This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.mft File: pTJy83vudp-iPqZUueOPsCNGjZI.mft (raw, json) Hash identifier: 9pw9TBVLOq19Z/nJPdsysRvpxkhh0Ggb1bGd03tNvOA= Subject key identifier: 78:7D:02:15:27:EA:B2:BC:0F:5D:EC:AF:F8:C4:3F:71:F5:80:4C:D5 Authority key identifier: A5:32:72:F3:7B:EE:76:9F:A2:3E:A6:54:B9:E3:8F:B0:23:46:8D:92 Certificate issuer: /CN=a53272f37bee769fa23ea654b9e38fb023468d92 Certificate serial: 019AF23F9FC00BBEFE5A99D7E460096C7228 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTJy83vudp-iPqZUueOPsCNGjZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.mft Manifest number: 0317 Signing time: Sat 06 Dec 2025 06:00:47 +0000 Manifest this update: Sat 06 Dec 2025 06:00:47 +0000 Manifest next update: Sun 07 Dec 2025 06:00:47 +0000 Files and hashes: 1: kl_zb47rnd8AaAP4vBoCuK61hPA.roa (hash: e2T6+pFfv8tCYwWL0QcrJLWjz1NsTR4Qy2fxVQvCN8Q=) 2: pTJy83vudp-iPqZUueOPsCNGjZI.crl (hash: s3YIdKw3na3DthvxeCkGQq76WlP19/60iQuPLLNkx9g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.crl rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.mft rsync://rpki.ripe.net/repository/DEFAULT/pTJy83vudp-iPqZUueOPsCNGjZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:9f:c0:0b:be:fe:5a:99:d7:e4:60:09:6c:72:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53272f37bee769fa23ea654b9e38fb023468d92 Validity Not Before: Dec 6 06:00:47 2025 GMT Not After : Dec 7 06:00:47 2025 GMT Subject: CN=787d021527eab2bc0f5decaff8c43f71f5804cd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4d:c5:5a:7e:50:97:16:db:9e:06:bd:c0:ab: 62:07:53:9a:84:30:eb:41:16:24:43:e7:b1:84:5c: 92:00:fd:5a:21:34:7b:5c:cc:68:a4:ef:3c:1d:2a: e2:3f:03:02:1c:09:be:94:3e:7e:86:7d:1d:71:f3: 3e:01:13:41:64:27:04:2f:96:73:d0:60:f7:eb:70: 64:3e:ee:45:48:43:bf:3f:d8:6a:d5:0e:78:ea:bc: b8:01:23:ad:a8:13:5a:2c:ae:72:98:ba:b2:40:40: d6:3b:0f:07:99:ee:e7:b8:ad:27:b0:c2:7d:fc:13: 7f:35:1d:7e:80:06:e2:cd:83:0c:83:1c:4c:be:73: 61:2c:ad:c4:0c:d4:db:6e:cb:f4:5b:f5:bb:e2:29: 0a:d5:5b:15:ba:42:ba:50:3e:a7:27:48:1e:c3:86: 81:cf:d6:44:01:a8:a3:88:b2:99:66:58:d2:01:a3: d8:68:a8:d8:5d:29:97:df:97:a7:07:73:9d:1f:39: 69:71:6d:80:be:b8:64:36:b5:21:58:23:65:7f:46: 40:cf:6a:a2:b3:1a:06:b5:0a:a5:ac:d5:70:94:b7: 9e:7b:79:49:06:ca:a3:57:a0:dd:2e:d6:94:2c:3a: 9b:d1:8d:08:d6:0a:a9:b6:f9:cf:97:43:52:ca:15: ce:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:7D:02:15:27:EA:B2:BC:0F:5D:EC:AF:F8:C4:3F:71:F5:80:4C:D5 X509v3 Authority Key Identifier: keyid:A5:32:72:F3:7B:EE:76:9F:A2:3E:A6:54:B9:E3:8F:B0:23:46:8D:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTJy83vudp-iPqZUueOPsCNGjZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:fc:45:0c:cb:45:03:5f:32:d4:7c:3a:3d:5f:9c:1b:8e:12: 11:df:89:a7:86:1a:ba:35:37:7a:d0:59:6d:89:d8:a3:19:21: f8:2a:30:83:6e:2e:23:56:09:2e:fe:fb:ad:7e:4f:70:9e:b3: 3e:4c:58:68:04:56:e3:6a:0c:f3:08:ab:c8:32:40:5c:fb:ab: f9:7d:5f:fb:61:7a:7d:b0:7f:bb:ab:49:03:56:5a:fe:7f:7e: 97:ae:19:6d:d4:3b:e7:33:6b:50:24:87:b8:5a:4c:19:d8:bf: 18:e9:ca:fc:5b:ca:d0:91:81:30:0b:a3:d8:3a:72:28:98:d5: 97:9f:dc:a3:db:f8:64:58:ab:31:1a:a7:fa:5a:b9:49:d1:f3: a9:92:85:f5:d3:e1:df:15:b9:de:8a:60:80:1d:ef:6d:f2:ca: 46:d3:fb:59:5d:06:2d:26:9c:13:62:be:e2:8b:84:58:6d:4f: 9d:eb:1d:fd:eb:5d:3a:dd:6d:2e:2c:7b:fd:ac:14:ce:95:5a: 6e:ac:d6:6d:bd:3b:77:e4:31:cd:35:9c:07:d3:03:66:c3:4a: 05:4c:63:03:bf:23:3b:28:df:c7:72:14:e9:88:df:26:17:08: 40:3b:00:34:3a:76:02:5a:70:9e:56:ad:89:99:a3:8b:9f:d7: 63:6c:50:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP5/AC77+WpnX5GAJbHIoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MzI3MmYzN2JlZTc2OWZhMjNlYTY1NGI5ZTM4ZmIwMjM0 NjhkOTIwHhcNMjUxMjA2MDYwMDQ3WhcNMjUxMjA3MDYwMDQ3WjAzMTEwLwYDVQQD Eyg3ODdkMDIxNTI3ZWFiMmJjMGY1ZGVjYWZmOGM0M2Y3MWY1ODA0Y2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw03FWn5Qlxbbnga9wKtiB1OahDDr QRYkQ+exhFySAP1aITR7XMxopO88HSriPwMCHAm+lD5+hn0dcfM+ARNBZCcEL5Zz 0GD363BkPu5FSEO/P9hq1Q546ry4ASOtqBNaLK5ymLqyQEDWOw8Hme7nuK0nsMJ9 /BN/NR1+gAbizYMMgxxMvnNhLK3EDNTbbsv0W/W74ikK1VsVukK6UD6nJ0gew4aB z9ZEAaijiLKZZljSAaPYaKjYXSmX35enB3OdHzlpcW2AvrhkNrUhWCNlf0ZAz2qi sxoGtQqlrNVwlLeee3lJBsqjV6DdLtaULDqb0Y0I1gqptvnPl0NSyhXOVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHh9AhUn6rK8D13sr/jEP3H1gEzVMB8GA1UdIwQY MBaAFKUycvN77nafoj6mVLnjj7AjRo2SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFRKeTgzdnVkcC1pUHFaVXVlT1BzQ05HalpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9mM2YwNmQtNGIyNy00OTgxLTk1YzYt MmY1NmE1YTlhNzU2LzEvcFRKeTgzdnVkcC1pUHFaVXVlT1BzQ05HalpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9mM2YwNmQtNGIyNy00OTgxLTk1YzYtMmY1NmE1YTlhNzU2 LzEvcFRKeTgzdnVkcC1pUHFaVXVlT1BzQ05HalpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZPxFDMtF A18y1Hw6PV+cG44SEd+Jp4YaujU3etBZbYnYoxkh+Cowg24uI1YJLv77rX5PcJ6z PkxYaARW42oM8wiryDJAXPur+X1f+2F6fbB/u6tJA1Za/n9+l64ZbdQ75zNrUCSH uFpMGdi/GOnK/FvK0JGBMAuj2DpyKJjVl5/co9v4ZFirMRqn+lq5SdHzqZKF9dPh 3xW53opggB3vbfLKRtP7WV0GLSacE2K+4ouEWG1Pnesd/etdOt1tLix7/awUzpVa bqzWbb07d+QxzTWcB9MDZsNKBUxjA78jOyjfx3IU6YjfJhcIQDsANDp2Alpwnlat iZmji5/XY2xQ3g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:14:46 2025 by rpki-client