This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d98e86-e41c-45e1-bbe7-8e19c4da8798/1/Pq9YPXwbe09XMQE8iymLpQVGTlI.mft File: Pq9YPXwbe09XMQE8iymLpQVGTlI.mft (raw, json) Hash identifier: BCbWQUK/C6ibbJTLUXwI3R9rZ1VzN3pwyM0wH5p2F5I= Subject key identifier: 14:48:88:57:AD:0E:27:C3:5C:3C:26:52:13:73:39:62:33:03:02:81 Authority key identifier: 3E:AF:58:3D:7C:1B:7B:4F:57:31:01:3C:8B:29:8B:A5:05:46:4E:52 Certificate issuer: /CN=3eaf583d7c1b7b4f5731013c8b298ba505464e52 Certificate serial: 019AF088C31D2FB7B2E405E97258A42B98C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pq9YPXwbe09XMQE8iymLpQVGTlI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/d98e86-e41c-45e1-bbe7-8e19c4da8798/1/Pq9YPXwbe09XMQE8iymLpQVGTlI.mft Manifest number: 137A Signing time: Fri 05 Dec 2025 22:01:25 +0000 Manifest this update: Fri 05 Dec 2025 22:01:25 +0000 Manifest next update: Sat 06 Dec 2025 22:01:25 +0000 Files and hashes: 1: Pq9YPXwbe09XMQE8iymLpQVGTlI.crl (hash: PER2bc/hP7mDpj8ASxxkJBCbr0LWItR40c2qz6RShBc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/d98e86-e41c-45e1-bbe7-8e19c4da8798/1/Pq9YPXwbe09XMQE8iymLpQVGTlI.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/d98e86-e41c-45e1-bbe7-8e19c4da8798/1/Pq9YPXwbe09XMQE8iymLpQVGTlI.mft rsync://rpki.ripe.net/repository/DEFAULT/Pq9YPXwbe09XMQE8iymLpQVGTlI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:c3:1d:2f:b7:b2:e4:05:e9:72:58:a4:2b:98:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eaf583d7c1b7b4f5731013c8b298ba505464e52 Validity Not Before: Dec 5 22:01:25 2025 GMT Not After : Dec 6 22:01:25 2025 GMT Subject: CN=14488857ad0e27c35c3c26521373396233030281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:78:de:07:77:ec:ef:b1:2e:23:84:c0:95:52: dd:0a:bf:bd:35:84:d8:5e:97:b6:e7:22:98:2a:32: 99:ef:a7:20:75:3c:d9:f4:89:62:04:1e:de:72:3d: f9:cd:47:bc:0f:bb:b3:fd:71:df:9f:b6:14:f8:f4: 50:3a:03:6a:50:af:1e:15:c1:75:2f:37:0c:18:42: cc:80:94:cc:69:0d:22:e1:9b:c0:b9:3c:35:f9:d8: 0e:5b:89:12:d8:af:b1:af:e3:fd:a1:af:ad:3e:8d: 33:b2:a4:b7:9a:d8:8a:59:2b:8e:68:23:fe:28:5a: 86:24:33:e9:fa:d3:48:78:81:18:07:1c:1e:80:b7: 35:d9:25:73:b5:17:d0:a2:43:05:1f:cb:d1:f0:80: 33:20:50:ec:3c:46:9c:5a:a1:20:c7:1d:b7:8d:03: bf:42:47:0b:69:90:66:75:0c:20:75:af:1c:94:8d: 08:41:bf:eb:c2:e8:df:dd:f3:b1:58:84:42:00:83: 8a:ac:a3:57:af:15:a6:a6:80:79:16:83:3c:d5:f3: 5f:71:bd:24:b8:a6:c1:3f:3e:57:ac:06:0c:b9:a8: 56:50:00:5f:0a:bb:43:73:78:fb:8f:07:19:fc:df: ff:64:ca:77:10:cc:56:ec:76:86:24:51:0c:89:00: d7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:48:88:57:AD:0E:27:C3:5C:3C:26:52:13:73:39:62:33:03:02:81 X509v3 Authority Key Identifier: keyid:3E:AF:58:3D:7C:1B:7B:4F:57:31:01:3C:8B:29:8B:A5:05:46:4E:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pq9YPXwbe09XMQE8iymLpQVGTlI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d98e86-e41c-45e1-bbe7-8e19c4da8798/1/Pq9YPXwbe09XMQE8iymLpQVGTlI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d98e86-e41c-45e1-bbe7-8e19c4da8798/1/Pq9YPXwbe09XMQE8iymLpQVGTlI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:a9:cd:18:0e:db:75:b2:ab:77:68:46:20:f8:42:4c:3c:52: 47:f7:b9:3d:6a:ae:b7:1a:95:fa:d1:3a:d7:01:79:7a:d6:ff: 31:0d:6c:1b:83:ec:29:fa:c2:24:e0:28:04:4e:4c:a0:36:6d: ea:03:5a:38:d2:1b:bf:ac:8f:f6:3d:9d:74:07:81:6b:3b:a5: 96:f8:b4:22:c3:a8:b1:46:38:99:6f:33:b1:9b:73:d5:b5:ed: d6:e4:3c:e2:33:50:81:9c:18:c3:34:b5:22:c7:53:27:5c:69: bf:f8:51:7e:8d:c2:b2:e2:f0:42:9d:6b:bc:86:cc:b3:c4:6e: 18:98:e9:61:6e:6d:04:5a:3a:b6:3b:f5:93:58:2b:62:04:5e: 0e:24:aa:f4:4e:02:c9:6c:b9:69:60:b6:65:28:71:44:fd:fa: 1d:f9:e8:ce:32:d1:cd:31:9c:34:f8:62:63:3e:ed:4c:8c:83: 0b:2b:ae:6f:7a:a9:5d:88:49:53:9e:41:76:2b:62:76:d5:d9: da:d4:15:a1:57:b3:ef:f8:e4:22:ce:00:cb:86:28:39:5b:08: 87:50:9c:ae:83:9b:d9:24:3c:32:29:cb:1a:a4:0f:27:0b:29: 7e:77:a0:aa:08:ab:ab:51:65:40:98:7f:83:36:69:8c:2f:3b: 84:bd:8a:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiMMdL7ey5AXpclikK5jHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYWY1ODNkN2MxYjdiNGY1NzMxMDEzYzhiMjk4YmE1MDU0 NjRlNTIwHhcNMjUxMjA1MjIwMTI1WhcNMjUxMjA2MjIwMTI1WjAzMTEwLwYDVQQD EygxNDQ4ODg1N2FkMGUyN2MzNWMzYzI2NTIxMzczMzk2MjMzMDMwMjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HjeB3fs77EuI4TAlVLdCr+9NYTY Xpe25yKYKjKZ76cgdTzZ9IliBB7ecj35zUe8D7uz/XHfn7YU+PRQOgNqUK8eFcF1 LzcMGELMgJTMaQ0i4ZvAuTw1+dgOW4kS2K+xr+P9oa+tPo0zsqS3mtiKWSuOaCP+ KFqGJDPp+tNIeIEYBxwegLc12SVztRfQokMFH8vR8IAzIFDsPEacWqEgxx23jQO/ QkcLaZBmdQwgda8clI0IQb/rwujf3fOxWIRCAIOKrKNXrxWmpoB5FoM81fNfcb0k uKbBPz5XrAYMuahWUABfCrtDc3j7jwcZ/N//ZMp3EMxW7HaGJFEMiQDXrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBRIiFetDifDXDwmUhNzOWIzAwKBMB8GA1UdIwQY MBaAFD6vWD18G3tPVzEBPIspi6UFRk5SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHE5WVBYd2JlMDlYTVFFOGl5bUxwUVZHVGxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9kOThlODYtZTQxYy00NWUxLWJiZTct OGUxOWM0ZGE4Nzk4LzEvUHE5WVBYd2JlMDlYTVFFOGl5bUxwUVZHVGxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9kOThlODYtZTQxYy00NWUxLWJiZTctOGUxOWM0ZGE4Nzk4 LzEvUHE5WVBYd2JlMDlYTVFFOGl5bUxwUVZHVGxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI6nNGA7b dbKrd2hGIPhCTDxSR/e5PWqutxqV+tE61wF5etb/MQ1sG4PsKfrCJOAoBE5MoDZt 6gNaONIbv6yP9j2ddAeBazullvi0IsOosUY4mW8zsZtz1bXt1uQ84jNQgZwYwzS1 IsdTJ1xpv/hRfo3CsuLwQp1rvIbMs8RuGJjpYW5tBFo6tjv1k1grYgReDiSq9E4C yWy5aWC2ZShxRP36HfnozjLRzTGcNPhiYz7tTIyDCyuub3qpXYhJU55BditidtXZ 2tQVoVez7/jkIs4Ay4YoOVsIh1CcroOb2SQ8MinLGqQPJwspfnegqgirq1FlQJh/ gzZpjC87hL2Kiw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:20:33 2025 by rpki-client