This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft File: PSOEt4Txl-oD2sL-2niV_Et0Byk.mft (raw, json) Hash identifier: i9+b03VP7TueE8GxQrqWOEbd2t/sIh1dCr4qOfitT8I= Subject key identifier: 04:0A:22:54:51:22:DC:4E:E4:0F:2E:6A:82:E5:B8:3A:E3:10:7D:D3 Authority key identifier: 3D:23:84:B7:84:F1:97:EA:03:DA:C2:FE:DA:78:95:FC:4B:74:07:29 Certificate issuer: /CN=3d2384b784f197ea03dac2feda7895fc4b740729 Certificate serial: 019AF0BF6ED48DF38A2C90DA125EE2B662B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft Manifest number: 1765 Signing time: Fri 05 Dec 2025 23:01:08 +0000 Manifest this update: Fri 05 Dec 2025 23:01:08 +0000 Manifest next update: Sat 06 Dec 2025 23:01:08 +0000 Files and hashes: 1: Iu-aA6mIgmV7NRaHZwfWxVQwunE.roa (hash: o5Wzr2WPXf+6jJuX+5+5esP5UlB6RWICl6cgQsSyWJw=) 2: PSOEt4Txl-oD2sL-2niV_Et0Byk.crl (hash: EStPIXZ6O5O9Z53EHNbcvPrjipMIo28CEiJNeu34j/4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:6e:d4:8d:f3:8a:2c:90:da:12:5e:e2:b6:62:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d2384b784f197ea03dac2feda7895fc4b740729 Validity Not Before: Dec 5 23:01:08 2025 GMT Not After : Dec 6 23:01:08 2025 GMT Subject: CN=040a22545122dc4ee40f2e6a82e5b83ae3107dd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:43:bc:df:bd:09:17:e0:8f:45:90:e5:5b:46: 69:e3:7d:91:25:6c:3f:12:69:8d:1e:26:3d:57:6e: 42:7a:8e:46:56:78:0e:7f:0c:fa:5c:1b:14:c3:d2: 19:bb:2e:6f:99:42:50:b3:a2:e9:58:7b:41:3b:d4: 61:bd:53:72:44:95:b0:24:3e:12:4f:6e:a1:93:ec: c3:85:29:ea:d5:84:09:f2:ff:84:cb:20:24:17:91: 90:7f:27:86:30:83:a3:82:44:a2:2d:0f:6c:81:a2: be:bf:fd:82:32:0b:45:c4:a2:84:90:e7:b4:ad:08: 8b:86:e8:44:90:4e:67:c5:d0:bd:25:cb:cd:53:94: 16:3d:50:77:68:7d:36:6d:23:82:c6:d5:91:24:cf: 15:b7:94:16:a6:4f:b4:34:09:e9:e0:d2:59:2f:f4: 16:4d:88:6d:c3:4d:92:b4:32:b4:10:9e:e6:7f:21: f1:41:b9:86:04:d6:96:62:a9:26:50:7b:1f:86:c9: 1e:6d:ad:6d:6e:04:13:d8:49:a3:fe:2c:a0:7c:e6: fe:a8:44:6d:fe:77:8a:b6:03:ec:30:7f:9b:14:6f: 90:20:e8:6a:51:cd:ce:e0:e2:63:f0:0a:d3:00:b4: a1:37:85:10:2c:cd:3e:ca:9a:f9:01:56:bd:e0:32: 85:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:0A:22:54:51:22:DC:4E:E4:0F:2E:6A:82:E5:B8:3A:E3:10:7D:D3 X509v3 Authority Key Identifier: keyid:3D:23:84:B7:84:F1:97:EA:03:DA:C2:FE:DA:78:95:FC:4B:74:07:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:67:a0:f1:4d:73:4c:8b:de:2b:b8:29:a6:7a:38:18:1e:12: 54:51:31:8a:36:75:e4:b8:3d:62:c5:5d:b2:4c:4e:8f:4c:4c: 4e:44:68:d2:21:bc:e4:c4:e2:4d:e8:8a:00:4c:aa:b3:34:6d: 1d:50:31:ec:df:cc:be:c8:62:86:aa:11:ac:af:39:f3:3a:a8: 13:37:c1:4e:a1:51:e9:d4:00:e0:cd:83:a7:f9:6f:1d:2a:9f: f8:2d:0f:d8:c7:8f:b0:16:68:8b:f8:95:9e:9e:92:5d:f8:7f: ac:44:46:07:9f:4f:a9:32:dd:5f:5a:d8:be:8f:ae:a8:6b:7b: 45:a7:3f:19:eb:01:d5:3e:b1:e7:60:3f:92:32:35:29:8e:1e: aa:57:1e:71:3f:68:f9:0f:b2:21:c8:67:8b:d3:bb:c1:f5:17: 9f:10:97:0e:4f:a9:98:b9:7a:8b:9c:c2:d6:78:49:9a:dd:6f: 68:7d:0b:74:86:fd:d9:1a:53:1a:01:97:ee:1b:1b:4e:af:44: 4c:be:9a:80:f2:6b:7e:f6:c1:8f:b0:e5:c2:fb:34:8b:b0:56: 52:2d:e5:48:9e:7c:25:ce:7a:de:d5:e2:83:b6:34:82:13:52: 3a:1c:76:46:4d:0a:e9:9d:30:a8:d5:43:de:d0:23:81:3d:19: 72:bb:78:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv27UjfOKLJDaEl7itmK4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkMjM4NGI3ODRmMTk3ZWEwM2RhYzJmZWRhNzg5NWZjNGI3 NDA3MjkwHhcNMjUxMjA1MjMwMTA4WhcNMjUxMjA2MjMwMTA4WjAzMTEwLwYDVQQD EygwNDBhMjI1NDUxMjJkYzRlZTQwZjJlNmE4MmU1YjgzYWUzMTA3ZGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUO8370JF+CPRZDlW0Zp432RJWw/ EmmNHiY9V25Ceo5GVngOfwz6XBsUw9IZuy5vmUJQs6LpWHtBO9RhvVNyRJWwJD4S T26hk+zDhSnq1YQJ8v+EyyAkF5GQfyeGMIOjgkSiLQ9sgaK+v/2CMgtFxKKEkOe0 rQiLhuhEkE5nxdC9JcvNU5QWPVB3aH02bSOCxtWRJM8Vt5QWpk+0NAnp4NJZL/QW TYhtw02StDK0EJ7mfyHxQbmGBNaWYqkmUHsfhskeba1tbgQT2Emj/iygfOb+qERt /neKtgPsMH+bFG+QIOhqUc3O4OJj8ArTALShN4UQLM0+ypr5AVa94DKF1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQKIlRRItxO5A8uaoLluDrjEH3TMB8GA1UdIwQY MBaAFD0jhLeE8ZfqA9rC/tp4lfxLdAcpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFNPRXQ0VHhsLW9EMnNMLTJuaVZfRXQwQnlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8zYmQxM2QtZmU5NS00ODZmLTgwZWYt ZjA3MzU0ODM1MmJmLzEvUFNPRXQ0VHhsLW9EMnNMLTJuaVZfRXQwQnlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8zYmQxM2QtZmU5NS00ODZmLTgwZWYtZjA3MzU0ODM1MmJm LzEvUFNPRXQ0VHhsLW9EMnNMLTJuaVZfRXQwQnlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaGeg8U1z TIveK7gppno4GB4SVFExijZ15Lg9YsVdskxOj0xMTkRo0iG85MTiTeiKAEyqszRt HVAx7N/MvshihqoRrK858zqoEzfBTqFR6dQA4M2Dp/lvHSqf+C0P2MePsBZoi/iV np6SXfh/rERGB59PqTLdX1rYvo+uqGt7Rac/GesB1T6x52A/kjI1KY4eqlcecT9o +Q+yIchni9O7wfUXnxCXDk+pmLl6i5zC1nhJmt1vaH0LdIb92RpTGgGX7hsbTq9E TL6agPJrfvbBj7Dlwvs0i7BWUi3lSJ58Jc563tXig7Y0ghNSOhx2Rk0K6Z0wqNVD 3tAjgT0Zcrt4Qw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:27 2025 by rpki-client