This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft File: pcY3PqsZz0PdL0MRE5g4PuK60DA.mft (raw, json) Hash identifier: 8unen6TbTnvgcjWQtAzsy/2DmUMS9Z94Kl3fnaOsllw= Subject key identifier: 63:D1:D2:5B:56:FD:65:94:ED:87:EB:60:AA:56:55:A8:39:F0:C8:4F Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30 Certificate issuer: /CN=a5c6373eab19cf43dd2f43111398383ee2bad030 Certificate serial: 019AF12DF5EE862AED166FB9CCCC6DA1FA31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft Manifest number: 121D Signing time: Sat 06 Dec 2025 01:01:52 +0000 Manifest this update: Sat 06 Dec 2025 01:01:52 +0000 Manifest next update: Sun 07 Dec 2025 01:01:52 +0000 Files and hashes: 1: CLeDWh39NdLvyQS_i3NwJ9CDF5A.roa (hash: AodjA/u0IZIHWzW0wUzupROWai2JCPHe4BHHea78Ms0=) 2: IVs_hi0L8DU-XvjpZ3j52FBoeuA.roa (hash: gjbii66qiZGzea5anGixtq9DuuHhboIpMcO6QPFsj6s=) 3: VrU7ZjcTG9RIkuIvhPHDcadoKZM.roa (hash: g8P7wwNKLRxTvKsPwE4zpfRuDPifBy4qLKB2zlBcTlw=) 4: h5Sxz-4g29FV3kYMoX_wX3iFTqQ.roa (hash: MiZeUc7o+bnHAdooPcAB7y8KMpj0xgLMlX8Uuhc2f7E=) 5: m5QjthCyb83zFe-XzGZ1VPtryIE.roa (hash: idq0+QCfBZJuG2uqoWlXprOQsupzpFPhxR03Ji+VJ/A=) 6: pcY3PqsZz0PdL0MRE5g4PuK60DA.crl (hash: ZgFGh5iPX/iqHjrGUsp+j4VA0u+WADJ2ZwbR3q8Vxug=) 7: rwgU2mlTS06e7YPqA2lYPO26aP0.roa (hash: w9oJA8hR7uQfiHK53Tj7B18Tkd/AVTn4HnDtFZKJyRA=) 8: zduwkC5PQDOGNkAdIMyn-hz63Ys.roa (hash: dngQzoKRwxwQY6jw/yt5nYtfsqDVjR83fQraMN2FWXk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:f5:ee:86:2a:ed:16:6f:b9:cc:cc:6d:a1:fa:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030 Validity Not Before: Dec 6 01:01:52 2025 GMT Not After : Dec 7 01:01:52 2025 GMT Subject: CN=63d1d25b56fd6594ed87eb60aa5655a839f0c84f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b2:d0:30:7a:fc:8a:4a:0d:0f:5a:78:8a:7d: 10:b6:dc:c0:e1:ba:d7:44:11:cc:19:c0:b0:9b:1b: 49:3b:66:e5:f2:f7:d0:bc:6b:0b:d4:0d:5b:98:e0: af:0a:0a:63:2e:9e:77:37:d3:45:54:15:e9:76:61: cb:36:22:fb:ea:0c:e5:87:65:d5:c1:1f:c3:94:22: 42:47:9e:31:45:02:2a:df:db:ce:d8:a5:4b:b0:e2: 9d:3c:45:25:2d:b5:18:50:9d:e7:1b:28:67:d0:c7: b4:3e:e7:a5:64:02:36:ae:86:10:06:f9:69:47:d8: 8b:b4:33:85:cb:8a:ec:30:89:a7:74:76:7a:46:2e: 6a:a2:28:5a:2d:c3:38:7e:fc:39:6a:d5:65:11:e5: 1f:31:3d:89:1b:80:66:b3:a5:a9:3e:81:a6:3d:86: d8:3f:df:95:4a:a8:84:fd:c7:ec:da:fb:f7:94:d1: 1c:7c:d2:4e:7d:90:e0:03:f7:2b:5e:34:fa:5f:45: 34:40:b9:a7:f0:cd:82:65:44:8c:2e:a2:aa:24:38: 5b:ff:66:62:f8:b0:b8:b2:dd:4e:48:d3:16:c2:74: 2c:37:73:97:e9:35:94:5a:e0:3e:c0:7a:46:6b:21: 79:ff:be:e2:b1:2f:92:39:47:40:9c:e9:67:d1:34: 1a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:D1:D2:5B:56:FD:65:94:ED:87:EB:60:AA:56:55:A8:39:F0:C8:4F X509v3 Authority Key Identifier: keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:aa:00:39:5c:17:f9:ee:12:b7:d5:ce:f4:10:b5:99:19:41: e1:8d:91:eb:99:78:2c:bd:b9:91:aa:12:cc:f4:21:76:6f:1d: 64:9c:91:5e:92:50:d2:d1:a1:d4:70:5c:7b:9a:96:97:cf:22: aa:20:10:13:12:71:3c:69:ac:1c:88:8b:87:0f:04:8c:1e:b8: b9:4e:8c:20:64:08:76:68:ba:87:ab:fa:9f:97:f0:cd:44:e1: 9e:68:b9:d7:67:2f:ae:57:d7:57:1a:8e:c7:0f:18:30:f7:3a: 59:58:47:7e:9e:cf:51:c7:5a:dc:32:22:23:c1:2a:db:67:5e: 84:2a:54:a0:54:71:a6:5f:c1:bc:f3:3f:d0:aa:ac:f3:5d:6d: ec:5d:c9:ac:c8:ef:2b:98:58:fc:db:b0:4d:c7:aa:fa:3b:18: b5:40:73:4b:fe:53:36:48:fe:46:2f:64:72:da:ef:69:be:70: 1c:2b:84:db:ad:e0:06:44:52:e0:53:fb:71:08:dd:9e:96:3a: 3f:d6:42:d1:c2:f1:1a:b9:66:49:13:0f:24:d2:5c:10:54:cd: 66:e5:3b:f8:17:d4:97:f3:4a:4a:96:95:95:03:9e:4f:c8:70: 60:a9:47:63:fe:58:5f:16:b2:6d:a2:ff:a3:2f:a0:c5:c0:37: 9a:3f:a3:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLfXuhirtFm+5zMxtofoxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YzYzNzNlYWIxOWNmNDNkZDJmNDMxMTEzOTgzODNlZTJi YWQwMzAwHhcNMjUxMjA2MDEwMTUyWhcNMjUxMjA3MDEwMTUyWjAzMTEwLwYDVQQD Eyg2M2QxZDI1YjU2ZmQ2NTk0ZWQ4N2ViNjBhYTU2NTVhODM5ZjBjODRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrLQMHr8ikoND1p4in0QttzA4brX RBHMGcCwmxtJO2bl8vfQvGsL1A1bmOCvCgpjLp53N9NFVBXpdmHLNiL76gzlh2XV wR/DlCJCR54xRQIq39vO2KVLsOKdPEUlLbUYUJ3nGyhn0Me0PuelZAI2roYQBvlp R9iLtDOFy4rsMImndHZ6Ri5qoihaLcM4fvw5atVlEeUfMT2JG4Bms6WpPoGmPYbY P9+VSqiE/cfs2vv3lNEcfNJOfZDgA/crXjT6X0U0QLmn8M2CZUSMLqKqJDhb/2Zi +LC4st1OSNMWwnQsN3OX6TWUWuA+wHpGayF5/77isS+SOUdAnOln0TQaNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGPR0ltW/WWU7YfrYKpWVag58MhPMB8GA1UdIwQY MBaAFKXGNz6rGc9D3S9DEROYOD7iutAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mMGY1ZTMtNjA1MC00ZTJkLWE0ZWEt YTRlYTBhNjNmNzY2LzEvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9mMGY1ZTMtNjA1MC00ZTJkLWE0ZWEtYTRlYTBhNjNmNzY2 LzEvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfqoAOVwX +e4St9XO9BC1mRlB4Y2R65l4LL25kaoSzPQhdm8dZJyRXpJQ0tGh1HBce5qWl88i qiAQExJxPGmsHIiLhw8EjB64uU6MIGQIdmi6h6v6n5fwzUThnmi512cvrlfXVxqO xw8YMPc6WVhHfp7PUcda3DIiI8Eq22dehCpUoFRxpl/BvPM/0Kqs811t7F3JrMjv K5hY/NuwTceq+jsYtUBzS/5TNkj+Ri9kctrvab5wHCuE263gBkRS4FP7cQjdnpY6 P9ZC0cLxGrlmSRMPJNJcEFTNZuU7+BfUl/NKSpaVlQOeT8hwYKlHY/5YXxaybaL/ oy+gxcA3mj+jvQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:37:03 2025 by rpki-client