This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft File: PcOGJxwOCo0B-xkNaNhf92TRatQ.mft (raw, json) Hash identifier: 9ZM3PWYWPooztpyjJy0nlV3yMqkap9qTBQCDtXCVTLM= Subject key identifier: 5A:69:D1:FA:BB:AA:51:15:5B:BD:7B:8E:7C:84:CF:1E:58:DB:C5:D7 Authority key identifier: 3D:C3:86:27:1C:0E:0A:8D:01:FB:19:0D:68:D8:5F:F7:64:D1:6A:D4 Certificate issuer: /CN=3dc386271c0e0a8d01fb190d68d85ff764d16ad4 Certificate serial: 019AF23FE7467BD92ABAAA09081EA6979D1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft Manifest number: 053E Signing time: Sat 06 Dec 2025 06:01:05 +0000 Manifest this update: Sat 06 Dec 2025 06:01:05 +0000 Manifest next update: Sun 07 Dec 2025 06:01:05 +0000 Files and hashes: 1: PcOGJxwOCo0B-xkNaNhf92TRatQ.crl (hash: A59h32l6xg9tmgF5bEpNFHlFJu3kzKdzAdkIvbq+0jU=) 2: dA9mnK7u8SrMJvStuVXROxjQcrs.roa (hash: JKT3V8fX4yHMnqh46H6Ra4xfMdM8EBf4akbaDFvA95s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:e7:46:7b:d9:2a:ba:aa:09:08:1e:a6:97:9d:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3dc386271c0e0a8d01fb190d68d85ff764d16ad4 Validity Not Before: Dec 6 06:01:05 2025 GMT Not After : Dec 7 06:01:05 2025 GMT Subject: CN=5a69d1fabbaa51155bbd7b8e7c84cf1e58dbc5d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4b:41:62:82:e2:81:69:2e:92:1f:37:a2:85: a2:0b:e0:b3:d7:16:a2:06:56:38:fa:82:2b:a4:b7: dd:44:e6:9a:7f:b1:0f:1e:1b:d8:70:48:5d:4e:89: 1a:c8:84:f3:f4:7f:fc:41:12:3e:47:6e:e2:09:5c: f0:a0:28:c7:54:9a:85:e7:0d:cc:53:39:61:b1:f6: e5:b1:83:98:8c:75:b0:53:d0:15:5f:4b:be:1f:27: 1d:df:41:a9:3c:ae:7d:a9:be:fc:ca:e1:6b:89:2f: 31:a8:dc:bd:37:52:7f:32:d7:88:20:92:ed:dc:82: e3:06:db:05:40:1c:65:42:35:4c:ee:73:2d:0c:e9: 81:a2:4b:8a:08:89:f5:25:82:c4:96:a0:18:7d:62: 4f:5c:93:ec:57:33:c5:37:b1:92:70:83:95:af:79: 57:36:19:10:07:a0:cc:8d:12:b1:ed:13:ca:14:97: 1c:5e:bf:87:ee:66:ab:55:0a:2e:fe:9f:91:9a:22: 37:a5:89:f8:a2:21:e3:d5:89:3a:ca:12:ad:e5:77: dd:4f:c3:0b:25:1b:e1:79:85:38:ff:47:5d:0a:0b: e6:42:90:4b:73:0d:28:94:37:3b:23:f7:94:50:29: 49:a4:f7:6d:a3:44:d3:7e:9d:78:fb:24:53:15:2f: 8e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:69:D1:FA:BB:AA:51:15:5B:BD:7B:8E:7C:84:CF:1E:58:DB:C5:D7 X509v3 Authority Key Identifier: keyid:3D:C3:86:27:1C:0E:0A:8D:01:FB:19:0D:68:D8:5F:F7:64:D1:6A:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:e4:16:37:59:80:a8:b8:0e:7e:8c:ad:b9:37:24:89:a0:1c: 4b:1b:bf:e6:16:95:a9:5c:78:e6:09:d7:aa:c9:7c:81:56:a7: b6:8e:41:c9:56:39:46:3c:32:9e:97:2c:fa:a9:78:16:84:c9: 83:c7:9e:62:e5:6d:bd:33:0c:fc:69:f4:36:33:68:2c:d7:0e: 82:d1:03:70:3f:bd:db:55:6b:4a:18:af:11:16:16:51:6a:bf: 80:16:6d:2e:24:0b:31:bf:74:dd:f4:51:15:6f:1e:26:95:c8: 6d:14:af:2a:34:a7:1d:99:0b:88:83:36:eb:8f:b9:45:46:f0: c0:af:e4:19:44:41:1a:a7:3f:af:89:63:0f:8e:ac:13:38:cb: 3a:6f:9a:10:a0:ca:da:98:04:6f:54:88:cf:e3:d2:e5:95:af: e8:cd:4f:15:da:2c:f7:bc:e6:14:0b:52:da:e9:f8:b6:ec:20: 1f:9f:2f:02:76:41:a8:24:ee:ff:fa:41:96:a9:10:91:7c:96: 05:39:21:47:a3:ca:dc:f9:fd:7d:55:3a:da:f6:72:69:b9:d0: 43:a4:32:c6:7c:eb:0d:04:b2:4a:04:f2:21:a1:f9:ac:85:1c: b9:0e:9c:d4:31:de:f5:44:65:85:38:2b:10:75:ca:7f:a3:f6: ba:ea:98:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP+dGe9kquqoJCB6ml50aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkYzM4NjI3MWMwZTBhOGQwMWZiMTkwZDY4ZDg1ZmY3NjRk MTZhZDQwHhcNMjUxMjA2MDYwMTA1WhcNMjUxMjA3MDYwMTA1WjAzMTEwLwYDVQQD Eyg1YTY5ZDFmYWJiYWE1MTE1NWJiZDdiOGU3Yzg0Y2YxZTU4ZGJjNWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEtBYoLigWkukh83ooWiC+Cz1xai BlY4+oIrpLfdROaaf7EPHhvYcEhdTokayITz9H/8QRI+R27iCVzwoCjHVJqF5w3M UzlhsfblsYOYjHWwU9AVX0u+Hycd30GpPK59qb78yuFriS8xqNy9N1J/MteIIJLt 3ILjBtsFQBxlQjVM7nMtDOmBokuKCIn1JYLElqAYfWJPXJPsVzPFN7GScIOVr3lX NhkQB6DMjRKx7RPKFJccXr+H7marVQou/p+RmiI3pYn4oiHj1Yk6yhKt5XfdT8ML JRvheYU4/0ddCgvmQpBLcw0olDc7I/eUUClJpPdto0TTfp14+yRTFS+OwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFpp0fq7qlEVW717jnyEzx5Y28XXMB8GA1UdIwQY MBaAFD3DhiccDgqNAfsZDWjYX/dk0WrUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGNPR0p4d09DbzBCLXhrTmFOaGY5MlRSYXRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9mMjY0YmItZWZkZC00NDk3LWJjMTAt ZGRmZWYzYzZhZDllLzEvUGNPR0p4d09DbzBCLXhrTmFOaGY5MlRSYXRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9mMjY0YmItZWZkZC00NDk3LWJjMTAtZGRmZWYzYzZhZDll LzEvUGNPR0p4d09DbzBCLXhrTmFOaGY5MlRSYXRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZeQWN1mA qLgOfoytuTckiaAcSxu/5haVqVx45gnXqsl8gVanto5ByVY5Rjwynpcs+ql4FoTJ g8eeYuVtvTMM/Gn0NjNoLNcOgtEDcD+921VrShivERYWUWq/gBZtLiQLMb903fRR FW8eJpXIbRSvKjSnHZkLiIM264+5RUbwwK/kGURBGqc/r4ljD46sEzjLOm+aEKDK 2pgEb1SIz+PS5ZWv6M1PFdos97zmFAtS2un4tuwgH58vAnZBqCTu//pBlqkQkXyW BTkhR6PK3Pn9fVU62vZyabnQQ6QyxnzrDQSySgTyIaH5rIUcuQ6c1DHe9URlhTgr EHXKf6P2uuqYQQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:11:52 2025 by rpki-client