This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft
File: PCyFQBEUChCUfae1O7s1DzxUsz4.mft (raw, json)
Hash identifier: Fq4xxF0SurDu7d+d3RsF6djLE/p5iBIGTMqvqWGbVTk=
Subject key identifier: D3:FE:F3:DB:2D:AB:10:AF:C8:44:40:46:E6:2C:CE:B3:EB:5F:87:A3
Authority key identifier: 3C:2C:85:40:11:14:0A:10:94:7D:A7:B5:3B:BB:35:0F:3C:54:B3:3E
Certificate issuer: /CN=3c2c854011140a10947da7b53bbb350f3c54b33e
Certificate serial: 019AF12E00BDD28FE99177DD25AE17F16F1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft
Manifest number: 0761
Signing time: Sat 06 Dec 2025 01:01:55 +0000
Manifest this update: Sat 06 Dec 2025 01:01:55 +0000
Manifest next update: Sun 07 Dec 2025 01:01:55 +0000
Files and hashes: 1: NtKyDgbGesEe8awF15SqP0_3q5E.roa (hash: 5/QwTKhvWnKsc5Bc5M0m9rQLZKRH4InU93sknSCwHzs=)
2: PCyFQBEUChCUfae1O7s1DzxUsz4.crl (hash: Y4vr4QqfH3v2KdjOAgx2dden0FyfwbFHoRCeWZ2dnE8=)
3: WNJuWEXBIip_f5G2ObX5HLas-6I.roa (hash: boUS884QFMK9V7SQvxUAnalpgEFhwVVzKbrcjkzFqDQ=)
4: hUje3HFTF6f1DLkrPmJro0BJv84.roa (hash: kR65nTDvmrqvVF+VEljMTGu7vMzX0EU8UFNtyZDk3w8=)
5: i63lT8gZ80ZQnoxkIIq3_XH-qGo.roa (hash: u7r5j40jao9jpdMvyg5KQYNAFcKXMkC3d+QE0v1EduY=)
6: ibMRX0UskUZ1fKV63OderSyFGp4.roa (hash: eA4MV5O6XQVzVYEe9jvmxnmU146aKwd4Gt1iGOJqAdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 01:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:2e:00:bd:d2:8f:e9:91:77:dd:25:ae:17:f1:6f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c2c854011140a10947da7b53bbb350f3c54b33e
Validity
Not Before: Dec 6 01:01:55 2025 GMT
Not After : Dec 7 01:01:55 2025 GMT
Subject: CN=d3fef3db2dab10afc8444046e62cceb3eb5f87a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f3:3c:81:71:1f:8d:6a:fb:56:8b:aa:42:ee:
8a:45:dd:86:a7:d2:2d:49:ff:dd:fb:8a:3e:1d:ba:
72:11:00:b4:77:f1:82:93:e4:4c:20:0b:fc:5e:bb:
c1:9a:f4:b8:9c:04:f4:d9:ac:56:0e:b7:b0:fa:ee:
9e:01:05:92:03:68:14:d9:ae:db:63:6f:b0:d5:86:
28:c4:ff:4f:57:91:e1:fc:12:47:cb:65:be:d9:90:
e8:19:f1:a7:ea:2f:7b:3e:fa:b9:78:d4:e2:2c:fa:
ef:fb:f5:00:54:7b:e5:d9:1f:b8:90:a4:33:cb:1c:
49:f9:3c:98:ed:ae:00:cb:f7:4a:2c:88:33:4b:70:
93:4c:7c:fe:5b:be:ca:24:16:00:6d:a9:03:49:40:
37:ff:a8:78:ab:fb:9c:ec:60:90:88:54:e6:c7:05:
ee:5d:00:6c:ac:06:2a:8f:33:ef:52:27:8e:6d:e6:
84:ec:97:e9:c7:92:23:00:af:b0:b3:da:c3:c7:48:
83:12:8d:5a:ce:83:f9:d8:54:96:df:56:9b:16:43:
1f:c4:36:d8:fe:e8:88:2d:78:24:7e:7f:3f:29:0b:
ba:5f:68:99:2e:49:a7:26:68:e3:a3:60:75:bc:e0:
3b:94:6a:bb:bb:7a:6a:29:65:fc:39:f5:6d:8b:bf:
77:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FE:F3:DB:2D:AB:10:AF:C8:44:40:46:E6:2C:CE:B3:EB:5F:87:A3
X509v3 Authority Key Identifier:
keyid:3C:2C:85:40:11:14:0A:10:94:7D:A7:B5:3B:BB:35:0F:3C:54:B3:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:73:87:e2:95:29:06:3b:b6:22:08:2d:b1:4b:89:b5:b0:57:
99:14:50:ff:ee:76:f9:64:25:2d:dc:37:6d:5b:97:82:0e:49:
bc:72:cd:61:e8:d7:ce:5c:53:4e:e0:4e:4f:80:71:c7:ba:fe:
b5:12:33:43:b3:b3:f3:0b:65:75:4a:19:db:5e:63:07:3b:fe:
f9:ba:dc:83:fe:6b:bd:e6:ac:d3:90:5f:33:56:f7:41:ec:bf:
f4:ad:3c:af:9f:89:f0:e2:64:de:88:4b:56:b3:8c:24:e9:2c:
da:d3:df:b7:4c:33:bf:49:8c:73:5e:f2:a9:c3:af:32:f2:1d:
7d:aa:c8:b4:c2:a6:c4:74:59:fd:73:dc:07:8b:48:e9:6e:8c:
9f:22:75:4a:9d:f6:47:53:0c:f1:2f:04:14:22:98:45:41:61:
20:d8:56:ef:a3:15:4f:1f:c1:02:f1:a2:78:fa:c6:1d:61:54:
53:e1:d0:0f:ea:cb:a7:be:c3:85:cd:50:4d:3a:ad:6d:bd:96:
a3:46:1d:59:41:13:eb:53:cf:d3:d1:16:4b:ea:69:d4:07:a7:
e0:7d:2c:62:e0:12:03:65:7f:6b:9f:23:15:ab:70:ef:01:50:
27:28:06:3d:c5:49:d3:28:fc:47:40:13:20:3c:fc:eb:59:24:
1b:43:76:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxLgC90o/pkXfdJa4X8W8fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjMmM4NTQwMTExNDBhMTA5NDdkYTdiNTNiYmIzNTBmM2M1
NGIzM2UwHhcNMjUxMjA2MDEwMTU1WhcNMjUxMjA3MDEwMTU1WjAzMTEwLwYDVQQD
EyhkM2ZlZjNkYjJkYWIxMGFmYzg0NDQwNDZlNjJjY2ViM2ViNWY4N2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vM8gXEfjWr7VouqQu6KRd2Gp9It
Sf/d+4o+HbpyEQC0d/GCk+RMIAv8XrvBmvS4nAT02axWDrew+u6eAQWSA2gU2a7b
Y2+w1YYoxP9PV5Hh/BJHy2W+2ZDoGfGn6i97Pvq5eNTiLPrv+/UAVHvl2R+4kKQz
yxxJ+TyY7a4Ay/dKLIgzS3CTTHz+W77KJBYAbakDSUA3/6h4q/uc7GCQiFTmxwXu
XQBsrAYqjzPvUieObeaE7Jfpx5IjAK+ws9rDx0iDEo1azoP52FSW31abFkMfxDbY
/uiILXgkfn8/KQu6X2iZLkmnJmjjo2B1vOA7lGq7u3pqKWX8OfVti793IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNP+89stqxCvyERARuYszrPrX4ejMB8GA1UdIwQY
MBaAFDwshUARFAoQlH2ntTu7NQ88VLM+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEN5RlFCRVVDaENVZmFlMU83czFEenhVc3o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9lMDU4MGQtMDQ4YS00ZTZkLWJlYzYt
YjViYmQwYjVlMGFhLzEvUEN5RlFCRVVDaENVZmFlMU83czFEenhVc3o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9lMDU4MGQtMDQ4YS00ZTZkLWJlYzYtYjViYmQwYjVlMGFh
LzEvUEN5RlFCRVVDaENVZmFlMU83czFEenhVc3o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZHOH4pUp
Bju2IggtsUuJtbBXmRRQ/+52+WQlLdw3bVuXgg5JvHLNYejXzlxTTuBOT4Bxx7r+
tRIzQ7Oz8wtldUoZ215jBzv++brcg/5rveas05BfM1b3Qey/9K08r5+J8OJk3ohL
VrOMJOks2tPft0wzv0mMc17yqcOvMvIdfarItMKmxHRZ/XPcB4tI6W6MnyJ1Sp32
R1MM8S8EFCKYRUFhINhW76MVTx/BAvGiePrGHWFUU+HQD+rLp77Dhc1QTTqtbb2W
o0YdWUET61PP09EWS+pp1Aen4H0sYuASA2V/a58jFatw7wFQJygGPcVJ0yj8R0AT
IDz861kkG0N2/Q==
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:58:45 2025 by rpki-client