This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft File: PCH6xeiV5bfOZv4In_0LL2FVDSE.mft (raw, json) Hash identifier: TBxgSw1W/b1L7Nr8Jma6klly8jUGg72DID5SsHBJBh4= Subject key identifier: 0E:94:4F:86:79:FC:E8:F5:C2:B2:29:D0:2E:97:D0:E8:B2:70:AA:DD Authority key identifier: 3C:21:FA:C5:E8:95:E5:B7:CE:66:FE:08:9F:FD:0B:2F:61:55:0D:21 Certificate issuer: /CN=3c21fac5e895e5b7ce66fe089ffd0b2f61550d21 Certificate serial: 019AF31B607B29F25540516D3AD8747EAFB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 10:00:48 +0000 Manifest this update: Sat 06 Dec 2025 10:00:48 +0000 Manifest next update: Sun 07 Dec 2025 10:00:48 +0000 Files and hashes: 1: PCH6xeiV5bfOZv4In_0LL2FVDSE.crl (hash: ewQkk3jAykaBq7/2tZktkDnUTNzKBdci8RNpXDtetjY=) 2: kMic-cYu_3jAGaMkqOjyp2h03_Q.roa (hash: q724sfMAPnUFvRmxjRBhUtLlfNKhUfTz/xhqtAFnU88=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:60:7b:29:f2:55:40:51:6d:3a:d8:74:7e:af:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c21fac5e895e5b7ce66fe089ffd0b2f61550d21 Validity Not Before: Dec 6 10:00:48 2025 GMT Not After : Dec 7 10:00:48 2025 GMT Subject: CN=0e944f8679fce8f5c2b229d02e97d0e8b270aadd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:20:99:3c:d2:1b:5a:eb:70:4a:d4:05:86:cf: 07:49:dd:89:54:25:3a:da:e4:7d:31:9a:19:36:ae: c7:8b:85:77:06:c1:d5:c0:fd:aa:86:eb:8c:7a:18: 10:57:f0:ca:09:48:57:c1:f3:97:1d:36:a1:94:c3: 9e:af:f4:f7:79:9a:fa:f3:92:4a:d9:3f:c9:0e:73: 98:d1:39:9f:64:e4:40:63:81:1e:3f:3e:20:e0:07: d2:da:8c:69:a3:45:33:81:f5:a3:71:a8:8d:9c:e1: 20:a8:6b:32:1c:53:73:2f:cf:e1:f7:03:3f:80:ec: 7c:97:bc:fd:0f:91:39:54:5d:db:fc:6a:93:e3:60: 4e:a4:d6:6f:c9:f7:9d:05:7d:54:84:8a:9c:99:05: aa:d1:41:50:27:6c:8b:25:02:92:40:64:22:71:67: 2a:b6:99:c7:7d:85:43:b3:d2:3f:91:4a:af:cb:54: 69:0e:16:c6:e7:15:04:bf:8e:02:cf:6c:e3:b1:03: 20:f1:95:2d:1b:f7:8f:9a:4e:31:74:5e:62:66:8d: 5d:da:38:23:82:4f:80:da:12:dd:fc:11:e0:dd:3f: 13:c7:0e:61:1c:83:ab:6f:89:d7:54:36:c6:64:74: d5:cf:99:51:23:d1:c8:bf:b3:f0:0d:e3:e9:6d:26: 0d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:94:4F:86:79:FC:E8:F5:C2:B2:29:D0:2E:97:D0:E8:B2:70:AA:DD X509v3 Authority Key Identifier: keyid:3C:21:FA:C5:E8:95:E5:B7:CE:66:FE:08:9F:FD:0B:2F:61:55:0D:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:d0:52:bb:ee:c6:55:d9:cb:f9:16:90:59:3a:69:7d:5d:52: 8c:98:29:fa:8f:aa:8f:c9:41:e2:9b:91:33:59:05:b7:9d:0a: 8d:17:b7:73:6e:06:32:81:02:39:e8:aa:1c:0c:76:01:05:8e: 9a:e5:6a:79:b2:60:61:f5:27:7d:04:51:f6:29:7b:4e:61:fd: 9a:98:0b:5b:2c:5a:5f:53:ad:50:7d:12:8f:bf:8b:d6:db:33: a1:55:00:10:5a:37:cf:c8:5a:77:b2:56:d1:60:14:9c:18:80: 90:97:67:46:73:3f:34:e5:a6:c7:ff:47:27:b8:2e:76:49:db: de:fc:03:01:4d:e1:a6:b8:09:58:97:02:96:66:66:b5:e0:97: 4a:bb:b1:9f:0c:c8:6b:55:ab:70:08:f4:8f:0d:cb:8a:ea:ee: fe:c6:c8:df:ad:c3:4d:bb:12:f5:27:0f:95:32:d5:8b:d4:9f: 1b:44:40:9b:bf:12:71:91:5d:68:ab:c8:07:53:d5:2e:32:55: 2f:c3:76:8c:4c:71:18:5b:11:71:78:0d:16:27:39:ce:14:5b: 7f:73:ad:1a:aa:18:b4:b5:76:4f:c8:ba:12:7f:dc:9c:7b:dc: d6:ed:b8:5c:00:55:c4:0c:be:25:c2:64:5d:b8:18:65:e5:8d: 70:6f:f8:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG2B7KfJVQFFtOth0fq+4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMjFmYWM1ZTg5NWU1YjdjZTY2ZmUwODlmZmQwYjJmNjE1 NTBkMjEwHhcNMjUxMjA2MTAwMDQ4WhcNMjUxMjA3MTAwMDQ4WjAzMTEwLwYDVQQD EygwZTk0NGY4Njc5ZmNlOGY1YzJiMjI5ZDAyZTk3ZDBlOGIyNzBhYWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniCZPNIbWutwStQFhs8HSd2JVCU6 2uR9MZoZNq7Hi4V3BsHVwP2qhuuMehgQV/DKCUhXwfOXHTahlMOer/T3eZr685JK 2T/JDnOY0TmfZORAY4EePz4g4AfS2oxpo0UzgfWjcaiNnOEgqGsyHFNzL8/h9wM/ gOx8l7z9D5E5VF3b/GqT42BOpNZvyfedBX1UhIqcmQWq0UFQJ2yLJQKSQGQicWcq tpnHfYVDs9I/kUqvy1RpDhbG5xUEv44Cz2zjsQMg8ZUtG/ePmk4xdF5iZo1d2jgj gk+A2hLd/BHg3T8Txw5hHIOrb4nXVDbGZHTVz5lRI9HIv7PwDePpbSYNIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA6UT4Z5/Oj1wrIp0C6X0OiycKrdMB8GA1UdIwQY MBaAFDwh+sXoleW3zmb+CJ/9Cy9hVQ0hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUENINnhlaVY1YmZPWnY0SW5fMExMMkZWRFNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC82MGIwMDYtNmI1My00ZjAwLWE0ODgt NDg1ZGQ0YWQ1NGZiLzEvUENINnhlaVY1YmZPWnY0SW5fMExMMkZWRFNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC82MGIwMDYtNmI1My00ZjAwLWE0ODgtNDg1ZGQ0YWQ1NGZi LzEvUENINnhlaVY1YmZPWnY0SW5fMExMMkZWRFNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr9BSu+7G VdnL+RaQWTppfV1SjJgp+o+qj8lB4puRM1kFt50KjRe3c24GMoECOeiqHAx2AQWO muVqebJgYfUnfQRR9il7TmH9mpgLWyxaX1OtUH0Sj7+L1tszoVUAEFo3z8had7JW 0WAUnBiAkJdnRnM/NOWmx/9HJ7gudknb3vwDAU3hprgJWJcClmZmteCXSruxnwzI a1WrcAj0jw3Liuru/sbI363DTbsS9ScPlTLVi9SfG0RAm78ScZFdaKvIB1PVLjJV L8N2jExxGFsRcXgNFic5zhRbf3OtGqoYtLV2T8i6En/cnHvc1u24XABVxAy+JcJk XbgYZeWNcG/4Gg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:02:52 2025 by rpki-client