This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft File: PQG9lJxV7QfnAkLhUDPQqEdKnho.mft (raw, json) Hash identifier: u+sQfKKk/Nd2DdrVxOL2spYhnWxNFkwW+eaQs8x1Ysk= Subject key identifier: F8:34:C4:98:A8:97:0D:24:28:B3:92:46:83:4F:D6:62:59:0A:5D:CD Authority key identifier: 3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A Certificate issuer: /CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a Certificate serial: 019B31FAE2F34642C0DBFDB7988F77F1D655 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft Manifest number: 0661 Signing time: Thu 18 Dec 2025 15:01:24 +0000 Manifest this update: Thu 18 Dec 2025 15:01:24 +0000 Manifest next update: Fri 19 Dec 2025 15:01:24 +0000 Files and hashes: 1: PQG9lJxV7QfnAkLhUDPQqEdKnho.crl (hash: cSymv72RTvHAjepAzgCtqzzPFiuzQ4vspIwumZh2DYI=) 2: wTHnefFYASN9t7OgaDJP2pTz5W4.roa (hash: 9oC2Jer2cW2AbqdUqYgPoU7bU/Jm0xDFHVun+XWYaKg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:e2:f3:46:42:c0:db:fd:b7:98:8f:77:f1:d6:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a Validity Not Before: Dec 18 15:01:24 2025 GMT Not After : Dec 19 15:01:24 2025 GMT Subject: CN=f834c498a8970d2428b39246834fd662590a5dcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:24:c0:0d:92:e8:ea:5b:6c:63:ad:a1:ce:8a: 50:c6:4e:31:8e:bf:d3:5a:6c:a5:e5:e5:22:65:09: 1a:d8:ff:04:45:e8:b6:81:32:44:33:36:c1:54:b9: 70:18:75:8d:c1:f8:aa:8c:d5:2e:ce:c3:94:7e:9a: b3:65:4c:50:09:1b:c2:21:62:8b:6b:bd:ae:a7:ca: b3:35:4b:46:f9:87:45:61:92:35:fb:d6:19:ac:00: 96:40:3b:27:04:54:12:83:05:4a:6a:83:c9:78:fd: e9:7e:d5:ad:cc:f2:40:d4:6e:85:5d:ea:84:eb:ac: e8:c3:45:d1:cc:22:5e:e5:eb:a1:b6:f2:c1:d9:55: 7f:6d:3f:29:2d:5b:38:5e:ca:5e:d5:c6:c7:08:b6: db:af:8b:77:bb:94:63:c4:24:f9:76:db:87:2e:43: c5:49:fe:06:4d:10:e5:bd:37:9c:7e:23:cd:c1:60: f5:41:70:20:81:de:43:01:cd:92:22:9f:eb:0e:32: 76:12:ca:92:51:15:d1:82:d2:24:03:fb:66:20:e4: 9c:dc:d1:22:8b:42:2b:b8:5a:83:cb:52:59:5b:15: 0f:f5:22:7f:4f:39:80:40:13:34:1a:87:fc:34:92: 06:b6:01:44:13:a4:23:e9:76:82:f7:c8:e4:94:4e: 82:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:34:C4:98:A8:97:0D:24:28:B3:92:46:83:4F:D6:62:59:0A:5D:CD X509v3 Authority Key Identifier: keyid:3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:b3:7e:fc:77:0a:fc:58:31:be:75:88:6f:1d:db:fc:ca:20: 21:ba:f5:c3:95:77:11:5b:5e:ce:85:80:5b:fc:66:02:5f:68: 57:ef:75:57:25:c0:62:30:98:bf:31:da:f8:de:c9:69:a5:02: f8:92:32:2b:32:b2:2f:3f:1a:7f:0e:77:86:e4:4c:68:f8:d2: a1:3c:75:58:00:02:c6:1f:d0:b7:07:9e:93:9d:7d:a4:9c:f1: 4c:70:79:fe:b6:80:05:60:a3:35:8a:46:c8:de:37:57:e1:ec: 3d:5c:f6:67:e8:6c:b9:91:61:35:4e:71:7e:92:23:dd:60:d2: c8:e5:3e:8e:e4:9c:9f:16:b3:bd:8c:77:3d:b9:d9:97:d6:d9: d0:5e:e9:9d:5b:88:34:d3:5b:12:0c:b7:ab:2a:02:17:e2:ed: 11:03:d6:7b:0c:fe:26:10:0e:bd:f2:8e:90:90:eb:5f:90:8b: 31:f6:86:75:d3:ce:1f:48:3e:3f:1a:79:22:72:d6:2c:e4:82: e4:e4:7c:02:58:29:0f:bb:95:8e:d1:6d:62:35:f5:6b:a9:0c: 14:85:a9:04:59:49:66:5e:21:63:0e:96:fe:9e:7d:a4:23:8a: ea:48:b1:8b:b5:13:69:6b:87:d1:9d:9f:30:88:65:94:5f:49: 2a:8f:a8:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsx+uLzRkLA2/23mI938dZVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkMDFiZDk0OWM1NWVkMDdlNzAyNDJlMTUwMzNkMGE4NDc0 YTllMWEwHhcNMjUxMjE4MTUwMTI0WhcNMjUxMjE5MTUwMTI0WjAzMTEwLwYDVQQD EyhmODM0YzQ5OGE4OTcwZDI0MjhiMzkyNDY4MzRmZDY2MjU5MGE1ZGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiTADZLo6ltsY62hzopQxk4xjr/T Wmyl5eUiZQka2P8ERei2gTJEMzbBVLlwGHWNwfiqjNUuzsOUfpqzZUxQCRvCIWKL a72up8qzNUtG+YdFYZI1+9YZrACWQDsnBFQSgwVKaoPJeP3pftWtzPJA1G6FXeqE 66zow0XRzCJe5euhtvLB2VV/bT8pLVs4Xspe1cbHCLbbr4t3u5RjxCT5dtuHLkPF Sf4GTRDlvTecfiPNwWD1QXAggd5DAc2SIp/rDjJ2EsqSURXRgtIkA/tmIOSc3NEi i0IruFqDy1JZWxUP9SJ/TzmAQBM0Gof8NJIGtgFEE6Qj6XaC98jklE6CWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPg0xJiolw0kKLOSRoNP1mJZCl3NMB8GA1UdIwQY MBaAFD0BvZScVe0H5wJC4VAz0KhHSp4aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFFHOWxKeFY3UWZuQWtMaFVEUFFxRWRLbmhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMTUwMDMtZWQ1My00MmQzLWFmMDkt ZTRlMGI1NTVhZDU5LzEvUFFHOWxKeFY3UWZuQWtMaFVEUFFxRWRLbmhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9jMTUwMDMtZWQ1My00MmQzLWFmMDktZTRlMGI1NTVhZDU5 LzEvUFFHOWxKeFY3UWZuQWtMaFVEUFFxRWRLbmhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHrN+/HcK /FgxvnWIbx3b/MogIbr1w5V3EVtezoWAW/xmAl9oV+91VyXAYjCYvzHa+N7JaaUC +JIyKzKyLz8afw53huRMaPjSoTx1WAACxh/Qtweek519pJzxTHB5/raABWCjNYpG yN43V+HsPVz2Z+hsuZFhNU5xfpIj3WDSyOU+juScnxazvYx3PbnZl9bZ0F7pnVuI NNNbEgy3qyoCF+LtEQPWewz+JhAOvfKOkJDrX5CLMfaGddPOH0g+Pxp5InLWLOSC 5OR8AlgpD7uVjtFtYjX1a6kMFIWpBFlJZl4hYw6W/p59pCOK6kixi7UTaWuH0Z2f MIhllF9JKo+omQ== -----END CERTIFICATE-----Generated at Thu Dec 18 23:04:16 2025 by rpki-client