This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft File: PNVhnbjXcXN5lW1Op1t22ybRwck.mft (raw, json) Hash identifier: Dq5fC+zA8n3kZ3mWFSlWyzFAaofKsBDMwRQ82zDkJdg= Subject key identifier: 1C:2C:9F:46:4F:91:36:8F:56:E9:65:1B:89:53:84:E5:F6:2B:FA:44 Authority key identifier: 3C:D5:61:9D:B8:D7:71:73:79:95:6D:4E:A7:5B:76:DB:26:D1:C1:C9 Certificate issuer: /CN=3cd5619db8d7717379956d4ea75b76db26d1c1c9 Certificate serial: 019AF1D2352E370DAE98939F1CD8C5E41488 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNVhnbjXcXN5lW1Op1t22ybRwck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 04:01:16 +0000 Manifest this update: Sat 06 Dec 2025 04:01:16 +0000 Manifest next update: Sun 07 Dec 2025 04:01:16 +0000 Files and hashes: 1: 4prfTAA9HBYIWFQscXuDZvPOJfU.roa (hash: zMicpYmGFLFzW1lGiXS7QLLBWvT2YuAYQEgxuNA/2gA=) 2: PNVhnbjXcXN5lW1Op1t22ybRwck.crl (hash: QUWvuE8OB5z9y+3q95XO2TPgzE/Xz0c3maPOUOiZ5pA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft rsync://rpki.ripe.net/repository/DEFAULT/PNVhnbjXcXN5lW1Op1t22ybRwck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:35:2e:37:0d:ae:98:93:9f:1c:d8:c5:e4:14:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cd5619db8d7717379956d4ea75b76db26d1c1c9 Validity Not Before: Dec 6 04:01:16 2025 GMT Not After : Dec 7 04:01:16 2025 GMT Subject: CN=1c2c9f464f91368f56e9651b895384e5f62bfa44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:3a:2f:e7:a0:34:80:ba:b3:8a:bb:53:1d:e7: d5:a1:a5:33:b3:1c:20:08:60:06:30:15:6a:94:d8: 0d:ce:63:2c:b3:b3:af:c5:42:de:18:ec:04:c9:e1: 1f:09:1e:5b:40:19:c4:82:e6:10:9a:43:e7:ab:9e: 01:78:a0:38:7c:75:40:37:e5:19:9b:01:3f:2a:b1: 5c:47:a0:b2:89:1e:89:52:61:d8:10:14:f5:db:6d: fd:c4:00:b7:99:d8:94:4a:3f:94:d1:37:2b:94:98: 0b:f5:98:0b:52:af:c3:ac:0e:76:94:6c:1c:c2:df: 70:67:5e:05:00:23:ce:78:c0:3a:33:a9:fe:d7:fd: 50:40:fb:3e:2c:f0:84:53:24:da:23:71:c0:db:ff: 65:ef:01:9a:c9:58:04:73:f0:7e:39:89:6c:95:09: f5:6d:1a:d1:fc:34:9b:79:6d:f0:77:41:1c:19:bd: 29:32:9a:8e:bd:e6:9d:ae:6d:7f:30:a9:65:1a:ca: 81:b7:22:53:86:ef:48:a8:9f:a2:12:ec:8c:a5:12: 24:2e:43:e8:37:0d:9f:79:9e:d9:fd:df:b0:94:16: 5b:b5:60:ab:4a:b9:cc:be:78:ea:20:57:36:84:f1: 47:55:dc:ce:f2:be:93:f3:c9:cd:ed:78:c9:7b:a7: 99:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:2C:9F:46:4F:91:36:8F:56:E9:65:1B:89:53:84:E5:F6:2B:FA:44 X509v3 Authority Key Identifier: keyid:3C:D5:61:9D:B8:D7:71:73:79:95:6D:4E:A7:5B:76:DB:26:D1:C1:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNVhnbjXcXN5lW1Op1t22ybRwck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:b7:dd:2f:21:2b:1f:47:23:fd:f8:f6:43:f0:0d:7f:d7:a1: b3:15:59:17:d6:c1:33:99:ea:61:5e:98:ae:84:48:5d:01:54: 57:a5:a8:d7:f9:5b:0b:c6:80:95:ee:20:45:5f:30:3f:fa:c3: 28:88:85:e3:a0:2c:6a:89:57:75:46:81:79:64:32:8e:1a:c4: d7:0e:6a:c8:1f:d0:f2:b8:dd:8c:a8:f2:d8:98:82:4c:e4:42: 31:bd:a1:63:a7:0d:a6:46:f0:dd:d7:be:13:f6:25:84:4c:f9: 60:2d:4f:dc:1d:13:e8:84:88:09:9f:5c:19:d6:90:23:d0:0c: 83:f5:86:ae:bc:4c:ba:c0:a9:77:85:2d:e4:ef:a2:26:97:e9: 3a:3e:b6:71:84:53:20:64:d0:12:a2:e1:79:ae:96:48:24:76: a2:c4:69:12:35:de:38:28:d5:2d:f5:19:c2:36:06:23:9e:c8: 22:7c:60:b4:70:ab:06:0d:94:9a:68:6c:2e:69:88:0f:ac:8d: e7:78:ff:e7:26:25:a5:42:9c:5e:95:2a:44:29:59:c2:12:82: 9f:14:62:25:a6:dc:b1:dd:52:c7:b1:69:47:21:a4:66:47:47: a2:7a:cf:f1:69:19:30:0a:55:45:f1:05:da:81:33:46:6e:0d: 51:79:68:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0jUuNw2umJOfHNjF5BSIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjZDU2MTlkYjhkNzcxNzM3OTk1NmQ0ZWE3NWI3NmRiMjZk MWMxYzkwHhcNMjUxMjA2MDQwMTE2WhcNMjUxMjA3MDQwMTE2WjAzMTEwLwYDVQQD EygxYzJjOWY0NjRmOTEzNjhmNTZlOTY1MWI4OTUzODRlNWY2MmJmYTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9jov56A0gLqzirtTHefVoaUzsxwg CGAGMBVqlNgNzmMss7OvxULeGOwEyeEfCR5bQBnEguYQmkPnq54BeKA4fHVAN+UZ mwE/KrFcR6CyiR6JUmHYEBT12239xAC3mdiUSj+U0TcrlJgL9ZgLUq/DrA52lGwc wt9wZ14FACPOeMA6M6n+1/1QQPs+LPCEUyTaI3HA2/9l7wGayVgEc/B+OYlslQn1 bRrR/DSbeW3wd0EcGb0pMpqOveadrm1/MKllGsqBtyJThu9IqJ+iEuyMpRIkLkPo Nw2feZ7Z/d+wlBZbtWCrSrnMvnjqIFc2hPFHVdzO8r6T88nN7XjJe6eZUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBwsn0ZPkTaPVullG4lThOX2K/pEMB8GA1UdIwQY MBaAFDzVYZ2413FzeZVtTqdbdtsm0cHJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUE5WaG5ialhjWE41bFcxT3AxdDIyeWJSd2NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8xZjM5NDktNDBjYy00MDBhLWI0MTEt ZTRlYTIwOGE5YTJkLzEvUE5WaG5ialhjWE41bFcxT3AxdDIyeWJSd2NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC8xZjM5NDktNDBjYy00MDBhLWI0MTEtZTRlYTIwOGE5YTJk LzEvUE5WaG5ialhjWE41bFcxT3AxdDIyeWJSd2NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQbfdLyEr H0cj/fj2Q/ANf9ehsxVZF9bBM5nqYV6YroRIXQFUV6Wo1/lbC8aAle4gRV8wP/rD KIiF46AsaolXdUaBeWQyjhrE1w5qyB/Q8rjdjKjy2JiCTORCMb2hY6cNpkbw3de+ E/YlhEz5YC1P3B0T6ISICZ9cGdaQI9AMg/WGrrxMusCpd4Ut5O+iJpfpOj62cYRT IGTQEqLhea6WSCR2osRpEjXeOCjVLfUZwjYGI57IInxgtHCrBg2UmmhsLmmID6yN 53j/5yYlpUKcXpUqRClZwhKCnxRiJabcsd1Sx7FpRyGkZkdHonrP8WkZMApVRfEF 2oEzRm4NUXloGQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:04:13 2025 by rpki-client