This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft File: PGu5kW2QqkR3ctA_Ce37or3PN5I.mft (raw, json) Hash identifier: qBgwAgCXuy9LitIDxmAt5ZeZf5Y+1I6F8w3i/6v1WuM= Subject key identifier: 5C:DF:CC:10:B9:F7:58:11:CC:E2:FD:B0:29:A1:45:41:D8:B0:5F:C3 Authority key identifier: 3C:6B:B9:91:6D:90:AA:44:77:72:D0:3F:09:ED:FB:A2:BD:CF:37:92 Certificate issuer: /CN=3c6bb9916d90aa447772d03f09edfba2bdcf3792 Certificate serial: 019AF5E60F7DCC16A97D9EB2D9C5DA513F38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGu5kW2QqkR3ctA_Ce37or3PN5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft Manifest number: 0848 Signing time: Sat 06 Dec 2025 23:01:26 +0000 Manifest this update: Sat 06 Dec 2025 23:01:26 +0000 Manifest next update: Sun 07 Dec 2025 23:01:26 +0000 Files and hashes: 1: PGu5kW2QqkR3ctA_Ce37or3PN5I.crl (hash: geDIL0AKsiAztoIYa1u3ySiu94TIIsXomx4R9zhN2Xg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft rsync://rpki.ripe.net/repository/DEFAULT/PGu5kW2QqkR3ctA_Ce37or3PN5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e6:0f:7d:cc:16:a9:7d:9e:b2:d9:c5:da:51:3f:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c6bb9916d90aa447772d03f09edfba2bdcf3792 Validity Not Before: Dec 6 23:01:26 2025 GMT Not After : Dec 7 23:01:26 2025 GMT Subject: CN=5cdfcc10b9f75811cce2fdb029a14541d8b05fc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d2:e6:57:af:7c:2e:25:70:41:10:ae:0b:70: 2e:f1:7f:91:1d:6a:78:90:9a:41:06:2c:38:1e:72: 9c:80:f0:a7:36:15:3c:3e:4d:83:03:80:cb:f1:bf: 9c:89:31:43:00:b5:43:63:96:b2:6f:75:1b:de:9b: a8:76:4f:d0:a0:83:62:77:83:b9:bc:85:aa:bc:46: b0:5e:a2:ba:d5:7e:a7:81:4c:27:ba:08:66:f1:dc: d3:8a:14:2c:ab:72:5a:e3:dc:84:fd:c3:ad:5d:3c: ff:ca:00:40:cb:3e:f7:1c:45:82:72:51:8c:f1:47: 95:be:8e:ec:b9:b0:a2:40:d7:e4:ed:bc:49:ea:36: e5:47:54:ae:48:5a:46:a6:69:60:24:df:f7:73:61: 00:72:9d:e1:dc:0c:a8:6c:9e:c0:fd:a4:a8:ce:5a: 4a:8b:2c:b4:40:e9:59:31:d0:e1:4a:22:28:ba:09: 3e:b2:66:31:dc:4a:10:e4:23:b3:ae:9b:54:db:92: f8:e2:4e:aa:72:47:88:7e:25:c9:18:08:48:e5:cd: a5:f2:24:82:b7:6f:57:0e:be:9e:dd:a5:ef:e4:10: 7c:52:dd:ed:60:06:20:3e:73:3a:d4:af:0f:d6:c1: 01:1b:bf:95:3b:b2:bd:d4:c6:bf:e3:99:3e:7b:8b: 51:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:DF:CC:10:B9:F7:58:11:CC:E2:FD:B0:29:A1:45:41:D8:B0:5F:C3 X509v3 Authority Key Identifier: keyid:3C:6B:B9:91:6D:90:AA:44:77:72:D0:3F:09:ED:FB:A2:BD:CF:37:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGu5kW2QqkR3ctA_Ce37or3PN5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:52:b2:d3:f8:ca:37:61:20:17:61:1b:32:65:e9:9e:74:85: ca:e8:96:c1:b2:58:83:96:ee:54:6e:1e:0c:64:87:0a:bb:40: 2a:b3:0f:5e:cd:8e:1f:0b:70:40:85:e5:d3:3a:94:32:96:3e: 84:f9:e5:16:8c:59:89:cf:3b:ee:f5:4d:cf:96:23:7d:f1:0b: e7:7e:55:3c:ba:46:93:10:d8:50:45:e2:60:22:33:c6:84:ee: 6b:97:83:3f:64:0d:a7:ff:68:76:41:19:ec:b5:4a:3d:89:72: f9:42:16:fd:c3:9c:72:be:7e:13:66:fd:12:8a:76:c7:86:16: 1d:d6:74:94:d6:52:0e:48:49:fb:db:94:25:e8:13:57:14:54: 8e:56:bd:de:5d:0e:6d:2e:4b:74:0a:a3:6a:fd:64:c7:2a:d3: 61:fa:f4:33:11:4b:cc:8c:39:82:c1:d5:ea:38:b8:04:75:76: df:35:4d:06:a8:09:45:de:07:ac:d7:11:69:58:61:06:ba:31: 5f:2d:92:5a:2a:ff:70:f9:d0:f5:3c:90:f3:bf:80:45:a4:72: e2:77:9c:fa:d0:cb:b0:c8:04:bd:90:a7:01:5b:f1:c1:f1:84: c5:00:1c:9b:4b:92:44:51:53:f7:4d:57:98:97:6f:f1:3b:5a: 53:55:a4:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15g99zBapfZ6y2cXaUT84MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjNmJiOTkxNmQ5MGFhNDQ3NzcyZDAzZjA5ZWRmYmEyYmRj ZjM3OTIwHhcNMjUxMjA2MjMwMTI2WhcNMjUxMjA3MjMwMTI2WjAzMTEwLwYDVQQD Eyg1Y2RmY2MxMGI5Zjc1ODExY2NlMmZkYjAyOWExNDU0MWQ4YjA1ZmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tLmV698LiVwQRCuC3Au8X+RHWp4 kJpBBiw4HnKcgPCnNhU8Pk2DA4DL8b+ciTFDALVDY5ayb3Ub3puodk/QoINid4O5 vIWqvEawXqK61X6ngUwnughm8dzTihQsq3Ja49yE/cOtXTz/ygBAyz73HEWCclGM 8UeVvo7subCiQNfk7bxJ6jblR1SuSFpGpmlgJN/3c2EAcp3h3AyobJ7A/aSozlpK iyy0QOlZMdDhSiIougk+smYx3EoQ5COzrptU25L44k6qckeIfiXJGAhI5c2l8iSC t29XDr6e3aXv5BB8Ut3tYAYgPnM61K8P1sEBG7+VO7K91Ma/45k+e4tRHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFzfzBC591gRzOL9sCmhRUHYsF/DMB8GA1UdIwQY MBaAFDxruZFtkKpEd3LQPwnt+6K9zzeSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEd1NWtXMlFxa1IzY3RBX0NlMzdvcjNQTjVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8zY2Y5ZWUtODY3Zi00MjE0LWEzOTQt Y2JlOTIwN2NmNTRlLzEvUEd1NWtXMlFxa1IzY3RBX0NlMzdvcjNQTjVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8zY2Y5ZWUtODY3Zi00MjE0LWEzOTQtY2JlOTIwN2NmNTRl LzEvUEd1NWtXMlFxa1IzY3RBX0NlMzdvcjNQTjVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaFKy0/jK N2EgF2EbMmXpnnSFyuiWwbJYg5buVG4eDGSHCrtAKrMPXs2OHwtwQIXl0zqUMpY+ hPnlFoxZic877vVNz5YjffEL535VPLpGkxDYUEXiYCIzxoTua5eDP2QNp/9odkEZ 7LVKPYly+UIW/cOccr5+E2b9Eop2x4YWHdZ0lNZSDkhJ+9uUJegTVxRUjla93l0O bS5LdAqjav1kxyrTYfr0MxFLzIw5gsHV6ji4BHV23zVNBqgJRd4HrNcRaVhhBrox Xy2SWir/cPnQ9TyQ87+ARaRy4nec+tDLsMgEvZCnAVvxwfGExQAcm0uSRFFT901X mJdv8TtaU1Wktg== -----END CERTIFICATE-----Generated at Sun Dec 7 03:26:25 2025 by rpki-client