This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft File: PD9FAh1us0CkKy5d0fv3IaGmbWE.mft (raw, json) Hash identifier: jxgoMydAEo1mvKja8Yw/RjaWY31Cj0entP/l1NuyEF0= Subject key identifier: F7:76:1F:6B:95:59:DB:41:F2:86:69:13:5D:C6:ED:26:9F:10:B1:E3 Authority key identifier: 3C:3F:45:02:1D:6E:B3:40:A4:2B:2E:5D:D1:FB:F7:21:A1:A6:6D:61 Certificate issuer: /CN=3c3f45021d6eb340a42b2e5dd1fbf721a1a66d61 Certificate serial: 019AF1643730D4A2EEDCC21D922E95D1D62E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft Manifest number: 0E48 Signing time: Sat 06 Dec 2025 02:01:08 +0000 Manifest this update: Sat 06 Dec 2025 02:01:08 +0000 Manifest next update: Sun 07 Dec 2025 02:01:08 +0000 Files and hashes: 1: PD9FAh1us0CkKy5d0fv3IaGmbWE.crl (hash: guRxfmytYA7Nr7N46OgRGFpV3MBbo7YM3tgVbdEvceM=) 2: x9hUxJfn47T_kDyiFQOIzJ-cz6A.roa (hash: xdaaD+GtntD/xfR79byZL40UTK4Nd3mN7SfVEUnzNx8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.crl rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:37:30:d4:a2:ee:dc:c2:1d:92:2e:95:d1:d6:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c3f45021d6eb340a42b2e5dd1fbf721a1a66d61 Validity Not Before: Dec 6 02:01:08 2025 GMT Not After : Dec 7 02:01:08 2025 GMT Subject: CN=f7761f6b9559db41f28669135dc6ed269f10b1e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:55:31:bd:e4:18:4a:15:9c:56:22:6e:3b:f1: ae:87:d2:df:25:ba:df:7a:ee:58:b2:95:0d:05:80: be:e7:77:93:b4:34:66:0a:54:fb:f6:c2:d7:c3:a1: 9f:37:3e:f3:71:91:a3:1c:d5:97:06:39:c4:46:fe: cb:73:e6:5a:ef:f0:ae:98:4e:9e:6a:5b:60:3e:8c: 2f:b0:4e:42:85:04:1a:f3:9c:c5:9f:e5:f6:9a:e7: c0:48:00:a8:5c:5a:05:ce:5a:11:d5:71:c9:ec:05: 60:1c:8a:4e:dd:d4:79:ef:64:56:d3:a2:8a:2e:f1: 2f:0c:3a:9e:a0:2d:31:b9:da:4c:07:a9:83:d2:93: b2:fc:8d:c4:8f:8c:24:fd:52:5a:58:a7:94:d3:0b: 29:cd:33:e8:38:a1:22:42:c1:88:ac:f1:15:53:bd: 6d:af:fd:f9:58:3a:52:64:b0:56:9a:10:83:a5:b6: 5c:6a:f6:b1:ec:22:43:80:e7:96:8a:b0:ea:56:5d: ea:1b:93:f5:62:d4:bf:1c:f8:35:c5:31:79:cf:b0: 8e:f9:7e:a3:24:74:c5:ef:76:a2:52:07:14:2a:af: 71:c8:f7:d7:e9:d5:e0:86:cd:d8:80:78:34:3a:e2: 78:ab:fd:d7:21:45:63:2a:7e:4d:06:8e:c7:79:34: 74:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:76:1F:6B:95:59:DB:41:F2:86:69:13:5D:C6:ED:26:9F:10:B1:E3 X509v3 Authority Key Identifier: keyid:3C:3F:45:02:1D:6E:B3:40:A4:2B:2E:5D:D1:FB:F7:21:A1:A6:6D:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:a4:cd:e9:b4:9b:cf:c4:4c:29:90:e1:58:cb:ff:5b:2a:15: da:1d:80:4a:69:fe:7b:4e:f6:22:70:b1:fc:c8:a2:64:5a:e2: 8e:1a:51:a8:93:ac:db:aa:5e:c5:5f:69:ad:02:e1:7e:fa:a4: 2e:68:f7:44:79:67:0a:51:29:50:c9:aa:6c:03:ee:ce:b4:96: b1:73:35:d3:0d:97:41:ce:9f:36:05:ba:4a:73:73:be:3d:81: ae:64:ba:d2:c1:72:d8:b7:49:e4:3f:9c:ef:dc:2c:73:df:09: 4c:f6:d2:05:94:23:fb:4f:44:9e:1a:01:98:1e:30:46:71:a2: 2f:a8:95:5d:11:5d:e3:6a:e3:2b:29:9f:f1:80:f0:cb:de:41: e3:85:19:b2:b3:25:d0:e5:d9:e2:9f:d6:86:c9:22:54:5b:cf: a7:43:9c:a2:a9:b0:4c:84:9a:42:1c:74:c6:6c:9b:14:90:dc: 4c:63:b1:fd:9b:72:1b:16:bd:56:7a:42:3f:8e:55:01:ff:cb: a7:37:29:ce:e4:c5:66:04:b3:77:9d:15:ba:90:1c:6a:f7:69: cc:0c:81:2a:d2:32:b8:e8:f1:92:7c:d6:22:c5:d6:73:cd:0c: 61:6d:79:05:27:3c:9e:db:e1:4e:f3:70:76:03:9c:3b:4e:ee: 02:b6:7d:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZDcw1KLu3MIdki6V0dYuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjM2Y0NTAyMWQ2ZWIzNDBhNDJiMmU1ZGQxZmJmNzIxYTFh NjZkNjEwHhcNMjUxMjA2MDIwMTA4WhcNMjUxMjA3MDIwMTA4WjAzMTEwLwYDVQQD EyhmNzc2MWY2Yjk1NTlkYjQxZjI4NjY5MTM1ZGM2ZWQyNjlmMTBiMWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVUxveQYShWcViJuO/Guh9LfJbrf eu5YspUNBYC+53eTtDRmClT79sLXw6GfNz7zcZGjHNWXBjnERv7Lc+Za7/CumE6e altgPowvsE5ChQQa85zFn+X2mufASACoXFoFzloR1XHJ7AVgHIpO3dR572RW06KK LvEvDDqeoC0xudpMB6mD0pOy/I3Ej4wk/VJaWKeU0wspzTPoOKEiQsGIrPEVU71t r/35WDpSZLBWmhCDpbZcavax7CJDgOeWirDqVl3qG5P1YtS/HPg1xTF5z7CO+X6j JHTF73aiUgcUKq9xyPfX6dXghs3YgHg0OuJ4q/3XIUVjKn5NBo7HeTR0TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPd2H2uVWdtB8oZpE13G7SafELHjMB8GA1UdIwQY MBaAFDw/RQIdbrNApCsuXdH79yGhpm1hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEQ5RkFoMXVzMENrS3k1ZDBmdjNJYUdtYldFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8wNTI1N2UtMWU2Ny00MTU4LThhZGIt NDdkNmU0YmFlMmNmLzEvUEQ5RkFoMXVzMENrS3k1ZDBmdjNJYUdtYldFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My8wNTI1N2UtMWU2Ny00MTU4LThhZGItNDdkNmU0YmFlMmNm LzEvUEQ5RkFoMXVzMENrS3k1ZDBmdjNJYUdtYldFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALaTN6bSb z8RMKZDhWMv/WyoV2h2ASmn+e072InCx/MiiZFrijhpRqJOs26pexV9prQLhfvqk Lmj3RHlnClEpUMmqbAPuzrSWsXM10w2XQc6fNgW6SnNzvj2BrmS60sFy2LdJ5D+c 79wsc98JTPbSBZQj+09EnhoBmB4wRnGiL6iVXRFd42rjKymf8YDwy95B44UZsrMl 0OXZ4p/WhskiVFvPp0OcoqmwTISaQhx0xmybFJDcTGOx/ZtyGxa9VnpCP45VAf/L pzcpzuTFZgSzd50VupAcavdpzAyBKtIyuOjxknzWIsXWc80MYW15BSc8ntvhTvNw dgOcO07uArZ98w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:53:37 2025 by rpki-client