This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft File: PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft (raw, json) Hash identifier: BKUfSc49ZMCZuHKIW2DP09NSxrRAcyfW1Rf9k6zgl9U= Subject key identifier: 48:59:61:2B:04:A3:EE:68:9A:11:7A:98:86:9F:97:19:76:A1:94:90 Authority key identifier: 3E:D2:39:45:FF:75:61:EE:99:D2:E2:78:E7:38:8D:04:5F:AD:D3:14 Certificate issuer: /CN=3ed23945ff7561ee99d2e278e7388d045fadd314 Certificate serial: 019B30E89F586BA6D42757396825FD8A85D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft Manifest number: 0C87 Signing time: Thu 18 Dec 2025 10:01:50 +0000 Manifest this update: Thu 18 Dec 2025 10:01:50 +0000 Manifest next update: Fri 19 Dec 2025 10:01:50 +0000 Files and hashes: 1: 1-QJRvD_s23t8EY5xEdDTuC908Sc.roa (hash: lC8dpaKtg1+1rVuBlbmqllxIuGpvRJft4kKrK9r2MOs=) 2: PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.crl (hash: plRXQMyfOCc+2Tc+zXB5J3hxfvNCvV+X7H5UlMQHzvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:9f:58:6b:a6:d4:27:57:39:68:25:fd:8a:85:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ed23945ff7561ee99d2e278e7388d045fadd314 Validity Not Before: Dec 18 10:01:50 2025 GMT Not After : Dec 19 10:01:50 2025 GMT Subject: CN=4859612b04a3ee689a117a98869f971976a19490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1f:0b:49:94:21:03:13:90:09:21:79:7a:04: 70:5b:e7:21:b4:89:2c:46:9f:f4:2c:a4:94:57:04: 52:85:4d:ef:14:71:72:23:ea:3a:59:7d:fe:c2:9c: c1:50:d3:6c:2f:38:67:a9:d3:04:d2:eb:d4:cd:ab: c2:c3:70:f7:a7:dc:bd:43:fd:cd:fd:a1:19:f1:3b: f0:ed:09:f8:02:c7:d3:94:b5:d2:78:c9:1f:60:ad: 2d:3a:a5:7e:e9:6e:47:7d:77:e6:64:68:fd:50:65: 39:4f:03:fe:3d:85:52:16:76:81:38:bc:81:73:0f: a9:ff:21:56:85:10:d1:03:82:e4:f4:ba:d4:38:03: 31:a3:3d:63:85:41:e4:15:71:04:8f:d8:6b:e0:05: 42:9c:04:da:ba:63:52:df:8b:1b:e4:9f:73:ef:6d: 7d:54:7a:3a:41:d9:d6:96:8f:92:83:fd:95:1f:c0: 22:c3:ca:09:ef:16:09:76:25:78:05:c5:e3:83:59: 00:ca:ab:dc:46:4c:55:dc:d1:7d:0c:fc:4b:ba:c7: 6a:db:47:7d:d6:36:57:90:f2:ca:00:e5:c4:ac:67: 1b:94:a9:89:27:0c:0b:7d:6c:57:ec:7d:ff:6f:c5: 55:60:ab:2c:fb:1d:70:cf:1f:c3:32:95:c9:cd:fa: 4c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:59:61:2B:04:A3:EE:68:9A:11:7A:98:86:9F:97:19:76:A1:94:90 X509v3 Authority Key Identifier: keyid:3E:D2:39:45:FF:75:61:EE:99:D2:E2:78:E7:38:8D:04:5F:AD:D3:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:76:c5:cd:64:02:ba:08:0d:fe:ff:4e:db:7d:82:57:19:22: 60:c7:97:5c:f9:b9:c9:9f:cd:05:a8:77:81:63:0c:57:e7:fc: 78:db:8d:34:80:89:c1:d2:d7:e2:b7:96:71:01:84:e8:b4:d4: bb:b3:06:bf:5f:76:ee:20:7d:02:46:c1:fd:50:e7:fa:ef:ed: e9:b6:5b:48:25:d9:4f:9c:3f:7e:20:e4:d2:9a:dc:77:35:38: ad:3d:bd:09:b1:b4:12:ec:40:15:36:1e:d9:36:16:aa:de:88: 09:d4:99:3c:88:08:1e:6a:f7:53:6a:22:62:64:a0:ac:09:c0: 42:ef:e1:da:d3:92:8c:c1:9f:64:8b:59:8b:b0:f4:f5:aa:f2: 3d:0b:b4:9b:b8:22:df:2c:55:e5:83:8e:f1:8f:86:9b:32:0e: cb:d3:93:9f:02:90:4c:d3:c3:16:fd:b6:5b:69:14:97:b9:50: 7e:22:74:70:9b:0b:18:ed:d0:27:7f:ab:fa:24:2f:e4:88:df: 1f:a4:4d:10:99:6f:a0:9a:87:d2:72:25:a4:a3:27:e7:1c:da: e8:0e:52:6b:06:ee:dc:f0:53:cd:2b:f8:5e:d6:e6:50:81:6d: a0:6c:99:b7:4c:e4:13:e6:4f:33:ad:75:45:b6:e9:99:15:42: 49:25:17:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6J9Ya6bUJ1c5aCX9ioXQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZDIzOTQ1ZmY3NTYxZWU5OWQyZTI3OGU3Mzg4ZDA0NWZh ZGQzMTQwHhcNMjUxMjE4MTAwMTUwWhcNMjUxMjE5MTAwMTUwWjAzMTEwLwYDVQQD Eyg0ODU5NjEyYjA0YTNlZTY4OWExMTdhOTg4NjlmOTcxOTc2YTE5NDkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuR8LSZQhAxOQCSF5egRwW+chtIks Rp/0LKSUVwRShU3vFHFyI+o6WX3+wpzBUNNsLzhnqdME0uvUzavCw3D3p9y9Q/3N /aEZ8Tvw7Qn4AsfTlLXSeMkfYK0tOqV+6W5HfXfmZGj9UGU5TwP+PYVSFnaBOLyB cw+p/yFWhRDRA4Lk9LrUOAMxoz1jhUHkFXEEj9hr4AVCnATaumNS34sb5J9z7219 VHo6QdnWlo+Sg/2VH8Aiw8oJ7xYJdiV4BcXjg1kAyqvcRkxV3NF9DPxLusdq20d9 1jZXkPLKAOXErGcblKmJJwwLfWxX7H3/b8VVYKss+x1wzx/DMpXJzfpMZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEhZYSsEo+5omhF6mIaflxl2oZSQMB8GA1UdIwQY MBaAFD7SOUX/dWHumdLieOc4jQRfrdMUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHRJNVJmOTFZZTZaMHVKNDV6aU5CRi10MHhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9jZTc2MmItZGNlYi00ZDVmLWIxZmIt NzczMjlhN2U3ZGZlLzEvUHRJNVJmOTFZZTZaMHVKNDV6aU5CRi10MHhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9jZTc2MmItZGNlYi00ZDVmLWIxZmItNzczMjlhN2U3ZGZl LzEvUHRJNVJmOTFZZTZaMHVKNDV6aU5CRi10MHhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjnbFzWQC uggN/v9O232CVxkiYMeXXPm5yZ/NBah3gWMMV+f8eNuNNICJwdLX4reWcQGE6LTU u7MGv1927iB9AkbB/VDn+u/t6bZbSCXZT5w/fiDk0prcdzU4rT29CbG0EuxAFTYe 2TYWqt6ICdSZPIgIHmr3U2oiYmSgrAnAQu/h2tOSjMGfZItZi7D09aryPQu0m7gi 3yxV5YOO8Y+GmzIOy9OTnwKQTNPDFv22W2kUl7lQfiJ0cJsLGO3QJ3+r+iQv5Ijf H6RNEJlvoJqH0nIlpKMn5xza6A5Sawbu3PBTzSv4XtbmUIFtoGyZt0zkE+ZPM611 RbbpmRVCSSUXWg== -----END CERTIFICATE-----Generated at Thu Dec 18 19:12:58 2025 by rpki-client