This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft File: peC5TwtOTIRu-c8nzciBEIdrHPM.mft (raw, json) Hash identifier: Uu/18KKblj9/bPESVSigfR1MNM/xycZ80SKbfObv56s= Subject key identifier: 06:2B:B7:00:43:22:DD:D7:7E:23:90:C4:CA:31:AA:AF:B6:4B:89:3A Authority key identifier: A5:E0:B9:4F:0B:4E:4C:84:6E:F9:CF:27:CD:C8:81:10:87:6B:1C:F3 Certificate issuer: /CN=a5e0b94f0b4e4c846ef9cf27cdc88110876b1cf3 Certificate serial: 019AF0BED8FE9549F354D176BF4748A82030 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft Manifest number: 1763 Signing time: Fri 05 Dec 2025 23:00:30 +0000 Manifest this update: Fri 05 Dec 2025 23:00:30 +0000 Manifest next update: Sat 06 Dec 2025 23:00:30 +0000 Files and hashes: 1: h7eLMCHte9yG-YlFcanGWeY98cc.roa (hash: XK6lpwQoOO2MYAb/MpQPPdSt14GbrWEwi/jo8t+GYvc=) 2: peC5TwtOTIRu-c8nzciBEIdrHPM.crl (hash: FTb8ImmhozD5D3fywRKhsL8766TGSIe0MYaMehm+n8w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:d8:fe:95:49:f3:54:d1:76:bf:47:48:a8:20:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5e0b94f0b4e4c846ef9cf27cdc88110876b1cf3 Validity Not Before: Dec 5 23:00:30 2025 GMT Not After : Dec 6 23:00:30 2025 GMT Subject: CN=062bb7004322ddd77e2390c4ca31aaafb64b893a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:de:bc:2d:4a:7c:c2:b9:6f:d4:48:e4:e1:65: 5e:25:5b:71:67:74:d1:af:0c:f7:79:57:2a:5a:1d: 38:e1:0c:ab:2c:8f:da:9b:e4:7f:03:50:c5:cd:9c: 13:e6:81:60:7e:ed:94:99:b5:5a:31:f8:83:d7:df: 2a:5b:81:e1:d3:b3:33:c8:d1:49:46:31:cd:44:a2: 33:ed:ad:5a:9b:67:22:48:71:5d:c7:92:15:5f:6d: 29:1d:e4:f1:e5:d7:60:a2:02:12:8d:b5:90:27:53: 4c:a3:0a:cf:f5:a5:5a:20:52:57:27:62:93:3d:e6: 66:8f:73:3f:dc:99:db:36:94:1a:c3:d3:d4:19:e8: aa:9f:d9:c5:5b:11:2f:66:eb:63:e8:6b:b5:c7:e2: 82:3f:28:47:00:95:15:1d:07:24:57:be:6b:0e:e3: e3:60:39:2d:a2:e6:69:88:19:03:8c:6e:99:0d:78: b0:9b:10:49:d8:1b:50:cf:7f:8d:0a:41:51:95:e1: 46:50:e3:3a:d9:4c:c2:fb:72:b8:57:d4:4c:c5:d3: c7:33:3d:5c:1d:12:cc:e0:76:36:15:66:30:65:c6: 25:7b:d8:0d:8b:8f:22:b6:8a:91:1e:12:b7:d4:1d: a8:d8:3f:57:c6:2c:42:8b:38:53:89:99:ba:4f:1f: 52:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:2B:B7:00:43:22:DD:D7:7E:23:90:C4:CA:31:AA:AF:B6:4B:89:3A X509v3 Authority Key Identifier: keyid:A5:E0:B9:4F:0B:4E:4C:84:6E:F9:CF:27:CD:C8:81:10:87:6B:1C:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:7f:84:76:a6:fc:d8:64:bc:80:c1:bc:dd:66:40:0c:16:69: 1e:67:5f:27:dc:5c:33:61:16:af:e2:3b:15:1d:12:71:c5:5d: a1:23:8a:a3:6d:0e:75:b2:9a:a2:d1:41:63:06:46:99:4a:b2: 68:62:9d:f8:c8:62:f1:04:00:bf:02:2e:03:1d:b2:9f:de:81: 33:38:f8:ac:3a:0b:11:2d:be:95:8c:73:89:ac:d0:04:a2:81: 26:0b:90:5d:66:99:3c:a1:41:c3:f7:7b:55:c3:d4:b4:86:18: 31:58:e3:fc:3c:15:22:01:3e:cc:44:29:17:9d:1a:cd:89:7d: b2:9a:e0:f6:b7:e2:0b:8d:8f:28:9d:ff:ed:84:f5:c3:c4:2d: e2:b8:bb:e3:7b:d9:84:76:7b:de:c8:bb:69:ec:13:84:1a:c3: 7b:01:a7:4a:8f:20:83:55:80:c9:63:9d:49:99:ee:39:03:2a: 45:06:c1:f5:45:39:d0:1a:22:4e:57:33:b6:fb:ae:b4:25:41: 2c:77:78:7c:71:b5:52:5e:f0:92:40:ad:bd:2e:c4:00:0c:4c: fa:d4:f4:ca:2f:d1:21:f4:1c:ee:c9:cc:d7:0d:a7:c4:ea:a6: b5:ca:91:b2:aa:f4:5f:d2:ee:9e:83:85:2d:33:dc:4c:4b:6c: 7f:9b:3e:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvtj+lUnzVNF2v0dIqCAwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1ZTBiOTRmMGI0ZTRjODQ2ZWY5Y2YyN2NkYzg4MTEwODc2 YjFjZjMwHhcNMjUxMjA1MjMwMDMwWhcNMjUxMjA2MjMwMDMwWjAzMTEwLwYDVQQD EygwNjJiYjcwMDQzMjJkZGQ3N2UyMzkwYzRjYTMxYWFhZmI2NGI4OTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzt68LUp8wrlv1Ejk4WVeJVtxZ3TR rwz3eVcqWh044QyrLI/am+R/A1DFzZwT5oFgfu2UmbVaMfiD198qW4Hh07MzyNFJ RjHNRKIz7a1am2ciSHFdx5IVX20pHeTx5ddgogISjbWQJ1NMowrP9aVaIFJXJ2KT PeZmj3M/3JnbNpQaw9PUGeiqn9nFWxEvZutj6Gu1x+KCPyhHAJUVHQckV75rDuPj YDktouZpiBkDjG6ZDXiwmxBJ2BtQz3+NCkFRleFGUOM62UzC+3K4V9RMxdPHMz1c HRLM4HY2FWYwZcYle9gNi48itoqRHhK31B2o2D9XxixCizhTiZm6Tx9SKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAYrtwBDIt3XfiOQxMoxqq+2S4k6MB8GA1UdIwQY MBaAFKXguU8LTkyEbvnPJ83IgRCHaxzzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGVDNVR3dE9USVJ1LWM4bnpjaUJFSWRySFBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zODc3MjAtNTc4NC00ZTAzLTgxM2Mt MTNiMjkwNzUwZmI5LzEvcGVDNVR3dE9USVJ1LWM4bnpjaUJFSWRySFBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8zODc3MjAtNTc4NC00ZTAzLTgxM2MtMTNiMjkwNzUwZmI5 LzEvcGVDNVR3dE9USVJ1LWM4bnpjaUJFSWRySFBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARH+Edqb8 2GS8gMG83WZADBZpHmdfJ9xcM2EWr+I7FR0SccVdoSOKo20OdbKaotFBYwZGmUqy aGKd+Mhi8QQAvwIuAx2yn96BMzj4rDoLES2+lYxziazQBKKBJguQXWaZPKFBw/d7 VcPUtIYYMVjj/DwVIgE+zEQpF50azYl9sprg9rfiC42PKJ3/7YT1w8Qt4ri743vZ hHZ73si7aewThBrDewGnSo8gg1WAyWOdSZnuOQMqRQbB9UU50BoiTlcztvuutCVB LHd4fHG1Ul7wkkCtvS7EAAxM+tT0yi/RIfQc7snM1w2nxOqmtcqRsqr0X9LunoOF LTPcTEtsf5s+aQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:55 2025 by rpki-client