This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft File: PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft (raw, json) Hash identifier: CBLRWwQc4W6NGH6gXkVFpSEYWRAuxXNbn2TdbvyYGZE= Subject key identifier: 85:21:68:C3:AE:1F:AC:CE:94:49:E8:33:74:5E:8E:F8:AC:94:BD:2E Authority key identifier: 3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6 Certificate issuer: /CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6 Certificate serial: 019AF50B11C8FF22EB85CFE3B7F7EF63ECF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 19:02:14 +0000 Manifest this update: Sat 06 Dec 2025 19:02:14 +0000 Manifest next update: Sun 07 Dec 2025 19:02:14 +0000 Files and hashes: 1: PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl (hash: FY6fISLBHX3x9pLOYJ/LbJmyLLKr2j5guHm+y30oKFI=) 2: yxseiDrTDKkfKumKkJUQ-S699SM.roa (hash: jMn0qSGQuB1rlWwE3sPg8LRuW4ybf3WJJD6jW2FPlxo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:11:c8:ff:22:eb:85:cf:e3:b7:f7:ef:63:ec:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6 Validity Not Before: Dec 6 19:02:14 2025 GMT Not After : Dec 7 19:02:14 2025 GMT Subject: CN=852168c3ae1facce9449e833745e8ef8ac94bd2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a2:9a:ff:22:47:a9:e9:79:90:e0:78:81:b7: 14:25:3f:3c:d8:f0:fa:7e:01:28:bf:8a:cb:ce:f7: c9:d1:68:a9:a7:df:fe:20:fe:3a:19:eb:13:3b:0b: 67:79:0c:5f:4d:52:a9:ad:bc:ff:97:68:56:70:59: f6:11:3e:7b:ca:d5:de:81:34:5e:7f:bc:d2:f1:82: 51:5b:ef:c5:56:8e:3b:8e:5d:a8:27:2b:34:a0:d9: 2a:55:96:3e:22:ed:54:d7:67:f7:bf:da:e2:1a:6c: 97:37:f4:cd:b4:f8:2a:8a:7b:98:0d:a7:88:ed:c5: 87:49:29:84:ac:7f:b8:23:cf:34:8b:c5:e8:ef:b6: b3:85:65:2d:dc:ed:14:d6:4a:1c:8b:34:c6:63:26: 4d:83:57:e8:be:3b:3b:39:d3:2f:71:a5:38:64:83: e2:be:4c:f5:ac:fb:7e:72:7c:b4:1e:ee:cb:c7:5a: 75:e6:b2:2a:47:4b:0f:94:6b:ba:42:a3:f2:b0:84: 8a:23:30:71:30:41:5f:60:fc:24:70:a8:9f:4d:24: fa:c8:14:15:8b:d2:60:77:ed:cf:77:12:6f:36:e1: 8a:b1:c9:96:97:39:0e:5f:81:4e:9e:3e:ed:fe:30: cc:c7:c0:68:de:dd:12:49:79:30:a4:39:96:ab:9f: 5e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:21:68:C3:AE:1F:AC:CE:94:49:E8:33:74:5E:8E:F8:AC:94:BD:2E X509v3 Authority Key Identifier: keyid:3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:4a:bc:7d:ea:b2:7e:85:df:37:92:87:91:98:03:fa:9d:a5: cd:ea:5e:bb:ff:b9:07:c5:6a:25:85:4e:83:94:f4:f1:15:6f: 84:92:da:e0:39:86:4a:a1:fa:7f:24:4a:22:5c:19:9e:a2:ae: 4b:84:b5:53:54:0e:ae:fb:87:b2:36:6c:65:70:52:1c:51:cb: 91:43:43:5e:19:fc:55:bc:ef:ce:b2:dc:0a:a8:c2:12:65:9e: d6:3b:51:79:44:2b:d7:25:24:2f:f2:ba:31:1b:96:eb:f9:3c: 53:24:40:7c:19:31:9a:02:f0:d4:04:d6:df:84:47:a5:4f:42: 93:f4:ed:3a:14:25:e9:cb:2b:e0:31:92:3c:55:81:78:04:5a: 86:96:e1:b5:01:b1:d8:a3:7f:5e:3d:38:d7:fa:4f:86:7a:4b: 27:63:22:6e:e0:cf:ca:ab:8d:0b:bc:0d:b9:5a:bc:b0:88:4b: 13:90:0d:59:71:38:16:a7:64:18:57:d2:78:d2:9d:80:a2:61: 43:e5:f5:12:f7:f9:85:9f:37:a3:7c:ec:08:d2:45:e5:0d:3f: 3b:3c:d8:87:e5:1c:32:1d:57:b4:fa:ee:0c:e0:76:fb:f6:43: 68:59:8d:18:3a:19:ef:19:94:f5:1d:88:81:4d:cf:e3:1b:5d: 5b:b0:d6:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CxHI/yLrhc/jt/fvY+z1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjNGNmODgxNzc0NDJhNTRmMzIxYjhmYTgwYjZjZjVkZjQw NGNmZjYwHhcNMjUxMjA2MTkwMjE0WhcNMjUxMjA3MTkwMjE0WjAzMTEwLwYDVQQD Eyg4NTIxNjhjM2FlMWZhY2NlOTQ0OWU4MzM3NDVlOGVmOGFjOTRiZDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqKa/yJHqel5kOB4gbcUJT882PD6 fgEov4rLzvfJ0Wipp9/+IP46GesTOwtneQxfTVKprbz/l2hWcFn2ET57ytXegTRe f7zS8YJRW+/FVo47jl2oJys0oNkqVZY+Iu1U12f3v9riGmyXN/TNtPgqinuYDaeI 7cWHSSmErH+4I880i8Xo77azhWUt3O0U1kocizTGYyZNg1fovjs7OdMvcaU4ZIPi vkz1rPt+cny0Hu7Lx1p15rIqR0sPlGu6QqPysISKIzBxMEFfYPwkcKifTST6yBQV i9Jgd+3PdxJvNuGKscmWlzkOX4FOnj7t/jDMx8Bo3t0SSXkwpDmWq59edwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIUhaMOuH6zOlEnoM3RejvislL0uMB8GA1UdIwQY MBaAFDxM+IF3RCpU8yG4+oC2z130BM/2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEV6NGdYZEVLbFR6SWJqNmdMYlBYZlFFel9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8zYTQwYzAtMjQ3NS00ODE0LTg1NTkt NzAwZTMwMjdmNjIzLzEvUEV6NGdYZEVLbFR6SWJqNmdMYlBYZlFFel9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS8zYTQwYzAtMjQ3NS00ODE0LTg1NTktNzAwZTMwMjdmNjIz LzEvUEV6NGdYZEVLbFR6SWJqNmdMYlBYZlFFel9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyEq8feqy foXfN5KHkZgD+p2lzepeu/+5B8VqJYVOg5T08RVvhJLa4DmGSqH6fyRKIlwZnqKu S4S1U1QOrvuHsjZsZXBSHFHLkUNDXhn8VbzvzrLcCqjCEmWe1jtReUQr1yUkL/K6 MRuW6/k8UyRAfBkxmgLw1ATW34RHpU9Ck/TtOhQl6csr4DGSPFWBeARahpbhtQGx 2KN/Xj041/pPhnpLJ2MibuDPyquNC7wNuVq8sIhLE5ANWXE4FqdkGFfSeNKdgKJh Q+X1Evf5hZ83o3zsCNJF5Q0/OzzYh+UcMh1XtPruDOB2+/ZDaFmNGDoZ7xmU9R2I gU3P4xtdW7DWlg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:09:18 2025 by rpki-client