This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.mft File: Pt1VHQpjbbS1B3xkjZ2Hva2quB4.mft (raw, json) Hash identifier: oR/gF1LgujSOfqTfDP1xDseM6HoKp9Qxi8dZM1gg/Yw= Subject key identifier: E3:26:16:9F:69:0B:D6:EC:21:46:58:26:9A:4F:32:7C:BB:CE:7D:F7 Authority key identifier: 3E:DD:55:1D:0A:63:6D:B4:B5:07:7C:64:8D:9D:87:BD:AD:AA:B8:1E Certificate issuer: /CN=3edd551d0a636db4b5077c648d9d87bdadaab81e Certificate serial: 019AF163FF1E0D411D74FF2D1FD3436F3C01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.mft Manifest number: 0BFF Signing time: Sat 06 Dec 2025 02:00:53 +0000 Manifest this update: Sat 06 Dec 2025 02:00:53 +0000 Manifest next update: Sun 07 Dec 2025 02:00:53 +0000 Files and hashes: 1: 1-zwO4Bnz3Ual-zgnG201JvaWkY0.roa (hash: d0O7JzfUI0auiFcqxl2U8Q+1vT7/+BPs1dhy7hNLrrs=) 2: Pt1VHQpjbbS1B3xkjZ2Hva2quB4.crl (hash: xU0vQoPYc6o757V6zempOS+86rEGFzfSGEZ2SZRi6G8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.crl rsync://rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.mft rsync://rpki.ripe.net/repository/DEFAULT/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:ff:1e:0d:41:1d:74:ff:2d:1f:d3:43:6f:3c:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3edd551d0a636db4b5077c648d9d87bdadaab81e Validity Not Before: Dec 6 02:00:53 2025 GMT Not After : Dec 7 02:00:53 2025 GMT Subject: CN=e326169f690bd6ec214658269a4f327cbbce7df7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cf:29:ad:5c:8b:16:87:3e:fd:39:d6:8c:5f: 5d:5a:2e:08:72:e0:7b:98:bf:40:87:9a:c4:86:20: 7e:fe:bd:e9:90:f0:b8:0c:a9:55:a3:2b:15:20:26: 02:5e:ee:b4:a2:68:bb:2b:d2:7b:78:21:22:a3:3a: df:24:16:db:21:c5:3d:6a:0a:28:60:c9:a5:a3:f2: 12:6c:bf:cd:60:fb:74:78:cb:b6:07:6e:07:53:8b: 76:e5:68:22:07:83:b7:d5:bb:11:8a:a6:c4:fa:40: 43:40:b8:19:7b:ca:cc:81:3f:70:2b:57:57:a2:08: 09:cc:32:05:b3:c1:b4:bb:27:b5:a1:2f:5a:78:0e: 4a:ff:a5:6c:07:39:03:61:35:85:a3:73:3c:e0:ed: 14:da:5f:77:ec:fa:fa:47:71:1d:f5:bd:65:24:40: 4d:98:e9:23:73:62:74:8f:ab:1b:d1:c8:e8:a3:62: 36:3f:0b:23:ef:68:c1:ea:87:19:48:28:96:53:67: 07:c2:4c:33:74:1a:ea:45:ad:55:3f:85:43:27:58: af:d9:78:df:a6:da:8a:62:9a:23:07:c1:51:87:32: 22:f6:a3:24:9b:bc:2c:fa:80:77:bd:e9:4e:d9:d6: d5:ca:ad:15:c3:4e:97:54:f9:f4:b0:a3:d4:7a:31: 6d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:26:16:9F:69:0B:D6:EC:21:46:58:26:9A:4F:32:7C:BB:CE:7D:F7 X509v3 Authority Key Identifier: keyid:3E:DD:55:1D:0A:63:6D:B4:B5:07:7C:64:8D:9D:87:BD:AD:AA:B8:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:e8:00:cf:45:00:b9:9b:29:14:8c:c4:97:41:97:1c:af:3c: bb:2f:fb:a1:a1:ec:84:44:bd:e3:50:c2:d1:1a:4e:b4:17:02: 0a:ae:c0:86:a3:4a:54:da:5d:79:2d:a1:51:b4:f1:4c:60:11: a3:84:9c:b6:06:d2:0f:85:25:75:e4:a3:ef:57:6a:97:2e:26: 72:cc:3b:2f:4e:01:43:86:d0:48:2f:da:03:06:75:88:36:ff: 0f:81:04:6b:fa:4c:79:4c:56:12:d5:8c:6c:d2:b9:1e:2e:1e: 4b:b8:56:9e:d3:36:58:4e:b7:ce:30:a4:1d:79:17:6a:11:fc: 58:30:d3:bc:51:eb:e3:ad:02:d1:22:b7:bf:d3:95:e2:b5:26: 0c:9c:92:dd:db:bd:15:41:24:e8:3d:a0:97:c1:c4:09:3a:2c: e0:98:ea:36:4e:bd:66:34:c8:fd:35:49:40:10:76:ec:d2:75: 0c:70:36:63:8c:3e:8c:33:f6:b6:f1:80:1b:0e:6a:f9:73:7e: f2:dc:9c:a7:a1:a9:a5:da:3e:5c:55:08:8c:5c:76:57:fe:aa: 88:9d:71:03:6b:0b:41:6f:a6:b3:07:36:42:8f:a1:77:7f:5a: 9b:44:ae:05:5d:4c:7d:b6:5b:0e:98:c2:1d:46:b1:9b:fd:6f: 48:c1:90:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY/8eDUEddP8tH9NDbzwBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZGQ1NTFkMGE2MzZkYjRiNTA3N2M2NDhkOWQ4N2JkYWRh YWI4MWUwHhcNMjUxMjA2MDIwMDUzWhcNMjUxMjA3MDIwMDUzWjAzMTEwLwYDVQQD EyhlMzI2MTY5ZjY5MGJkNmVjMjE0NjU4MjY5YTRmMzI3Y2JiY2U3ZGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxs8prVyLFoc+/TnWjF9dWi4IcuB7 mL9Ah5rEhiB+/r3pkPC4DKlVoysVICYCXu60omi7K9J7eCEiozrfJBbbIcU9agoo YMmlo/ISbL/NYPt0eMu2B24HU4t25WgiB4O31bsRiqbE+kBDQLgZe8rMgT9wK1dX oggJzDIFs8G0uye1oS9aeA5K/6VsBzkDYTWFo3M84O0U2l937Pr6R3Ed9b1lJEBN mOkjc2J0j6sb0cjoo2I2Pwsj72jB6ocZSCiWU2cHwkwzdBrqRa1VP4VDJ1iv2Xjf ptqKYpojB8FRhzIi9qMkm7ws+oB3velO2dbVyq0Vw06XVPn0sKPUejFtHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOMmFp9pC9bsIUZYJppPMny7zn33MB8GA1UdIwQY MBaAFD7dVR0KY220tQd8ZI2dh72tqrgeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHQxVkhRcGpiYlMxQjN4a2paMkh2YTJxdUI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS80YWQzNjQtZjk5MS00NTg1LTkwNDct MTFhZGM0MGU0NGNlLzEvUHQxVkhRcGpiYlMxQjN4a2paMkh2YTJxdUI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS80YWQzNjQtZjk5MS00NTg1LTkwNDctMTFhZGM0MGU0NGNl LzEvUHQxVkhRcGpiYlMxQjN4a2paMkh2YTJxdUI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiugAz0UA uZspFIzEl0GXHK88uy/7oaHshES941DC0RpOtBcCCq7AhqNKVNpdeS2hUbTxTGAR o4SctgbSD4UldeSj71dqly4mcsw7L04BQ4bQSC/aAwZ1iDb/D4EEa/pMeUxWEtWM bNK5Hi4eS7hWntM2WE63zjCkHXkXahH8WDDTvFHr460C0SK3v9OV4rUmDJyS3du9 FUEk6D2gl8HECTos4JjqNk69ZjTI/TVJQBB27NJ1DHA2Y4w+jDP2tvGAGw5q+XN+ 8tycp6Gppdo+XFUIjFx2V/6qiJ1xA2sLQW+mswc2Qo+hd39am0SuBV1MfbZbDpjC HUaxm/1vSMGQyw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:44:59 2025 by rpki-client