This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft File: PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft (raw, json) Hash identifier: 4ct5/HWJJf+c2hFvHnL+HYpvRJGWQTDcCkyEM85bJS4= Subject key identifier: 6F:83:70:EB:F1:A9:2D:23:B2:10:F3:18:E6:96:BA:47:85:14:55:47 Authority key identifier: 3D:E4:59:8E:21:73:65:01:A7:39:44:C1:07:11:4C:85:0C:7D:8B:09 Certificate issuer: /CN=3de4598e21736501a73944c107114c850c7d8b09 Certificate serial: 019AF12E22777E5A08D0C0F0487A3BFC5771 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft Manifest number: 1488 Signing time: Sat 06 Dec 2025 01:02:03 +0000 Manifest this update: Sat 06 Dec 2025 01:02:03 +0000 Manifest next update: Sun 07 Dec 2025 01:02:03 +0000 Files and hashes: 1: PeRZjiFzZQGnOUTBBxFMhQx9iwk.crl (hash: vlhneE6thr1pIIBbVWKDm02nLWbBLIPcH8Xlcq0Ls4w=) 2: UMngkvwaRjIoN5eBBlFi84sCo3g.roa (hash: a8obNUaAoXy5QpQYwb8sCwj2NbkRTv7ZWZ/OkpJ4CGg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:22:77:7e:5a:08:d0:c0:f0:48:7a:3b:fc:57:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3de4598e21736501a73944c107114c850c7d8b09 Validity Not Before: Dec 6 01:02:03 2025 GMT Not After : Dec 7 01:02:03 2025 GMT Subject: CN=6f8370ebf1a92d23b210f318e696ba4785145547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3d:fa:24:cc:9d:3d:41:12:44:d4:01:8f:a9: 4f:c4:a8:e2:97:a9:10:0f:cb:38:b6:2a:43:9a:e2: 5d:35:5b:2d:f9:59:57:5e:4e:c1:30:40:21:07:92: a1:16:ef:13:c7:8a:7d:78:8b:56:70:63:15:79:32: 81:64:d0:2e:28:d7:65:3c:2b:85:14:ee:e8:79:07: 30:d6:3e:16:a8:7e:01:90:f3:02:df:6e:62:ca:f2: 9e:db:c0:99:97:ea:14:0f:18:b6:1e:b4:70:dd:75: f8:8e:52:aa:2c:e5:b4:02:44:a0:e1:1c:c7:0b:bb: 08:5d:60:de:84:cf:ce:ee:35:eb:c8:3c:4e:26:d5: 7c:71:cb:79:65:b1:9f:10:62:1c:fc:dc:f7:23:1f: 48:0c:b4:1b:f2:91:aa:e7:39:23:14:32:dc:3a:cb: 66:2e:53:9a:c2:6b:d3:92:4c:c3:28:80:7e:64:f4: 3c:85:09:f0:69:60:19:25:ea:3f:de:99:91:c1:78: 3a:4d:5d:0e:49:4d:95:69:8d:7e:eb:4e:9d:39:d1: 78:0e:87:93:a8:84:2f:34:d5:94:45:f0:b3:cf:4b: d3:a0:00:b8:22:95:46:6d:c9:42:02:c9:22:22:74: 81:e8:34:f2:2b:4c:34:f3:9e:c4:15:cf:90:9d:5a: 51:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:83:70:EB:F1:A9:2D:23:B2:10:F3:18:E6:96:BA:47:85:14:55:47 X509v3 Authority Key Identifier: keyid:3D:E4:59:8E:21:73:65:01:A7:39:44:C1:07:11:4C:85:0C:7D:8B:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:66:c3:78:a8:11:b3:09:26:ab:c8:85:85:3c:c1:32:32:da: ca:1a:13:79:3a:b3:d1:8f:df:ef:ec:f1:88:0b:6e:72:1f:42: eb:fa:b1:fb:92:7b:c0:6c:f5:04:db:b7:c1:9d:32:d1:ac:1d: 15:60:69:05:72:76:63:c4:5f:29:10:26:86:75:02:b7:41:e2: 4e:0f:6e:28:f7:59:fc:db:2f:96:94:6d:50:27:4d:a7:d3:e0: e4:54:a7:f2:3e:21:bd:7d:68:d9:ce:23:ae:b7:d1:0a:56:5c: 84:8a:42:21:01:3d:c1:ce:35:b2:aa:3b:07:77:5d:b3:58:85: c7:3b:59:c9:ba:39:1e:12:1a:35:3e:8d:44:21:4b:38:11:7c: 4b:0a:f3:df:2d:c5:55:4a:0b:9e:64:ed:48:68:ba:ad:b5:c8: 81:b4:3f:4a:85:ff:69:d6:a5:bc:6c:b5:21:56:52:97:68:58: 22:81:e5:3e:04:98:db:8a:42:14:46:a1:86:ce:19:f0:0c:ed: aa:19:91:e5:26:5f:c0:71:44:62:19:67:2a:d5:e2:41:e6:13: 3e:81:3e:b5:11:79:7b:40:57:64:0b:21:5a:76:be:02:5c:fd: 5a:7c:76:64:ba:d9:9f:c8:1d:8f:07:df:3f:da:63:b0:b5:24: 93:fe:09:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLiJ3floI0MDwSHo7/FdxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkZTQ1OThlMjE3MzY1MDFhNzM5NDRjMTA3MTE0Yzg1MGM3 ZDhiMDkwHhcNMjUxMjA2MDEwMjAzWhcNMjUxMjA3MDEwMjAzWjAzMTEwLwYDVQQD Eyg2ZjgzNzBlYmYxYTkyZDIzYjIxMGYzMThlNjk2YmE0Nzg1MTQ1NTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxD36JMydPUESRNQBj6lPxKjil6kQ D8s4tipDmuJdNVst+VlXXk7BMEAhB5KhFu8Tx4p9eItWcGMVeTKBZNAuKNdlPCuF FO7oeQcw1j4WqH4BkPMC325iyvKe28CZl+oUDxi2HrRw3XX4jlKqLOW0AkSg4RzH C7sIXWDehM/O7jXryDxOJtV8cct5ZbGfEGIc/Nz3Ix9IDLQb8pGq5zkjFDLcOstm LlOawmvTkkzDKIB+ZPQ8hQnwaWAZJeo/3pmRwXg6TV0OSU2VaY1+606dOdF4DoeT qIQvNNWURfCzz0vToAC4IpVGbclCAskiInSB6DTyK0w0857EFc+QnVpR0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG+DcOvxqS0jshDzGOaWukeFFFVHMB8GA1UdIwQY MBaAFD3kWY4hc2UBpzlEwQcRTIUMfYsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGVSWmppRnpaUUduT1VUQkJ4Rk1oUXg5aXdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi80ZDNiOGMtNzIzOS00ODNjLWE0OGMt N2Q2MDhiZWUzMTY3LzEvUGVSWmppRnpaUUduT1VUQkJ4Rk1oUXg5aXdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi80ZDNiOGMtNzIzOS00ODNjLWE0OGMtN2Q2MDhiZWUzMTY3 LzEvUGVSWmppRnpaUUduT1VUQkJ4Rk1oUXg5aXdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlmbDeKgR swkmq8iFhTzBMjLayhoTeTqz0Y/f7+zxiAtuch9C6/qx+5J7wGz1BNu3wZ0y0awd FWBpBXJ2Y8RfKRAmhnUCt0HiTg9uKPdZ/NsvlpRtUCdNp9Pg5FSn8j4hvX1o2c4j rrfRClZchIpCIQE9wc41sqo7B3dds1iFxztZybo5HhIaNT6NRCFLOBF8Swrz3y3F VUoLnmTtSGi6rbXIgbQ/SoX/adalvGy1IVZSl2hYIoHlPgSY24pCFEahhs4Z8Azt qhmR5SZfwHFEYhlnKtXiQeYTPoE+tRF5e0BXZAshWna+Alz9Wnx2ZLrZn8gdjwff P9pjsLUkk/4J3A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:28:01 2025 by rpki-client