This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft File: _PmtqbKLaZf9ocRoqNhpY4QHoLs.mft (raw, json) Hash identifier: 2x5Mu+YUINZQj2c7Jt3cAKL4s71D+ZD2Nu0I6hWvzcY= Subject key identifier: 23:6A:A7:49:87:4E:E1:C4:10:0A:21:78:2F:F8:84:50:EC:65:E9:47 Authority key identifier: FC:F9:AD:A9:B2:8B:69:97:FD:A1:C4:68:A8:D8:69:63:84:07:A0:BB Certificate issuer: /CN=fcf9ada9b28b6997fda1c468a8d869638407a0bb Certificate serial: 019AF12F1C091568C7710CBEC4D79FD61636 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:03:07 +0000 Manifest this update: Sat 06 Dec 2025 01:03:07 +0000 Manifest next update: Sun 07 Dec 2025 01:03:07 +0000 Files and hashes: 1: Le3v2H0wAOnsDtbYpl9GWGKprW8.roa (hash: 3pH+MsH30Kao3JM7UhwFK9NiYfes8F3zq57Gt61L8AQ=) 2: _PmtqbKLaZf9ocRoqNhpY4QHoLs.crl (hash: hbc3+75Ga2KD/XmL8NbA0lUy+aPyjlN8b2VLUqDS7gc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:03:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2f:1c:09:15:68:c7:71:0c:be:c4:d7:9f:d6:16:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcf9ada9b28b6997fda1c468a8d869638407a0bb Validity Not Before: Dec 6 01:03:07 2025 GMT Not After : Dec 7 01:03:07 2025 GMT Subject: CN=236aa749874ee1c4100a21782ff88450ec65e947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:73:ea:29:ca:a3:27:f4:8c:c7:ec:09:e0:39: 9b:ff:78:bf:02:54:a7:6a:f4:2b:06:43:23:32:63: af:25:46:36:08:b7:9e:08:d0:bf:a8:36:6c:b7:9a: da:e6:38:85:7f:a4:e8:14:ce:e8:b6:56:ab:7a:fa: c1:24:df:a1:f8:2c:14:67:d8:46:fe:ed:ef:89:9a: 7f:a2:d2:0e:21:d5:63:0d:72:3b:0b:de:96:25:bf: 3a:18:97:bf:11:e6:94:26:e0:f4:58:0b:88:1b:57: dd:4f:d0:62:83:fd:2e:26:fe:9c:2f:6c:8b:b6:ae: b1:ca:eb:48:07:ad:15:7c:61:11:ce:1a:04:63:65: 93:c7:cb:1a:31:03:ad:c0:1d:c1:e2:40:7f:0e:6f: 7f:c6:a1:af:c2:b4:2c:fe:e4:5d:90:ae:82:cc:3b: 0d:38:91:31:f1:70:2e:c8:1d:3a:fa:3f:4a:40:53: c8:0e:47:71:c9:73:c8:5f:7f:5b:d2:0b:2b:25:ef: 6c:36:59:c0:a7:a6:e2:3b:fd:ac:dc:4b:fd:86:8b: 1f:71:1c:35:a9:0e:bb:eb:5e:c3:29:09:9d:b3:6c: f4:ec:81:5d:ba:96:56:dd:51:ef:0a:17:66:37:64: 88:1f:7c:50:b6:38:13:2c:2b:bd:48:cb:63:82:95: 86:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:6A:A7:49:87:4E:E1:C4:10:0A:21:78:2F:F8:84:50:EC:65:E9:47 X509v3 Authority Key Identifier: keyid:FC:F9:AD:A9:B2:8B:69:97:FD:A1:C4:68:A8:D8:69:63:84:07:A0:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:ef:df:a6:25:e8:c1:1a:8b:c2:51:ed:32:7d:70:0f:33:a1: ef:b5:44:bf:8d:8f:01:c8:3f:6d:b5:76:08:bb:d3:1e:92:f9: fb:d4:5c:a7:3e:94:34:b0:ef:be:2f:2e:84:9e:96:72:a8:72: 19:14:eb:d5:55:c5:0e:85:10:9d:df:52:3e:8d:df:d8:e3:1e: 27:03:ef:7b:43:4f:20:21:f2:e8:6d:d0:cb:7e:f5:06:8b:9d: a8:9f:3a:8e:b3:85:b5:b5:f2:b7:6f:02:d8:aa:12:19:cd:26: 4a:16:45:2e:7e:31:20:7b:7e:2b:07:e5:c0:d1:38:1a:1c:12: 9e:11:93:e7:4a:79:a5:05:9f:89:0f:69:5b:6c:dd:1c:84:0a: f5:1e:ab:39:96:04:36:e0:53:e1:ce:6b:b2:df:08:b3:df:72: 07:a1:81:e2:0b:e4:31:9b:fd:54:31:6d:0e:d3:be:59:ff:92: ea:ad:c1:31:9a:b1:48:cc:d9:bc:09:48:dd:05:e1:08:32:5d: 76:c8:e1:31:a4:a7:07:57:e2:f6:24:f1:4b:08:ab:43:4d:90: e9:38:0c:9d:fb:1e:c7:d3:de:ef:b8:b6:48:75:f7:04:85:e8: 53:8b:29:25:33:29:8b:8b:03:69:ac:92:3f:47:9a:b3:b8:44: 30:c6:3a:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLxwJFWjHcQy+xNef1hY2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjZjlhZGE5YjI4YjY5OTdmZGExYzQ2OGE4ZDg2OTYzODQw N2EwYmIwHhcNMjUxMjA2MDEwMzA3WhcNMjUxMjA3MDEwMzA3WjAzMTEwLwYDVQQD EygyMzZhYTc0OTg3NGVlMWM0MTAwYTIxNzgyZmY4ODQ1MGVjNjVlOTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HPqKcqjJ/SMx+wJ4Dmb/3i/AlSn avQrBkMjMmOvJUY2CLeeCNC/qDZst5ra5jiFf6ToFM7otlarevrBJN+h+CwUZ9hG /u3viZp/otIOIdVjDXI7C96WJb86GJe/EeaUJuD0WAuIG1fdT9Big/0uJv6cL2yL tq6xyutIB60VfGERzhoEY2WTx8saMQOtwB3B4kB/Dm9/xqGvwrQs/uRdkK6CzDsN OJEx8XAuyB06+j9KQFPIDkdxyXPIX39b0gsrJe9sNlnAp6biO/2s3Ev9hosfcRw1 qQ67617DKQmds2z07IFdupZW3VHvChdmN2SIH3xQtjgTLCu9SMtjgpWGpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCNqp0mHTuHEEAoheC/4hFDsZelHMB8GA1UdIwQY MBaAFPz5ramyi2mX/aHEaKjYaWOEB6C7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1BtdHFiS0xhWmY5b2NSb3FOaHBZNFFIb0xzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS83YTk2ZDEtY2YxYi00ZjQ3LTkzZWUt MjU5ZmUxNzUwZWViLzEvX1BtdHFiS0xhWmY5b2NSb3FOaHBZNFFIb0xzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS83YTk2ZDEtY2YxYi00ZjQ3LTkzZWUtMjU5ZmUxNzUwZWVi LzEvX1BtdHFiS0xhWmY5b2NSb3FOaHBZNFFIb0xzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABu/fpiXo wRqLwlHtMn1wDzOh77VEv42PAcg/bbV2CLvTHpL5+9Rcpz6UNLDvvi8uhJ6Wcqhy GRTr1VXFDoUQnd9SPo3f2OMeJwPve0NPICHy6G3Qy371BoudqJ86jrOFtbXyt28C 2KoSGc0mShZFLn4xIHt+KwflwNE4GhwSnhGT50p5pQWfiQ9pW2zdHIQK9R6rOZYE NuBT4c5rst8Is99yB6GB4gvkMZv9VDFtDtO+Wf+S6q3BMZqxSMzZvAlI3QXhCDJd dsjhMaSnB1fi9iTxSwirQ02Q6TgMnfsex9Pe77i2SHX3BIXoU4spJTMpi4sDaayS P0eas7hEMMY6ow== -----END CERTIFICATE-----Generated at Sat Dec 6 09:04:08 2025 by rpki-client