:bd:a4:a4:6c:c1:e1: 6a:30:97:03:4c:89:70:35:04:51:32:5c:e9:cc:e8: 14:98:a5:b2:09:e8:f7:b0:f2:17:00:10:1d:ca:3a: aa:a1:fd:fd:27:a5:30:05:f5:98:bb:49:df:1f:5d: c1:41:79:d8:20:e6:13:2f:d7:21:89:e5:27:89:02: 05:2c:0e:b3:5b:ec:77:83:2a:4b:3c:f4:23:38:3a: 1f:ea:81:e0:c4:ab:1c:be:dd:2a:f3:2e:a1:19:c1: 7e:53:14:02:88:69:19:4d:b9:50:f7:47:28:09:6f: 88:56:bd:11:91:c2:40:8a:ce:c5:1d:5c:3a:55:13: fc:24:a2:02:fc:27:7d:d5:e4:6c:59:7a:28:11:af: 8f:c3:7c:bf:94:84:fc:69:40:6a:a0:91:dc:b3:14: c1:7e:76:40:fc:94:eb:13:89:bc:e4:0f:d9:1b:89: f0:ca:79:ee:19:2c:24:11:49:0f:20:f4:27:78:5e: 16:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:DD:D2:BD:82:CA:42:6E:8B:65:D9:C3:83:B6:CF:C8:1F:FA:4D:F7 X509v3 Authority Key Identifier: keyid:3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:75:29:34:21:c4:b3:3a:08:a7:1e:75:75:b3:c6:1d:f5:80: e9:39:ef:e9:0e:9f:35:f0:df:b6:06:30:ea:09:df:df:31:de: 9b:3e:95:25:ab:00:7f:d4:ef:95:de:86:df:07:f7:73:b7:82: 19:dc:9f:73:55:0f:6f:b9:47:06:0c:f9:d3:76:2d:ef:c8:05: 9a:e8:4f:bf:44:09:af:6d:1b:de:e3:28:95:d2:b6:aa:e5:eb: bf:e4:0c:96:c4:56:21:41:57:56:4f:52:6b:14:9f:0e:26:2b: e7:4a:a4:d3:84:b9:fd:5e:bd:53:92:8a:7b:67:b5:12:3c:54: 02:57:62:f5:05:65:31:33:c7:1b:2b:01:06:a4:a6:10:27:f2: 65:ef:bf:ec:b6:98:f4:4f:52:29:01:5b:c0:dd:c4:a1:d8:72: 9f:75:1b:e8:c9:55:e1:4f:66:4b:17:b0:a2:fe:a9:71:67:04: 32:40:f8:bd:99:2c:be:ec:c9:db:95:0a:9a:01:07:23:01:89: 01:54:87:26:c2:04:b5:74:25:6c:18:f2:56:40:87:07:12:82: c1:5a:75:8a:5b:e3:89:0a:36:cb:f4:42:43:c1:07:be:04:86: cb:1d:cb:66:f8:c1:69:0d:4e:d5:72:7f:af:be:78:6e:bc:07: 8c:16:f6:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0Zx2HdOrWBI0ldXC9xSdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZjMyNWVmNGNiYWE2NmNjNzFmZmNjNjg4MDg3N2U3NmUx NDlhZmQwHhcNMjUxMjA2MDQwMDM3WhcNMjUxMjA3MDQwMDM3WjAzMTEwLwYDVQQD EygxZWRkZDJiZDgyY2E0MjZlOGI2NWQ5YzM4M2I2Y2ZjODFmZmE0ZGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsP1TADhQwPTeXwKCPRL48gzUQSIj StUIthpz5q2TTyCvp8YZ5qjAEjTHkjPr2O641nWY3qsjYmrcv3swbW75HxZSoZu9 pKRsweFqMJcDTIlwNQRRMlzpzOgUmKWyCej3sPIXABAdyjqqof39J6UwBfWYu0nf H13BQXnYIOYTL9chieUniQIFLA6zW+x3gypLPPQjODof6oHgxKscvt0q8y6hGcF+ UxQCiGkZTblQ90coCW+IVr0RkcJAis7FHVw6VRP8JKIC/Cd91eRsWXooEa+Pw3y/ lIT8aUBqoJHcsxTBfnZA/JTrE4m85A/ZG4nwynnuGSwkEUkPIPQneF4WKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB7d0r2CykJui2XZw4O2z8gf+k33MB8GA1UdIwQY MBaAFD7zJe9MuqZsxx/8xogId+duFJr9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHZNbDcweTZwbXpISF96R2lBaDM1MjRVbXYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80ZmQwOTAtNmZhZS00YTZhLThmOWUt MzRkNzE0ODVjNTQ3LzEvUHZNbDcweTZwbXpISF96R2lBaDM1MjRVbXYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS80ZmQwOTAtNmZhZS00YTZhLThmOWUtMzRkNzE0ODVjNTQ3 LzEvUHZNbDcweTZwbXpISF96R2lBaDM1MjRVbXYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnXUpNCHE szoIpx51dbPGHfWA6Tnv6Q6fNfDftgYw6gnf3zHemz6VJasAf9Tvld6G3wf3c7eC Gdyfc1UPb7lHBgz503Yt78gFmuhPv0QJr20b3uMoldK2quXrv+QMlsRWIUFXVk9S axSfDiYr50qk04S5/V69U5KKe2e1EjxUAldi9QVlMTPHGysBBqSmECfyZe+/7LaY 9E9SKQFbwN3Eodhyn3Ub6MlV4U9mSxewov6pcWcEMkD4vZksvuzJ25UKmgEHIwGJ AVSHJsIEtXQlbBjyVkCHBxKCwVp1ilvjiQo2y/RCQ8EHvgSGyx3LZvjBaQ1O1XJ/ r754brwHjBb2ZA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:10:02 2025 by rpki-client