This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft File: PUJ2NzsED6msd-VmxbbN81tTuTc.mft (raw, json) Hash identifier: diHvCWIv5ItwAR3Koo5e9ORPnbitsVRHrv8m1P0CFXQ= Subject key identifier: B6:3C:33:77:CF:17:40:93:69:AB:B5:AE:44:2B:EC:21:CE:16:2A:57 Authority key identifier: 3D:42:76:37:3B:04:0F:A9:AC:77:E5:66:C5:B6:CD:F3:5B:53:B9:37 Certificate issuer: /CN=3d4276373b040fa9ac77e566c5b6cdf35b53b937 Certificate serial: 019B225129D3A0643622181ADA277186AE7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUJ2NzsED6msd-VmxbbN81tTuTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft Manifest number: 065C Signing time: Mon 15 Dec 2025 14:01:43 +0000 Manifest this update: Mon 15 Dec 2025 14:01:43 +0000 Manifest next update: Tue 16 Dec 2025 14:01:43 +0000 Files and hashes: 1: JTpkIG2gAi87qZ4MaDyiSAhDmGs.roa (hash: pqYQEm9FQENA5hwqBQ6sbfRExLr5G9tm4QJ0ttI7KnA=) 2: PUJ2NzsED6msd-VmxbbN81tTuTc.crl (hash: 3u5RUf16JOhwfpStkjz9C9pCM8iybNZLAosj2U+Og2I=) 3: p62oDeoT4vvUHo4yGegZ6_TWKY0.roa (hash: JITepKVcCtsEzEyKS9PibwaqvpfOsAJXxc4iERP2W4s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.crl rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft rsync://rpki.ripe.net/repository/DEFAULT/PUJ2NzsED6msd-VmxbbN81tTuTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:51:29:d3:a0:64:36:22:18:1a:da:27:71:86:ae:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d4276373b040fa9ac77e566c5b6cdf35b53b937 Validity Not Before: Dec 15 14:01:43 2025 GMT Not After : Dec 16 14:01:43 2025 GMT Subject: CN=b63c3377cf17409369abb5ae442bec21ce162a57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:01:8b:1b:a7:39:dc:06:53:c3:52:de:eb:34: 3e:0c:39:f8:17:fe:41:83:52:02:31:78:13:68:ad: c7:00:e2:10:e5:dc:e6:8f:75:6c:7a:2f:2e:aa:34: 5f:0d:d8:be:49:b5:a4:67:d8:ea:8d:c6:96:e9:db: a7:57:9a:3e:fa:7a:38:4f:e7:49:d0:66:35:3c:28: 9d:89:5d:c8:8e:de:18:d7:cf:dc:cc:84:9e:bf:c7: 01:c1:9a:d4:05:8c:21:03:a6:38:36:09:e3:3e:4c: c8:42:3e:85:bb:1c:7e:1b:32:aa:0e:ed:96:ce:4d: 0d:71:59:9a:fa:c8:b8:55:3d:3e:3c:ee:2a:85:ee: 99:b5:18:a6:c8:18:8d:d7:95:b2:bc:bb:d9:fb:e4: 9d:39:78:2c:47:9d:78:1f:33:15:87:fc:04:a5:c5: b0:e3:c1:b8:58:bf:3e:66:b2:05:ed:ab:aa:b5:fb: f4:8f:d7:35:5f:61:e0:aa:6d:ed:64:d5:72:33:b5: 54:85:7c:b0:8d:82:d3:ab:e3:ac:76:06:2d:05:15: ea:0e:11:21:36:ae:b7:0e:df:39:6f:d5:5b:20:90: 5e:93:ad:74:be:6b:5f:6f:a7:bd:fb:07:c5:14:7e: 21:fd:4a:eb:66:86:fc:51:8e:70:ff:87:4b:bb:e9: db:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:3C:33:77:CF:17:40:93:69:AB:B5:AE:44:2B:EC:21:CE:16:2A:57 X509v3 Authority Key Identifier: keyid:3D:42:76:37:3B:04:0F:A9:AC:77:E5:66:C5:B6:CD:F3:5B:53:B9:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUJ2NzsED6msd-VmxbbN81tTuTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:35:8c:6d:7b:8c:ed:5c:f7:7a:ba:f3:4c:b1:d0:6b:c0:da: 8d:60:fb:0a:de:c2:f3:af:b3:c1:ee:5c:5a:be:32:f2:b9:e3: 70:c4:c9:60:9e:2f:91:d3:93:ad:f5:7d:b7:ad:3b:ce:ea:16: cf:82:fd:51:dd:3b:d1:ca:e2:66:c3:c9:ce:30:89:e5:b8:79: 62:97:dd:a4:80:ec:fe:d7:c5:4e:1a:3e:a7:a4:bb:21:7d:7e: 8b:48:da:ec:ef:d7:4c:23:89:10:58:21:69:64:09:aa:09:12: 84:cf:2d:69:0b:e2:ab:04:2e:8f:06:7a:91:3e:16:ac:ed:db: 0f:67:28:08:36:38:77:ed:8b:d3:db:58:6d:75:d0:cf:2e:bb: 49:08:f6:7c:3c:ce:ce:6a:ab:23:80:cb:34:66:5c:79:98:4b: ac:2d:c4:d2:fa:05:82:02:f1:69:38:50:f5:c1:ad:a9:8b:18: da:ca:b5:c2:04:34:00:b9:d9:d1:92:08:fc:dd:9c:32:e6:38: 46:72:5f:d7:52:a6:1c:ac:36:c7:f1:41:0f:25:7e:6a:9a:ec: cd:32:7c:8f:b9:07:ad:16:5e:4c:78:94:85:ff:9a:14:22:5d: ac:cd:7b:7d:94:03:c3:f7:a3:78:c9:bd:5c:f6:0e:82:21:40: 42:97:54:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiUSnToGQ2Ihga2idxhq5+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkNDI3NjM3M2IwNDBmYTlhYzc3ZTU2NmM1YjZjZGYzNWI1 M2I5MzcwHhcNMjUxMjE1MTQwMTQzWhcNMjUxMjE2MTQwMTQzWjAzMTEwLwYDVQQD EyhiNjNjMzM3N2NmMTc0MDkzNjlhYmI1YWU0NDJiZWMyMWNlMTYyYTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAGLG6c53AZTw1Le6zQ+DDn4F/5B g1ICMXgTaK3HAOIQ5dzmj3Vsei8uqjRfDdi+SbWkZ9jqjcaW6dunV5o++no4T+dJ 0GY1PCidiV3Ijt4Y18/czISev8cBwZrUBYwhA6Y4NgnjPkzIQj6Fuxx+GzKqDu2W zk0NcVma+si4VT0+PO4qhe6ZtRimyBiN15WyvLvZ++SdOXgsR514HzMVh/wEpcWw 48G4WL8+ZrIF7auqtfv0j9c1X2Hgqm3tZNVyM7VUhXywjYLTq+OsdgYtBRXqDhEh Nq63Dt85b9VbIJBek610vmtfb6e9+wfFFH4h/UrrZob8UY5w/4dLu+nbcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLY8M3fPF0CTaau1rkQr7CHOFipXMB8GA1UdIwQY MBaAFD1Cdjc7BA+prHflZsW2zfNbU7k3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFVKMk56c0VENm1zZC1WbXhiYk44MXRUdVRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9hMTlkNTEtMDdlNS00ZGI1LTlkMGUt NjZkMzE5OGJmMWEyLzEvUFVKMk56c0VENm1zZC1WbXhiYk44MXRUdVRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My9hMTlkNTEtMDdlNS00ZGI1LTlkMGUtNjZkMzE5OGJmMWEy LzEvUFVKMk56c0VENm1zZC1WbXhiYk44MXRUdVRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQDWMbXuM 7Vz3errzTLHQa8DajWD7Ct7C86+zwe5cWr4y8rnjcMTJYJ4vkdOTrfV9t607zuoW z4L9Ud070criZsPJzjCJ5bh5YpfdpIDs/tfFTho+p6S7IX1+i0ja7O/XTCOJEFgh aWQJqgkShM8taQviqwQujwZ6kT4WrO3bD2coCDY4d+2L09tYbXXQzy67SQj2fDzO zmqrI4DLNGZceZhLrC3E0voFggLxaThQ9cGtqYsY2sq1wgQ0ALnZ0ZII/N2cMuY4 RnJf11KmHKw2x/FBDyV+aprszTJ8j7kHrRZeTHiUhf+aFCJdrM17fZQDw/ejeMm9 XPYOgiFAQpdUhQ== -----END CERTIFICATE-----Generated at Mon Dec 15 20:17:17 2025 by rpki-client