This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft File: PSOEt4Txl-oD2sL-2niV_Et0Byk.mft (raw, json) Hash identifier: EWhenwTN0wbM3XpMBzn00bCvIzPLuCeIuLLcuRbteq8= Subject key identifier: 50:97:17:5C:A5:41:6B:0F:DB:12:5B:DB:07:05:11:48:FB:98:CC:90 Authority key identifier: 3D:23:84:B7:84:F1:97:EA:03:DA:C2:FE:DA:78:95:FC:4B:74:07:29 Certificate issuer: /CN=3d2384b784f197ea03dac2feda7895fc4b740729 Certificate serial: 019B345653B1BA005F69134FEBE20A3C8890 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft Manifest number: 1788 Signing time: Fri 19 Dec 2025 02:00:31 +0000 Manifest this update: Fri 19 Dec 2025 02:00:31 +0000 Manifest next update: Sat 20 Dec 2025 02:00:31 +0000 Files and hashes: 1: Iu-aA6mIgmV7NRaHZwfWxVQwunE.roa (hash: o5Wzr2WPXf+6jJuX+5+5esP5UlB6RWICl6cgQsSyWJw=) 2: PSOEt4Txl-oD2sL-2niV_Et0Byk.crl (hash: FTIJe9BGhYc9zmlqXhG+LwnVZR05b7+UDo9zoFKkJ1A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:23:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:53:b1:ba:00:5f:69:13:4f:eb:e2:0a:3c:88:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d2384b784f197ea03dac2feda7895fc4b740729 Validity Not Before: Dec 19 02:00:31 2025 GMT Not After : Dec 20 02:00:31 2025 GMT Subject: CN=5097175ca5416b0fdb125bdb07051148fb98cc90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a4:81:7a:62:7c:46:e0:c4:c3:55:b4:43:43: c4:cf:29:ed:bd:47:f5:c4:e9:ff:7a:87:b6:fb:2e: e8:9f:a9:0c:ed:23:a1:04:15:1c:d5:9b:00:c5:2c: b7:60:b4:50:b6:9a:34:42:d0:fc:74:25:04:3e:1d: 3b:b4:a6:60:b3:df:ff:31:c9:f8:8e:26:d7:02:7a: da:ae:79:11:c1:f8:b9:69:d5:1a:75:5a:da:d8:1a: ad:bf:12:24:56:4f:f2:d8:ed:e8:42:a3:24:4c:4b: 20:e9:a9:85:9a:bc:22:d1:8a:bd:d1:4b:eb:bb:12: 6e:ae:3c:bb:04:12:f0:da:90:16:b7:3d:af:1a:2c: 75:51:27:41:c7:24:ca:1a:8a:ed:c9:d5:ac:60:94: 1b:57:86:84:a4:0d:8b:1e:5b:91:4d:e5:b0:c5:86: 2d:a4:d6:99:b7:f1:04:4b:28:74:0c:43:91:6d:7b: 2b:ac:e0:89:03:be:e6:42:d1:84:12:06:68:b4:f9: 61:f9:1e:50:83:99:1f:7d:02:11:bd:b8:86:3b:5c: 2f:b2:d6:12:2c:c8:c5:02:ee:6d:be:48:d9:69:95: 18:78:d2:4d:75:13:6a:cb:6f:a5:92:94:cc:69:07: d2:21:8b:05:dd:67:e6:4a:77:f3:10:ba:0b:91:34: 24:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:97:17:5C:A5:41:6B:0F:DB:12:5B:DB:07:05:11:48:FB:98:CC:90 X509v3 Authority Key Identifier: keyid:3D:23:84:B7:84:F1:97:EA:03:DA:C2:FE:DA:78:95:FC:4B:74:07:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:e6:31:d4:a8:0b:6d:35:e9:c6:0b:82:cb:e4:a7:18:95:4a: 7a:b6:25:5d:db:5b:36:41:b9:3e:ed:b6:5c:2d:c7:a8:6e:07: 11:5a:d3:8f:5e:0d:84:cf:7b:55:ac:14:c3:89:0f:c2:39:c3: 1a:b0:6e:97:7d:f4:d7:7a:59:ba:1e:11:2e:15:d9:e8:ed:51: d7:e3:c1:2f:7e:3c:47:82:eb:85:df:f7:3a:ad:9d:9e:b6:cf: 45:4e:c1:53:bf:fe:77:ee:d2:22:6f:2e:d8:e3:50:25:7c:7b: 22:05:64:f9:b8:76:45:98:7d:39:04:88:de:88:5e:49:4f:ed: 47:3e:05:6a:6e:1d:db:73:c9:38:2a:fa:b6:8d:c8:42:bf:7a: 8d:6c:a7:0b:10:69:ad:de:98:a5:9b:71:06:6f:d8:cb:6f:e1: be:ab:21:47:ee:d8:9d:c9:80:83:7e:8f:08:bc:ba:b0:c9:0d: 4f:7c:d0:26:09:d4:6a:74:9e:87:a1:9c:08:ab:cd:d6:90:b1: 57:3d:55:9f:63:46:aa:1b:d0:a9:41:5a:36:c0:2c:d4:89:97: 1b:d5:4a:2f:28:84:a4:a5:73:29:8c:b5:ac:eb:ea:a7:39:6e: 29:5f:a5:f9:cd:a6:02:34:49:3f:f8:4e:f4:a5:79:40:4e:8d: c6:92:60:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VlOxugBfaRNP6+IKPIiQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkMjM4NGI3ODRmMTk3ZWEwM2RhYzJmZWRhNzg5NWZjNGI3 NDA3MjkwHhcNMjUxMjE5MDIwMDMxWhcNMjUxMjIwMDIwMDMxWjAzMTEwLwYDVQQD Eyg1MDk3MTc1Y2E1NDE2YjBmZGIxMjViZGIwNzA1MTE0OGZiOThjYzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06SBemJ8RuDEw1W0Q0PEzyntvUf1 xOn/eoe2+y7on6kM7SOhBBUc1ZsAxSy3YLRQtpo0QtD8dCUEPh07tKZgs9//Mcn4 jibXAnrarnkRwfi5adUadVra2BqtvxIkVk/y2O3oQqMkTEsg6amFmrwi0Yq90Uvr uxJurjy7BBLw2pAWtz2vGix1USdBxyTKGortydWsYJQbV4aEpA2LHluRTeWwxYYt pNaZt/EESyh0DEORbXsrrOCJA77mQtGEEgZotPlh+R5Qg5kffQIRvbiGO1wvstYS LMjFAu5tvkjZaZUYeNJNdRNqy2+lkpTMaQfSIYsF3WfmSnfzELoLkTQkCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFCXF1ylQWsP2xJb2wcFEUj7mMyQMB8GA1UdIwQY MBaAFD0jhLeE8ZfqA9rC/tp4lfxLdAcpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFNPRXQ0VHhsLW9EMnNMLTJuaVZfRXQwQnlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8zYmQxM2QtZmU5NS00ODZmLTgwZWYt ZjA3MzU0ODM1MmJmLzEvUFNPRXQ0VHhsLW9EMnNMLTJuaVZfRXQwQnlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8zYmQxM2QtZmU5NS00ODZmLTgwZWYtZjA3MzU0ODM1MmJm LzEvUFNPRXQ0VHhsLW9EMnNMLTJuaVZfRXQwQnlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOuYx1KgL bTXpxguCy+SnGJVKerYlXdtbNkG5Pu22XC3HqG4HEVrTj14NhM97VawUw4kPwjnD GrBul33013pZuh4RLhXZ6O1R1+PBL348R4Lrhd/3Oq2dnrbPRU7BU7/+d+7SIm8u 2ONQJXx7IgVk+bh2RZh9OQSI3oheSU/tRz4Fam4d23PJOCr6to3IQr96jWynCxBp rd6YpZtxBm/Yy2/hvqshR+7YncmAg36PCLy6sMkNT3zQJgnUanSeh6GcCKvN1pCx Vz1Vn2NGqhvQqUFaNsAs1ImXG9VKLyiEpKVzKYy1rOvqpzluKV+l+c2mAjRJP/hO 9KV5QE6NxpJgBw== -----END CERTIFICATE-----Generated at Fri Dec 19 08:42:06 2025 by rpki-client