This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft File: pTjytsVCHgpCkQBAxbhlCKiVuRY.mft (raw, json) Hash identifier: d60EVE6WbYV+lJhdvAoBQyCSW5dId80vuMvhhNidS8Q= Subject key identifier: C1:40:96:7A:34:CF:50:03:03:20:25:35:43:BA:BA:11:CE:A2:61:7A Authority key identifier: A5:38:F2:B6:C5:42:1E:0A:42:91:00:40:C5:B8:65:08:A8:95:B9:16 Certificate issuer: /CN=a538f2b6c5421e0a42910040c5b86508a895b916 Certificate serial: 019AF2AD539151760234AAC15B2EE7CF576D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTjytsVCHgpCkQBAxbhlCKiVuRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft Manifest number: 05F1 Signing time: Sat 06 Dec 2025 08:00:36 +0000 Manifest this update: Sat 06 Dec 2025 08:00:36 +0000 Manifest next update: Sun 07 Dec 2025 08:00:36 +0000 Files and hashes: 1: pTjytsVCHgpCkQBAxbhlCKiVuRY.crl (hash: XkPMQBHZH2ysoq1lWopuBBn5sdD4bvkj865PTfbnUxg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft rsync://rpki.ripe.net/repository/DEFAULT/pTjytsVCHgpCkQBAxbhlCKiVuRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:53:91:51:76:02:34:aa:c1:5b:2e:e7:cf:57:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a538f2b6c5421e0a42910040c5b86508a895b916 Validity Not Before: Dec 6 08:00:36 2025 GMT Not After : Dec 7 08:00:36 2025 GMT Subject: CN=c140967a34cf50030320253543baba11cea2617a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b5:60:8f:4f:3a:d9:a8:28:12:d8:46:36:0d: e0:73:0a:fb:ee:80:8f:ce:9b:3f:c1:d5:76:2e:7f: 46:94:5d:38:3b:32:98:bf:b1:4c:c8:95:7a:19:ef: 4b:5f:b2:a9:d8:72:64:43:f0:54:cb:e3:db:cb:5d: 28:d6:dc:5d:44:19:e2:8f:53:56:f1:7d:27:0e:3d: e7:fc:54:5a:92:af:ac:ce:64:51:4c:a8:c9:c4:fd: 6f:26:20:a8:40:1c:d1:9a:70:d6:56:38:66:c9:cb: db:cb:50:36:85:5a:7c:a6:c3:20:c9:35:e2:24:46: cb:f8:47:b1:82:2a:68:9a:46:e6:70:e8:ec:d1:d7: dc:71:d0:17:09:6a:9f:6a:77:c0:63:5a:db:23:1e: 50:8c:8a:dd:da:5a:b0:69:65:76:fb:2f:c7:81:82: 4a:02:32:44:a6:38:ba:e1:d5:a0:ad:29:b8:bd:da: d0:fe:21:c7:1d:db:0a:93:ca:76:1a:22:92:22:23: 82:b8:2b:54:d8:54:81:0d:18:0d:70:42:8e:5b:25: 37:35:6b:a4:d5:a9:c5:23:1d:29:b9:b8:8f:2f:79: fd:7f:b1:4c:b6:18:04:6b:ad:f4:a4:f7:b0:9c:7b: ed:04:fd:8d:5c:6c:54:b2:02:c3:a7:eb:91:a2:1b: ea:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:40:96:7A:34:CF:50:03:03:20:25:35:43:BA:BA:11:CE:A2:61:7A X509v3 Authority Key Identifier: keyid:A5:38:F2:B6:C5:42:1E:0A:42:91:00:40:C5:B8:65:08:A8:95:B9:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTjytsVCHgpCkQBAxbhlCKiVuRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:d0:45:7d:23:85:61:78:99:db:f6:ec:25:4d:46:75:0b:fe: 0f:82:3f:ac:0e:06:11:73:32:c7:e4:90:e5:f6:a5:f8:3a:fc: dd:7d:c1:03:c5:d2:92:5f:d7:a5:5b:65:be:ff:09:ea:14:11: 8c:c0:28:95:ee:9b:be:28:3b:b2:05:7b:8c:21:3c:c6:ff:71: d0:8a:ca:22:f6:8f:7f:4b:2a:ba:89:49:9d:8a:47:69:0f:39: fd:76:40:ff:c4:c6:b4:34:12:e5:ab:c2:2f:a8:9a:e2:e3:86: 43:4d:df:c7:11:76:bf:d5:ee:e3:71:05:cd:47:7e:d8:f8:10: fa:76:ed:46:ee:0b:03:40:1e:0d:df:f6:8c:ee:20:0d:4b:a1: 0f:77:6f:4f:80:04:27:68:13:3e:65:f8:0b:7b:ef:76:4c:95: 30:ef:d5:70:b0:ea:3e:75:ec:77:ca:47:1b:6a:8d:da:60:8f: 02:7f:88:b4:a8:ae:a6:8d:60:14:f7:90:7d:79:56:e2:34:4a: b2:40:37:b8:16:cc:23:c4:47:ba:9a:5a:c1:ef:a6:a5:59:12: a8:92:60:03:24:4b:4f:74:f9:78:98:cc:d3:40:11:33:9c:1f: 3d:ca:f1:d1:ee:38:f4:71:e9:8d:0a:08:f4:1b:db:fa:70:a6: 35:02:e9:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrVORUXYCNKrBWy7nz1dtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MzhmMmI2YzU0MjFlMGE0MjkxMDA0MGM1Yjg2NTA4YTg5 NWI5MTYwHhcNMjUxMjA2MDgwMDM2WhcNMjUxMjA3MDgwMDM2WjAzMTEwLwYDVQQD EyhjMTQwOTY3YTM0Y2Y1MDAzMDMyMDI1MzU0M2JhYmExMWNlYTI2MTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrVgj0862agoEthGNg3gcwr77oCP zps/wdV2Ln9GlF04OzKYv7FMyJV6Ge9LX7Kp2HJkQ/BUy+Pby10o1txdRBnij1NW 8X0nDj3n/FRakq+szmRRTKjJxP1vJiCoQBzRmnDWVjhmycvby1A2hVp8psMgyTXi JEbL+EexgipomkbmcOjs0dfccdAXCWqfanfAY1rbIx5QjIrd2lqwaWV2+y/HgYJK AjJEpji64dWgrSm4vdrQ/iHHHdsKk8p2GiKSIiOCuCtU2FSBDRgNcEKOWyU3NWuk 1anFIx0pubiPL3n9f7FMthgEa630pPewnHvtBP2NXGxUsgLDp+uRohvq5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMFAlno0z1ADAyAlNUO6uhHOomF6MB8GA1UdIwQY MBaAFKU48rbFQh4KQpEAQMW4ZQiolbkWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFRqeXRzVkNIZ3BDa1FCQXhiaGxDS2lWdVJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81YWU5MzUtZjZlMC00MDczLTlmNzkt ZWM2YzAxZjQ3MjRlLzEvcFRqeXRzVkNIZ3BDa1FCQXhiaGxDS2lWdVJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC81YWU5MzUtZjZlMC00MDczLTlmNzktZWM2YzAxZjQ3MjRl LzEvcFRqeXRzVkNIZ3BDa1FCQXhiaGxDS2lWdVJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAONBFfSOF YXiZ2/bsJU1GdQv+D4I/rA4GEXMyx+SQ5fal+Dr83X3BA8XSkl/XpVtlvv8J6hQR jMAole6bvig7sgV7jCE8xv9x0IrKIvaPf0squolJnYpHaQ85/XZA/8TGtDQS5avC L6ia4uOGQ03fxxF2v9Xu43EFzUd+2PgQ+nbtRu4LA0AeDd/2jO4gDUuhD3dvT4AE J2gTPmX4C3vvdkyVMO/VcLDqPnXsd8pHG2qN2mCPAn+ItKiupo1gFPeQfXlW4jRK skA3uBbMI8RHuppawe+mpVkSqJJgAyRLT3T5eJjM00ARM5wfPcrx0e449HHpjQoI 9Bvb+nCmNQLprA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:39:35 2025 by rpki-client