This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/afc9af-c0d6-41fa-937b-7dcb3907f396/1/PcJAKLjucj8XJvRZUfpc_mteQms.mft File: PcJAKLjucj8XJvRZUfpc_mteQms.mft (raw, json) Hash identifier: NkFhCYX6GcKK14gyC+VyrleTSjOfGtLa2MdunyG1aus= Subject key identifier: 83:5F:D2:77:7E:AD:3D:21:B3:6D:38:2F:1A:9E:8E:B6:4F:75:82:24 Authority key identifier: 3D:C2:40:28:B8:EE:72:3F:17:26:F4:59:51:FA:5C:FE:6B:5E:42:6B Certificate issuer: /CN=3dc24028b8ee723f1726f45951fa5cfe6b5e426b Certificate serial: 019AF088D8B14FD8D4A34D383F46C9E3D22F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcJAKLjucj8XJvRZUfpc_mteQms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/afc9af-c0d6-41fa-937b-7dcb3907f396/1/PcJAKLjucj8XJvRZUfpc_mteQms.mft Manifest number: 01F5 Signing time: Fri 05 Dec 2025 22:01:31 +0000 Manifest this update: Fri 05 Dec 2025 22:01:31 +0000 Manifest next update: Sat 06 Dec 2025 22:01:31 +0000 Files and hashes: 1: PcJAKLjucj8XJvRZUfpc_mteQms.crl (hash: SFzOuZHn+5iLuG3xxyQVBhjVJ5fmtx7miWoPLvT8JUs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/afc9af-c0d6-41fa-937b-7dcb3907f396/1/PcJAKLjucj8XJvRZUfpc_mteQms.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/afc9af-c0d6-41fa-937b-7dcb3907f396/1/PcJAKLjucj8XJvRZUfpc_mteQms.mft rsync://rpki.ripe.net/repository/DEFAULT/PcJAKLjucj8XJvRZUfpc_mteQms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:d8:b1:4f:d8:d4:a3:4d:38:3f:46:c9:e3:d2:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3dc24028b8ee723f1726f45951fa5cfe6b5e426b Validity Not Before: Dec 5 22:01:31 2025 GMT Not After : Dec 6 22:01:31 2025 GMT Subject: CN=835fd2777ead3d21b36d382f1a9e8eb64f758224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:81:81:d2:d2:07:13:36:49:98:15:f7:9f:4c: 91:80:55:8a:bc:65:a0:7d:fb:fd:66:7f:52:f4:b3: c8:94:5a:89:9b:db:2d:a0:61:3d:82:82:5b:1d:17: 96:8e:f1:6f:12:3e:ad:cd:72:2e:dc:50:68:ed:71: db:69:23:cf:59:07:00:4b:6f:06:3c:be:84:6f:8b: ab:21:c6:07:ef:74:8a:52:c7:49:60:e5:60:b2:fd: 33:a3:65:5b:4b:21:92:23:f3:43:2a:59:c4:8a:76: d4:e4:51:c5:37:40:c6:79:db:30:28:62:eb:b2:dd: 05:bf:80:44:b5:f1:51:ca:09:2d:89:25:38:2e:8f: e3:d8:03:1a:04:7d:07:4f:7b:44:53:79:04:0d:88: a1:b0:da:b6:08:aa:82:0e:5c:3a:99:ef:21:ce:4c: 04:15:d6:d9:62:d2:e6:00:17:64:5f:0a:54:5b:e1: 61:cd:71:2f:da:6a:85:c5:e7:ed:ee:0d:06:0e:68: 84:f6:3f:b4:fe:fc:7c:fa:cc:6a:92:ee:5c:8e:b4: 11:bd:96:fd:dc:0b:4f:a4:27:32:f9:66:c6:ca:33: cb:0f:68:ac:3d:da:ff:3a:c1:52:39:db:d9:0c:f0: c9:95:4b:09:f4:7d:c4:0a:e5:d4:eb:78:fb:e1:b4: 97:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:5F:D2:77:7E:AD:3D:21:B3:6D:38:2F:1A:9E:8E:B6:4F:75:82:24 X509v3 Authority Key Identifier: keyid:3D:C2:40:28:B8:EE:72:3F:17:26:F4:59:51:FA:5C:FE:6B:5E:42:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcJAKLjucj8XJvRZUfpc_mteQms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/afc9af-c0d6-41fa-937b-7dcb3907f396/1/PcJAKLjucj8XJvRZUfpc_mteQms.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/afc9af-c0d6-41fa-937b-7dcb3907f396/1/PcJAKLjucj8XJvRZUfpc_mteQms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:99:3c:c0:07:19:38:5d:38:3d:1d:c2:93:fd:6d:68:cc:1a: 28:ca:32:0f:3f:b0:5a:c5:7d:16:9c:be:e6:23:72:3c:3c:af: 9c:c8:30:8c:8f:0d:47:f9:a3:c9:50:cb:0c:e1:f4:5e:20:65: 77:8b:a9:bb:ad:0b:be:64:ea:57:bc:e3:ab:f4:35:da:ff:97: 2e:85:b8:05:2a:dc:ff:e2:27:78:4d:5d:ef:fe:e5:d8:1a:b2: 07:03:e4:7f:bd:ee:d9:16:af:52:f5:a5:2d:2c:b3:af:03:93: fe:5a:eb:09:eb:9a:b5:e7:6c:96:8a:30:66:98:4e:2a:07:26: 81:2c:27:79:28:6d:4a:d8:1e:54:9f:cf:51:97:63:64:45:13: 0b:c7:d3:07:18:f3:b1:20:1d:4a:aa:6c:64:21:08:4b:a0:cf: cd:e3:6c:80:79:6c:b7:f0:48:ff:c4:e9:54:25:c4:58:00:8c: f0:da:70:20:66:9f:32:52:c4:e4:5c:60:c5:cd:42:20:07:b1: 48:51:a5:a9:46:f3:22:ce:3f:67:37:26:9e:5e:65:b1:f9:88: 75:dd:d1:85:00:1f:99:ef:d6:a4:61:d1:f6:2c:62:05:16:88: 45:1e:ef:57:b4:7c:30:80:8a:de:f6:d5:00:b2:0e:93:37:f4: b5:20:79:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiNixT9jUo004P0bJ49IvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkYzI0MDI4YjhlZTcyM2YxNzI2ZjQ1OTUxZmE1Y2ZlNmI1 ZTQyNmIwHhcNMjUxMjA1MjIwMTMxWhcNMjUxMjA2MjIwMTMxWjAzMTEwLwYDVQQD Eyg4MzVmZDI3NzdlYWQzZDIxYjM2ZDM4MmYxYTllOGViNjRmNzU4MjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4GB0tIHEzZJmBX3n0yRgFWKvGWg ffv9Zn9S9LPIlFqJm9stoGE9goJbHReWjvFvEj6tzXIu3FBo7XHbaSPPWQcAS28G PL6Eb4urIcYH73SKUsdJYOVgsv0zo2VbSyGSI/NDKlnEinbU5FHFN0DGedswKGLr st0Fv4BEtfFRygktiSU4Lo/j2AMaBH0HT3tEU3kEDYihsNq2CKqCDlw6me8hzkwE FdbZYtLmABdkXwpUW+FhzXEv2mqFxeft7g0GDmiE9j+0/vx8+sxqku5cjrQRvZb9 3AtPpCcy+WbGyjPLD2isPdr/OsFSOdvZDPDJlUsJ9H3ECuXU63j74bSXhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFINf0nd+rT0hs204LxqejrZPdYIkMB8GA1UdIwQY MBaAFD3CQCi47nI/Fyb0WVH6XP5rXkJrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGNKQUtManVjajhYSnZSWlVmcGNfbXRlUW1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9hZmM5YWYtYzBkNi00MWZhLTkzN2It N2RjYjM5MDdmMzk2LzEvUGNKQUtManVjajhYSnZSWlVmcGNfbXRlUW1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9hZmM5YWYtYzBkNi00MWZhLTkzN2ItN2RjYjM5MDdmMzk2 LzEvUGNKQUtManVjajhYSnZSWlVmcGNfbXRlUW1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT5k8wAcZ OF04PR3Ck/1taMwaKMoyDz+wWsV9Fpy+5iNyPDyvnMgwjI8NR/mjyVDLDOH0XiBl d4upu60LvmTqV7zjq/Q12v+XLoW4BSrc/+IneE1d7/7l2BqyBwPkf73u2RavUvWl LSyzrwOT/lrrCeuatedsloowZphOKgcmgSwneShtStgeVJ/PUZdjZEUTC8fTBxjz sSAdSqpsZCEIS6DPzeNsgHlst/BI/8TpVCXEWACM8NpwIGafMlLE5Fxgxc1CIAex SFGlqUbzIs4/Zzcmnl5lsfmIdd3RhQAfme/WpGHR9ixiBRaIRR7vV7R8MICK3vbV ALIOkzf0tSB5xA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:59:04 2025 by rpki-client