This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft File: PvLDEpButnNhK6502i3RigNoJLE.mft (raw, json) Hash identifier: rLTKNv6/Trzxo8QObWUZmB6mLa2BL3hIWvHb3EEjurA= Subject key identifier: 19:E4:0F:FB:29:1B:7D:1D:5D:DF:52:58:8E:F5:23:48:11:19:5C:76 Authority key identifier: 3E:F2:C3:12:90:6E:B6:73:61:2B:AE:74:DA:2D:D1:8A:03:68:24:B1 Certificate issuer: /CN=3ef2c312906eb673612bae74da2dd18a036824b1 Certificate serial: 019AF276D8EF407256A5E30D8D9895022BCD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft Manifest number: 0BE2 Signing time: Sat 06 Dec 2025 07:01:06 +0000 Manifest this update: Sat 06 Dec 2025 07:01:06 +0000 Manifest next update: Sun 07 Dec 2025 07:01:06 +0000 Files and hashes: 1: 9qEL2pFi8GcNKTnAwY3D31I1-18.roa (hash: kRwBp+rZmhG6iafwWEWyexpHApyotJ76NYZuUZZ35QQ=) 2: PvLDEpButnNhK6502i3RigNoJLE.crl (hash: 1GDPc1nEKPAB062OfK6mHYY+ehiGGb4/Nt9kL6yZuYM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:d8:ef:40:72:56:a5:e3:0d:8d:98:95:02:2b:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ef2c312906eb673612bae74da2dd18a036824b1 Validity Not Before: Dec 6 07:01:06 2025 GMT Not After : Dec 7 07:01:06 2025 GMT Subject: CN=19e40ffb291b7d1d5ddf52588ef5234811195c76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:03:3b:0b:42:4d:43:57:ef:c0:92:7d:83:26: 32:d5:d9:4c:8d:ab:31:37:7a:00:55:55:0f:4b:1e: 9c:79:df:f8:01:ac:88:4f:5f:87:00:c0:77:97:6a: b2:d7:a0:e5:75:7c:de:d5:57:c2:5a:54:e5:35:0c: f5:22:ae:60:8b:f4:b1:69:ba:3e:5e:b7:59:67:20: f1:8e:c6:ae:cb:35:93:9c:d6:d0:21:0f:99:aa:5e: 40:19:40:9b:13:aa:84:22:c3:1a:7f:49:e5:fc:ea: 57:6d:e9:7b:56:8a:40:08:f9:11:af:e3:b2:90:3e: e0:bb:b4:3f:3f:6f:d2:8d:d8:f1:e8:7b:c0:b7:49: 37:98:74:4d:70:77:b7:20:e8:cf:a1:ee:27:48:11: 4b:86:7e:10:0d:b2:f1:97:4a:9a:ac:22:0a:0d:78: c3:78:31:20:17:55:19:63:6b:96:b7:7e:e9:c0:e3: 96:6e:85:5b:09:dc:51:aa:cc:65:a4:08:ad:b2:1c: d7:bf:98:c7:fc:2f:dd:3a:5c:5e:5c:e4:4f:46:5f: 70:f5:14:8c:e3:95:84:11:24:75:5d:73:18:48:bf: b1:59:e7:ae:e4:cf:5b:2b:92:78:80:03:70:99:1a: d8:39:de:7f:a9:31:96:a5:03:45:05:62:f5:92:44: 36:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:E4:0F:FB:29:1B:7D:1D:5D:DF:52:58:8E:F5:23:48:11:19:5C:76 X509v3 Authority Key Identifier: keyid:3E:F2:C3:12:90:6E:B6:73:61:2B:AE:74:DA:2D:D1:8A:03:68:24:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:b0:d1:91:89:02:cb:0a:d5:12:db:e7:70:f5:32:81:25:07: 0c:a7:f6:f4:3d:93:9d:87:f8:7c:5a:e2:3b:ce:1b:75:bc:aa: f8:4f:93:84:02:5d:f5:83:45:d3:d4:a5:8a:5c:ed:b9:73:a2: 8c:6d:46:9b:6b:d0:0b:2f:91:28:61:1c:d5:38:f5:e6:5a:91: 14:63:7d:6c:32:70:fe:51:22:56:ee:96:14:9d:e8:67:9a:8f: 24:14:83:f4:d3:65:92:1a:b1:c8:bd:95:1f:42:bb:91:5d:6c: 24:88:48:20:dc:f3:5a:b8:a0:24:bb:f5:2d:c9:20:ab:ba:24: 56:b9:dd:d8:59:dc:5e:9b:86:91:ee:cb:11:b0:53:a9:0c:12: fc:db:f4:e0:55:2d:d0:26:b2:e8:ba:46:02:49:ff:22:2e:70: 80:53:1f:f3:a6:80:6d:f8:32:b0:0e:bd:5d:98:69:48:5b:55: 84:f9:38:79:17:7d:15:a1:6a:c3:b2:93:3a:82:9f:a8:95:17: 8a:47:57:b1:34:1d:6d:fe:d2:a3:c6:9e:96:00:d4:b9:10:ba: b3:95:93:04:87:67:18:9c:3a:a2:33:a2:79:c0:bb:3d:5f:9a: 03:69:1c:bf:6d:4a:b2:07:30:bb:5b:42:8f:ff:43:f1:e1:c1: a9:f6:72:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydtjvQHJWpeMNjZiVAivNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZjJjMzEyOTA2ZWI2NzM2MTJiYWU3NGRhMmRkMThhMDM2 ODI0YjEwHhcNMjUxMjA2MDcwMTA2WhcNMjUxMjA3MDcwMTA2WjAzMTEwLwYDVQQD EygxOWU0MGZmYjI5MWI3ZDFkNWRkZjUyNTg4ZWY1MjM0ODExMTk1Yzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQM7C0JNQ1fvwJJ9gyYy1dlMjasx N3oAVVUPSx6ced/4AayIT1+HAMB3l2qy16DldXze1VfCWlTlNQz1Iq5gi/Sxabo+ XrdZZyDxjsauyzWTnNbQIQ+Zql5AGUCbE6qEIsMaf0nl/OpXbel7VopACPkRr+Oy kD7gu7Q/P2/Sjdjx6HvAt0k3mHRNcHe3IOjPoe4nSBFLhn4QDbLxl0qarCIKDXjD eDEgF1UZY2uWt37pwOOWboVbCdxRqsxlpAitshzXv5jH/C/dOlxeXORPRl9w9RSM 45WEESR1XXMYSL+xWeeu5M9bK5J4gANwmRrYOd5/qTGWpQNFBWL1kkQ2rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBnkD/spG30dXd9SWI71I0gRGVx2MB8GA1UdIwQY MBaAFD7ywxKQbrZzYSuudNot0YoDaCSxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHZMREVwQnV0bk5oSzY1MDJpM1JpZ05vSkxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC83ODgyZTMtZGU4Zi00NzUxLTliNmYt YzlmZmJlOWI5NGQzLzEvUHZMREVwQnV0bk5oSzY1MDJpM1JpZ05vSkxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC83ODgyZTMtZGU4Zi00NzUxLTliNmYtYzlmZmJlOWI5NGQz LzEvUHZMREVwQnV0bk5oSzY1MDJpM1JpZ05vSkxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIrDRkYkC ywrVEtvncPUygSUHDKf29D2TnYf4fFriO84bdbyq+E+ThAJd9YNF09SlilztuXOi jG1Gm2vQCy+RKGEc1Tj15lqRFGN9bDJw/lEiVu6WFJ3oZ5qPJBSD9NNlkhqxyL2V H0K7kV1sJIhIINzzWrigJLv1Lckgq7okVrnd2FncXpuGke7LEbBTqQwS/Nv04FUt 0Cay6LpGAkn/Ii5wgFMf86aAbfgysA69XZhpSFtVhPk4eRd9FaFqw7KTOoKfqJUX ikdXsTQdbf7So8aelgDUuRC6s5WTBIdnGJw6ojOiecC7PV+aA2kcv21Ksgcwu1tC j/9D8eHBqfZyKA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:32:14 2025 by rpki-client