This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/b3b106-774a-4690-a03c-35c1c79aa1dc/1/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.mft File: PmoAuz7ZB8Umrdtaq9mtdkssPZ4.mft (raw, json) Hash identifier: FSGToYMPXDIMkoRSnApw+0+6KCQdmC3cnloYoiD1NtA= Subject key identifier: 99:63:85:73:33:1A:55:1B:D6:DD:1B:7E:04:44:AE:00:BB:5F:91:AF Authority key identifier: 3E:6A:00:BB:3E:D9:07:C5:26:AD:DB:5A:AB:D9:AD:76:4B:2C:3D:9E Certificate issuer: /CN=3e6a00bb3ed907c526addb5aabd9ad764b2c3d9e Certificate serial: 019AF2771AFF31DD992CF146DEB0E7923158 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/b3b106-774a-4690-a03c-35c1c79aa1dc/1/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.mft Manifest number: 042F Signing time: Sat 06 Dec 2025 07:01:22 +0000 Manifest this update: Sat 06 Dec 2025 07:01:22 +0000 Manifest next update: Sun 07 Dec 2025 07:01:22 +0000 Files and hashes: 1: PmoAuz7ZB8Umrdtaq9mtdkssPZ4.crl (hash: J/qIt3P1w9+BsmTi+SbbwbuENfBH0QbMML+iqxDNTWk=) 2: vEaUcgTOmvxT4RwiTozd0tA5mdY.roa (hash: NlBiID9/yPQCEPkEu0Pfr8aESCT+/QAEDOmwYhde0qs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/b3b106-774a-4690-a03c-35c1c79aa1dc/1/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/b3b106-774a-4690-a03c-35c1c79aa1dc/1/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:1a:ff:31:dd:99:2c:f1:46:de:b0:e7:92:31:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6a00bb3ed907c526addb5aabd9ad764b2c3d9e Validity Not Before: Dec 6 07:01:22 2025 GMT Not After : Dec 7 07:01:22 2025 GMT Subject: CN=99638573331a551bd6dd1b7e0444ae00bb5f91af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:16:e0:53:74:9c:41:ad:b0:6c:17:a6:f2:c2: 29:00:7c:c6:42:6a:64:02:a8:0d:a7:a6:03:f8:a0: 08:5a:18:e4:cc:8a:d8:52:2f:c2:a1:0c:72:ab:7b: a8:db:1c:cc:a4:e0:49:df:46:36:80:8e:8a:e6:8f: 4c:56:06:85:f4:37:09:ee:d0:f5:cf:97:b0:d6:99: 90:98:bf:5e:4c:00:55:25:0c:50:0c:da:d9:05:52: 27:9c:5c:86:8a:f0:eb:38:ba:c3:8e:f3:43:aa:9d: 8c:90:f3:a1:fd:14:4e:85:9f:2b:b8:57:90:cc:84: 95:35:a4:91:5d:c0:30:38:e8:fa:d1:b3:bb:c8:99: 54:1b:97:60:93:2a:c9:31:35:a3:e1:99:d1:b7:99: e4:54:f9:79:5a:20:2c:ea:2e:ed:a7:e3:a7:83:58: bb:8a:5a:4c:bf:66:50:eb:97:61:7f:02:cd:82:54: 0a:60:c1:92:b9:f3:da:c9:41:e6:f1:4e:96:1d:8c: 79:cb:a9:66:d2:55:e6:98:b5:da:dd:3d:6a:2d:21: ee:50:9c:be:70:7a:15:ca:87:8c:1e:b7:ce:3e:52: 84:30:33:10:d8:c7:a2:ea:ed:52:44:3e:46:da:d0: 8b:05:70:c6:aa:0a:49:d1:b3:43:c7:55:f9:fb:f2: 01:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:63:85:73:33:1A:55:1B:D6:DD:1B:7E:04:44:AE:00:BB:5F:91:AF X509v3 Authority Key Identifier: keyid:3E:6A:00:BB:3E:D9:07:C5:26:AD:DB:5A:AB:D9:AD:76:4B:2C:3D:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b3b106-774a-4690-a03c-35c1c79aa1dc/1/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b3b106-774a-4690-a03c-35c1c79aa1dc/1/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:d0:79:96:4e:1b:73:f0:49:8d:69:91:f0:5e:a8:b9:16:6b: e2:9b:d4:c1:49:88:c9:ba:00:28:51:cb:2f:0d:b9:fb:a4:47: 8d:44:fa:74:ee:c6:dd:fc:e0:bd:d1:3a:50:ed:97:0a:94:82: fa:e7:0c:a9:08:1b:de:a1:bb:9c:0d:2d:63:b6:c6:dd:5f:28: 30:91:fb:89:15:70:e5:41:93:d2:c1:60:f3:99:3c:df:14:a1: 34:f5:1b:16:fc:df:5a:a1:e0:83:cf:6e:a4:21:0f:84:28:c6: a9:1a:e5:d0:1b:6f:17:1a:48:cc:e6:1c:74:b6:b1:71:6c:6e: 35:44:9a:61:2a:7f:dc:07:b1:40:cb:a5:59:7d:45:18:2f:8f: 1c:93:17:19:88:76:99:9c:4f:29:ac:21:a0:f8:83:68:8f:3b: f8:3f:13:f8:c2:41:30:87:25:af:98:0e:d0:81:dd:b7:c8:6b: a4:96:24:4a:f0:a2:bc:be:03:4c:b7:0a:68:ad:10:b2:78:53: de:4f:1e:db:49:69:92:d0:ef:c1:7e:fb:9e:a8:63:96:b9:81: b5:6b:14:f8:7b:b3:58:88:0e:6e:a5:90:13:06:93:06:0b:1b: f4:aa:fa:39:cf:71:b1:31:f4:e5:d7:cd:16:38:5d:49:d2:fb: fc:85:d2:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydxr/Md2ZLPFG3rDnkjFYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNmEwMGJiM2VkOTA3YzUyNmFkZGI1YWFiZDlhZDc2NGIy YzNkOWUwHhcNMjUxMjA2MDcwMTIyWhcNMjUxMjA3MDcwMTIyWjAzMTEwLwYDVQQD Eyg5OTYzODU3MzMzMWE1NTFiZDZkZDFiN2UwNDQ0YWUwMGJiNWY5MWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBbgU3ScQa2wbBem8sIpAHzGQmpk AqgNp6YD+KAIWhjkzIrYUi/CoQxyq3uo2xzMpOBJ30Y2gI6K5o9MVgaF9DcJ7tD1 z5ew1pmQmL9eTABVJQxQDNrZBVInnFyGivDrOLrDjvNDqp2MkPOh/RROhZ8ruFeQ zISVNaSRXcAwOOj60bO7yJlUG5dgkyrJMTWj4ZnRt5nkVPl5WiAs6i7tp+Ong1i7 ilpMv2ZQ65dhfwLNglQKYMGSufPayUHm8U6WHYx5y6lm0lXmmLXa3T1qLSHuUJy+ cHoVyoeMHrfOPlKEMDMQ2Mei6u1SRD5G2tCLBXDGqgpJ0bNDx1X5+/IBbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJljhXMzGlUb1t0bfgRErgC7X5GvMB8GA1UdIwQY MBaAFD5qALs+2QfFJq3bWqvZrXZLLD2eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1vQXV6N1pCOFVtcmR0YXE5bXRka3NzUFo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9iM2IxMDYtNzc0YS00NjkwLWEwM2Mt MzVjMWM3OWFhMWRjLzEvUG1vQXV6N1pCOFVtcmR0YXE5bXRka3NzUFo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9iM2IxMDYtNzc0YS00NjkwLWEwM2MtMzVjMWM3OWFhMWRj LzEvUG1vQXV6N1pCOFVtcmR0YXE5bXRka3NzUFo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn9B5lk4b c/BJjWmR8F6ouRZr4pvUwUmIyboAKFHLLw25+6RHjUT6dO7G3fzgvdE6UO2XCpSC +ucMqQgb3qG7nA0tY7bG3V8oMJH7iRVw5UGT0sFg85k83xShNPUbFvzfWqHgg89u pCEPhCjGqRrl0BtvFxpIzOYcdLaxcWxuNUSaYSp/3AexQMulWX1FGC+PHJMXGYh2 mZxPKawhoPiDaI87+D8T+MJBMIclr5gO0IHdt8hrpJYkSvCivL4DTLcKaK0QsnhT 3k8e20lpktDvwX77nqhjlrmBtWsU+HuzWIgObqWQEwaTBgsb9Kr6Oc9xsTH05dfN FjhdSdL7/IXS2A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:59:55 2025 by rpki-client