This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.mft File: PsjCDmXc0z_4pePDCmRZJcXJ-V8.mft (raw, json) Hash identifier: 3w9DbDPVO5kclMHqaKY7CJMSVru7/z0TUM7Rl4qgEu0= Subject key identifier: B6:AB:4F:A2:CF:48:B5:0B:5F:82:2C:F2:CE:67:A8:5A:FF:3C:8A:02 Authority key identifier: 3E:C8:C2:0E:65:DC:D3:3F:F8:A5:E3:C3:0A:64:59:25:C5:C9:F9:5F Certificate issuer: /CN=3ec8c20e65dcd33ff8a5e3c30a645925c5c9f95f Certificate serial: 019B2BC194CA9E893C1DB5FD6447C00E27FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsjCDmXc0z_4pePDCmRZJcXJ-V8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.mft Manifest number: 1784 Signing time: Wed 17 Dec 2025 10:01:05 +0000 Manifest this update: Wed 17 Dec 2025 10:01:05 +0000 Manifest next update: Thu 18 Dec 2025 10:01:05 +0000 Files and hashes: 1: 2MDxMm-aOr9Av8UXOYCdSDY5SVw.roa (hash: e92Ni3UZiEOlX4qjyE83BJ38B3EV4PZWBH8ze8DKvoY=) 2: PsjCDmXc0z_4pePDCmRZJcXJ-V8.crl (hash: 03+vkoPN6gJRxC7Yh4SRg2tPj6OU1MWqfLJYxgjkIIw=) 3: egtzvRVazNe8WeEfcIG06LemmN8.roa (hash: TsV2yb4uCxxRnC/+s7mjRUpuNbVIbnDgtBTH7E4+YyE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.mft rsync://rpki.ripe.net/repository/DEFAULT/PsjCDmXc0z_4pePDCmRZJcXJ-V8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c1:94:ca:9e:89:3c:1d:b5:fd:64:47:c0:0e:27:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ec8c20e65dcd33ff8a5e3c30a645925c5c9f95f Validity Not Before: Dec 17 10:01:05 2025 GMT Not After : Dec 18 10:01:05 2025 GMT Subject: CN=b6ab4fa2cf48b50b5f822cf2ce67a85aff3c8a02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2f:00:c8:3d:e8:58:d7:fb:ad:ec:ed:32:b2: ef:da:7d:51:75:66:6e:12:c2:e1:73:56:ec:0d:c9: f4:af:ab:da:82:42:c5:4f:5b:33:c9:c9:69:ab:e2: 55:62:76:ad:1a:66:a5:c2:4d:f3:9e:b6:d3:5b:32: a2:6e:43:4e:1b:10:e8:c9:c1:f7:05:65:31:67:4e: 84:07:4f:cf:57:cc:2b:70:c4:b4:46:82:92:d9:92: 6e:4b:ae:e1:c1:94:59:bb:45:52:f3:69:74:c0:94: 1c:1b:36:d3:b1:e1:1e:18:07:4d:5d:11:03:ca:9e: c7:46:bd:31:1f:1c:1d:d8:e8:a8:19:0e:48:47:c2: d2:84:ee:ab:ff:46:aa:0d:57:ac:1d:3d:1e:0c:89: 95:26:b6:0d:7c:02:eb:94:ab:07:9e:f7:1e:0c:15: 35:8d:e3:3b:ec:4b:23:94:94:96:48:0b:75:c2:be: e4:d2:12:12:da:21:9a:88:63:34:e1:93:ed:ed:56: 51:53:d8:de:35:a6:55:5a:8d:da:56:8e:1c:69:59: a2:fa:8c:d3:3b:66:02:57:45:62:ad:3c:e7:64:17: f8:a1:bc:46:8d:aa:31:ad:51:50:56:d2:cd:8a:3f: ab:9b:dc:30:f1:47:fc:e7:74:dc:ab:8a:50:cf:e0: 5f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:AB:4F:A2:CF:48:B5:0B:5F:82:2C:F2:CE:67:A8:5A:FF:3C:8A:02 X509v3 Authority Key Identifier: keyid:3E:C8:C2:0E:65:DC:D3:3F:F8:A5:E3:C3:0A:64:59:25:C5:C9:F9:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsjCDmXc0z_4pePDCmRZJcXJ-V8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:11:62:ec:fc:76:0c:5d:40:2d:43:5b:98:55:b8:f5:75:9e: 61:af:45:06:8c:da:35:57:db:4a:fc:20:07:49:7e:c5:07:0d: 40:9b:df:77:10:0b:aa:2d:22:9d:e9:ae:72:27:eb:b8:1f:ca: f0:ed:15:7c:0d:3c:50:ab:c7:a3:36:a3:dc:15:95:21:0e:60: 72:03:90:82:57:02:90:6b:e9:69:f1:a6:69:c6:24:a2:61:d2: bb:6a:cf:e9:34:a2:35:71:6c:ca:59:9e:ac:4e:70:5e:ff:17: 92:83:01:b8:c3:c2:26:13:81:fa:84:de:ce:a9:23:fb:05:67: c3:05:19:0b:69:4b:3d:a6:9a:a8:88:ad:91:1a:f2:fa:b8:60: ee:ac:93:54:9f:80:b4:58:51:f9:fe:f2:4d:f3:98:68:c1:32: 4d:d9:fa:74:f0:19:fc:27:fc:47:d1:42:db:19:87:ad:9b:e0: 5e:83:34:c4:77:2e:cc:6c:96:44:f3:6c:f1:33:17:f3:6b:9d: 44:09:6f:c7:b0:28:18:b8:73:e1:5c:62:a4:05:d7:dd:03:ac: b5:9b:65:60:75:f0:0c:1c:32:90:bd:b8:47:3d:da:fe:d9:49: e3:d9:fa:a9:b2:9d:26:dc:00:c2:58:98:3c:d5:c7:b4:b8:5d: b5:97:5e:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrwZTKnok8HbX9ZEfADif/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYzhjMjBlNjVkY2QzM2ZmOGE1ZTNjMzBhNjQ1OTI1YzVj OWY5NWYwHhcNMjUxMjE3MTAwMTA1WhcNMjUxMjE4MTAwMTA1WjAzMTEwLwYDVQQD EyhiNmFiNGZhMmNmNDhiNTBiNWY4MjJjZjJjZTY3YTg1YWZmM2M4YTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyi8AyD3oWNf7reztMrLv2n1RdWZu EsLhc1bsDcn0r6vagkLFT1szyclpq+JVYnatGmalwk3znrbTWzKibkNOGxDoycH3 BWUxZ06EB0/PV8wrcMS0RoKS2ZJuS67hwZRZu0VS82l0wJQcGzbTseEeGAdNXRED yp7HRr0xHxwd2OioGQ5IR8LShO6r/0aqDVesHT0eDImVJrYNfALrlKsHnvceDBU1 jeM77EsjlJSWSAt1wr7k0hIS2iGaiGM04ZPt7VZRU9jeNaZVWo3aVo4caVmi+ozT O2YCV0VirTznZBf4obxGjaoxrVFQVtLNij+rm9ww8Uf853Tcq4pQz+BfnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLarT6LPSLULX4Is8s5nqFr/PIoCMB8GA1UdIwQY MBaAFD7Iwg5l3NM/+KXjwwpkWSXFyflfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHNqQ0RtWGMwel80cGVQRENtUlpKY1hKLVY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85M2Y2ZWUtMDVlYS00ZjMxLTlhZjYt ZGZjNWNjNjRhODFlLzEvUHNqQ0RtWGMwel80cGVQRENtUlpKY1hKLVY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS85M2Y2ZWUtMDVlYS00ZjMxLTlhZjYtZGZjNWNjNjRhODFl LzEvUHNqQ0RtWGMwel80cGVQRENtUlpKY1hKLVY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIhFi7Px2 DF1ALUNbmFW49XWeYa9FBozaNVfbSvwgB0l+xQcNQJvfdxALqi0inemucifruB/K 8O0VfA08UKvHozaj3BWVIQ5gcgOQglcCkGvpafGmacYkomHSu2rP6TSiNXFsylme rE5wXv8XkoMBuMPCJhOB+oTezqkj+wVnwwUZC2lLPaaaqIitkRry+rhg7qyTVJ+A tFhR+f7yTfOYaMEyTdn6dPAZ/Cf8R9FC2xmHrZvgXoM0xHcuzGyWRPNs8TMX82ud RAlvx7AoGLhz4VxipAXX3QOstZtlYHXwDBwykL24Rz3a/tlJ49n6qbKdJtwAwliY PNXHtLhdtZdeTg== -----END CERTIFICATE-----Generated at Wed Dec 17 18:31:43 2025 by rpki-client