This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft File: PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft (raw, json) Hash identifier: wACxVRcilBRMBcYYP/ZdTZnPQZHg5la1VWvohtSxUOk= Subject key identifier: 51:3D:59:4D:A3:8B:BC:7C:C6:38:93:7D:A2:B0:57:DA:E5:EC:8D:83 Authority key identifier: 3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3 Certificate issuer: /CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3 Certificate serial: 019AF19ADE3AB87869BE5013370867BD1590 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft Manifest number: 0917 Signing time: Sat 06 Dec 2025 03:00:49 +0000 Manifest this update: Sat 06 Dec 2025 03:00:49 +0000 Manifest next update: Sun 07 Dec 2025 03:00:49 +0000 Files and hashes: 1: PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl (hash: Xr7vwmnsWRbTGe+DIfIW1HSJlkZEVjlb3bx83CTuaPs=) 2: WrzesfgAIkReChvkvHbeme9Obyo.roa (hash: sSRQkO+9/oNieGkByWGhrbGGDkaRr1cGKseQKtOM7es=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:de:3a:b8:78:69:be:50:13:37:08:67:bd:15:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3 Validity Not Before: Dec 6 03:00:49 2025 GMT Not After : Dec 7 03:00:49 2025 GMT Subject: CN=513d594da38bbc7cc638937da2b057dae5ec8d83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:01:5a:b0:ad:09:77:9b:1c:66:4b:ee:e4:53: 1a:6f:02:ab:d3:5b:a5:50:a1:7a:d4:9b:4e:d4:aa: fe:fb:07:75:80:04:e6:41:25:43:9c:9d:bb:09:87: 8b:e4:75:46:c9:fe:1a:aa:35:35:98:4a:91:b2:b1: f7:5b:d3:f0:67:0b:f9:f1:b7:c6:cf:ed:69:fb:a3: 7a:5c:ed:bb:85:d9:df:12:59:be:0f:30:a8:33:8b: 0d:75:87:4f:88:88:2f:2f:b5:7a:98:19:db:e8:0a: ee:6d:0a:fd:02:6b:10:53:d0:31:b7:11:03:f6:0b: 23:05:bc:3f:03:91:92:79:29:cb:c4:9e:cd:8e:c6: 5b:b1:2a:7d:ba:87:34:07:b1:9d:94:2b:4e:31:f5: a3:b8:32:6b:83:ba:f7:4d:0a:1a:54:21:d5:56:77: 49:46:f1:87:d9:20:56:f5:1b:2c:7a:22:74:84:0a: 9b:70:e9:00:2e:13:da:b6:e8:2f:82:89:d9:3b:dd: 3b:a7:4f:2b:9a:e0:56:fa:d9:83:73:73:cf:2c:79: 5b:5e:94:03:00:85:54:6e:ac:45:96:6a:c0:7e:59: 6a:1a:8d:78:ef:38:9c:60:a4:7b:89:1d:2a:97:ae: d0:6c:3f:ad:ab:32:13:23:fc:02:f8:6d:96:c6:39: e7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:3D:59:4D:A3:8B:BC:7C:C6:38:93:7D:A2:B0:57:DA:E5:EC:8D:83 X509v3 Authority Key Identifier: keyid:3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:10:8e:08:ef:37:7a:ed:6b:1d:20:e0:33:7a:b6:c6:ae:19: 34:5b:9d:d1:b9:6b:5a:8f:77:59:22:4b:10:20:b0:08:42:61: 5a:3c:a3:03:3c:19:6f:7e:44:39:49:25:72:36:4e:5b:f5:a1: 4d:b1:ea:47:78:d8:d1:91:8a:5f:da:dc:4d:b3:61:be:c0:33: df:25:62:a3:5b:24:1c:3c:7c:5b:0f:27:63:6c:07:19:41:1d: af:49:c7:44:05:30:40:cd:d3:97:c7:11:2b:64:e7:3b:4d:26: 9d:81:0a:ed:44:71:6a:4e:60:29:c2:f5:c6:09:48:3f:1d:a8: 5d:7c:9a:d5:fe:fc:ac:50:d6:3e:78:20:73:73:22:b1:09:5a: 33:02:58:52:a0:c8:84:32:ea:cd:ba:33:ef:01:25:d5:0b:a6: 85:6d:1a:e9:1d:8e:53:d4:fb:b9:ce:33:77:1b:c2:ec:1a:69: 78:b1:92:04:79:3b:62:44:eb:87:c6:59:af:f5:e1:51:fc:eb: a4:9e:de:3f:a1:f6:a7:fd:27:90:46:e1:fe:47:ce:06:23:7e: ba:cc:2b:02:52:0f:5c:74:39:34:32:f5:e1:3a:70:a5:fb:5b: 39:6c:e0:45:3f:30:0a:ba:7a:51:ba:59:05:f9:08:ce:77:63: dc:56:56:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmt46uHhpvlATNwhnvRWQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNDMyNzdiN2NhNzlkMGU5ZTA3ZmM0YTRiMzE4MDQxZGY0 MTVjYjMwHhcNMjUxMjA2MDMwMDQ5WhcNMjUxMjA3MDMwMDQ5WjAzMTEwLwYDVQQD Eyg1MTNkNTk0ZGEzOGJiYzdjYzYzODkzN2RhMmIwNTdkYWU1ZWM4ZDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAFasK0Jd5scZkvu5FMabwKr01ul UKF61JtO1Kr++wd1gATmQSVDnJ27CYeL5HVGyf4aqjU1mEqRsrH3W9PwZwv58bfG z+1p+6N6XO27hdnfElm+DzCoM4sNdYdPiIgvL7V6mBnb6ArubQr9AmsQU9AxtxED 9gsjBbw/A5GSeSnLxJ7NjsZbsSp9uoc0B7GdlCtOMfWjuDJrg7r3TQoaVCHVVndJ RvGH2SBW9RsseiJ0hAqbcOkALhPatugvgonZO907p08rmuBW+tmDc3PPLHlbXpQD AIVUbqxFlmrAfllqGo147zicYKR7iR0ql67QbD+tqzITI/wC+G2WxjnnbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFE9WU2ji7x8xjiTfaKwV9rl7I2DMB8GA1UdIwQY MBaAFD5DJ3t8p50Ongf8SksxgEHfQVyzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGtNbmUzeW5uUTZlQl94S1N6R0FRZDlCWExNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yMjE5NDUtYTc0ZS00Nzc1LWFlYTUt M2NmMmE0NjIyZmJjLzEvUGtNbmUzeW5uUTZlQl94S1N6R0FRZDlCWExNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8yMjE5NDUtYTc0ZS00Nzc1LWFlYTUtM2NmMmE0NjIyZmJj LzEvUGtNbmUzeW5uUTZlQl94S1N6R0FRZDlCWExNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYRCOCO83 eu1rHSDgM3q2xq4ZNFud0blrWo93WSJLECCwCEJhWjyjAzwZb35EOUklcjZOW/Wh TbHqR3jY0ZGKX9rcTbNhvsAz3yVio1skHDx8Ww8nY2wHGUEdr0nHRAUwQM3Tl8cR K2TnO00mnYEK7URxak5gKcL1xglIPx2oXXya1f78rFDWPnggc3MisQlaMwJYUqDI hDLqzboz7wEl1QumhW0a6R2OU9T7uc4zdxvC7BppeLGSBHk7YkTrh8ZZr/XhUfzr pJ7eP6H2p/0nkEbh/kfOBiN+uswrAlIPXHQ5NDL14TpwpftbOWzgRT8wCrp6UbpZ BfkIzndj3FZW6A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:35:18 2025 by rpki-client