This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft File: PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft (raw, json) Hash identifier: 0ZaZ5+DiEUnvKhvFfYHpPrf+XZx7FbR4f0UCjtreTjg= Subject key identifier: BF:1A:97:36:E9:C3:37:D2:17:59:4B:85:8F:C2:26:BB:32:1F:7B:1F Authority key identifier: 3E:E5:A1:DD:0C:EE:87:4C:06:E1:EA:1F:72:82:7D:97:CB:C6:71:87 Certificate issuer: /CN=3ee5a1dd0cee874c06e1ea1f72827d97cbc67187 Certificate serial: 019AF2092D34027B79768DE00FD7328F5E33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 05:01:18 +0000 Manifest this update: Sat 06 Dec 2025 05:01:18 +0000 Manifest next update: Sun 07 Dec 2025 05:01:18 +0000 Files and hashes: 1: 3Gi7K5otbF8YAPl6ViRUI8XiRNU.roa (hash: aFHAU+eeRwSzWLG9T2U4VKkPQW4ZT7Ys728VZHAX80s=) 2: PuWh3Qzuh0wG4eofcoJ9l8vGcYc.crl (hash: TfBKMTr7fFrCmlHYX9VEf6IxsvTSk9L8IsOslrUQmYM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft rsync://rpki.ripe.net/repository/DEFAULT/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:2d:34:02:7b:79:76:8d:e0:0f:d7:32:8f:5e:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee5a1dd0cee874c06e1ea1f72827d97cbc67187 Validity Not Before: Dec 6 05:01:18 2025 GMT Not After : Dec 7 05:01:18 2025 GMT Subject: CN=bf1a9736e9c337d217594b858fc226bb321f7b1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c7:3f:8c:ea:74:b2:2b:61:9b:b1:62:17:67: 42:71:8d:27:63:ea:04:28:f0:70:2d:5b:9f:f6:b3: 94:91:88:b3:20:c9:82:39:a7:6b:3e:15:01:61:5e: ec:d0:e3:90:bd:30:7d:ae:6a:c4:49:0b:42:71:48: 58:77:40:76:23:2c:41:cd:20:61:69:4f:99:63:44: b1:97:d9:57:71:dd:08:37:81:30:07:f8:b3:7d:8a: 0b:6a:8c:36:72:ec:62:e6:1d:2f:d1:ea:db:6d:06: 3c:bd:9e:57:ea:6c:a6:48:f5:b1:3f:f7:54:7e:6a: d6:97:55:80:56:eb:eb:b8:e0:28:8d:d4:2c:52:5d: 3a:71:f8:98:94:a8:88:a8:1e:14:a7:06:48:39:28: 01:f7:12:df:af:e2:5f:23:30:8d:3b:02:6d:c8:f5: 55:69:8a:6d:9b:84:b1:a1:80:45:43:a6:fc:98:c8: 90:76:f1:76:24:cb:0a:82:6a:7e:48:7a:7e:2f:b1: 5b:67:98:dd:5c:a8:8f:8c:82:bf:a3:45:f1:53:32: 27:c4:40:dc:9e:e7:a8:9d:5d:bf:0d:03:f8:83:db: cd:da:10:f2:0a:8b:22:83:97:da:02:b1:90:dc:7f: 8e:f1:d7:88:b8:f7:f8:2f:e1:0a:5a:19:7e:ed:ee: be:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:1A:97:36:E9:C3:37:D2:17:59:4B:85:8F:C2:26:BB:32:1F:7B:1F X509v3 Authority Key Identifier: keyid:3E:E5:A1:DD:0C:EE:87:4C:06:E1:EA:1F:72:82:7D:97:CB:C6:71:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:3b:2c:6c:35:15:e9:5d:b4:e3:ed:82:6e:de:8b:f0:61:4c: 3c:41:cc:e7:06:2e:4b:47:fd:2d:df:03:43:03:67:78:56:d9: 38:bb:4e:00:72:fe:7f:92:3b:b7:8a:28:ae:51:2d:86:f3:6a: 7f:5a:3b:8e:ad:fe:47:e0:51:fd:25:e9:a2:f5:fe:5b:c0:06: 8c:d7:9b:b9:67:8d:60:7f:1e:2c:f5:11:8f:6e:e6:92:30:b9: 9e:3f:04:12:7d:ce:82:b2:4c:ce:68:34:91:3c:0c:5b:5b:1c: a7:8b:ff:af:a8:10:83:09:e8:3b:6e:5b:87:a8:d4:bf:33:01: a8:36:1d:4b:8f:3c:35:31:af:d6:cd:92:7d:a2:46:a5:0c:68: 32:46:6e:43:97:57:99:db:58:c7:70:75:95:a3:18:a6:3b:92: ad:05:f7:e5:51:40:b4:4e:73:43:ce:f4:bc:88:e0:b3:30:18: 5f:a2:01:50:d1:b2:33:91:aa:55:cf:2b:55:9e:dd:18:01:a0: 55:fb:73:d2:8a:36:12:00:5d:30:bd:6d:7d:86:ff:28:f0:8f: 7a:e6:c8:f5:72:03:20:50:e0:94:23:b7:3f:a0:16:63:04:2c: 27:a9:b8:9e:91:24:c0:2c:1c:61:a8:48:5b:ad:5f:72:7d:87: 40:41:20:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCS00Ant5do3gD9cyj14zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZTVhMWRkMGNlZTg3NGMwNmUxZWExZjcyODI3ZDk3Y2Jj NjcxODcwHhcNMjUxMjA2MDUwMTE4WhcNMjUxMjA3MDUwMTE4WjAzMTEwLwYDVQQD EyhiZjFhOTczNmU5YzMzN2QyMTc1OTRiODU4ZmMyMjZiYjMyMWY3YjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8c/jOp0sithm7FiF2dCcY0nY+oE KPBwLVuf9rOUkYizIMmCOadrPhUBYV7s0OOQvTB9rmrESQtCcUhYd0B2IyxBzSBh aU+ZY0Sxl9lXcd0IN4EwB/izfYoLaow2cuxi5h0v0erbbQY8vZ5X6mymSPWxP/dU fmrWl1WAVuvruOAojdQsUl06cfiYlKiIqB4UpwZIOSgB9xLfr+JfIzCNOwJtyPVV aYptm4SxoYBFQ6b8mMiQdvF2JMsKgmp+SHp+L7FbZ5jdXKiPjIK/o0XxUzInxEDc nueonV2/DQP4g9vN2hDyCosig5faArGQ3H+O8deIuPf4L+EKWhl+7e6+qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL8alzbpwzfSF1lLhY/CJrsyH3sfMB8GA1UdIwQY MBaAFD7lod0M7odMBuHqH3KCfZfLxnGHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHVXaDNRenVoMHdHNGVvZmNvSjlsOHZHY1ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny85NWZmZDktMTlkMy00NTE3LThjNDct YzYxNjYxZDFiNzFiLzEvUHVXaDNRenVoMHdHNGVvZmNvSjlsOHZHY1ljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny85NWZmZDktMTlkMy00NTE3LThjNDctYzYxNjYxZDFiNzFi LzEvUHVXaDNRenVoMHdHNGVvZmNvSjlsOHZHY1ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcTssbDUV 6V204+2Cbt6L8GFMPEHM5wYuS0f9Ld8DQwNneFbZOLtOAHL+f5I7t4oorlEthvNq f1o7jq3+R+BR/SXpovX+W8AGjNebuWeNYH8eLPURj27mkjC5nj8EEn3OgrJMzmg0 kTwMW1scp4v/r6gQgwnoO25bh6jUvzMBqDYdS488NTGv1s2SfaJGpQxoMkZuQ5dX mdtYx3B1laMYpjuSrQX35VFAtE5zQ870vIjgszAYX6IBUNGyM5GqVc8rVZ7dGAGg Vftz0oo2EgBdML1tfYb/KPCPeubI9XIDIFDglCO3P6AWYwQsJ6m4npEkwCwcYahI W61fcn2HQEEgpw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:21:51 2025 by rpki-client