This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.mft File: PmxFIHWfOk74uamifiUzznMsVBE.mft (raw, json) Hash identifier: H+zbv5j4kMgjhgwNUoKOSgvOfJOuRs04mdmWaMnB0VM= Subject key identifier: AA:DB:6D:89:F7:9E:C7:F6:EC:81:95:74:45:89:80:F8:5E:91:6A:F2 Authority key identifier: 3E:6C:45:20:75:9F:3A:4E:F8:B9:A9:A2:7E:25:33:CE:73:2C:54:11 Certificate issuer: /CN=3e6c4520759f3a4ef8b9a9a27e2533ce732c5411 Certificate serial: 019AF12D4E2B2A3CEAF68ACEC35D293EB2D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmxFIHWfOk74uamifiUzznMsVBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 01:01:09 +0000 Manifest this update: Sat 06 Dec 2025 01:01:09 +0000 Manifest next update: Sun 07 Dec 2025 01:01:09 +0000 Files and hashes: 1: PmxFIHWfOk74uamifiUzznMsVBE.crl (hash: tSyod4bxDFFl8b+XNM5Q+ypGbC8yxJAPhoSSxtcBqzo=) 2: f62uVetw4VLEAcyA7iUss0CmbKk.roa (hash: KfBTV0RaWF6oQ2oIYy/lZbeXGP7Rdv40K79+xRa2szk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.crl rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.mft rsync://rpki.ripe.net/repository/DEFAULT/PmxFIHWfOk74uamifiUzznMsVBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:4e:2b:2a:3c:ea:f6:8a:ce:c3:5d:29:3e:b2:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6c4520759f3a4ef8b9a9a27e2533ce732c5411 Validity Not Before: Dec 6 01:01:09 2025 GMT Not After : Dec 7 01:01:09 2025 GMT Subject: CN=aadb6d89f79ec7f6ec819574458980f85e916af2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:72:f8:42:47:b8:79:fd:e7:04:2e:5a:1b:68: 40:0b:f0:46:a7:cf:11:f7:66:26:1a:7e:8e:9c:7b: 03:f0:49:78:f1:8e:ef:2f:3c:e0:b3:a1:9e:01:9f: 78:77:c4:45:1c:2c:17:bc:1a:0d:a9:e3:d3:b0:8c: 60:2c:3f:7b:09:5b:83:a3:c2:74:a9:21:f3:50:07: 4f:e3:9e:5f:43:41:96:c8:d2:af:17:6d:d7:ca:dd: 3a:da:79:36:3c:54:e5:9b:58:27:bc:c6:22:1b:9b: c9:70:e3:b6:52:86:da:2c:99:01:fb:80:13:bd:7d: 4f:16:06:7b:64:f8:58:49:06:cc:83:f1:bc:05:d9: 7b:fc:28:ee:59:92:1d:b6:91:94:68:2d:bf:fd:d4: a0:6f:a5:e6:bf:e0:8c:ee:eb:c3:e6:22:d4:13:c2: ac:ed:86:b4:14:e1:2e:ce:2f:03:87:72:da:c5:7e: 2f:b6:dc:8b:d7:37:1f:11:f9:c9:d8:a5:ac:54:7a: 1f:73:69:55:9d:a0:b2:66:44:aa:79:08:2e:eb:b1: 60:43:df:eb:4d:dc:75:cd:51:cb:a3:8c:dc:90:e1: ec:91:d2:42:fa:5b:08:12:2b:88:92:67:fd:7b:ed: 43:73:88:f3:dd:a8:13:97:1f:09:c0:e2:ed:e9:3e: dd:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:DB:6D:89:F7:9E:C7:F6:EC:81:95:74:45:89:80:F8:5E:91:6A:F2 X509v3 Authority Key Identifier: keyid:3E:6C:45:20:75:9F:3A:4E:F8:B9:A9:A2:7E:25:33:CE:73:2C:54:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmxFIHWfOk74uamifiUzznMsVBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:9d:1e:d3:da:1c:7a:1c:d9:9f:2e:cd:de:07:a2:0a:52:35: b8:87:5a:e0:1e:51:16:be:a1:0c:2f:36:53:d7:a2:a7:fa:38: 50:ec:78:af:18:4e:62:4b:9e:43:24:0b:1d:42:ee:f0:e8:36: c5:ac:21:ad:ed:8b:08:bc:ac:db:2e:3c:62:4e:11:99:ec:68: 52:36:ed:21:e4:ee:2e:ae:b4:c2:86:74:6d:17:8e:43:93:df: cb:b6:f5:7f:30:8e:1e:6d:9c:10:a1:97:99:ba:d2:3b:86:db: a9:f6:02:7f:97:55:f2:6e:90:6a:a2:2e:9a:e6:20:db:d2:dc: dd:2c:06:99:e3:40:5d:bf:34:89:e5:6e:4e:bd:05:c8:8b:c9: a6:df:56:dd:f9:c9:bf:5f:98:49:f8:59:ab:de:3d:93:c2:bc: 21:75:4b:c5:d5:62:88:a9:bc:68:e9:04:04:f4:90:e6:c4:3c: bc:05:fc:da:1c:31:82:b0:a0:1b:4d:dc:23:8c:15:86:a6:75: c7:d7:8c:6b:ec:93:3f:b4:4a:e7:19:2a:fc:84:ed:84:38:53: d6:b1:61:a3:fb:99:2c:0f:cc:42:de:a8:00:b9:fb:50:bd:4a: d8:48:f7:80:45:fd:e5:bc:ed:48:3b:3b:01:5c:d4:98:2a:34: 00:9d:7d:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLU4rKjzq9orOw10pPrLRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNmM0NTIwNzU5ZjNhNGVmOGI5YTlhMjdlMjUzM2NlNzMy YzU0MTEwHhcNMjUxMjA2MDEwMTA5WhcNMjUxMjA3MDEwMTA5WjAzMTEwLwYDVQQD EyhhYWRiNmQ4OWY3OWVjN2Y2ZWM4MTk1NzQ0NTg5ODBmODVlOTE2YWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHL4Qke4ef3nBC5aG2hAC/BGp88R 92YmGn6OnHsD8El48Y7vLzzgs6GeAZ94d8RFHCwXvBoNqePTsIxgLD97CVuDo8J0 qSHzUAdP455fQ0GWyNKvF23Xyt062nk2PFTlm1gnvMYiG5vJcOO2UobaLJkB+4AT vX1PFgZ7ZPhYSQbMg/G8Bdl7/CjuWZIdtpGUaC2//dSgb6Xmv+CM7uvD5iLUE8Ks 7Ya0FOEuzi8Dh3LaxX4vttyL1zcfEfnJ2KWsVHofc2lVnaCyZkSqeQgu67FgQ9/r Tdx1zVHLo4zckOHskdJC+lsIEiuIkmf9e+1Dc4jz3agTlx8JwOLt6T7dKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKrbbYn3nsf27IGVdEWJgPhekWryMB8GA1UdIwQY MBaAFD5sRSB1nzpO+Lmpon4lM85zLFQRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG14RklIV2ZPazc0dWFtaWZpVXp6bk1zVkJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni80ODNlMzMtYzc2Ny00NmI3LThmM2Et OWMwYTBlMjc2N2FhLzEvUG14RklIV2ZPazc0dWFtaWZpVXp6bk1zVkJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni80ODNlMzMtYzc2Ny00NmI3LThmM2EtOWMwYTBlMjc2N2Fh LzEvUG14RklIV2ZPazc0dWFtaWZpVXp6bk1zVkJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACJ0e09oc ehzZny7N3geiClI1uIda4B5RFr6hDC82U9eip/o4UOx4rxhOYkueQyQLHULu8Og2 xawhre2LCLys2y48Yk4RmexoUjbtIeTuLq60woZ0bReOQ5Pfy7b1fzCOHm2cEKGX mbrSO4bbqfYCf5dV8m6QaqIumuYg29Lc3SwGmeNAXb80ieVuTr0FyIvJpt9W3fnJ v1+YSfhZq949k8K8IXVLxdViiKm8aOkEBPSQ5sQ8vAX82hwxgrCgG03cI4wVhqZ1 x9eMa+yTP7RK5xkq/ITthDhT1rFho/uZLA/MQt6oALn7UL1K2Ej3gEX95bztSDs7 AVzUmCo0AJ19CA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:53 2025 by rpki-client