This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft File: PFaMWdeoMZnDp56g6DdblG7YhOI.mft (raw, json) Hash identifier: ofH3ikUIhR4NgBmFx2+wbVz/ZKOW9+WKW7NEtNZ0uOg= Subject key identifier: 1F:F4:77:80:B9:03:CF:8A:98:70:6C:B4:E3:FE:17:DC:08:3D:AE:28 Authority key identifier: 3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2 Certificate issuer: /CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2 Certificate serial: 019AF19ADC62DFB10107590C5012BCBE238F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 03:00:49 +0000 Manifest this update: Sat 06 Dec 2025 03:00:49 +0000 Manifest next update: Sun 07 Dec 2025 03:00:49 +0000 Files and hashes: 1: 7WOP-_-MOSfX89KKSoy6v0ZdGmI.roa (hash: K5alUaOgD5qLhUU0KdZTL8p6umuUwQibq8QwoQYmgD8=) 2: HCoi5HM2CS9n54Michmh4KOI3ek.roa (hash: jtTZBvxkebDPFdaXtrlo0EAEQkLMF8pkeRtYqCQ7D0I=) 3: PFaMWdeoMZnDp56g6DdblG7YhOI.crl (hash: e5FT3TgzkaXrggB7II7yjFrhM5NUzXgJ/d0GmYr7YFU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:dc:62:df:b1:01:07:59:0c:50:12:bc:be:23:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2 Validity Not Before: Dec 6 03:00:49 2025 GMT Not After : Dec 7 03:00:49 2025 GMT Subject: CN=1ff47780b903cf8a98706cb4e3fe17dc083dae28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f3:97:26:7d:42:89:25:8e:7d:01:fe:96:14: fb:52:34:39:37:e9:41:3e:7a:cd:d2:53:cd:58:13: 3c:82:53:b3:dd:97:55:9b:5e:b5:e9:79:b2:0b:40: 14:29:c7:90:94:48:ef:a0:39:c9:5a:cd:c0:6b:c4: df:39:e1:b3:bc:4d:3d:93:20:d1:4f:10:d4:c4:7c: d5:34:6e:d0:dc:d2:29:19:21:0f:1a:8c:2f:14:58: 53:5b:51:4d:ca:b5:e2:d0:78:fb:1d:21:62:13:c2: a0:df:ba:d6:9e:2e:2b:d4:a8:50:a2:65:81:6f:03: 94:0b:85:78:83:dc:17:76:b7:19:66:70:66:19:1f: 3d:e5:54:67:c8:f9:38:14:2d:e1:be:7a:2a:11:94: 90:8e:05:52:88:7f:0b:60:15:73:ae:de:a6:fe:f2: 38:41:db:80:95:6d:e2:9b:eb:cd:dd:2f:66:71:42: ed:0e:37:27:90:4f:d7:ac:6e:79:84:c1:9a:3f:16: 4b:4d:ab:77:fb:a3:7b:59:75:99:44:27:2a:e8:4a: b2:0c:7d:6a:08:cd:a2:98:20:59:ae:44:18:af:88: e8:c2:c3:e6:71:18:f6:c9:7e:f4:fa:92:a6:da:71: 38:19:e8:4a:1f:84:2c:78:5f:0c:c5:0b:06:04:58: 3f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F4:77:80:B9:03:CF:8A:98:70:6C:B4:E3:FE:17:DC:08:3D:AE:28 X509v3 Authority Key Identifier: keyid:3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:f9:24:dd:ab:5f:12:56:a8:74:97:f6:ac:5e:84:b5:b3:5a: 32:62:f2:2b:cc:84:2c:71:9a:86:b2:6d:de:15:a3:d5:96:60: 32:dd:45:6a:cd:45:39:80:9b:70:ea:64:ff:37:4d:dc:62:47: ba:16:78:9d:f6:25:2d:db:ab:05:3c:31:dc:bc:9c:42:6a:27: bf:ad:1a:f5:44:30:05:fc:62:03:b3:d3:36:cf:c1:e6:4e:9e: d2:8c:a6:3b:f1:fe:df:dc:ee:e9:0f:b0:c4:dd:84:1c:bc:87: 4e:bf:a0:e5:3b:b6:e7:a4:b6:61:90:05:bc:a1:15:7e:15:4f: c5:c5:bf:5d:88:05:23:55:de:92:e6:06:4f:fa:f0:ea:31:94: 55:7c:b1:ac:be:59:3c:71:35:9c:fb:b1:bc:df:55:b2:21:ba: 23:40:a9:dc:8f:f0:d5:a9:3e:0e:08:20:3e:fd:63:61:95:63: ef:0d:66:e0:db:31:87:52:e9:0b:be:5d:75:58:d9:30:6d:18: d4:d1:f6:3b:ba:46:ef:ad:35:c3:6d:34:48:ce:4b:76:12:54: 0b:13:5e:47:88:55:1f:3f:da:c7:61:64:24:96:a8:83:3d:98: 9a:0b:e5:33:7a:1c:05:87:25:cd:e8:ac:b3:24:cb:66:e1:86: 4b:7e:cc:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmtxi37EBB1kMUBK8viOPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjNTY4YzU5ZDdhODMxOTljM2E3OWVhMGU4Mzc1Yjk0NmVk ODg0ZTIwHhcNMjUxMjA2MDMwMDQ5WhcNMjUxMjA3MDMwMDQ5WjAzMTEwLwYDVQQD EygxZmY0Nzc4MGI5MDNjZjhhOTg3MDZjYjRlM2ZlMTdkYzA4M2RhZTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPOXJn1CiSWOfQH+lhT7UjQ5N+lB PnrN0lPNWBM8glOz3ZdVm1616XmyC0AUKceQlEjvoDnJWs3Aa8TfOeGzvE09kyDR TxDUxHzVNG7Q3NIpGSEPGowvFFhTW1FNyrXi0Hj7HSFiE8Kg37rWni4r1KhQomWB bwOUC4V4g9wXdrcZZnBmGR895VRnyPk4FC3hvnoqEZSQjgVSiH8LYBVzrt6m/vI4 QduAlW3im+vN3S9mcULtDjcnkE/XrG55hMGaPxZLTat3+6N7WXWZRCcq6EqyDH1q CM2imCBZrkQYr4jowsPmcRj2yX70+pKm2nE4GehKH4QseF8MxQsGBFg/7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB/0d4C5A8+KmHBstOP+F9wIPa4oMB8GA1UdIwQY MBaAFDxWjFnXqDGZw6eeoOg3W5Ru2ITiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEZhTVdkZW9NWm5EcDU2ZzZEZGJsRzdZaE9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82ZjM2YzItZDA1Yy00NDI1LWE5ZTQt NWUzN2U3ZjNmMTVkLzEvUEZhTVdkZW9NWm5EcDU2ZzZEZGJsRzdZaE9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi82ZjM2YzItZDA1Yy00NDI1LWE5ZTQtNWUzN2U3ZjNmMTVk LzEvUEZhTVdkZW9NWm5EcDU2ZzZEZGJsRzdZaE9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApvkk3atf ElaodJf2rF6EtbNaMmLyK8yELHGahrJt3hWj1ZZgMt1Fas1FOYCbcOpk/zdN3GJH uhZ4nfYlLdurBTwx3LycQmonv60a9UQwBfxiA7PTNs/B5k6e0oymO/H+39zu6Q+w xN2EHLyHTr+g5Tu256S2YZAFvKEVfhVPxcW/XYgFI1XekuYGT/rw6jGUVXyxrL5Z PHE1nPuxvN9VsiG6I0Cp3I/w1ak+DgggPv1jYZVj7w1m4Nsxh1LpC75ddVjZMG0Y 1NH2O7pG7601w200SM5LdhJUCxNeR4hVHz/ax2FkJJaogz2YmgvlM3ocBYclzeis syTLZuGGS37MHw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:50:37 2025 by rpki-client