This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft File: PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft (raw, json) Hash identifier: efE1tFM19iBtny4j0Ik3Ap/vasMGyailxOUNlr8U4SI= Subject key identifier: 22:94:22:94:F2:C6:89:00:8A:4A:CB:E7:F7:67:8C:E3:E0:B6:28:01 Authority key identifier: 3C:22:64:3B:A6:A0:EA:EF:57:32:9B:F5:BD:C9:0B:31:C3:86:F8:A7 Certificate issuer: /CN=3c22643ba6a0eaef57329bf5bdc90b31c386f8a7 Certificate serial: 019AF389901151FDD0C4DEA806C42052CFE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft Manifest number: 01F7 Signing time: Sat 06 Dec 2025 12:01:09 +0000 Manifest this update: Sat 06 Dec 2025 12:01:09 +0000 Manifest next update: Sun 07 Dec 2025 12:01:09 +0000 Files and hashes: 1: 1-AcyZzR_rYiM2ehdDTTg0kr4UTw.roa (hash: qHmoXJmRx4dkuxN3uy5t1kjSUTwhuDfIP867Nh4f5Ts=) 2: LbGHBzwRAfceRmxwP2ccsuOGwGU.roa (hash: ZwRIC8Resn0brXABJWxiiw1dDspM+fWK1hVb1pb6YYQ=) 3: PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl (hash: 9w80+LqxegXiFcyS3ulmW5IKvh065SIQzF3mCcJV680=) 4: VjUF6mkOxxkGBT69SzLniaN5UYw.roa (hash: JTMUgsA+g5cqMZGbs8rgNYEsQMEwv0Fop5cCQWjZZZ0=) 5: dUEg2uHl_mzH4Gc59hF0SQlEOPk.roa (hash: FAec0jGTBdqWnGcu6aY23AJJHb4v1uDZ1rxzpmt/9ug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:90:11:51:fd:d0:c4:de:a8:06:c4:20:52:cf:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c22643ba6a0eaef57329bf5bdc90b31c386f8a7 Validity Not Before: Dec 6 12:01:09 2025 GMT Not After : Dec 7 12:01:09 2025 GMT Subject: CN=22942294f2c689008a4acbe7f7678ce3e0b62801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c3:64:3b:ec:d5:e6:54:fa:f7:c6:16:e8:9c: 34:eb:4c:ed:38:2e:fa:d1:1b:a0:c4:f5:7e:2d:50: 0e:bc:a6:66:25:e3:c8:28:50:11:a4:07:aa:06:83: e6:7c:ca:f4:3c:96:42:2f:7b:7a:1a:3e:4f:1a:ed: ed:ab:52:22:82:bd:39:7e:b7:e2:79:5c:29:d5:09: 59:37:32:99:43:cf:62:35:2e:f8:1b:bd:67:26:dd: aa:69:ab:37:82:f8:ba:6e:19:97:8b:d8:7c:d0:d6: ca:28:c7:fe:f1:1a:31:81:2e:ab:62:28:cc:55:16: c7:f7:16:9d:c3:51:0c:45:32:14:8a:b7:1a:b5:e9: 93:e7:a2:d2:a2:ef:0d:e6:e1:5c:4d:14:e9:e4:f6: ab:3e:58:bc:7b:06:e1:8e:85:e4:3a:c4:8b:46:9a: 6d:a5:fb:68:a9:4b:8f:9b:ee:96:0d:35:93:86:a1: 67:ba:25:fe:53:36:2b:c3:24:c9:73:fd:39:34:09: c4:ed:6a:c0:1d:8d:ab:92:a6:f4:d2:6b:ca:1f:9a: d2:68:96:06:fd:40:43:2f:0e:76:c1:55:03:4c:1d: 4f:6f:c8:d8:5b:50:a5:5b:91:23:03:de:06:c5:eb: 18:d5:07:0e:8c:57:9f:72:30:35:b3:60:01:98:81: b0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:94:22:94:F2:C6:89:00:8A:4A:CB:E7:F7:67:8C:E3:E0:B6:28:01 X509v3 Authority Key Identifier: keyid:3C:22:64:3B:A6:A0:EA:EF:57:32:9B:F5:BD:C9:0B:31:C3:86:F8:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:94:8d:55:b7:56:61:8f:d9:38:1b:f5:08:c4:81:37:a3:bd: d8:a9:6b:9f:05:0c:30:d0:f3:25:2a:a8:5b:d8:4f:97:b9:3a: e7:2d:f6:8c:c9:84:d0:7e:c3:86:81:6e:b8:16:b2:c8:82:15: cd:eb:62:d5:61:ea:2f:6b:fc:fa:63:fb:0e:e9:52:20:56:46: 24:e6:cd:e4:5b:8a:dd:ab:16:10:bb:05:a1:a3:da:dc:c8:34: be:b0:a0:70:47:aa:36:56:e4:d1:35:c6:f3:69:6d:ef:22:27: 9a:57:3a:ff:e2:8d:ae:85:91:ca:9b:c0:e6:59:13:25:32:39: 0c:b4:ec:0f:25:30:83:71:11:31:2c:98:af:80:8d:14:a1:e6: c9:90:e3:a9:6d:f5:a5:e3:14:45:fd:83:2a:7e:ce:16:60:04: 6f:db:61:fa:87:a1:b6:69:ed:de:43:e2:5c:e4:82:42:1d:65: 13:11:ac:fa:1f:e4:ae:70:11:74:c8:fd:5a:08:65:a4:38:fd: a4:7b:86:ba:62:cd:ad:e4:5d:14:c9:ad:bc:c7:0f:d0:b0:2b: c1:58:84:bc:55:43:6f:fb:2d:cc:e2:88:59:93:0a:7f:f5:b0: d2:70:8d:b3:14:0b:f4:b7:51:24:76:bd:f3:83:b3:5a:ae:37: 59:bb:7b:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziZARUf3QxN6oBsQgUs/pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMjI2NDNiYTZhMGVhZWY1NzMyOWJmNWJkYzkwYjMxYzM4 NmY4YTcwHhcNMjUxMjA2MTIwMTA5WhcNMjUxMjA3MTIwMTA5WjAzMTEwLwYDVQQD EygyMjk0MjI5NGYyYzY4OTAwOGE0YWNiZTdmNzY3OGNlM2UwYjYyODAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycNkO+zV5lT698YW6Jw060ztOC76 0RugxPV+LVAOvKZmJePIKFARpAeqBoPmfMr0PJZCL3t6Gj5PGu3tq1Iigr05frfi eVwp1QlZNzKZQ89iNS74G71nJt2qaas3gvi6bhmXi9h80NbKKMf+8RoxgS6rYijM VRbH9xadw1EMRTIUircatemT56LSou8N5uFcTRTp5ParPli8ewbhjoXkOsSLRppt pftoqUuPm+6WDTWThqFnuiX+UzYrwyTJc/05NAnE7WrAHY2rkqb00mvKH5rSaJYG /UBDLw52wVUDTB1Pb8jYW1ClW5EjA94GxesY1QcOjFefcjA1s2ABmIGwUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCKUIpTyxokAikrL5/dnjOPgtigBMB8GA1UdIwQY MBaAFDwiZDumoOrvVzKb9b3JCzHDhvinMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUENKa082YWc2dTlYTXB2MXZja0xNY09HLUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83YWVkOTktYTQ3ZC00ZWM3LWI0YzUt ZmExNDg2ZWE3OThjLzEvUENKa082YWc2dTlYTXB2MXZja0xNY09HLUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny83YWVkOTktYTQ3ZC00ZWM3LWI0YzUtZmExNDg2ZWE3OThj LzEvUENKa082YWc2dTlYTXB2MXZja0xNY09HLUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABpSNVbdW YY/ZOBv1CMSBN6O92KlrnwUMMNDzJSqoW9hPl7k65y32jMmE0H7DhoFuuBayyIIV zeti1WHqL2v8+mP7DulSIFZGJObN5FuK3asWELsFoaPa3Mg0vrCgcEeqNlbk0TXG 82lt7yInmlc6/+KNroWRypvA5lkTJTI5DLTsDyUwg3ERMSyYr4CNFKHmyZDjqW31 peMURf2DKn7OFmAEb9th+oehtmnt3kPiXOSCQh1lExGs+h/krnARdMj9WghlpDj9 pHuGumLNreRdFMmtvMcP0LArwViEvFVDb/stzOKIWZMKf/Ww0nCNsxQL9LdRJHa9 84OzWq43Wbt7dA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:32:13 2025 by rpki-client