This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft File: pe6Sbx8VN7m-detLnXkt9B0lzZk.mft (raw, json) Hash identifier: 4/UdZsQou1g491ULDnqRliRausyJM7olS2vTXKBj9ws= Subject key identifier: BC:C4:9C:1C:09:75:16:0D:08:C5:59:11:4C:80:42:27:5F:26:13:C8 Authority key identifier: A5:EE:92:6F:1F:15:37:B9:BE:75:EB:4B:9D:79:2D:F4:1D:25:CD:99 Certificate issuer: /CN=a5ee926f1f1537b9be75eb4b9d792df41d25cd99 Certificate serial: 019B397DA5EC0070E678412A097BD5724519 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft Manifest number: 0E5D Signing time: Sat 20 Dec 2025 02:01:34 +0000 Manifest this update: Sat 20 Dec 2025 02:01:34 +0000 Manifest next update: Sun 21 Dec 2025 02:01:34 +0000 Files and hashes: 1: WDPyyXGbTlVNzNvHMt_u6jFAfDs.roa (hash: Io6wRfSHyznIog5I1/syrGcc1ZOg6epQfuj3AIJAZhg=) 2: pe6Sbx8VN7m-detLnXkt9B0lzZk.crl (hash: HJwq35w9ERY229CWDSNeO0oXeMZWcYoBKheXyO1of88=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.crl rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:a5:ec:00:70:e6:78:41:2a:09:7b:d5:72:45:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5ee926f1f1537b9be75eb4b9d792df41d25cd99 Validity Not Before: Dec 20 02:01:34 2025 GMT Not After : Dec 21 02:01:34 2025 GMT Subject: CN=bcc49c1c0975160d08c559114c8042275f2613c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0f:88:c9:85:0b:fc:d4:5c:23:c8:83:ef:eb: 52:64:cc:73:76:b6:19:14:28:5b:d3:be:41:09:e5: d4:56:8c:1b:53:32:29:cf:fd:b2:d9:51:64:5a:ad: 4f:c7:21:de:7b:e9:ed:49:f6:4f:d3:4f:db:c5:6b: 35:8c:40:2f:12:6e:3b:45:80:bf:02:d0:34:44:25: d6:ab:b3:fe:da:43:35:77:e7:b9:f4:71:1f:ef:e7: 0a:83:19:ca:d6:66:be:f5:3f:62:64:ff:e6:fd:99: db:ae:3f:e5:ef:4e:72:b0:f0:6f:ec:90:05:e7:b6: 82:b1:1f:80:ce:bc:e3:7f:ca:fc:5f:b3:b4:d1:47: cf:fe:58:a7:a8:a4:b3:5b:1b:c8:0f:fc:3d:0f:15: c6:d1:50:98:cb:d2:d9:be:76:99:ff:3c:5d:c0:bb: e7:2f:de:9e:ec:6d:cc:64:27:43:54:8c:47:13:9f: 01:4f:11:36:fe:39:bd:5f:65:a8:9e:88:4b:84:09: 00:1b:59:e7:74:81:30:5a:7e:78:31:a4:4f:79:7a: c2:5b:5b:7f:b5:09:6e:bc:69:76:3d:dc:a6:04:ab: 2e:59:2d:d7:ef:ae:98:cb:6f:88:b7:c5:de:2f:0a: 77:c0:ab:3f:7a:35:a8:3c:b6:b3:7c:ae:d2:74:65: 42:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:C4:9C:1C:09:75:16:0D:08:C5:59:11:4C:80:42:27:5F:26:13:C8 X509v3 Authority Key Identifier: keyid:A5:EE:92:6F:1F:15:37:B9:BE:75:EB:4B:9D:79:2D:F4:1D:25:CD:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:a3:39:67:4e:1b:19:98:9c:7d:01:06:4b:f7:fa:26:b5:7c: db:43:d3:ee:48:9d:4d:fd:9a:0e:c7:be:39:55:10:77:14:28: 58:d1:c4:ea:8d:a6:7c:f7:da:e5:ae:ee:b8:1d:60:cb:e1:d5: d9:96:49:d9:a1:be:0a:f8:c2:f0:c8:9f:92:d1:62:5c:97:bf: 44:a3:87:30:8a:58:6b:cf:47:1f:1f:9b:aa:37:78:f0:39:09: 37:9b:af:0e:db:4c:f9:35:93:64:3f:e3:b3:e7:f4:b5:f2:3c: 1d:a0:47:1c:79:60:34:ca:be:0b:02:b2:6f:63:de:a4:87:f3: 03:32:92:c7:9a:af:ed:eb:0f:3a:3c:44:da:74:f8:d3:f2:f3: 6f:08:d2:70:be:4f:14:91:86:aa:70:c5:4f:89:07:6c:2b:0d: 1d:a4:11:e3:0a:f8:23:1b:ba:fa:f5:27:ec:70:5f:4b:92:c8: c7:e0:60:b8:b7:c4:c4:0e:a0:bc:4c:6c:71:f9:bf:1a:4d:ed: 57:b0:99:63:7a:bf:58:dc:b6:25:83:c8:4d:aa:bc:45:4b:b5: b3:c3:7d:5d:86:d7:51:1c:82:f8:a5:03:26:0c:d7:2b:ea:fb: 52:f6:eb:a1:8a:c1:c6:85:03:42:4b:60:13:7e:df:10:f5:4b: b6:e1:ab:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5faXsAHDmeEEqCXvVckUZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1ZWU5MjZmMWYxNTM3YjliZTc1ZWI0YjlkNzkyZGY0MWQy NWNkOTkwHhcNMjUxMjIwMDIwMTM0WhcNMjUxMjIxMDIwMTM0WjAzMTEwLwYDVQQD EyhiY2M0OWMxYzA5NzUxNjBkMDhjNTU5MTE0YzgwNDIyNzVmMjYxM2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQ+IyYUL/NRcI8iD7+tSZMxzdrYZ FChb075BCeXUVowbUzIpz/2y2VFkWq1PxyHee+ntSfZP00/bxWs1jEAvEm47RYC/ AtA0RCXWq7P+2kM1d+e59HEf7+cKgxnK1ma+9T9iZP/m/Znbrj/l705ysPBv7JAF 57aCsR+Azrzjf8r8X7O00UfP/linqKSzWxvID/w9DxXG0VCYy9LZvnaZ/zxdwLvn L96e7G3MZCdDVIxHE58BTxE2/jm9X2WonohLhAkAG1nndIEwWn54MaRPeXrCW1t/ tQluvGl2PdymBKsuWS3X766Yy2+It8XeLwp3wKs/ejWoPLazfK7SdGVCnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLzEnBwJdRYNCMVZEUyAQidfJhPIMB8GA1UdIwQY MBaAFKXukm8fFTe5vnXrS515LfQdJc2ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGU2U2J4OFZON20tZGV0TG5Ya3Q5QjBselprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9hODdhZWMtYmVhYS00YWViLWE0OGUt OGYzNGJkMzkxZDE4LzEvcGU2U2J4OFZON20tZGV0TG5Ya3Q5QjBselprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9hODdhZWMtYmVhYS00YWViLWE0OGUtOGYzNGJkMzkxZDE4 LzEvcGU2U2J4OFZON20tZGV0TG5Ya3Q5QjBselprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUKM5Z04b GZicfQEGS/f6JrV820PT7kidTf2aDse+OVUQdxQoWNHE6o2mfPfa5a7uuB1gy+HV 2ZZJ2aG+CvjC8MifktFiXJe/RKOHMIpYa89HHx+bqjd48DkJN5uvDttM+TWTZD/j s+f0tfI8HaBHHHlgNMq+CwKyb2PepIfzAzKSx5qv7esPOjxE2nT40/LzbwjScL5P FJGGqnDFT4kHbCsNHaQR4wr4Ixu6+vUn7HBfS5LIx+BguLfExA6gvExscfm/Gk3t V7CZY3q/WNy2JYPITaq8RUu1s8N9XYbXURyC+KUDJgzXK+r7UvbroYrBxoUDQktg E37fEPVLtuGreQ== -----END CERTIFICATE-----Generated at Sat Dec 20 07:15:27 2025 by rpki-client