This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft File: pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft (raw, json) Hash identifier: 8Zei/Jrq488tFtWDDOqKbieJwNJFkQSHVXxd/NHS+Lk= Subject key identifier: BC:FC:AB:C7:79:67:68:39:F4:C3:E5:DA:BD:5F:6D:00:45:33:E3:2D Authority key identifier: A4:F5:53:3A:52:7B:26:4C:A2:E8:37:32:85:D7:80:D3:3A:2B:D0:A1 Certificate issuer: /CN=a4f5533a527b264ca2e8373285d780d33a2bd0a1 Certificate serial: 019AF208EBC87B93A2313410CB7B29F1F0D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft Manifest number: 03F5 Signing time: Sat 06 Dec 2025 05:01:02 +0000 Manifest this update: Sat 06 Dec 2025 05:01:02 +0000 Manifest next update: Sun 07 Dec 2025 05:01:02 +0000 Files and hashes: 1: aU9nU6J43VKML7pOttC9ZY6jQ98.roa (hash: FbRy0Mzafv2hiOEuNsxPoMw70K3GoSJZXHuz7LnmQeE=) 2: pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl (hash: ufXZTj45KY06oJTMRhX9bZFZFjrhJb6Pk3r98QXlwgE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:eb:c8:7b:93:a2:31:34:10:cb:7b:29:f1:f0:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4f5533a527b264ca2e8373285d780d33a2bd0a1 Validity Not Before: Dec 6 05:01:02 2025 GMT Not After : Dec 7 05:01:02 2025 GMT Subject: CN=bcfcabc779676839f4c3e5dabd5f6d004533e32d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:74:0a:9a:3b:6f:91:7f:0d:7d:92:55:85:66: 5f:3d:59:41:03:59:50:3a:cf:4e:f4:51:4d:74:f7: e5:c4:01:bc:72:dd:13:08:8a:8c:ed:f3:bd:7d:9d: 95:ba:2c:3a:b6:27:54:81:f4:ff:ef:99:35:fe:94: b1:72:a5:41:85:4a:47:88:7a:c0:48:71:4e:51:73: c9:f4:ab:de:37:86:68:68:16:25:bf:ab:a4:e9:24: a2:3d:36:e9:73:fe:65:f9:a5:f7:df:fa:da:b4:86: 0d:30:82:8d:d7:ee:ac:31:03:ea:09:d0:6a:81:e2: 17:ea:8d:6b:22:32:9a:d7:48:11:4d:6f:51:17:ce: cd:ab:39:da:e9:1c:a8:58:0a:ef:b4:45:16:0c:f2: 2b:ee:58:8f:2a:c5:ff:bc:79:eb:bc:ea:b8:66:28: c5:f5:04:a6:54:66:6b:90:c3:be:74:73:d7:56:6c: 72:58:64:74:4a:0e:27:e9:c8:f2:f2:d1:62:75:fe: 5e:75:d5:4f:df:a1:98:16:c2:22:52:a8:71:e4:8b: 75:9d:ef:a6:80:ca:bc:2a:93:e5:f8:ea:fb:a8:3f: 9f:4a:cb:2f:19:bf:dd:a2:e5:77:71:4b:17:fd:fb: 31:50:2a:9b:4c:c8:8b:91:e1:46:a6:b2:50:be:15: bd:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:FC:AB:C7:79:67:68:39:F4:C3:E5:DA:BD:5F:6D:00:45:33:E3:2D X509v3 Authority Key Identifier: keyid:A4:F5:53:3A:52:7B:26:4C:A2:E8:37:32:85:D7:80:D3:3A:2B:D0:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:91:ad:a2:66:11:0d:80:a5:66:8b:2a:e9:a0:1c:58:1c:af: 20:ee:86:aa:77:1b:a6:0c:6f:ee:0a:e1:ae:47:f0:45:c6:f9: d2:5c:ae:6f:e5:62:3f:2c:a1:06:61:85:13:20:e5:fe:d2:cc: 0f:d6:93:84:f1:f7:73:3a:5a:54:6e:ad:f3:88:c9:72:9a:a2: 71:86:06:13:d8:67:15:d4:a5:bb:22:13:a1:27:95:c8:57:15: e2:18:2c:00:5d:90:30:f4:46:bc:f5:c6:f1:8e:b3:cd:ba:e5: 4d:dc:bb:5e:55:ab:de:88:71:2c:27:a2:7e:d4:f2:75:37:80: 22:81:fd:c6:f9:f7:02:08:06:f0:ce:81:75:9f:6d:bf:b5:9f: 11:7e:d8:f0:6c:de:99:f7:f5:b4:52:b3:32:95:ba:95:4a:db: f5:3d:06:00:d1:40:02:5e:61:72:16:ed:6a:81:f6:f6:36:1d: 50:8c:96:77:11:2f:fc:09:72:6b:c7:ae:7b:bd:ff:62:0b:f1: 04:1c:c9:a4:d1:c5:ba:5d:d0:fc:95:78:a7:79:14:75:82:52: 2b:3c:a1:c5:36:16:69:fd:a1:6c:ce:a1:4b:3b:a5:be:97:19: 71:34:83:b9:ed:85:eb:67:e0:a0:dc:7d:8a:a7:0b:e8:c4:6e: 6f:0b:83:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCOvIe5OiMTQQy3sp8fDVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZjU1MzNhNTI3YjI2NGNhMmU4MzczMjg1ZDc4MGQzM2Ey YmQwYTEwHhcNMjUxMjA2MDUwMTAyWhcNMjUxMjA3MDUwMTAyWjAzMTEwLwYDVQQD EyhiY2ZjYWJjNzc5Njc2ODM5ZjRjM2U1ZGFiZDVmNmQwMDQ1MzNlMzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHQKmjtvkX8NfZJVhWZfPVlBA1lQ Os9O9FFNdPflxAG8ct0TCIqM7fO9fZ2Vuiw6tidUgfT/75k1/pSxcqVBhUpHiHrA SHFOUXPJ9KveN4ZoaBYlv6uk6SSiPTbpc/5l+aX33/ratIYNMIKN1+6sMQPqCdBq geIX6o1rIjKa10gRTW9RF87Nqzna6RyoWArvtEUWDPIr7liPKsX/vHnrvOq4ZijF 9QSmVGZrkMO+dHPXVmxyWGR0Sg4n6cjy8tFidf5eddVP36GYFsIiUqhx5It1ne+m gMq8KpPl+Or7qD+fSssvGb/douV3cUsX/fsxUCqbTMiLkeFGprJQvhW93QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLz8q8d5Z2g59MPl2r1fbQBFM+MtMB8GA1UdIwQY MBaAFKT1UzpSeyZMoug3MoXXgNM6K9ChMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFBWVE9sSjdKa3lpNkRjeWhkZUEwem9yMEtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9hZmMzYzgtZTk1Mi00MDcwLWE1NDYt NDI0NDYyYmM5NDliLzEvcFBWVE9sSjdKa3lpNkRjeWhkZUEwem9yMEtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9hZmMzYzgtZTk1Mi00MDcwLWE1NDYtNDI0NDYyYmM5NDli LzEvcFBWVE9sSjdKa3lpNkRjeWhkZUEwem9yMEtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjJGtomYR DYClZosq6aAcWByvIO6Gqncbpgxv7grhrkfwRcb50lyub+ViPyyhBmGFEyDl/tLM D9aThPH3czpaVG6t84jJcpqicYYGE9hnFdSluyIToSeVyFcV4hgsAF2QMPRGvPXG 8Y6zzbrlTdy7XlWr3ohxLCeiftTydTeAIoH9xvn3AggG8M6BdZ9tv7WfEX7Y8Gze mff1tFKzMpW6lUrb9T0GANFAAl5hchbtaoH29jYdUIyWdxEv/Alya8eue73/Ygvx BBzJpNHFul3Q/JV4p3kUdYJSKzyhxTYWaf2hbM6hSzulvpcZcTSDue2F62fgoNx9 iqcL6MRubwuD0g== -----END CERTIFICATE-----Generated at Sat Dec 6 13:26:19 2025 by rpki-client