This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.mft File: PE7ZQuXHQud7-5vrlU-HJTT1KEg.mft (raw, json) Hash identifier: Oqg3iqoDCw91xDj4rTAiYTOn5pZlMlCPIiFlJzfaQpY= Subject key identifier: 7A:19:62:23:8B:B3:73:A1:E8:47:1B:29:65:5D:1D:57:9F:CE:9D:86 Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48 Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848 Certificate serial: 019B342000D1D8363A349DF50DF888A043E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.mft Manifest number: 1257 Signing time: Fri 19 Dec 2025 01:01:11 +0000 Manifest this update: Fri 19 Dec 2025 01:01:11 +0000 Manifest next update: Sat 20 Dec 2025 01:01:11 +0000 Files and hashes: 1: PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl (hash: ZDQMIxeFSvTf8nF3v7UfOKtrPw+OBn2+pVm02Voxftw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.mft rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:20:00:d1:d8:36:3a:34:9d:f5:0d:f8:88:a0:43:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848 Validity Not Before: Dec 19 01:01:11 2025 GMT Not After : Dec 20 01:01:11 2025 GMT Subject: CN=7a1962238bb373a1e8471b29655d1d579fce9d86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d7:70:99:a6:6e:b6:89:9f:4b:42:4b:a6:a5: 43:28:8f:25:79:ef:31:e9:1b:3b:5e:a7:24:e7:0f: ee:93:04:9b:df:08:28:1d:fe:82:3a:f7:00:e6:ba: 19:8e:07:34:38:8a:a8:dc:99:34:05:ab:b4:9d:da: 8d:08:1f:ea:2c:a4:84:73:af:f8:0a:83:2e:3e:fb: 3e:59:79:2c:91:a0:a0:69:80:91:92:eb:15:ff:d7: da:7a:fc:ac:a6:47:f1:0c:e1:35:9d:e0:2d:c6:d5: a5:db:bb:1e:53:8f:94:2f:db:a1:03:c1:06:3d:79: be:ec:18:70:f7:86:cb:c8:e6:b1:18:8b:30:d3:70: e7:91:3a:d1:1e:1a:60:35:3a:41:32:f7:fc:0f:80: 60:d2:7f:46:50:86:ac:c2:c7:50:9b:12:39:d3:d7: cf:df:ed:3c:e3:25:13:d0:34:5b:09:1f:5e:2b:95: 59:0e:ba:07:96:ad:fd:42:4a:70:a2:72:23:c7:a9: 64:91:98:37:a7:57:04:71:17:3f:f5:47:b6:a6:fe: 10:09:19:67:2b:6a:1e:c8:bf:b2:d9:ff:b9:d9:02: a0:f9:bd:fe:06:56:98:f0:4e:cc:45:2d:4a:07:e4: 88:60:0c:33:59:ea:f1:c9:aa:06:3c:12:dc:07:9c: 04:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:19:62:23:8B:B3:73:A1:E8:47:1B:29:65:5D:1D:57:9F:CE:9D:86 X509v3 Authority Key Identifier: keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:34:ab:94:0e:66:7f:2a:3b:bf:2c:6b:05:9d:fb:f7:f1:fb: d2:74:80:3e:c7:f7:cb:ff:c6:a5:64:b4:23:e4:d0:63:75:1c: d9:ef:de:a3:08:6d:ba:37:73:0e:4d:2d:1c:ba:98:79:28:32: 99:19:a8:5c:d6:5f:ce:0a:94:b9:61:6c:69:18:cd:60:1d:79: 3d:15:76:ef:d5:7f:f2:c0:98:13:b5:01:5e:b8:79:f8:9a:d3: af:e1:25:e1:83:e9:30:b6:c1:82:ce:e2:39:9e:8a:e5:99:11: 81:eb:9e:2c:9e:48:c0:47:42:8c:92:0f:58:d6:f1:4e:73:c9: f0:ba:3b:0e:9e:21:8a:67:83:70:75:65:e4:68:5e:ad:a6:21: 96:46:1c:f6:35:a6:ef:08:e6:0c:1c:0d:de:7f:36:ca:9b:20: 4e:69:58:b9:12:55:a9:d7:d7:b0:f1:4e:fd:ee:4a:35:71:bd: 8d:7e:44:2d:d4:b8:0c:ee:62:d9:6b:bb:6d:1d:f5:24:85:d2: 2c:34:19:0e:b0:5a:a3:e4:7e:96:8c:1e:22:fe:10:f5:63:f7: 55:31:18:e4:2f:9e:8b:0e:c8:09:5e:74:eb:e7:74:78:6f:eb: a0:86:5b:2f:b6:7a:05:1e:61:a8:70:38:fb:ff:d6:e6:c8:d1: 73:8b:47:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0IADR2DY6NJ31DfiIoEPkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjNGVkOTQyZTVjNzQyZTc3YmZiOWJlYjk1NGY4NzI1MzRm NTI4NDgwHhcNMjUxMjE5MDEwMTExWhcNMjUxMjIwMDEwMTExWjAzMTEwLwYDVQQD Eyg3YTE5NjIyMzhiYjM3M2ExZTg0NzFiMjk2NTVkMWQ1NzlmY2U5ZDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxddwmaZutomfS0JLpqVDKI8lee8x 6Rs7Xqck5w/ukwSb3wgoHf6COvcA5roZjgc0OIqo3Jk0Bau0ndqNCB/qLKSEc6/4 CoMuPvs+WXkskaCgaYCRkusV/9faevyspkfxDOE1neAtxtWl27seU4+UL9uhA8EG PXm+7Bhw94bLyOaxGIsw03DnkTrRHhpgNTpBMvf8D4Bg0n9GUIaswsdQmxI509fP 3+084yUT0DRbCR9eK5VZDroHlq39QkpwonIjx6lkkZg3p1cEcRc/9Ue2pv4QCRln K2oeyL+y2f+52QKg+b3+BlaY8E7MRS1KB+SIYAwzWerxyaoGPBLcB5wEdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHoZYiOLs3Oh6EcbKWVdHVefzp2GMB8GA1UdIwQY MBaAFDxO2ULlx0Lne/ub65VPhyU09ShIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEU3WlF1WEhRdWQ3LTV2cmxVLUhKVFQxS0VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8xYmI0NWEtNTUxYy00OTY3LTk1Y2Et NzczNDRiY2M5MTkxLzEvUEU3WlF1WEhRdWQ3LTV2cmxVLUhKVFQxS0VnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8xYmI0NWEtNTUxYy00OTY3LTk1Y2EtNzczNDRiY2M5MTkx LzEvUEU3WlF1WEhRdWQ3LTV2cmxVLUhKVFQxS0VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmTSrlA5m fyo7vyxrBZ379/H70nSAPsf3y//GpWS0I+TQY3Uc2e/eowhtujdzDk0tHLqYeSgy mRmoXNZfzgqUuWFsaRjNYB15PRV279V/8sCYE7UBXrh5+JrTr+El4YPpMLbBgs7i OZ6K5ZkRgeueLJ5IwEdCjJIPWNbxTnPJ8Lo7Dp4himeDcHVl5GheraYhlkYc9jWm 7wjmDBwN3n82ypsgTmlYuRJVqdfXsPFO/e5KNXG9jX5ELdS4DO5i2Wu7bR31JIXS LDQZDrBao+R+loweIv4Q9WP3VTEY5C+eiw7ICV506+d0eG/roIZbL7Z6BR5hqHA4 +//W5sjRc4tH5Q== -----END CERTIFICATE-----Generated at Fri Dec 19 05:47:31 2025 by rpki-client