This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft File: PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft (raw, json) Hash identifier: oTW32ihTJkrkAyw2tFc7htpmupxKrXrwUty8/F0dWYw= Subject key identifier: 5A:18:7F:B2:59:5E:DA:B2:6A:E8:3C:BF:3A:A4:AA:68:A3:8E:0F:32 Authority key identifier: 3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35 Certificate issuer: /CN=3cc94ff479778651a605121f1ffe678196328f35 Certificate serial: 019AF23F7F459C0D28A3E9B27173BA5B290E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 06:00:38 +0000 Manifest this update: Sat 06 Dec 2025 06:00:38 +0000 Manifest next update: Sun 07 Dec 2025 06:00:38 +0000 Files and hashes: 1: CahBkkjIRD5RSAyC_TG87QI2fzc.roa (hash: xwWB2SdIUKCzemaOm29fIJHDchBB//Ii3x59COqFn54=) 2: PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl (hash: /dGWdVmk4PvZh9Qu5pWc7Oq81FQ4lHJ0sFWsOY9c/MA=) 3: j4vYQ759MLoLj0cN0zuQjHrzqiw.roa (hash: uApwJtUDHaWf6V3ibkhcekhPd8rOwJMJCw2CtVWuA6s=) 4: mXcskRJTzyB3nxmoygHfU8qKFgw.roa (hash: uQEoqefAcfOcPTcbOqYeFxWZJNwhk/YLJx7Ey5o+17w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:7f:45:9c:0d:28:a3:e9:b2:71:73:ba:5b:29:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cc94ff479778651a605121f1ffe678196328f35 Validity Not Before: Dec 6 06:00:38 2025 GMT Not After : Dec 7 06:00:38 2025 GMT Subject: CN=5a187fb2595edab26ae83cbf3aa4aa68a38e0f32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:69:e0:e2:db:f1:fe:db:ac:eb:71:0c:be:e1: 64:4e:3a:b2:60:cb:90:ba:8b:93:b5:59:bb:30:62: 1f:65:78:e4:8c:cb:97:33:ca:73:72:f1:74:59:67: 31:6e:72:be:ef:8e:93:97:cb:87:7f:57:4b:5b:7e: 45:5d:84:89:28:04:b9:7c:d6:34:23:77:44:f4:b6: 4a:fa:6c:ee:1b:a3:96:d7:bb:cb:2a:b4:c2:f5:76: 5e:ec:6b:69:24:9d:0c:02:96:a3:45:e2:74:76:e9: b1:c0:7d:bb:e0:08:68:2e:6d:cf:bf:71:69:6c:f9: 25:ba:a7:1c:c7:a3:c8:e8:f3:e5:eb:34:84:3c:34: dd:a4:b8:d3:63:77:55:ca:d2:9a:f4:c5:5f:0d:bf: d5:d9:c6:0b:62:e0:7e:b4:12:ab:c7:53:5c:af:7f: 75:15:4c:ae:b4:61:eb:71:9a:2d:d9:46:4e:b6:1c: 12:96:e2:04:70:b0:b9:f9:73:78:20:6c:b3:f0:ea: df:6e:18:14:ba:99:d8:76:dd:3d:17:25:d4:f5:39: 62:08:ca:3e:1c:e8:9c:5f:67:fc:af:62:4d:94:41: be:6a:45:e2:6e:71:d0:06:83:fd:86:39:9d:43:3c: 22:25:39:fe:5c:39:7e:1e:5a:f5:4d:b7:6e:45:06: 99:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:18:7F:B2:59:5E:DA:B2:6A:E8:3C:BF:3A:A4:AA:68:A3:8E:0F:32 X509v3 Authority Key Identifier: keyid:3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:9a:a2:24:4e:df:4e:16:63:71:ed:71:4c:ac:da:6a:83:67: 4f:5e:85:69:b3:07:7d:f6:f3:d2:61:6d:a9:7a:c2:8a:f9:59: b7:17:38:ea:03:c2:27:1d:d5:48:ad:8a:84:7c:17:15:ab:b0: 81:24:0e:46:97:11:de:fe:74:86:82:9c:14:d0:a9:1c:a5:46: b6:aa:c7:02:9b:59:7d:84:23:85:b2:ec:67:c9:33:a2:84:01: 52:b9:fe:20:6f:c0:29:62:3e:e1:11:ec:23:b9:ec:17:ae:9b: 02:3a:09:c1:1b:1d:d9:63:10:63:d4:a4:53:83:d6:f0:8c:91: a6:5f:34:47:fe:3f:49:d5:86:db:0c:ba:e9:59:4e:d0:a8:ad: ff:10:a0:49:5d:77:64:e7:c3:83:23:a4:61:22:30:28:8b:1d: 0e:22:d6:0b:47:fe:0e:22:f8:d0:84:8e:76:f0:98:79:3a:fd: 98:4d:b2:f5:6b:47:28:cd:f3:72:0d:23:5b:e0:ff:01:f7:9b: 36:e9:9c:f8:b4:47:54:e0:87:35:03:85:7c:7a:5c:df:2a:39: 5a:b6:6b:9e:c0:03:9f:64:4d:3e:99:a2:f8:16:48:3f:67:9a: ca:80:b3:e6:e4:98:bd:13:2f:50:3c:8a:8f:5d:f6:03:a0:ec: 16:42:d3:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP39FnA0oo+mycXO6WykOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjYzk0ZmY0Nzk3Nzg2NTFhNjA1MTIxZjFmZmU2NzgxOTYz MjhmMzUwHhcNMjUxMjA2MDYwMDM4WhcNMjUxMjA3MDYwMDM4WjAzMTEwLwYDVQQD Eyg1YTE4N2ZiMjU5NWVkYWIyNmFlODNjYmYzYWE0YWE2OGEzOGUwZjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWng4tvx/tus63EMvuFkTjqyYMuQ uouTtVm7MGIfZXjkjMuXM8pzcvF0WWcxbnK+746Tl8uHf1dLW35FXYSJKAS5fNY0 I3dE9LZK+mzuG6OW17vLKrTC9XZe7GtpJJ0MApajReJ0dumxwH274AhoLm3Pv3Fp bPkluqccx6PI6PPl6zSEPDTdpLjTY3dVytKa9MVfDb/V2cYLYuB+tBKrx1Ncr391 FUyutGHrcZot2UZOthwSluIEcLC5+XN4IGyz8OrfbhgUupnYdt09FyXU9TliCMo+ HOicX2f8r2JNlEG+akXibnHQBoP9hjmdQzwiJTn+XDl+Hlr1TbduRQaZ+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFoYf7JZXtqyaug8vzqkqmijjg8yMB8GA1UdIwQY MBaAFDzJT/R5d4ZRpgUSHx/+Z4GWMo81MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUE1sUDlIbDNobEdtQlJJZkhfNW5nWll5anpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8xZTYzYjYtMzk1Ni00ZDEyLWIxOWYt NWJlZjY0MjBhMDI4LzEvUE1sUDlIbDNobEdtQlJJZkhfNW5nWll5anpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8xZTYzYjYtMzk1Ni00ZDEyLWIxOWYtNWJlZjY0MjBhMDI4 LzEvUE1sUDlIbDNobEdtQlJJZkhfNW5nWll5anpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB5qiJE7f ThZjce1xTKzaaoNnT16FabMHffbz0mFtqXrCivlZtxc46gPCJx3VSK2KhHwXFauw gSQORpcR3v50hoKcFNCpHKVGtqrHAptZfYQjhbLsZ8kzooQBUrn+IG/AKWI+4RHs I7nsF66bAjoJwRsd2WMQY9SkU4PW8IyRpl80R/4/SdWG2wy66VlO0Kit/xCgSV13 ZOfDgyOkYSIwKIsdDiLWC0f+DiL40ISOdvCYeTr9mE2y9WtHKM3zcg0jW+D/Afeb Numc+LRHVOCHNQOFfHpc3yo5WrZrnsADn2RNPpmi+BZIP2eayoCz5uSYvRMvUDyK j132A6DsFkLTLw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:30 2025 by rpki-client