This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft File: PUJ2NzsED6msd-VmxbbN81tTuTc.mft (raw, json) Hash identifier: X4EUjIqBlfGsKm6c8tAiR8PsanGGEnHIvkktSSAjngc= Subject key identifier: C6:A7:94:8D:57:0C:7D:BE:DE:AC:CA:FF:E0:CC:F1:1E:30:E8:4C:6E Authority key identifier: 3D:42:76:37:3B:04:0F:A9:AC:77:E5:66:C5:B6:CD:F3:5B:53:B9:37 Certificate issuer: /CN=3d4276373b040fa9ac77e566c5b6cdf35b53b937 Certificate serial: 019AF20980C0952518C52BEC440289167747 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUJ2NzsED6msd-VmxbbN81tTuTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft Manifest number: 0643 Signing time: Sat 06 Dec 2025 05:01:40 +0000 Manifest this update: Sat 06 Dec 2025 05:01:40 +0000 Manifest next update: Sun 07 Dec 2025 05:01:40 +0000 Files and hashes: 1: JTpkIG2gAi87qZ4MaDyiSAhDmGs.roa (hash: pqYQEm9FQENA5hwqBQ6sbfRExLr5G9tm4QJ0ttI7KnA=) 2: PUJ2NzsED6msd-VmxbbN81tTuTc.crl (hash: 5PESj2jLalawdTtNNQeFHdrx7x3pK1nHFJZkN76OL8Q=) 3: p62oDeoT4vvUHo4yGegZ6_TWKY0.roa (hash: JITepKVcCtsEzEyKS9PibwaqvpfOsAJXxc4iERP2W4s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.crl rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft rsync://rpki.ripe.net/repository/DEFAULT/PUJ2NzsED6msd-VmxbbN81tTuTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:80:c0:95:25:18:c5:2b:ec:44:02:89:16:77:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d4276373b040fa9ac77e566c5b6cdf35b53b937 Validity Not Before: Dec 6 05:01:40 2025 GMT Not After : Dec 7 05:01:40 2025 GMT Subject: CN=c6a7948d570c7dbedeaccaffe0ccf11e30e84c6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:49:e1:1b:b0:78:37:7d:ed:bd:2a:46:60:4f: fe:25:04:68:5b:df:74:a0:91:20:e0:c2:75:fc:03: f3:a1:b7:f8:07:b0:d1:4e:56:33:37:d2:e2:3c:05: a6:03:1c:5f:b9:ae:13:3f:5d:5b:e0:6c:82:13:13: da:2a:ae:87:db:76:ba:5c:38:42:ae:cf:2f:78:ec: e4:c3:7d:ec:68:f8:3d:90:e5:85:b7:52:11:34:f8: da:72:6e:38:a9:5f:b9:25:f4:df:50:2d:4b:0d:49: c5:ff:74:5d:ee:93:33:d2:ae:93:eb:04:d4:06:a6: 08:aa:0e:9b:6b:fb:e2:44:1f:9a:39:71:1b:71:24: 05:3f:ef:77:d8:05:ee:5c:6a:82:0c:25:38:cb:1c: 93:a0:c0:87:12:b3:9c:be:69:2f:e2:f7:c0:05:9c: 15:99:11:a2:5a:11:54:9a:47:b5:78:17:ca:2c:11: 72:49:dc:cd:ca:ac:67:fe:77:b9:99:4b:17:b3:cf: 5f:89:2d:b1:44:bd:e9:4b:ba:f3:e3:ad:e9:d4:3e: cc:ca:9c:ee:ff:8c:ed:f7:af:91:79:d5:a3:ab:00: dc:07:a6:ac:3b:63:71:4b:12:58:eb:20:91:07:98: 54:5f:69:05:2a:a7:7f:3d:32:9f:92:5f:a6:c3:34: 49:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:A7:94:8D:57:0C:7D:BE:DE:AC:CA:FF:E0:CC:F1:1E:30:E8:4C:6E X509v3 Authority Key Identifier: keyid:3D:42:76:37:3B:04:0F:A9:AC:77:E5:66:C5:B6:CD:F3:5B:53:B9:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUJ2NzsED6msd-VmxbbN81tTuTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:21:65:ba:c6:0c:00:ac:db:cd:af:a3:94:30:ae:70:cd:e5: 5d:98:0b:75:a9:8e:aa:e4:9c:be:83:cb:91:54:7e:40:bf:30: fc:54:1b:46:59:ba:03:3d:da:69:97:c7:c7:5b:cd:fe:6b:70: 4d:f6:4f:7f:9f:dd:9a:c9:f0:5c:65:fe:81:29:7b:13:45:6b: a2:f7:39:62:45:ab:7b:e1:a9:7b:26:77:bc:da:e5:ad:a2:28: e7:59:3d:cc:2d:30:c0:22:0c:c3:66:02:fd:b5:dd:2c:87:7d: da:ba:d7:e2:95:93:66:67:d0:63:40:80:47:cb:3e:50:8b:53: d3:d9:31:5a:08:ce:9f:7f:93:2c:43:66:80:e3:2f:9f:3e:1e: 3e:d7:92:0d:ab:79:8a:5b:51:13:a6:f7:06:a8:9f:ec:3b:1f: 7a:39:f2:50:c4:0b:09:47:b6:11:0d:1e:f4:c3:61:b8:fc:3b: 3b:e6:4b:01:2b:48:e2:dd:ef:e9:22:aa:41:ed:d8:19:82:46: 63:e6:b1:98:b7:10:e8:2f:1e:4e:6a:87:00:1a:08:57:8e:bf: df:7b:aa:18:bd:9c:d8:b7:6a:ce:67:07:c3:64:6f:06:74:5a: df:a6:c9:ec:98:8a:7a:fb:c8:6e:db:80:3a:92:76:ca:35:1f: d8:9a:09:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCYDAlSUYxSvsRAKJFndHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkNDI3NjM3M2IwNDBmYTlhYzc3ZTU2NmM1YjZjZGYzNWI1 M2I5MzcwHhcNMjUxMjA2MDUwMTQwWhcNMjUxMjA3MDUwMTQwWjAzMTEwLwYDVQQD EyhjNmE3OTQ4ZDU3MGM3ZGJlZGVhY2NhZmZlMGNjZjExZTMwZTg0YzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3knhG7B4N33tvSpGYE/+JQRoW990 oJEg4MJ1/APzobf4B7DRTlYzN9LiPAWmAxxfua4TP11b4GyCExPaKq6H23a6XDhC rs8veOzkw33saPg9kOWFt1IRNPjacm44qV+5JfTfUC1LDUnF/3Rd7pMz0q6T6wTU BqYIqg6ba/viRB+aOXEbcSQFP+932AXuXGqCDCU4yxyToMCHErOcvmkv4vfABZwV mRGiWhFUmke1eBfKLBFySdzNyqxn/ne5mUsXs89fiS2xRL3pS7rz463p1D7Mypzu /4zt96+RedWjqwDcB6asO2NxSxJY6yCRB5hUX2kFKqd/PTKfkl+mwzRJaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFManlI1XDH2+3qzK/+DM8R4w6ExuMB8GA1UdIwQY MBaAFD1Cdjc7BA+prHflZsW2zfNbU7k3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFVKMk56c0VENm1zZC1WbXhiYk44MXRUdVRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9hMTlkNTEtMDdlNS00ZGI1LTlkMGUt NjZkMzE5OGJmMWEyLzEvUFVKMk56c0VENm1zZC1WbXhiYk44MXRUdVRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My9hMTlkNTEtMDdlNS00ZGI1LTlkMGUtNjZkMzE5OGJmMWEy LzEvUFVKMk56c0VENm1zZC1WbXhiYk44MXRUdVRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoiFlusYM AKzbza+jlDCucM3lXZgLdamOquScvoPLkVR+QL8w/FQbRlm6Az3aaZfHx1vN/mtw TfZPf5/dmsnwXGX+gSl7E0Vrovc5YkWre+GpeyZ3vNrlraIo51k9zC0wwCIMw2YC /bXdLId92rrX4pWTZmfQY0CAR8s+UItT09kxWgjOn3+TLENmgOMvnz4ePteSDat5 iltRE6b3Bqif7DsfejnyUMQLCUe2EQ0e9MNhuPw7O+ZLAStI4t3v6SKqQe3YGYJG Y+axmLcQ6C8eTmqHABoIV46/33uqGL2c2LdqzmcHw2RvBnRa36bJ7JiKevvIbtuA OpJ2yjUf2JoJlg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:53:32 2025 by rpki-client