This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft File: Psn7DRNVKq0E86qutY1N1OfPQPA.mft (raw, json) Hash identifier: okh4xT6BfP0Fy8BzYEmLkRjQhv3ptwio4pfuQyoSgPg= Subject key identifier: A6:3A:D7:FA:03:F3:2E:CC:91:0B:99:A9:3B:8E:0C:6B:69:19:E0:22 Authority key identifier: 3E:C9:FB:0D:13:55:2A:AD:04:F3:AA:AE:B5:8D:4D:D4:E7:CF:40:F0 Certificate issuer: /CN=3ec9fb0d13552aad04f3aaaeb58d4dd4e7cf40f0 Certificate serial: 019AF23F5E8CAF5B79F55D07202580A798CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Psn7DRNVKq0E86qutY1N1OfPQPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 06:00:30 +0000 Manifest this update: Sat 06 Dec 2025 06:00:30 +0000 Manifest next update: Sun 07 Dec 2025 06:00:30 +0000 Files and hashes: 1: 0KEFVdvGv-ChijDIsnLGIgCil34.roa (hash: Nw1+hiEOS4011D4TsgMditziwNaP7ka9v6nY3VfECKY=) 2: Psn7DRNVKq0E86qutY1N1OfPQPA.crl (hash: holuPJbVNii/iBn+A0Iz1B/V4qZgSfkvOu1pDvuVBwE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.crl rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft rsync://rpki.ripe.net/repository/DEFAULT/Psn7DRNVKq0E86qutY1N1OfPQPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:5e:8c:af:5b:79:f5:5d:07:20:25:80:a7:98:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ec9fb0d13552aad04f3aaaeb58d4dd4e7cf40f0 Validity Not Before: Dec 6 06:00:30 2025 GMT Not After : Dec 7 06:00:30 2025 GMT Subject: CN=a63ad7fa03f32ecc910b99a93b8e0c6b6919e022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:34:3b:0a:2e:df:5d:6f:6e:84:28:a1:d0:94: 43:54:9f:16:61:3d:a9:52:07:93:b4:c5:49:d5:0a: 63:8c:b8:ce:81:a2:3f:e3:7e:69:7d:01:e8:a1:5f: 4e:6a:cd:9a:9b:f8:58:be:bc:6d:e5:56:e1:0f:62: f4:9d:e4:04:42:af:84:dd:7e:1e:b2:8f:b4:8e:87: 90:d2:2a:cd:13:d1:f1:fc:11:19:0e:73:d1:13:a5: b1:fd:c6:65:a5:1c:76:5a:5e:ae:59:32:dd:4b:d4: 97:c6:1e:26:6a:73:5e:ae:64:b3:4c:d3:61:58:77: 94:03:e4:b1:a1:0a:6a:3b:17:0e:ed:1e:6e:06:94: b3:64:70:f4:7f:51:0d:c8:79:c8:54:30:e7:13:f9: 6f:5d:ed:52:62:3f:f3:29:8b:51:4a:3f:49:a5:45: ff:d4:03:8c:d1:4e:06:cd:d5:74:9c:9d:89:e3:bc: e7:f4:16:80:af:fa:72:7f:64:5a:08:0c:48:c3:e1: 84:b6:e4:94:22:68:03:83:cf:93:26:c1:40:c5:0e: b5:b3:e6:69:87:31:98:5e:00:c2:2a:3d:31:ed:4d: 04:c1:00:98:9d:c9:a1:23:52:fb:38:83:41:68:df: 2f:17:24:e8:5c:ef:4b:81:67:dd:d3:9f:fe:88:47: 5c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:3A:D7:FA:03:F3:2E:CC:91:0B:99:A9:3B:8E:0C:6B:69:19:E0:22 X509v3 Authority Key Identifier: keyid:3E:C9:FB:0D:13:55:2A:AD:04:F3:AA:AE:B5:8D:4D:D4:E7:CF:40:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Psn7DRNVKq0E86qutY1N1OfPQPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:7e:cd:f7:b2:e2:a5:b4:09:f4:66:53:94:13:62:7b:56:66: 34:32:ca:16:a2:b9:30:e8:93:81:d7:88:1d:f5:c8:8a:9d:13: 59:3c:cf:65:dd:19:ec:e6:18:02:67:ec:1e:b2:10:e1:bb:4d: 2d:a0:0f:8f:c7:cb:9d:16:42:06:3e:b8:30:a7:d7:4b:02:c5: 87:9c:70:4a:0c:10:7b:5f:c5:fe:1a:e3:cc:b9:a0:d3:2b:e7: 26:0e:98:d3:9e:21:ba:1d:9d:a1:16:5a:bd:00:c5:5b:4f:32: e2:21:85:4f:17:f4:b2:c7:ac:b4:1d:32:7b:e0:f8:2d:2f:c6: 48:2a:33:81:20:29:6c:93:27:72:07:a2:36:54:35:3d:c5:90: 37:ab:03:5f:46:ac:33:e7:17:bb:57:c3:b5:c0:f4:22:03:29: 1a:08:67:08:44:1c:f0:b3:95:58:5a:82:77:ca:96:a2:3c:03: 20:62:0e:c5:11:8b:6c:b0:0a:b4:13:14:87:b8:9a:94:29:34: 44:30:e0:af:e0:3b:35:97:2c:7a:62:5b:75:8e:cc:72:88:d6: 56:84:f3:0f:61:3f:93:b8:70:76:d8:0b:ff:d1:d8:8d:ab:13: 68:56:d5:db:42:ad:02:ec:ee:89:de:cb:62:54:85:dc:16:3f: 1b:71:2f:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP16Mr1t59V0HICWAp5jKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYzlmYjBkMTM1NTJhYWQwNGYzYWFhZWI1OGQ0ZGQ0ZTdj ZjQwZjAwHhcNMjUxMjA2MDYwMDMwWhcNMjUxMjA3MDYwMDMwWjAzMTEwLwYDVQQD EyhhNjNhZDdmYTAzZjMyZWNjOTEwYjk5YTkzYjhlMGM2YjY5MTllMDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzQ7Ci7fXW9uhCih0JRDVJ8WYT2p UgeTtMVJ1QpjjLjOgaI/435pfQHooV9Oas2am/hYvrxt5VbhD2L0neQEQq+E3X4e so+0joeQ0irNE9Hx/BEZDnPRE6Wx/cZlpRx2Wl6uWTLdS9SXxh4manNermSzTNNh WHeUA+SxoQpqOxcO7R5uBpSzZHD0f1ENyHnIVDDnE/lvXe1SYj/zKYtRSj9JpUX/ 1AOM0U4GzdV0nJ2J47zn9BaAr/pyf2RaCAxIw+GEtuSUImgDg8+TJsFAxQ61s+Zp hzGYXgDCKj0x7U0EwQCYncmhI1L7OINBaN8vFyToXO9LgWfd05/+iEdcbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKY61/oD8y7MkQuZqTuODGtpGeAiMB8GA1UdIwQY MBaAFD7J+w0TVSqtBPOqrrWNTdTnz0DwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHNuN0RSTlZLcTBFODZxdXRZMU4xT2ZQUVBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny82Y2NhYjMtNDc5Yi00ZGE4LWFlOTgt MmNiNmUzZmRmOWNkLzEvUHNuN0RSTlZLcTBFODZxdXRZMU4xT2ZQUVBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny82Y2NhYjMtNDc5Yi00ZGE4LWFlOTgtMmNiNmUzZmRmOWNk LzEvUHNuN0RSTlZLcTBFODZxdXRZMU4xT2ZQUVBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC37N97Li pbQJ9GZTlBNie1ZmNDLKFqK5MOiTgdeIHfXIip0TWTzPZd0Z7OYYAmfsHrIQ4btN LaAPj8fLnRZCBj64MKfXSwLFh5xwSgwQe1/F/hrjzLmg0yvnJg6Y054huh2doRZa vQDFW08y4iGFTxf0ssestB0ye+D4LS/GSCozgSApbJMncgeiNlQ1PcWQN6sDX0as M+cXu1fDtcD0IgMpGghnCEQc8LOVWFqCd8qWojwDIGIOxRGLbLAKtBMUh7ialCk0 RDDgr+A7NZcsemJbdY7McojWVoTzD2E/k7hwdtgL/9HYjasTaFbV20KtAuzuid7L YlSF3BY/G3EvUg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:47:48 2025 by rpki-client