This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft File: PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft (raw, json) Hash identifier: 8ikwkt6a5oI202hWBnFHjkxOuH/ZhMssur47cLRHRCQ= Subject key identifier: 10:75:48:11:12:2F:02:22:73:AF:21:5C:D6:1D:9F:08:47:E0:36:38 Authority key identifier: 3C:45:CE:40:85:F0:2E:B8:A0:ED:1A:FD:2B:79:91:A8:AA:99:83:34 Certificate issuer: /CN=3c45ce4085f02eb8a0ed1afd2b7991a8aa998334 Certificate serial: 019AF19B7A85CBE81018AA7C0B32BAB0BDFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 03:01:29 +0000 Manifest this update: Sat 06 Dec 2025 03:01:29 +0000 Manifest next update: Sun 07 Dec 2025 03:01:29 +0000 Files and hashes: 1: B29MvHY6zeEvGzG4mIu0G_C1t3k.roa (hash: 2w6PM7Xh404gJeZoq9hPqo7jK8P7Uk4U1TIQbaY+1sM=) 2: PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl (hash: FTS+ZuV6LweoAbclXvCVEx597NAUEP1lw07x/7XV16I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:7a:85:cb:e8:10:18:aa:7c:0b:32:ba:b0:bd:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c45ce4085f02eb8a0ed1afd2b7991a8aa998334 Validity Not Before: Dec 6 03:01:29 2025 GMT Not After : Dec 7 03:01:29 2025 GMT Subject: CN=10754811122f022273af215cd61d9f0847e03638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:99:63:4f:99:c8:e8:24:00:ad:a4:f7:61:45: 20:22:16:13:36:83:df:6f:9f:f3:be:b5:09:c7:7b: 2c:5e:a1:a2:1c:a6:a5:5c:67:48:a5:0e:c3:cf:bf: 10:6b:dd:2f:87:ca:af:f3:b6:a4:da:a2:30:0d:fc: 96:d6:4a:d3:4e:03:29:f3:4d:a1:2a:3f:82:66:41: ab:9b:0f:f0:82:e5:8c:13:56:e6:46:33:fb:0d:02: 9a:83:f0:3c:cf:2d:0b:c1:9a:5d:64:d3:44:ff:17: 91:47:f4:07:67:42:e5:16:28:9a:27:ad:de:11:43: ee:f0:05:4e:47:5e:f5:89:5c:62:d2:20:3c:f8:fb: 7f:07:48:a0:51:34:70:1b:9d:cb:fd:a2:23:e8:b5: c3:dc:00:92:c8:3a:f6:a1:d9:dd:8f:47:3d:41:6b: dd:97:a4:e6:0e:60:eb:11:31:11:db:81:77:29:38: 8a:51:22:d6:62:97:6f:70:7e:13:f6:f9:1e:55:ae: 7b:9a:ed:26:b2:c3:a4:9c:06:26:18:f0:16:4c:1e: 52:d9:a4:2a:1d:93:4a:1f:e6:28:0b:b4:49:6a:f8: 08:03:a1:b5:10:08:d2:0d:e5:80:a2:db:3a:08:46: 62:dc:68:f2:7c:e7:94:0a:1c:76:3c:69:74:ac:74: a0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:75:48:11:12:2F:02:22:73:AF:21:5C:D6:1D:9F:08:47:E0:36:38 X509v3 Authority Key Identifier: keyid:3C:45:CE:40:85:F0:2E:B8:A0:ED:1A:FD:2B:79:91:A8:AA:99:83:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:3b:48:dd:0d:0c:20:33:8a:36:a2:28:27:11:34:33:8e:e3: d8:9b:91:88:33:e3:87:67:b5:8e:42:1e:22:a3:7b:a3:24:46: 3e:6d:8d:d6:72:67:a1:5d:5f:7d:e4:a7:3e:3d:f5:73:98:fe: e3:83:26:0b:03:e2:65:3b:77:f2:1c:69:97:b1:8a:57:54:79: 52:83:1c:25:6c:83:b9:22:67:74:fa:96:f9:77:47:3c:55:ce: 30:fa:94:c2:21:86:f5:0b:44:d8:96:84:17:00:b3:d7:9c:0a: 62:5a:a6:e9:0d:72:f0:03:a3:4b:00:5a:a7:ec:ba:11:35:e4: da:0f:b3:be:8c:f6:8d:c2:ee:b0:d0:84:fc:8b:3f:c9:d5:73: 55:02:82:fe:37:83:e4:c7:bf:7a:6a:f7:7a:4a:57:d3:3d:b1: a9:f4:8d:6e:e2:d7:b9:df:26:9e:53:32:b7:46:6e:a7:5d:62: 69:17:c3:af:10:16:a2:05:64:c0:d3:39:c0:22:da:29:8d:86: 36:2f:27:ef:45:50:f7:bb:55:c9:c0:44:5e:e8:ca:13:83:09: 76:de:b1:d1:f0:d6:e1:81:a5:36:72:8d:14:b7:ac:2e:d5:62: 64:63:52:ea:38:4e:91:7d:79:59:be:bf:43:14:fb:1c:7c:22: 17:ce:30:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm3qFy+gQGKp8CzK6sL39MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjNDVjZTQwODVmMDJlYjhhMGVkMWFmZDJiNzk5MWE4YWE5 OTgzMzQwHhcNMjUxMjA2MDMwMTI5WhcNMjUxMjA3MDMwMTI5WjAzMTEwLwYDVQQD EygxMDc1NDgxMTEyMmYwMjIyNzNhZjIxNWNkNjFkOWYwODQ3ZTAzNjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5ljT5nI6CQAraT3YUUgIhYTNoPf b5/zvrUJx3ssXqGiHKalXGdIpQ7Dz78Qa90vh8qv87ak2qIwDfyW1krTTgMp802h Kj+CZkGrmw/wguWME1bmRjP7DQKag/A8zy0LwZpdZNNE/xeRR/QHZ0LlFiiaJ63e EUPu8AVOR171iVxi0iA8+Pt/B0igUTRwG53L/aIj6LXD3ACSyDr2odndj0c9QWvd l6TmDmDrETER24F3KTiKUSLWYpdvcH4T9vkeVa57mu0mssOknAYmGPAWTB5S2aQq HZNKH+YoC7RJavgIA6G1EAjSDeWAots6CEZi3GjyfOeUChx2PGl0rHSgcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBB1SBESLwIic68hXNYdnwhH4DY4MB8GA1UdIwQY MBaAFDxFzkCF8C64oO0a/St5kaiqmYM0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEVYT1FJWHdMcmlnN1JyOUszbVJxS3FaZ3pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS85NzMzNGEtYzk3Zi00N2M0LTk5ODIt ZDg2NzZhODBjZmM3LzEvUEVYT1FJWHdMcmlnN1JyOUszbVJxS3FaZ3pRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS85NzMzNGEtYzk3Zi00N2M0LTk5ODItZDg2NzZhODBjZmM3 LzEvUEVYT1FJWHdMcmlnN1JyOUszbVJxS3FaZ3pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaTtI3Q0M IDOKNqIoJxE0M47j2JuRiDPjh2e1jkIeIqN7oyRGPm2N1nJnoV1ffeSnPj31c5j+ 44MmCwPiZTt38hxpl7GKV1R5UoMcJWyDuSJndPqW+XdHPFXOMPqUwiGG9QtE2JaE FwCz15wKYlqm6Q1y8AOjSwBap+y6ETXk2g+zvoz2jcLusNCE/Is/ydVzVQKC/jeD 5Me/emr3ekpX0z2xqfSNbuLXud8mnlMyt0Zup11iaRfDrxAWogVkwNM5wCLaKY2G Ni8n70VQ97tVycBEXujKE4MJdt6x0fDW4YGlNnKNFLesLtViZGNS6jhOkX15Wb6/ QxT7HHwiF84wNA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:26 2025 by rpki-client