This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft File: PCH6xeiV5bfOZv4In_0LL2FVDSE.mft (raw, json) Hash identifier: 1hahSBhPXLIqCucf+Rss4LGchK+T2W0sfON+L8NKJgk= Subject key identifier: 82:47:E6:2C:14:F0:37:27:CA:AA:59:81:F0:2B:17:A9:5F:AA:EB:9A Authority key identifier: 3C:21:FA:C5:E8:95:E5:B7:CE:66:FE:08:9F:FD:0B:2F:61:55:0D:21 Certificate issuer: /CN=3c21fac5e895e5b7ce66fe089ffd0b2f61550d21 Certificate serial: 019B36B2F2DFE2D5DBD434252E6648EF910B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 13:00:55 +0000 Manifest this update: Fri 19 Dec 2025 13:00:55 +0000 Manifest next update: Sat 20 Dec 2025 13:00:55 +0000 Files and hashes: 1: PCH6xeiV5bfOZv4In_0LL2FVDSE.crl (hash: NhPfh464nSf7O6djI4/0Ys0IJIBuDp8I17NqmaeDPX4=) 2: kMic-cYu_3jAGaMkqOjyp2h03_Q.roa (hash: q724sfMAPnUFvRmxjRBhUtLlfNKhUfTz/xhqtAFnU88=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b2:f2:df:e2:d5:db:d4:34:25:2e:66:48:ef:91:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c21fac5e895e5b7ce66fe089ffd0b2f61550d21 Validity Not Before: Dec 19 13:00:55 2025 GMT Not After : Dec 20 13:00:55 2025 GMT Subject: CN=8247e62c14f03727caaa5981f02b17a95faaeb9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e5:5a:e7:d1:ac:81:cd:38:d3:e8:c1:9f:dc: 35:6f:1f:00:41:f1:bb:9c:3a:16:0e:7c:fd:d5:5a: a9:55:15:e7:2d:99:88:66:2b:3d:96:4b:f4:27:67: b1:06:da:a1:4f:41:3c:16:8b:8e:e7:3c:51:ae:f5: ce:51:3a:aa:d3:ad:e2:c2:47:4c:37:5f:97:66:84: 66:14:65:c3:d2:c1:58:ef:ca:6b:d0:d7:18:c2:ef: 74:3a:1d:63:ca:ea:41:ba:39:55:4c:9c:a7:e3:31: de:65:8e:e9:43:3b:51:8a:4c:ab:49:bd:f2:8c:d7: d9:b0:17:13:69:37:0d:dc:21:0e:5b:a5:0d:6b:44: 11:d3:87:ef:87:a4:dc:a3:97:7c:da:ca:c9:bb:55: cd:a7:47:85:e8:88:c8:71:ad:37:50:30:ac:c4:4a: d9:f8:f9:5e:71:d7:d1:2e:27:4a:b0:e6:34:85:c5: 7a:30:ba:f5:59:d4:9b:f6:18:42:0e:24:8f:8d:c0: 34:5b:81:5a:15:67:c8:36:a9:1a:88:ec:32:95:af: 53:e2:94:65:5f:6f:1d:e1:cc:47:84:1d:d4:42:c4: 81:b9:4a:df:51:fd:15:33:64:c7:3b:62:0b:76:54: 56:66:5d:32:71:3b:6d:01:c4:fe:9d:8f:03:7d:5a: 17:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:47:E6:2C:14:F0:37:27:CA:AA:59:81:F0:2B:17:A9:5F:AA:EB:9A X509v3 Authority Key Identifier: keyid:3C:21:FA:C5:E8:95:E5:B7:CE:66:FE:08:9F:FD:0B:2F:61:55:0D:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:01:0a:5c:d9:f8:38:19:45:9b:3d:14:5a:b6:89:4f:86:4e: b9:85:8d:df:60:84:c1:b2:c9:7e:45:e6:da:c7:6c:1a:a2:84: 3b:82:f0:22:b6:f6:57:4d:46:c8:de:d6:7a:60:7e:29:67:da: 61:82:d4:6c:10:da:56:85:ce:c9:06:8c:41:12:ad:0d:10:06: f3:12:f7:c0:2a:27:ce:11:0c:02:61:3b:24:cc:b8:18:e8:c6: ff:8a:52:4a:c4:ba:0e:dd:02:cc:1e:19:bc:cc:05:da:54:7d: 4d:cb:23:b1:1b:b2:2c:b7:07:6c:e1:4f:b5:61:0a:19:69:95: 90:03:a1:a3:03:ad:c9:f1:40:36:9f:99:f0:9f:89:77:ae:91: 0b:3e:cf:2c:78:f1:e3:6b:53:08:c9:60:ff:37:f1:4a:2c:cc: 60:4f:35:42:54:47:bd:5f:f0:d2:2d:cd:5c:e1:b3:90:62:86: 17:52:0f:72:51:21:81:c5:09:ac:91:2c:e4:59:4d:07:b1:d3: ba:7d:ff:74:18:22:76:7d:26:5b:96:44:d6:61:fe:8f:0c:52: 24:9d:26:e8:05:43:fa:8d:ab:25:0d:9e:66:ab:05:c5:11:0b: af:d3:44:8f:52:e5:4f:68:b8:1f:eb:88:9b:e6:78:01:6d:73: 70:20:cc:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2svLf4tXb1DQlLmZI75ELMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMjFmYWM1ZTg5NWU1YjdjZTY2ZmUwODlmZmQwYjJmNjE1 NTBkMjEwHhcNMjUxMjE5MTMwMDU1WhcNMjUxMjIwMTMwMDU1WjAzMTEwLwYDVQQD Eyg4MjQ3ZTYyYzE0ZjAzNzI3Y2FhYTU5ODFmMDJiMTdhOTVmYWFlYjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOVa59Gsgc040+jBn9w1bx8AQfG7 nDoWDnz91VqpVRXnLZmIZis9lkv0J2exBtqhT0E8FouO5zxRrvXOUTqq063iwkdM N1+XZoRmFGXD0sFY78pr0NcYwu90Oh1jyupBujlVTJyn4zHeZY7pQztRikyrSb3y jNfZsBcTaTcN3CEOW6UNa0QR04fvh6Tco5d82srJu1XNp0eF6IjIca03UDCsxErZ +PlecdfRLidKsOY0hcV6MLr1WdSb9hhCDiSPjcA0W4FaFWfINqkaiOwyla9T4pRl X28d4cxHhB3UQsSBuUrfUf0VM2THO2ILdlRWZl0ycTttAcT+nY8DfVoXSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIJH5iwU8DcnyqpZgfArF6lfquuaMB8GA1UdIwQY MBaAFDwh+sXoleW3zmb+CJ/9Cy9hVQ0hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUENINnhlaVY1YmZPWnY0SW5fMExMMkZWRFNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC82MGIwMDYtNmI1My00ZjAwLWE0ODgt NDg1ZGQ0YWQ1NGZiLzEvUENINnhlaVY1YmZPWnY0SW5fMExMMkZWRFNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC82MGIwMDYtNmI1My00ZjAwLWE0ODgtNDg1ZGQ0YWQ1NGZi LzEvUENINnhlaVY1YmZPWnY0SW5fMExMMkZWRFNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADgEKXNn4 OBlFmz0UWraJT4ZOuYWN32CEwbLJfkXm2sdsGqKEO4LwIrb2V01GyN7WemB+KWfa YYLUbBDaVoXOyQaMQRKtDRAG8xL3wConzhEMAmE7JMy4GOjG/4pSSsS6Dt0CzB4Z vMwF2lR9TcsjsRuyLLcHbOFPtWEKGWmVkAOhowOtyfFANp+Z8J+Jd66RCz7PLHjx 42tTCMlg/zfxSizMYE81QlRHvV/w0i3NXOGzkGKGF1IPclEhgcUJrJEs5FlNB7HT un3/dBgidn0mW5ZE1mH+jwxSJJ0m6AVD+o2rJQ2eZqsFxRELr9NEj1LlT2i4H+uI m+Z4AW1zcCDMGA== -----END CERTIFICATE-----Generated at Fri Dec 19 14:49:56 2025 by rpki-client