This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/28860d-3c90-449f-a43e-8d3d50480d9d/1/PuzIGOGpxqhRe81paldEKNbRekQ.mft File: PuzIGOGpxqhRe81paldEKNbRekQ.mft (raw, json) Hash identifier: FoUYVeYE95fZIFntknnJNGmjuvShjPdYpY/TXWb9+AQ= Subject key identifier: 1D:EF:DF:29:97:7F:0B:82:00:F8:15:33:50:B7:37:46:ED:96:DB:9F Authority key identifier: 3E:EC:C8:18:E1:A9:C6:A8:51:7B:CD:69:6A:57:44:28:D6:D1:7A:44 Certificate issuer: /CN=3eecc818e1a9c6a8517bcd696a574428d6d17a44 Certificate serial: 019AF16436AFA97305D55424D12453B2E5AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PuzIGOGpxqhRe81paldEKNbRekQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/28860d-3c90-449f-a43e-8d3d50480d9d/1/PuzIGOGpxqhRe81paldEKNbRekQ.mft Manifest number: 0610 Signing time: Sat 06 Dec 2025 02:01:07 +0000 Manifest this update: Sat 06 Dec 2025 02:01:07 +0000 Manifest next update: Sun 07 Dec 2025 02:01:07 +0000 Files and hashes: 1: PuzIGOGpxqhRe81paldEKNbRekQ.crl (hash: IQ6fMwVMAsMBCIL0m+h/O8Epfpn0yRwdJJzJoI9215Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/28860d-3c90-449f-a43e-8d3d50480d9d/1/PuzIGOGpxqhRe81paldEKNbRekQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/28860d-3c90-449f-a43e-8d3d50480d9d/1/PuzIGOGpxqhRe81paldEKNbRekQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PuzIGOGpxqhRe81paldEKNbRekQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:36:af:a9:73:05:d5:54:24:d1:24:53:b2:e5:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eecc818e1a9c6a8517bcd696a574428d6d17a44 Validity Not Before: Dec 6 02:01:07 2025 GMT Not After : Dec 7 02:01:07 2025 GMT Subject: CN=1defdf29977f0b8200f8153350b73746ed96db9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:46:30:0b:88:ea:28:d3:20:cb:1b:99:4e:47: 2a:50:50:cb:3e:05:6f:fc:87:bb:b5:83:1a:23:e3: a6:b6:d2:fe:6a:10:e9:12:f2:74:94:ea:de:71:80: 88:b6:7d:79:66:90:64:44:74:7a:35:bf:ec:e4:03: 02:d6:82:a2:80:39:e8:68:84:2a:00:28:99:96:85: d9:b4:54:1d:4d:e7:70:9d:54:f8:b5:28:8b:33:56: f8:fb:a5:c6:4f:77:81:8f:07:9b:44:b1:0e:a7:3f: f9:a7:56:6e:3f:60:ea:92:43:c5:1f:47:e9:95:94: 1b:2b:e7:85:55:31:8e:c5:87:25:6a:de:cf:2e:6d: fd:ae:8c:b0:1f:3c:19:50:e3:c4:c2:51:33:69:45: 43:d7:48:03:bb:d1:32:51:77:e0:6d:08:7b:8a:7d: e0:40:55:99:55:80:56:ab:fc:02:87:88:ce:2b:22: 80:1d:a1:8f:8a:d6:7f:0c:cf:1d:55:63:99:90:5e: f9:1a:31:52:7b:cd:91:0e:ef:79:99:67:42:f1:8b: 7d:d7:38:13:6d:53:98:6a:af:bc:bf:56:be:27:5c: cd:55:5b:78:e2:65:7a:9d:89:cd:34:17:e6:a7:99: 2e:08:93:09:f8:aa:cf:b1:9f:5b:cd:a1:e1:64:a7: fd:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:EF:DF:29:97:7F:0B:82:00:F8:15:33:50:B7:37:46:ED:96:DB:9F X509v3 Authority Key Identifier: keyid:3E:EC:C8:18:E1:A9:C6:A8:51:7B:CD:69:6A:57:44:28:D6:D1:7A:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PuzIGOGpxqhRe81paldEKNbRekQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/28860d-3c90-449f-a43e-8d3d50480d9d/1/PuzIGOGpxqhRe81paldEKNbRekQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/28860d-3c90-449f-a43e-8d3d50480d9d/1/PuzIGOGpxqhRe81paldEKNbRekQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:f6:6f:fb:94:97:e1:21:35:77:4c:fa:04:26:32:0e:1a:64: 22:02:30:0c:58:a3:0b:26:2a:f0:5c:b9:e8:b9:d0:e3:87:03: 46:2e:18:b0:b8:dc:c5:7e:66:bf:51:64:42:00:46:09:e2:9c: ad:3e:64:b4:db:54:1c:fa:a9:cf:3d:58:2b:03:69:c8:a1:ad: c9:08:74:df:3f:00:5c:02:70:5f:7a:12:f1:a4:bf:fe:25:97: e6:b3:53:a8:65:45:1f:45:fd:1e:4f:55:a8:21:7b:dd:b0:e9: 04:52:56:5d:49:64:91:85:99:04:f1:ec:3c:fd:93:71:c6:2c: 48:b3:87:30:cb:f2:02:d9:2a:34:b9:b0:2b:c6:d3:d9:bc:c2: ed:d9:df:8a:1c:a9:58:aa:17:68:4a:d2:b8:5c:0b:5b:c8:f8: 6b:b5:6e:93:cf:1b:7d:5a:84:d8:81:52:6a:ad:e8:ae:31:1e: 9e:25:17:cf:c2:7a:b2:02:c4:6f:76:4c:29:b2:ff:96:27:cf: 50:e3:4a:ca:17:39:d8:ae:3b:f7:a1:e8:7f:bb:1d:2e:b1:ba: 86:98:ae:96:58:dd:9a:c1:ee:20:85:3a:3c:99:c5:b7:3f:df: f8:71:c2:74:d4:24:29:7b:55:52:00:b1:e8:02:01:66:38:13: 5f:51:91:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZDavqXMF1VQk0SRTsuWrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZWNjODE4ZTFhOWM2YTg1MTdiY2Q2OTZhNTc0NDI4ZDZk MTdhNDQwHhcNMjUxMjA2MDIwMTA3WhcNMjUxMjA3MDIwMTA3WjAzMTEwLwYDVQQD EygxZGVmZGYyOTk3N2YwYjgyMDBmODE1MzM1MGI3Mzc0NmVkOTZkYjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkYwC4jqKNMgyxuZTkcqUFDLPgVv /Ie7tYMaI+OmttL+ahDpEvJ0lOrecYCItn15ZpBkRHR6Nb/s5AMC1oKigDnoaIQq ACiZloXZtFQdTedwnVT4tSiLM1b4+6XGT3eBjwebRLEOpz/5p1ZuP2DqkkPFH0fp lZQbK+eFVTGOxYclat7PLm39roywHzwZUOPEwlEzaUVD10gDu9EyUXfgbQh7in3g QFWZVYBWq/wCh4jOKyKAHaGPitZ/DM8dVWOZkF75GjFSe82RDu95mWdC8Yt91zgT bVOYaq+8v1a+J1zNVVt44mV6nYnNNBfmp5kuCJMJ+KrPsZ9bzaHhZKf9VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB3v3ymXfwuCAPgVM1C3N0btltufMB8GA1UdIwQY MBaAFD7syBjhqcaoUXvNaWpXRCjW0XpEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHV6SUdPR3B4cWhSZTgxcGFsZEVLTmJSZWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8yODg2MGQtM2M5MC00NDlmLWE0M2Ut OGQzZDUwNDgwZDlkLzEvUHV6SUdPR3B4cWhSZTgxcGFsZEVLTmJSZWtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS8yODg2MGQtM2M5MC00NDlmLWE0M2UtOGQzZDUwNDgwZDlk LzEvUHV6SUdPR3B4cWhSZTgxcGFsZEVLTmJSZWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEvZv+5SX 4SE1d0z6BCYyDhpkIgIwDFijCyYq8Fy56LnQ44cDRi4YsLjcxX5mv1FkQgBGCeKc rT5ktNtUHPqpzz1YKwNpyKGtyQh03z8AXAJwX3oS8aS//iWX5rNTqGVFH0X9Hk9V qCF73bDpBFJWXUlkkYWZBPHsPP2TccYsSLOHMMvyAtkqNLmwK8bT2bzC7dnfihyp WKoXaErSuFwLW8j4a7Vuk88bfVqE2IFSaq3orjEeniUXz8J6sgLEb3ZMKbL/lifP UONKyhc52K4796Hof7sdLrG6hpiulljdmsHuIIU6PJnFtz/f+HHCdNQkKXtVUgCx 6AIBZjgTX1GRpA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:12:22 2025 by rpki-client