This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft File: PcI-io7JOWsbVM_7JxxVdm2UkZk.mft (raw, json) Hash identifier: /G4qZkWEUOT57Fh66mCjN4hahKB7hrKLdSXIImcORCI= Subject key identifier: B3:05:6A:2F:B8:F3:AB:C4:06:F9:E2:4C:48:2F:97:38:F5:AD:6B:E1 Authority key identifier: 3D:C2:3E:8A:8E:C9:39:6B:1B:54:CF:FB:27:1C:55:76:6D:94:91:99 Certificate issuer: /CN=3dc23e8a8ec9396b1b54cffb271c55766d949199 Certificate serial: 019AF23FDA028BFF67CD02B9F19BDDCF49FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft Manifest number: 12CA Signing time: Sat 06 Dec 2025 06:01:02 +0000 Manifest this update: Sat 06 Dec 2025 06:01:02 +0000 Manifest next update: Sun 07 Dec 2025 06:01:02 +0000 Files and hashes: 1: 1-dSijOlomtrsqkND-2jGvkzEh1s.roa (hash: vAMtZ2jKMP2IiV0cN+Yk3wrsh8M5v/wTw365APu16Sc=) 2: PcI-io7JOWsbVM_7JxxVdm2UkZk.crl (hash: nj3d3j36sJRf+WnvhUxXXaBlMCCP3f8iNCEuvuoYv8Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:da:02:8b:ff:67:cd:02:b9:f1:9b:dd:cf:49:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3dc23e8a8ec9396b1b54cffb271c55766d949199 Validity Not Before: Dec 6 06:01:02 2025 GMT Not After : Dec 7 06:01:02 2025 GMT Subject: CN=b3056a2fb8f3abc406f9e24c482f9738f5ad6be1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b5:67:9c:0a:43:42:80:52:b4:e4:6d:52:bb: f4:21:8d:88:3c:96:bb:ac:3f:2d:e1:6e:cd:fa:4c: 7e:11:2b:f1:91:8e:83:d3:e1:12:a7:38:09:33:17: 7d:e8:7c:7e:dd:7c:71:14:80:bd:3d:17:7b:70:4a: 51:82:c8:e8:93:3a:ac:9e:88:ff:5b:78:6a:e4:d5: 9f:6b:dd:6a:1e:46:ec:c9:e8:2a:70:b6:a0:f0:de: e6:17:8b:83:62:31:25:e0:f5:dc:79:34:35:e0:89: 39:3a:38:5b:b5:79:45:2b:16:0a:5a:d8:c9:98:de: 2b:8d:d2:65:7d:00:8a:3a:5e:b0:ec:d1:64:f1:7c: 1b:b4:0d:d4:5c:ff:7d:c1:d6:e5:99:80:67:83:79: a0:a1:a5:73:5e:b8:60:21:93:66:84:93:1a:72:b2: 1b:7d:f3:12:5c:fe:d2:b3:91:5e:11:5d:c4:5a:2c: bd:79:b1:a1:cc:a6:53:46:59:4e:b3:3b:37:6d:5e: b4:c7:0e:e7:ab:9d:5d:98:48:e5:17:bf:f1:47:91: 5e:96:72:f8:05:4b:da:82:10:50:c8:31:48:ed:5e: c4:2d:85:5a:10:d3:a6:d0:a4:7c:27:23:21:b4:fc: fc:21:66:7d:37:15:99:56:ea:30:4c:22:fc:d0:67: f2:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:05:6A:2F:B8:F3:AB:C4:06:F9:E2:4C:48:2F:97:38:F5:AD:6B:E1 X509v3 Authority Key Identifier: keyid:3D:C2:3E:8A:8E:C9:39:6B:1B:54:CF:FB:27:1C:55:76:6D:94:91:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:f6:99:00:53:a3:a6:cd:1a:99:8e:44:05:d1:36:60:43:4a: ee:d0:8c:03:3e:4e:bd:cf:19:af:11:2b:8d:71:59:b0:cd:2a: 03:f3:f1:7c:fc:6f:24:33:a8:63:2d:e4:82:9f:ea:2c:6a:de: e6:fc:13:67:af:8b:28:04:d7:2e:a2:20:1b:91:a4:20:9a:4e: dc:ca:3b:b5:45:6e:7c:a2:40:9f:3e:59:c9:d8:13:39:68:60: fc:b5:d9:76:41:4b:95:52:34:ac:39:63:ff:e8:c7:c8:33:c5: 2a:e0:e8:40:db:3d:bc:77:6b:bb:53:3b:72:ee:17:59:ca:d6: fa:2d:2a:bb:ef:a5:1f:05:e7:72:c4:4c:4a:7b:e9:ec:65:d5: 6f:5c:c1:9a:d0:20:0b:da:07:e5:c4:c7:0e:94:71:9a:57:a8: 98:f7:b0:82:01:5b:c7:63:c6:26:3a:1a:14:70:7c:f7:08:34: 30:9d:93:20:e6:50:0f:fe:64:84:8c:c2:52:22:b9:67:3a:ac: fb:0d:76:82:86:68:31:52:10:01:22:20:2f:59:d3:91:a0:0e: 4e:7f:a2:e5:40:d5:68:9b:9d:6f:49:c7:2b:d7:25:10:21:c2: 65:cd:9a:2f:74:18:47:79:20:2a:54:08:7e:1e:93:f4:6d:81: 7f:e8:dd:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9oCi/9nzQK58Zvdz0n+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkYzIzZThhOGVjOTM5NmIxYjU0Y2ZmYjI3MWM1NTc2NmQ5 NDkxOTkwHhcNMjUxMjA2MDYwMTAyWhcNMjUxMjA3MDYwMTAyWjAzMTEwLwYDVQQD EyhiMzA1NmEyZmI4ZjNhYmM0MDZmOWUyNGM0ODJmOTczOGY1YWQ2YmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLVnnApDQoBStORtUrv0IY2IPJa7 rD8t4W7N+kx+ESvxkY6D0+ESpzgJMxd96Hx+3XxxFIC9PRd7cEpRgsjokzqsnoj/ W3hq5NWfa91qHkbsyegqcLag8N7mF4uDYjEl4PXceTQ14Ik5OjhbtXlFKxYKWtjJ mN4rjdJlfQCKOl6w7NFk8XwbtA3UXP99wdblmYBng3mgoaVzXrhgIZNmhJMacrIb ffMSXP7Ss5FeEV3EWiy9ebGhzKZTRllOszs3bV60xw7nq51dmEjlF7/xR5FelnL4 BUvaghBQyDFI7V7ELYVaENOm0KR8JyMhtPz8IWZ9NxWZVuowTCL80GfyawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLMFai+486vEBvniTEgvlzj1rWvhMB8GA1UdIwQY MBaAFD3CPoqOyTlrG1TP+yccVXZtlJGZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGNJLWlvN0pPV3NiVk1fN0p4eFZkbTJVa1prLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9kMWNmZDctOThkMy00M2I5LTk4MWUt YzBkZDQ3NzFjMmFhLzEvUGNJLWlvN0pPV3NiVk1fN0p4eFZkbTJVa1prLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9kMWNmZDctOThkMy00M2I5LTk4MWUtYzBkZDQ3NzFjMmFh LzEvUGNJLWlvN0pPV3NiVk1fN0p4eFZkbTJVa1prLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlvaZAFOj ps0amY5EBdE2YENK7tCMAz5Ovc8ZrxErjXFZsM0qA/PxfPxvJDOoYy3kgp/qLGre 5vwTZ6+LKATXLqIgG5GkIJpO3Mo7tUVufKJAnz5ZydgTOWhg/LXZdkFLlVI0rDlj /+jHyDPFKuDoQNs9vHdru1M7cu4XWcrW+i0qu++lHwXncsRMSnvp7GXVb1zBmtAg C9oH5cTHDpRxmleomPewggFbx2PGJjoaFHB89wg0MJ2TIOZQD/5khIzCUiK5Zzqs +w12goZoMVIQASIgL1nTkaAOTn+i5UDVaJudb0nHK9clECHCZc2aL3QYR3kgKlQI fh6T9G2Bf+jdTQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:02:01 2025 by rpki-client