This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft File: PxnYdtwluWxdxZi-Lb9uywZal18.mft (raw, json) Hash identifier: LjWonWqH8YnzPcA/VvoaFXyuXu8Wtf3MYyiOfGfdBYE= Subject key identifier: FF:9A:DC:68:73:6A:43:06:E1:2D:11:86:FF:9C:8D:E9:6A:B5:B4:3A Authority key identifier: 3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F Certificate issuer: /CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f Certificate serial: 019AF352B01A7D7E4C05FA1B5788A7F1B6AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft Manifest number: 058F Signing time: Sat 06 Dec 2025 11:01:13 +0000 Manifest this update: Sat 06 Dec 2025 11:01:13 +0000 Manifest next update: Sun 07 Dec 2025 11:01:13 +0000 Files and hashes: 1: PxnYdtwluWxdxZi-Lb9uywZal18.crl (hash: 8lfAFSRcEGPDWIp442dd241/CdU/ZLIJFlTYIhUWXpg=) 2: x8ghvFiQy8y7__Pm7K2GUSehU3A.roa (hash: 97TGydFeZ3RUDp9TsIz5UQ8MNV819kJP2yTvYQ+TbKU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:b0:1a:7d:7e:4c:05:fa:1b:57:88:a7:f1:b6:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f Validity Not Before: Dec 6 11:01:13 2025 GMT Not After : Dec 7 11:01:13 2025 GMT Subject: CN=ff9adc68736a4306e12d1186ff9c8de96ab5b43a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e9:38:f7:8a:d3:44:45:8e:7b:17:75:cb:db: 17:ca:d2:9f:c9:8f:74:f1:fb:e7:41:6f:07:9d:b1: c3:18:64:e9:66:b2:21:e4:77:06:e3:d2:7e:fc:72: 70:95:0b:28:6b:93:7f:1f:15:47:47:a9:d0:3d:d1: 20:18:db:f8:56:a6:3e:9d:f9:87:1c:25:72:be:ab: 71:19:c5:8d:74:9c:df:2d:f7:1c:e0:af:b7:2d:fa: 3a:ae:9a:a8:fb:e3:76:e9:2b:3b:e8:f5:29:99:f9: 0e:6c:b5:3e:2f:6d:99:4b:ac:4f:a4:11:d0:56:e3: 37:25:a5:53:9e:74:86:7c:2c:4e:67:1d:44:4c:3f: 81:12:cb:35:f5:71:79:fb:24:ab:80:e9:82:7e:cd: b9:c0:e3:59:16:56:6f:bb:58:70:a0:cc:b7:e7:81: f8:b6:bc:9d:69:be:8e:3c:a1:af:b2:a1:c1:bc:ce: b0:81:f7:63:d2:f5:d3:b3:72:e0:32:f2:f6:65:3d: 0e:73:3f:c8:48:35:70:e9:e4:91:ec:c0:02:d9:b5: 98:b6:16:80:d7:28:d4:94:28:6e:7b:5c:43:79:76: 66:37:d3:56:f2:52:2f:a9:ea:d2:ad:3a:d1:ed:a1: 27:06:e1:03:d2:92:be:30:8b:63:93:44:87:50:99: 1f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:9A:DC:68:73:6A:43:06:E1:2D:11:86:FF:9C:8D:E9:6A:B5:B4:3A X509v3 Authority Key Identifier: keyid:3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:e5:01:41:e8:db:21:14:84:54:fe:6c:e3:74:ab:8f:52:d5: 05:65:06:8e:36:92:35:10:f6:0f:17:45:57:54:29:9a:cb:21: 3d:17:b8:2b:66:3c:ff:bf:02:be:79:3c:f8:c9:03:42:52:a1: 69:07:ca:0c:b8:b9:ac:ef:97:ee:e4:37:f1:c3:5b:f7:08:3f: 3a:e3:8f:8e:af:f4:76:65:9b:fe:c1:bc:42:ff:94:24:db:95: 2b:1e:22:db:f2:78:35:d6:63:28:b8:00:b4:64:dc:ad:b3:20: 1d:aa:b8:73:f5:de:57:bb:e9:7a:ea:ca:c9:e0:56:6c:20:e5: da:f2:77:b7:1b:2c:1f:4a:0d:ce:7f:ae:da:11:3e:f1:e9:08: 3a:90:0f:08:0c:41:ad:1f:77:47:ab:99:42:34:eb:1e:d5:bd: 9e:d5:c6:83:7c:84:69:ba:87:e3:a6:d4:c6:e1:7e:c5:e9:56: c7:c4:15:a0:93:bd:03:d8:17:ae:b0:c9:a5:a5:1b:ee:08:e6: 1c:86:5e:53:08:6a:b3:cf:01:00:b0:ec:99:26:44:29:20:64: 00:0c:4e:1b:06:57:56:22:6e:37:3b:f5:23:ed:f7:85:ab:5b: 8a:71:fe:46:c5:b9:01:45:ac:5f:c8:a9:a2:21:9d:2e:6f:88: d1:c4:b3:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUrAafX5MBfobV4in8bauMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmMTlkODc2ZGMyNWI5NmM1ZGM1OThiZTJkYmY2ZWNiMDY1 YTk3NWYwHhcNMjUxMjA2MTEwMTEzWhcNMjUxMjA3MTEwMTEzWjAzMTEwLwYDVQQD EyhmZjlhZGM2ODczNmE0MzA2ZTEyZDExODZmZjljOGRlOTZhYjViNDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+k494rTREWOexd1y9sXytKfyY90 8fvnQW8HnbHDGGTpZrIh5HcG49J+/HJwlQsoa5N/HxVHR6nQPdEgGNv4VqY+nfmH HCVyvqtxGcWNdJzfLfcc4K+3Lfo6rpqo++N26Ss76PUpmfkObLU+L22ZS6xPpBHQ VuM3JaVTnnSGfCxOZx1ETD+BEss19XF5+ySrgOmCfs25wONZFlZvu1hwoMy354H4 trydab6OPKGvsqHBvM6wgfdj0vXTs3LgMvL2ZT0Ocz/ISDVw6eSR7MAC2bWYthaA 1yjUlChue1xDeXZmN9NW8lIvqerSrTrR7aEnBuED0pK+MItjk0SHUJkfLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+a3GhzakMG4S0Rhv+cjelqtbQ6MB8GA1UdIwQY MBaAFD8Z2HbcJblsXcWYvi2/bssGWpdfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHhuWWR0d2x1V3hkeFppLUxiOXV5d1phbDE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yMjY0NTUtMTdhMC00NjNjLTg5NTkt MGZiMTM5MWI1NGViLzEvUHhuWWR0d2x1V3hkeFppLUxiOXV5d1phbDE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8yMjY0NTUtMTdhMC00NjNjLTg5NTktMGZiMTM5MWI1NGVi LzEvUHhuWWR0d2x1V3hkeFppLUxiOXV5d1phbDE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt+UBQejb IRSEVP5s43Srj1LVBWUGjjaSNRD2DxdFV1QpmsshPRe4K2Y8/78Cvnk8+MkDQlKh aQfKDLi5rO+X7uQ38cNb9wg/OuOPjq/0dmWb/sG8Qv+UJNuVKx4i2/J4NdZjKLgA tGTcrbMgHaq4c/XeV7vpeurKyeBWbCDl2vJ3txssH0oNzn+u2hE+8ekIOpAPCAxB rR93R6uZQjTrHtW9ntXGg3yEabqH46bUxuF+xelWx8QVoJO9A9gXrrDJpaUb7gjm HIZeUwhqs88BALDsmSZEKSBkAAxOGwZXViJuNzv1I+33hatbinH+RsW5AUWsX8ip oiGdLm+I0cSz3w== -----END CERTIFICATE-----Generated at Sat Dec 6 19:35:36 2025 by rpki-client