This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft File: PwbJ3z-o-T2e8O0EscoENduLxlA.mft (raw, json) Hash identifier: 5d3e2/fe3xyhUFhq46IBktXsu8EfhGVWYVbqhcStOhk= Subject key identifier: 64:19:03:0B:E2:79:7E:96:50:9E:62:9F:D8:43:A4:0A:35:DA:DE:66 Authority key identifier: 3F:06:C9:DF:3F:A8:F9:3D:9E:F0:ED:04:B1:CA:04:35:DB:8B:C6:50 Certificate issuer: /CN=3f06c9df3fa8f93d9ef0ed04b1ca0435db8bc650 Certificate serial: 019AF3F71987DD55E5CCE158F31193DFA948 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwbJ3z-o-T2e8O0EscoENduLxlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 14:00:48 +0000 Manifest this update: Sat 06 Dec 2025 14:00:48 +0000 Manifest next update: Sun 07 Dec 2025 14:00:48 +0000 Files and hashes: 1: PwbJ3z-o-T2e8O0EscoENduLxlA.crl (hash: bRFlGreNJW+18B66HC9QKdVTUMvIBuSqAIZEJQoD0+A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.crl rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft rsync://rpki.ripe.net/repository/DEFAULT/PwbJ3z-o-T2e8O0EscoENduLxlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:19:87:dd:55:e5:cc:e1:58:f3:11:93:df:a9:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f06c9df3fa8f93d9ef0ed04b1ca0435db8bc650 Validity Not Before: Dec 6 14:00:48 2025 GMT Not After : Dec 7 14:00:48 2025 GMT Subject: CN=6419030be2797e96509e629fd843a40a35dade66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:84:d9:13:2b:77:66:da:32:31:bc:34:6e:0b: 9c:f4:8d:d6:52:4e:24:1b:9c:bf:1a:df:f8:6e:8b: 4c:45:bb:16:d0:0e:ec:b9:bd:67:f7:09:2c:01:0e: 0e:a2:5e:27:8f:e5:4f:de:79:20:3f:81:4a:81:de: f9:9f:95:97:7c:37:9e:29:8f:6b:99:19:09:63:27: b9:fe:ed:4b:d5:78:43:aa:d3:ae:1d:0e:bd:57:7b: 2b:4f:3b:39:15:4e:7a:f0:49:82:44:e2:f9:36:85: ce:fa:ef:95:c8:8b:ff:59:b0:c3:72:25:8a:49:07: 07:80:d6:e8:36:d5:84:d4:c9:ce:e5:b4:ec:02:93: 8b:5e:b4:e0:17:db:94:9e:e4:0e:19:99:ee:f6:6b: fe:95:46:02:bc:6c:14:1a:8c:d4:72:93:8b:8e:f1: d3:84:79:37:d5:e3:57:08:92:18:65:cc:2b:06:67: 8c:6c:1a:59:7e:e5:fd:59:4d:64:2f:b7:40:1d:6c: e2:66:b7:e2:9c:93:df:d0:c5:fb:9a:02:d3:14:5b: 20:9c:d8:cf:e4:2a:c7:9e:a0:33:d0:6c:4e:d8:18: 3f:56:4f:23:30:99:89:f3:e5:e1:46:2c:6d:44:30: 8d:ff:a0:22:29:09:73:99:66:0a:27:cb:92:b3:47: cd:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:19:03:0B:E2:79:7E:96:50:9E:62:9F:D8:43:A4:0A:35:DA:DE:66 X509v3 Authority Key Identifier: keyid:3F:06:C9:DF:3F:A8:F9:3D:9E:F0:ED:04:B1:CA:04:35:DB:8B:C6:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwbJ3z-o-T2e8O0EscoENduLxlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:b9:c4:19:83:07:65:1c:24:c9:a5:c4:88:dd:87:90:c9:d5: 5e:01:f3:b6:f4:fe:d1:2d:dd:73:d6:12:18:07:a3:be:62:b1: 52:99:82:0d:b3:1c:69:1f:66:18:ae:09:9a:33:f2:f7:a0:02: 65:d1:aa:88:75:7f:8d:6b:0a:1a:bd:23:64:a7:d5:93:06:80: 3e:09:5a:fc:1b:72:70:5b:38:8c:9b:f8:af:d2:99:a1:5b:18: 13:b2:24:b3:10:73:b0:14:e4:16:f2:34:a3:74:87:06:18:71: 11:3b:9f:e0:86:a5:52:eb:14:eb:c6:69:6b:0d:0a:f0:a1:08: 23:8d:b7:1d:98:91:fe:e9:01:dd:f1:7a:1e:6b:19:61:86:26: a5:fc:c5:24:a2:c3:e8:5f:03:a6:1d:5d:5c:4d:06:19:99:fb: 29:7f:da:24:45:6f:c0:1e:ca:d1:c4:6d:65:c5:30:73:e6:66: 3e:aa:d8:fa:93:49:7d:0b:d7:a2:0f:ae:6b:18:1c:43:03:3b: ec:79:77:5d:8d:7b:95:b8:54:ad:86:7b:03:47:90:7a:6e:c7: 31:04:a6:8b:96:7a:95:2f:78:cf:3a:8a:56:8a:0f:79:c1:85: b5:16:59:06:78:5c:1e:17:5c:ee:8a:62:c9:98:df:52:ae:85: 87:7e:22:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9xmH3VXlzOFY8xGT36lIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmMDZjOWRmM2ZhOGY5M2Q5ZWYwZWQwNGIxY2EwNDM1ZGI4 YmM2NTAwHhcNMjUxMjA2MTQwMDQ4WhcNMjUxMjA3MTQwMDQ4WjAzMTEwLwYDVQQD Eyg2NDE5MDMwYmUyNzk3ZTk2NTA5ZTYyOWZkODQzYTQwYTM1ZGFkZTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4TZEyt3ZtoyMbw0bguc9I3WUk4k G5y/Gt/4botMRbsW0A7sub1n9wksAQ4Ool4nj+VP3nkgP4FKgd75n5WXfDeeKY9r mRkJYye5/u1L1XhDqtOuHQ69V3srTzs5FU568EmCROL5NoXO+u+VyIv/WbDDciWK SQcHgNboNtWE1MnO5bTsApOLXrTgF9uUnuQOGZnu9mv+lUYCvGwUGozUcpOLjvHT hHk31eNXCJIYZcwrBmeMbBpZfuX9WU1kL7dAHWziZrfinJPf0MX7mgLTFFsgnNjP 5CrHnqAz0GxO2Bg/Vk8jMJmJ8+XhRixtRDCN/6AiKQlzmWYKJ8uSs0fNEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGQZAwvieX6WUJ5in9hDpAo12t5mMB8GA1UdIwQY MBaAFD8Gyd8/qPk9nvDtBLHKBDXbi8ZQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHdiSjN6LW8tVDJlOE8wRXNjb0VOZHVMeGxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9kMDBlM2QtNTRjNy00MzZmLWE4Y2Ut MzM4YWEwY2Y5OGUyLzEvUHdiSjN6LW8tVDJlOE8wRXNjb0VOZHVMeGxBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9kMDBlM2QtNTRjNy00MzZmLWE4Y2UtMzM4YWEwY2Y5OGUy LzEvUHdiSjN6LW8tVDJlOE8wRXNjb0VOZHVMeGxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX7nEGYMH ZRwkyaXEiN2HkMnVXgHztvT+0S3dc9YSGAejvmKxUpmCDbMcaR9mGK4JmjPy96AC ZdGqiHV/jWsKGr0jZKfVkwaAPgla/BtycFs4jJv4r9KZoVsYE7IksxBzsBTkFvI0 o3SHBhhxETuf4IalUusU68Zpaw0K8KEII423HZiR/ukB3fF6HmsZYYYmpfzFJKLD 6F8Dph1dXE0GGZn7KX/aJEVvwB7K0cRtZcUwc+ZmPqrY+pNJfQvXog+uaxgcQwM7 7Hl3XY17lbhUrYZ7A0eQem7HMQSmi5Z6lS94zzqKVooPecGFtRZZBnhcHhdc7opi yZjfUq6Fh34inw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:53:36 2025 by rpki-client