This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft File: pcatcQWg6X4ZLw6I5mgYq2D33sg.mft (raw, json) Hash identifier: 82gKiImbc+EmFw2nXPbRtcqVS26qdyMY0dCqpIsp1nU= Subject key identifier: C8:B3:33:7D:44:49:3D:77:94:44:0A:EF:C0:76:A8:A8:16:0E:1D:52 Authority key identifier: A5:C6:AD:71:05:A0:E9:7E:19:2F:0E:88:E6:68:18:AB:60:F7:DE:C8 Certificate issuer: /CN=a5c6ad7105a0e97e192f0e88e66818ab60f7dec8 Certificate serial: 019AF50A93EAABC9D9C455099AB50CB97358 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcatcQWg6X4ZLw6I5mgYq2D33sg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 19:01:42 +0000 Manifest this update: Sat 06 Dec 2025 19:01:42 +0000 Manifest next update: Sun 07 Dec 2025 19:01:42 +0000 Files and hashes: 1: pcatcQWg6X4ZLw6I5mgYq2D33sg.crl (hash: gef8GKwI+yO98bxYmTJb+JnIlpcMERYdlDWL8iR0D/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.crl rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft rsync://rpki.ripe.net/repository/DEFAULT/pcatcQWg6X4ZLw6I5mgYq2D33sg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:93:ea:ab:c9:d9:c4:55:09:9a:b5:0c:b9:73:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5c6ad7105a0e97e192f0e88e66818ab60f7dec8 Validity Not Before: Dec 6 19:01:42 2025 GMT Not After : Dec 7 19:01:42 2025 GMT Subject: CN=c8b3337d44493d7794440aefc076a8a8160e1d52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b5:79:72:d8:c4:f3:68:3a:5b:31:0b:ac:ce: a2:9f:e6:50:f0:e7:9f:67:4a:c9:d6:62:e1:2e:f2: b4:b6:61:61:4d:73:ac:f2:f8:f5:fc:12:c7:43:9e: 4b:62:15:7c:ba:7c:5e:6c:05:5e:80:ac:2d:f2:b0: 9f:db:b1:96:32:ab:5a:ba:a1:04:73:be:c7:b5:a9: 36:21:d8:6a:6e:1c:d1:c9:51:b5:2c:7d:37:a1:47: 42:4a:7d:15:24:62:c1:de:7f:d0:0d:38:b1:96:79: 1b:80:26:a5:ec:8f:67:8f:4c:7e:e1:3e:0c:f3:8c: 97:c6:70:1e:b4:1f:c4:b6:ea:46:ae:03:03:79:ac: a8:98:98:a7:4d:b5:b4:f6:a9:fc:f2:db:00:1b:50: 49:df:28:31:1d:53:08:10:3c:27:79:e3:d2:e8:eb: 74:3f:cb:b5:47:53:18:d3:e4:d7:e3:4d:40:dd:a6: d2:86:79:93:2f:72:71:be:23:6d:84:c2:6b:70:67: ce:58:51:d5:4d:2f:93:fc:f4:cf:0b:20:32:6b:f4: b3:3d:20:ee:3f:50:9b:66:96:22:7a:24:54:12:fb: ea:fe:1e:16:a8:64:b2:fe:a4:3b:f5:74:04:8a:c0: e9:37:57:08:57:87:b0:c0:2a:f2:69:e0:0b:76:13: 6b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:B3:33:7D:44:49:3D:77:94:44:0A:EF:C0:76:A8:A8:16:0E:1D:52 X509v3 Authority Key Identifier: keyid:A5:C6:AD:71:05:A0:E9:7E:19:2F:0E:88:E6:68:18:AB:60:F7:DE:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcatcQWg6X4ZLw6I5mgYq2D33sg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:95:de:d4:b4:0f:2d:87:2c:7f:6f:56:30:f6:2b:70:7e:66: 61:8e:6d:89:7b:ba:81:4c:63:9c:95:a4:31:e5:aa:2d:03:ba: 1e:9f:93:85:71:05:60:9f:39:cd:d6:17:5f:8f:c7:62:80:3d: 84:bd:ac:9f:af:e8:ff:77:b0:ef:38:94:55:21:c0:14:09:48: 40:5d:14:fe:67:8f:ba:57:bc:bc:19:e9:da:25:36:18:3b:51: b5:a2:13:d7:21:9a:a4:19:ec:34:4c:5a:a8:26:f8:a1:26:db: ad:21:f1:31:26:34:07:75:ce:6e:5f:b9:c7:9a:33:eb:20:01: a3:26:e6:53:01:c9:57:dc:cb:5d:f0:7b:8e:ef:de:a3:ed:2c: 93:c6:58:4a:91:a0:a0:1a:0e:80:5e:36:71:59:f6:3b:64:a4: 4c:f0:52:8c:69:08:7b:e9:ac:05:5d:72:6e:12:8e:08:23:bb: 0e:cf:8c:c5:5f:92:e0:33:95:2e:fd:9d:b9:a9:04:94:cc:05: 48:26:3b:4a:3f:c9:49:a6:47:23:46:e1:af:ce:e3:1c:34:e0: 50:5e:28:d8:63:6b:ab:23:b5:7a:13:05:7d:ae:8e:26:2f:c9: 77:6a:9b:7b:e3:a9:d3:d4:70:10:6b:a9:7c:d4:74:a9:d5:23: 21:d7:af:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CpPqq8nZxFUJmrUMuXNYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YzZhZDcxMDVhMGU5N2UxOTJmMGU4OGU2NjgxOGFiNjBm N2RlYzgwHhcNMjUxMjA2MTkwMTQyWhcNMjUxMjA3MTkwMTQyWjAzMTEwLwYDVQQD EyhjOGIzMzM3ZDQ0NDkzZDc3OTQ0NDBhZWZjMDc2YThhODE2MGUxZDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLV5ctjE82g6WzELrM6in+ZQ8Oef Z0rJ1mLhLvK0tmFhTXOs8vj1/BLHQ55LYhV8unxebAVegKwt8rCf27GWMqtauqEE c77Htak2IdhqbhzRyVG1LH03oUdCSn0VJGLB3n/QDTixlnkbgCal7I9nj0x+4T4M 84yXxnAetB/EtupGrgMDeayomJinTbW09qn88tsAG1BJ3ygxHVMIEDwneePS6Ot0 P8u1R1MY0+TX401A3abShnmTL3JxviNthMJrcGfOWFHVTS+T/PTPCyAya/SzPSDu P1CbZpYieiRUEvvq/h4WqGSy/qQ79XQEisDpN1cIV4ewwCryaeALdhNrRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMizM31EST13lEQK78B2qKgWDh1SMB8GA1UdIwQY MBaAFKXGrXEFoOl+GS8OiOZoGKtg997IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGNhdGNRV2c2WDRaTHc2STVtZ1lxMkQzM3NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni83YTBhYTItZjk5Yi00MTg1LThmMjQt MTY0NmM2N2Y0Mjk0LzEvcGNhdGNRV2c2WDRaTHc2STVtZ1lxMkQzM3NnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni83YTBhYTItZjk5Yi00MTg1LThmMjQtMTY0NmM2N2Y0Mjk0 LzEvcGNhdGNRV2c2WDRaTHc2STVtZ1lxMkQzM3NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnJXe1LQP LYcsf29WMPYrcH5mYY5tiXu6gUxjnJWkMeWqLQO6Hp+ThXEFYJ85zdYXX4/HYoA9 hL2sn6/o/3ew7ziUVSHAFAlIQF0U/mePule8vBnp2iU2GDtRtaIT1yGapBnsNExa qCb4oSbbrSHxMSY0B3XObl+5x5oz6yABoybmUwHJV9zLXfB7ju/eo+0sk8ZYSpGg oBoOgF42cVn2O2SkTPBSjGkIe+msBV1ybhKOCCO7Ds+MxV+S4DOVLv2duakElMwF SCY7Sj/JSaZHI0bhr87jHDTgUF4o2GNrqyO1ehMFfa6OJi/Jd2qbe+Op09RwEGup fNR0qdUjIdevjQ== -----END CERTIFICATE-----Generated at Sun Dec 7 04:13:51 2025 by rpki-client