This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft File: PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft (raw, json) Hash identifier: jrqE2JUuBbutnyl0RCbAva0a1Qom1vu+shZNjpBTNVo= Subject key identifier: D1:E6:33:B5:26:53:DB:07:2E:E6:4C:B4:B4:0B:65:69:A1:33:B3:D7 Authority key identifier: 3C:CA:84:9B:37:50:15:F4:33:E9:A2:40:EC:AB:F0:3C:F1:52:C7:81 Certificate issuer: /CN=3cca849b375015f433e9a240ecabf03cf152c781 Certificate serial: 019AF2AD6015F527B303010D2498D6B15043 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 08:00:39 +0000 Manifest this update: Sat 06 Dec 2025 08:00:39 +0000 Manifest next update: Sun 07 Dec 2025 08:00:39 +0000 Files and hashes: 1: PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl (hash: qqdpSaYrSwevk3DNVaCEn1gKXfgDCuq4ooyXLg+CN1Y=) 2: tJh122419FX7oJQGYtZtkXOvqn0.roa (hash: 80WcSAxcwtJA+++UZrQ3DpOoXBp5rklUr6m+pRMbNZo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:60:15:f5:27:b3:03:01:0d:24:98:d6:b1:50:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cca849b375015f433e9a240ecabf03cf152c781 Validity Not Before: Dec 6 08:00:39 2025 GMT Not After : Dec 7 08:00:39 2025 GMT Subject: CN=d1e633b52653db072ee64cb4b40b6569a133b3d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:43:e4:30:b0:18:a4:3a:1c:fa:8f:ca:96:7f: e8:f0:88:6f:09:24:0f:04:95:60:ba:85:8c:10:08: 48:cb:9f:40:23:24:30:1f:60:60:6d:a1:89:92:e1: f3:14:1a:a6:32:18:da:10:36:c5:4f:a8:4e:4f:2c: f1:75:7b:50:6d:de:03:ec:05:e5:48:fe:33:b4:4a: e3:01:cb:11:3d:5b:9f:a6:cb:13:5e:d3:0e:23:ca: 68:fc:5e:ab:c9:bd:49:7e:e4:12:36:69:14:6a:dd: 98:30:f2:97:9c:96:ab:a2:41:b6:e5:48:2b:f8:02: ac:61:6e:4d:00:14:ce:48:c4:cb:ff:b9:b6:bd:40: 42:c8:c8:27:d8:df:6d:1c:c7:81:86:7a:46:52:f5: c7:92:b7:4b:36:dc:68:4d:2a:26:1b:4a:01:15:3e: 91:07:6b:d8:96:c5:ff:cc:54:52:0e:44:52:24:c7: 27:96:7c:59:57:80:db:7c:b2:d5:20:f8:98:b5:92: 99:ef:6d:5e:75:6f:4b:ee:fd:f9:8c:67:f8:28:31: d6:30:a0:e8:50:1b:b7:09:d0:89:2c:59:ed:23:23: 4d:66:25:66:8b:4f:38:d9:71:fb:ad:bd:46:90:f2: f2:47:ba:c0:12:58:b0:f7:72:1d:25:54:81:dc:09: bb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E6:33:B5:26:53:DB:07:2E:E6:4C:B4:B4:0B:65:69:A1:33:B3:D7 X509v3 Authority Key Identifier: keyid:3C:CA:84:9B:37:50:15:F4:33:E9:A2:40:EC:AB:F0:3C:F1:52:C7:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:e2:d7:d9:8a:b7:c4:26:06:32:1a:a9:8d:5c:f6:b4:fc:45: 5f:71:b6:f6:9d:c2:30:4f:cf:ee:f3:f2:03:56:24:dd:cc:51: 91:8c:db:8f:b6:da:41:3f:87:e1:9f:95:14:3d:0b:b2:eb:51: a8:0d:1d:b3:87:c2:d0:05:4f:27:d9:6c:54:f9:ab:3d:3b:5c: 04:46:2f:2f:8a:e2:4b:23:07:dd:e1:b5:06:1d:14:83:e5:84: 33:f5:5f:ab:94:a3:8e:bb:ef:51:04:88:f8:44:de:1b:b6:64: 03:a5:a5:b6:71:a9:3b:10:b3:de:7e:64:65:a6:12:57:80:fa: e4:fa:6f:d6:43:32:69:f0:41:50:23:bc:78:91:14:81:a3:10: d6:98:f8:4a:60:bf:fd:f0:03:af:17:91:2c:19:d3:59:6c:e0: 22:21:a1:c5:79:c3:db:33:f0:94:e3:f3:7c:43:c3:76:66:3c: 14:1a:1f:6f:a0:05:f6:44:58:d6:26:32:fd:1d:69:3d:b6:f2: 98:3d:82:4f:d5:ca:64:5a:7a:5b:8e:2a:ab:ff:51:9b:8b:57: 23:3e:37:b3:15:69:60:a3:f2:88:53:4e:29:7a:d9:37:83:19: c5:ee:f1:4a:33:88:66:c4:3d:0c:51:5b:eb:a7:2b:45:d0:7b: 9e:ff:89:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrWAV9SezAwENJJjWsVBDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjY2E4NDliMzc1MDE1ZjQzM2U5YTI0MGVjYWJmMDNjZjE1 MmM3ODEwHhcNMjUxMjA2MDgwMDM5WhcNMjUxMjA3MDgwMDM5WjAzMTEwLwYDVQQD EyhkMWU2MzNiNTI2NTNkYjA3MmVlNjRjYjRiNDBiNjU2OWExMzNiM2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UPkMLAYpDoc+o/Kln/o8IhvCSQP BJVguoWMEAhIy59AIyQwH2BgbaGJkuHzFBqmMhjaEDbFT6hOTyzxdXtQbd4D7AXl SP4ztErjAcsRPVufpssTXtMOI8po/F6ryb1JfuQSNmkUat2YMPKXnJarokG25Ugr +AKsYW5NABTOSMTL/7m2vUBCyMgn2N9tHMeBhnpGUvXHkrdLNtxoTSomG0oBFT6R B2vYlsX/zFRSDkRSJMcnlnxZV4DbfLLVIPiYtZKZ721edW9L7v35jGf4KDHWMKDo UBu3CdCJLFntIyNNZiVmi0842XH7rb1GkPLyR7rAEliw93IdJVSB3Am73wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNHmM7UmU9sHLuZMtLQLZWmhM7PXMB8GA1UdIwQY MBaAFDzKhJs3UBX0M+miQOyr8DzxUseBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUE1xRW16ZFFGZlF6NmFKQTdLdndQUEZTeDRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yNzU2MzYtZmUzZi00NTI4LWJkN2Ut ZDYyNTVmMjUyN2RhLzEvUE1xRW16ZFFGZlF6NmFKQTdLdndQUEZTeDRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8yNzU2MzYtZmUzZi00NTI4LWJkN2UtZDYyNTVmMjUyN2Rh LzEvUE1xRW16ZFFGZlF6NmFKQTdLdndQUEZTeDRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANuLX2Yq3 xCYGMhqpjVz2tPxFX3G29p3CME/P7vPyA1Yk3cxRkYzbj7baQT+H4Z+VFD0LsutR qA0ds4fC0AVPJ9lsVPmrPTtcBEYvL4riSyMH3eG1Bh0Ug+WEM/Vfq5SjjrvvUQSI +ETeG7ZkA6WltnGpOxCz3n5kZaYSV4D65Ppv1kMyafBBUCO8eJEUgaMQ1pj4SmC/ /fADrxeRLBnTWWzgIiGhxXnD2zPwlOPzfEPDdmY8FBofb6AF9kRY1iYy/R1pPbby mD2CT9XKZFp6W44qq/9Rm4tXIz43sxVpYKPyiFNOKXrZN4MZxe7xSjOIZsQ9DFFb 66crRdB7nv+JKg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:10:44 2025 by rpki-client