This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft File: PQSDU4c3RT4vV_-1dJnDki6DY20.mft (raw, json) Hash identifier: M/mf/2lB+ze0Rvqmz0BCyz6Xy2b7hZHuXAwb43XYEAo= Subject key identifier: DF:B6:9D:BE:4B:91:D3:55:B9:C2:BE:A7:22:B5:A1:8A:BC:4B:11:D9 Authority key identifier: 3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D Certificate issuer: /CN=3d0483538737453e2f57ffb57499c3922e83636d Certificate serial: 019AF23FB6CF0F350A60AB70BB180B49CE48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft Manifest number: 168F Signing time: Sat 06 Dec 2025 06:00:53 +0000 Manifest this update: Sat 06 Dec 2025 06:00:53 +0000 Manifest next update: Sun 07 Dec 2025 06:00:53 +0000 Files and hashes: 1: 09rZaDf9P6R4diZdTpqbdJFmS5g.roa (hash: nJaLySku8ZYvCwVFCoV24PH4wOMxHH06lLCXG71Fdv0=) 2: 2kjnNcqey0OLGfySAKowHBG5Guo.roa (hash: 9jemYzIQoMUwDIBYN/+zDuFoechTYsBGwQpOaXYxFKk=) 3: 8jdJFfwz0f1bOSecP72_M36iRRI.roa (hash: 82Bf1Auf8nRCamjssfldTKSxot7XSbfVdi0kTqeYaRU=) 4: C4Wnra33s7vzTKpZqkw-dbYY55M.roa (hash: hVOornvwVn2Bg/Fh05dDWBnBXCHA01Bg7itlOVetmo0=) 5: OSXtgZFTRCqapZbj1Rss-9P6qbI.roa (hash: AUmjKUojOqL9JzPQrWExZ3cDw/gVJywbQJ3W19HFEWU=) 6: PQSDU4c3RT4vV_-1dJnDki6DY20.crl (hash: aoTCR8VeUcv+dTOlIsBIFrtXLdCCQkyCprmc2Zu8ApA=) 7: _9T_S-kr42TO8YpZQ1p1cNkCs8k.roa (hash: DCwl+cJRNegCixrl6T1943uL08w3GonOBX/1cFtnPHo=) 8: pV07vwevm-8BJLnT3hJuAHpGkJ4.roa (hash: uUXRNFSfG2j7vXcwLg3l6DuZ/886vt2liizx+IzMA7g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:b6:cf:0f:35:0a:60:ab:70:bb:18:0b:49:ce:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d0483538737453e2f57ffb57499c3922e83636d Validity Not Before: Dec 6 06:00:53 2025 GMT Not After : Dec 7 06:00:53 2025 GMT Subject: CN=dfb69dbe4b91d355b9c2bea722b5a18abc4b11d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:21:63:14:2f:c8:7c:91:1a:3f:66:8e:11:e8: 5a:37:61:09:96:34:f3:5c:cd:04:46:4d:a4:68:c3: c5:e8:29:e3:3e:aa:01:85:30:80:03:53:5c:f6:00: fe:6b:fe:a6:45:cd:a3:54:71:c3:82:8b:a5:2a:26: 56:ec:a0:11:a0:36:1e:66:18:cf:24:93:6c:b1:71: b1:9e:f4:a4:44:28:7a:c6:d3:4c:a5:8b:00:00:dc: 24:7a:8a:df:33:dd:d5:2d:c1:35:f1:5d:8a:9c:86: d1:df:04:68:57:3b:87:11:99:92:51:48:19:d2:ba: ba:6e:a3:e6:e9:c8:bd:a0:38:88:50:8a:d9:e2:54: d6:26:2d:c3:37:71:30:73:a8:33:12:1d:e7:9a:b8: 40:2c:3a:bc:53:2e:a9:aa:ae:d7:2c:ac:49:8a:01: da:67:d3:a6:c9:0e:e8:2b:74:58:9e:49:40:2f:65: 2e:57:d1:d7:33:e1:ab:d6:a6:fd:82:c0:f5:14:c9: 6c:de:1c:4b:b0:d3:c9:3e:90:6d:88:b4:53:20:31: cd:97:c6:c9:96:16:e2:95:70:95:92:08:71:8a:d0: d1:03:12:0b:9e:27:c2:68:24:5f:15:42:be:8f:4c: 75:2a:dc:d4:b4:c0:cd:0c:61:bb:99:bd:06:a6:2e: 55:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B6:9D:BE:4B:91:D3:55:B9:C2:BE:A7:22:B5:A1:8A:BC:4B:11:D9 X509v3 Authority Key Identifier: keyid:3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:84:61:44:60:67:a7:d6:24:3f:7e:4c:d1:05:31:6c:5d:7e: 43:1a:70:67:51:d1:2a:a0:43:9e:dd:f2:10:8f:f0:f3:0d:6b: 4d:5c:89:14:a0:4d:39:73:64:b6:7d:cd:be:99:24:21:59:ef: 58:f9:57:7a:59:6b:99:bf:16:f7:17:c0:67:f3:f6:44:15:a0: 61:83:f7:13:8e:14:33:0b:9f:2d:0e:79:77:c8:df:3b:fc:83: 94:9a:d1:77:1a:f0:38:0d:2b:e4:e2:fe:e1:3d:fc:b4:dd:d3: a0:26:72:7e:95:ca:0b:2e:43:e2:d2:39:42:d6:f2:3b:e3:9d: 2b:2a:57:a1:96:93:90:e3:a4:7d:f6:34:7a:56:55:fb:fc:67: 25:cc:83:ad:b9:10:dc:9d:1a:36:d6:4e:ab:26:dc:52:30:12: 22:af:ae:d8:ba:8b:08:97:17:d5:08:ab:13:0e:2f:cf:cf:58: 94:7d:90:b1:a6:4d:dd:e5:48:58:00:8e:ad:65:2f:4d:79:7f: 55:68:dd:21:43:b0:17:0a:4d:ae:54:f4:c0:ec:92:a9:d8:74: d9:22:f2:a7:29:7b:d8:5b:de:f8:51:f4:9d:27:b6:db:91:db: 6b:36:c5:a5:e6:21:97:71:aa:d3:2a:7d:9d:c6:f3:d9:6f:77: 57:b1:9f:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP7bPDzUKYKtwuxgLSc5IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkMDQ4MzUzODczNzQ1M2UyZjU3ZmZiNTc0OTljMzkyMmU4 MzYzNmQwHhcNMjUxMjA2MDYwMDUzWhcNMjUxMjA3MDYwMDUzWjAzMTEwLwYDVQQD EyhkZmI2OWRiZTRiOTFkMzU1YjljMmJlYTcyMmI1YTE4YWJjNGIxMWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCFjFC/IfJEaP2aOEehaN2EJljTz XM0ERk2kaMPF6CnjPqoBhTCAA1Nc9gD+a/6mRc2jVHHDgoulKiZW7KARoDYeZhjP JJNssXGxnvSkRCh6xtNMpYsAANwkeorfM93VLcE18V2KnIbR3wRoVzuHEZmSUUgZ 0rq6bqPm6ci9oDiIUIrZ4lTWJi3DN3Ewc6gzEh3nmrhALDq8Uy6pqq7XLKxJigHa Z9OmyQ7oK3RYnklAL2UuV9HXM+Gr1qb9gsD1FMls3hxLsNPJPpBtiLRTIDHNl8bJ lhbilXCVkghxitDRAxILnifCaCRfFUK+j0x1KtzUtMDNDGG7mb0Gpi5VRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN+2nb5LkdNVucK+pyK1oYq8SxHZMB8GA1UdIwQY MBaAFD0Eg1OHN0U+L1f/tXSZw5Iug2NtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFFTRFU0YzNSVDR2Vl8tMWRKbkRraTZEWTIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9lMTA2YzMtMGIxZi00MDEwLTg2ZjEt NjVhNDZjOGU0MWU5LzEvUFFTRFU0YzNSVDR2Vl8tMWRKbkRraTZEWTIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9lMTA2YzMtMGIxZi00MDEwLTg2ZjEtNjVhNDZjOGU0MWU5 LzEvUFFTRFU0YzNSVDR2Vl8tMWRKbkRraTZEWTIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcoRhRGBn p9YkP35M0QUxbF1+QxpwZ1HRKqBDnt3yEI/w8w1rTVyJFKBNOXNktn3NvpkkIVnv WPlXellrmb8W9xfAZ/P2RBWgYYP3E44UMwufLQ55d8jfO/yDlJrRdxrwOA0r5OL+ 4T38tN3ToCZyfpXKCy5D4tI5QtbyO+OdKypXoZaTkOOkffY0elZV+/xnJcyDrbkQ 3J0aNtZOqybcUjASIq+u2LqLCJcX1QirEw4vz89YlH2QsaZN3eVIWACOrWUvTXl/ VWjdIUOwFwpNrlT0wOySqdh02SLypyl72Fve+FH0nSe225HbazbFpeYhl3Gq0yp9 ncbz2W93V7GfOw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:20:07 2025 by rpki-client