This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft File: PCr6XHBtPrCpLaibXUG5NutJzLg.mft (raw, json) Hash identifier: baqOZG1NOT/iOBHJaczv5+goEMnjTxdO6RHDYinV8lw= Subject key identifier: D3:BB:F4:1D:A7:0D:8A:D7:95:E7:16:2D:78:CC:83:EA:54:D8:06:54 Authority key identifier: 3C:2A:FA:5C:70:6D:3E:B0:A9:2D:A8:9B:5D:41:B9:36:EB:49:CC:B8 Certificate issuer: /CN=3c2afa5c706d3eb0a92da89b5d41b936eb49ccb8 Certificate serial: 019AF19B3D59BA1361990B5CE7240DED0BE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft Manifest number: 1219 Signing time: Sat 06 Dec 2025 03:01:13 +0000 Manifest this update: Sat 06 Dec 2025 03:01:13 +0000 Manifest next update: Sun 07 Dec 2025 03:01:13 +0000 Files and hashes: 1: PCr6XHBtPrCpLaibXUG5NutJzLg.crl (hash: 35K7jB9EeDrm4g77xQsw9EF48Y6w3rnvJL9M4iDkaIE=) 2: gS9qTUkzusPVnwIVsvZEcIJfkGw.roa (hash: vAfS5SaRlx1aspB2qU2R3kxZGRQKFuwGAmKIB/uyw98=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:3d:59:ba:13:61:99:0b:5c:e7:24:0d:ed:0b:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c2afa5c706d3eb0a92da89b5d41b936eb49ccb8 Validity Not Before: Dec 6 03:01:13 2025 GMT Not After : Dec 7 03:01:13 2025 GMT Subject: CN=d3bbf41da70d8ad795e7162d78cc83ea54d80654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ce:4d:65:82:44:f0:0f:27:95:cf:aa:b0:e5: ec:54:c9:41:c0:73:a1:b2:ab:43:79:8a:04:6e:3d: 33:9f:89:37:39:c4:df:c1:f3:89:2b:de:9a:b6:1f: 91:0d:37:f0:ab:8b:1d:1b:47:be:35:06:5b:13:7d: c7:89:d9:77:b2:bc:f7:a9:59:b2:0e:14:fe:07:0a: 22:17:35:a4:fe:d0:37:f2:c3:ca:12:50:fa:41:0f: 55:37:2e:f1:6c:fc:83:ad:41:33:42:b4:af:e0:02: fd:95:28:46:2c:9e:4b:e3:cd:ff:90:57:ce:0c:ee: 04:09:79:86:85:f2:c0:f1:9b:e9:75:1f:7b:44:6c: 52:fb:ae:b9:2d:e9:78:76:5f:46:10:ec:3c:ac:54: 64:68:e7:97:fb:bd:57:e8:a8:24:f6:0c:77:99:34: 7f:80:51:bc:91:55:42:61:70:66:c0:e0:b6:62:b5: 28:31:fa:1e:6b:9f:24:02:fa:f1:37:62:5a:53:b0: 2e:81:31:70:f8:1c:05:b9:d7:79:28:83:b8:81:f1: ef:7e:37:56:9a:ac:19:ae:d9:b2:86:9a:b0:9a:dd: bf:cd:b1:39:58:4a:50:7b:41:e1:95:c3:b9:bb:25: de:8b:74:ed:57:70:7f:9e:94:2f:56:0c:d0:cc:e0: ce:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:BB:F4:1D:A7:0D:8A:D7:95:E7:16:2D:78:CC:83:EA:54:D8:06:54 X509v3 Authority Key Identifier: keyid:3C:2A:FA:5C:70:6D:3E:B0:A9:2D:A8:9B:5D:41:B9:36:EB:49:CC:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:54:c2:d5:a1:35:7d:ee:1b:bc:22:20:80:06:fc:ff:ed:ec: bb:73:65:9b:2d:ab:9a:44:00:41:98:68:49:b4:7f:0f:b8:b3: 55:34:94:8f:b2:f2:9f:1e:aa:f4:99:f5:d5:91:d1:3a:c8:3c: de:b6:17:3a:3d:c4:e7:7c:92:51:73:65:b4:db:50:68:5c:e6: 4f:82:db:43:d8:a3:58:69:5e:f6:b8:4c:9e:de:d5:cf:39:ad: 4f:85:3f:b6:a8:b4:8b:43:38:49:4a:5e:5f:9f:88:66:24:f1: 0a:f0:fa:95:8b:b1:c4:58:0d:ba:da:53:c8:b2:f7:43:10:bf: a7:10:e0:8f:22:c7:de:41:ef:70:f4:9d:74:9c:4c:27:d0:be: 87:00:45:b0:ec:13:3c:fb:6e:b2:7b:91:3d:03:2e:26:53:3a: 30:50:6c:f2:56:6b:a1:28:53:06:33:9f:43:63:92:dd:72:4f: db:91:a2:ce:7b:de:4d:fe:d4:a6:5f:3f:0c:89:45:70:50:cd: a3:d0:ea:24:2c:44:72:ad:d2:c2:66:32:c1:96:e7:55:5a:34: 0d:49:eb:1a:48:5c:0a:83:07:05:01:de:d2:45:e7:9a:fd:72: 56:8d:47:b2:86:1c:da:48:55:11:ea:7e:f7:bf:ed:dd:22:a1: cf:ad:36:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmz1ZuhNhmQtc5yQN7QvlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMmFmYTVjNzA2ZDNlYjBhOTJkYTg5YjVkNDFiOTM2ZWI0 OWNjYjgwHhcNMjUxMjA2MDMwMTEzWhcNMjUxMjA3MDMwMTEzWjAzMTEwLwYDVQQD EyhkM2JiZjQxZGE3MGQ4YWQ3OTVlNzE2MmQ3OGNjODNlYTU0ZDgwNjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAts5NZYJE8A8nlc+qsOXsVMlBwHOh sqtDeYoEbj0zn4k3OcTfwfOJK96ath+RDTfwq4sdG0e+NQZbE33Hidl3srz3qVmy DhT+BwoiFzWk/tA38sPKElD6QQ9VNy7xbPyDrUEzQrSv4AL9lShGLJ5L483/kFfO DO4ECXmGhfLA8ZvpdR97RGxS+665Lel4dl9GEOw8rFRkaOeX+71X6Kgk9gx3mTR/ gFG8kVVCYXBmwOC2YrUoMfoea58kAvrxN2JaU7AugTFw+BwFudd5KIO4gfHvfjdW mqwZrtmyhpqwmt2/zbE5WEpQe0HhlcO5uyXei3TtV3B/npQvVgzQzODORwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNO79B2nDYrXlecWLXjMg+pU2AZUMB8GA1UdIwQY MBaAFDwq+lxwbT6wqS2om11BuTbrScy4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUENyNlhIQnRQckNwTGFpYlhVRzVOdXRKekxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9lYjFjNGYtZmQ4MC00OTE5LWIxODUt Zjc4MzNhM2YyNDg1LzEvUENyNlhIQnRQckNwTGFpYlhVRzVOdXRKekxnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9lYjFjNGYtZmQ4MC00OTE5LWIxODUtZjc4MzNhM2YyNDg1 LzEvUENyNlhIQnRQckNwTGFpYlhVRzVOdXRKekxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdFTC1aE1 fe4bvCIggAb8/+3su3Nlmy2rmkQAQZhoSbR/D7izVTSUj7Lynx6q9Jn11ZHROsg8 3rYXOj3E53ySUXNltNtQaFzmT4LbQ9ijWGle9rhMnt7VzzmtT4U/tqi0i0M4SUpe X5+IZiTxCvD6lYuxxFgNutpTyLL3QxC/pxDgjyLH3kHvcPSddJxMJ9C+hwBFsOwT PPtusnuRPQMuJlM6MFBs8lZroShTBjOfQ2OS3XJP25GiznveTf7Upl8/DIlFcFDN o9DqJCxEcq3SwmYywZbnVVo0DUnrGkhcCoMHBQHe0kXnmv1yVo1HsoYc2khVEep+ 97/t3SKhz602fw== -----END CERTIFICATE-----Generated at Sat Dec 6 06:59:26 2025 by rpki-client