This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft File: Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft (raw, json) Hash identifier: 589CUCawGM8twOp8mgQ7YYziQGudwUDPLq07MFhxRKs= Subject key identifier: 4D:81:0A:71:7B:18:77:50:27:3A:1E:D3:4D:66:46:A5:2F:51:33:DB Authority key identifier: 3D:EA:ED:ED:A1:05:D7:E9:12:9A:9B:0C:E5:6B:9B:FC:B9:C6:73:94 Certificate issuer: /CN=3deaededa105d7e9129a9b0ce56b9bfcb9c67394 Certificate serial: 019AF2ADAD662DFEA30A78FD4E57F545A294 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft Manifest number: 100A Signing time: Sat 06 Dec 2025 08:00:59 +0000 Manifest this update: Sat 06 Dec 2025 08:00:59 +0000 Manifest next update: Sun 07 Dec 2025 08:00:59 +0000 Files and hashes: 1: FcNY2ovl7yF-URMS0Ey2NMjx_wo.roa (hash: u+b9OZLTWgc4ylA+6a19u9K+8czzP5mhCM7NuK4dmF4=) 2: Pert7aEF1-kSmpsM5Wub_LnGc5Q.crl (hash: 7o2dXw2X9qZAbSsoalN6PthITYnto06hzs62afy8DV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:ad:66:2d:fe:a3:0a:78:fd:4e:57:f5:45:a2:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3deaededa105d7e9129a9b0ce56b9bfcb9c67394 Validity Not Before: Dec 6 08:00:59 2025 GMT Not After : Dec 7 08:00:59 2025 GMT Subject: CN=4d810a717b187750273a1ed34d6646a52f5133db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:98:56:41:99:35:8b:2f:5c:fa:15:e2:98:a7: 75:96:ac:de:15:08:6b:49:00:51:68:c8:13:95:36: 0f:a7:01:0b:79:3b:91:e6:ae:11:d8:6b:64:bc:f1: 46:be:18:56:d6:f4:17:24:0c:83:0e:94:cf:d4:65: 7c:7f:02:8b:92:bf:29:c6:9d:51:7d:fc:f9:20:a5: be:55:76:02:49:a6:7e:9d:29:10:b0:6f:7f:65:cc: a2:12:b9:ec:74:5a:23:e5:7f:bd:4a:01:b8:1c:df: 5c:5a:2a:52:e9:7e:f8:66:77:de:9d:d5:5c:ed:e5: 88:b5:69:a3:8b:cf:d4:24:d3:34:5f:ff:b3:fa:d1: c5:f7:19:ea:2d:e8:74:48:9b:be:e1:75:92:18:98: 29:be:46:60:33:93:b0:d3:4f:2d:89:0c:a4:9d:f9: b1:6f:dc:bf:e8:06:51:68:65:30:9e:87:f4:88:f4: 36:1b:06:57:b1:15:a3:44:58:27:49:c9:fe:63:e8: 9b:9b:91:46:e0:0b:a1:0a:8b:fc:72:1f:a3:30:47: a4:c3:0e:a4:a3:e8:56:9f:5f:24:fa:b6:3c:fa:a1: 3b:ea:74:69:e3:42:85:2b:90:19:79:e2:88:2e:64: 31:1c:e7:75:3b:83:5e:d6:e8:a7:86:47:65:07:df: 98:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:81:0A:71:7B:18:77:50:27:3A:1E:D3:4D:66:46:A5:2F:51:33:DB X509v3 Authority Key Identifier: keyid:3D:EA:ED:ED:A1:05:D7:E9:12:9A:9B:0C:E5:6B:9B:FC:B9:C6:73:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:57:3d:7c:c6:0a:1d:4f:23:c8:f7:45:50:4a:75:78:94:fa: ff:75:7c:19:74:3f:19:47:f9:5b:00:ee:e6:7a:85:1c:7d:f6: 2b:13:4e:59:03:a2:6f:d2:bf:ec:a1:3e:f5:f6:63:8d:1d:2e: 21:47:d4:ef:c6:8a:8c:20:fc:9f:82:80:1e:54:25:6b:16:82: 5a:f2:b4:c2:8c:f2:af:b0:54:f4:dc:9a:e8:8e:54:a9:28:56: 63:91:a0:43:a7:9c:a8:27:3a:b5:08:3b:62:d1:76:d7:49:6f: 48:a8:4d:45:50:84:11:25:2b:0c:14:a7:03:e8:82:ec:3d:bd: b0:0f:92:f2:55:6f:60:d4:9c:82:ff:d0:64:58:9e:c6:c1:a9: 8b:26:51:8e:8a:cb:b3:79:29:83:93:24:fa:e9:70:a2:64:e4: 7d:7f:8c:90:bb:b0:8d:5f:d0:23:86:1d:07:a2:37:b0:3b:c0: 88:48:65:15:d9:23:b1:5d:8e:9a:59:99:ce:30:f4:ed:ce:9a: 40:e7:c5:d5:57:27:82:47:7a:38:f0:9b:bb:a3:24:6c:89:15: be:67:1f:db:5a:ed:6a:f9:bf:82:1a:92:96:0a:be:30:d8:43: 52:25:f5:4b:d5:36:88:72:3a:44:ec:ce:9c:ca:b4:b2:67:ed: 94:e1:31:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryra1mLf6jCnj9Tlf1RaKUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkZWFlZGVkYTEwNWQ3ZTkxMjlhOWIwY2U1NmI5YmZjYjlj NjczOTQwHhcNMjUxMjA2MDgwMDU5WhcNMjUxMjA3MDgwMDU5WjAzMTEwLwYDVQQD Eyg0ZDgxMGE3MTdiMTg3NzUwMjczYTFlZDM0ZDY2NDZhNTJmNTEzM2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqphWQZk1iy9c+hXimKd1lqzeFQhr SQBRaMgTlTYPpwELeTuR5q4R2GtkvPFGvhhW1vQXJAyDDpTP1GV8fwKLkr8pxp1R ffz5IKW+VXYCSaZ+nSkQsG9/ZcyiErnsdFoj5X+9SgG4HN9cWipS6X74ZnfendVc 7eWItWmji8/UJNM0X/+z+tHF9xnqLeh0SJu+4XWSGJgpvkZgM5Ow008tiQyknfmx b9y/6AZRaGUwnof0iPQ2GwZXsRWjRFgnScn+Y+ibm5FG4AuhCov8ch+jMEekww6k o+hWn18k+rY8+qE76nRp40KFK5AZeeKILmQxHOd1O4Ne1uinhkdlB9+YqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE2BCnF7GHdQJzoe001mRqUvUTPbMB8GA1UdIwQY MBaAFD3q7e2hBdfpEpqbDOVrm/y5xnOUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGVydDdhRUYxLWtTbXBzTTVXdWJfTG5HYzVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9jYzRlYjMtNzY4YS00ZjkxLTg4MmMt MGRiMTA4NTBjNzk0LzEvUGVydDdhRUYxLWtTbXBzTTVXdWJfTG5HYzVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9jYzRlYjMtNzY4YS00ZjkxLTg4MmMtMGRiMTA4NTBjNzk0 LzEvUGVydDdhRUYxLWtTbXBzTTVXdWJfTG5HYzVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATVc9fMYK HU8jyPdFUEp1eJT6/3V8GXQ/GUf5WwDu5nqFHH32KxNOWQOib9K/7KE+9fZjjR0u IUfU78aKjCD8n4KAHlQlaxaCWvK0wozyr7BU9Nya6I5UqShWY5GgQ6ecqCc6tQg7 YtF210lvSKhNRVCEESUrDBSnA+iC7D29sA+S8lVvYNScgv/QZFiexsGpiyZRjorL s3kpg5Mk+ulwomTkfX+MkLuwjV/QI4YdB6I3sDvAiEhlFdkjsV2OmlmZzjD07c6a QOfF1Vcngkd6OPCbu6MkbIkVvmcf21rtavm/ghqSlgq+MNhDUiX1S9U2iHI6ROzO nMq0smftlOExZQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:58:52 2025 by rpki-client