This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft File: Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft (raw, json) Hash identifier: ndOUnlpBh/AEnJ9EFAM4D9LRt8iZZ9cydAK1B/GOXik= Subject key identifier: 39:91:9A:B6:1C:AE:8E:CC:B1:BC:F5:77:FF:CC:D5:AC:AD:CD:C8:49 Authority key identifier: 3D:EA:ED:ED:A1:05:D7:E9:12:9A:9B:0C:E5:6B:9B:FC:B9:C6:73:94 Certificate issuer: /CN=3deaededa105d7e9129a9b0ce56b9bfcb9c67394 Certificate serial: 019B3268A8B16DA50F52B391432072690DEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft Manifest number: 102B Signing time: Thu 18 Dec 2025 17:01:18 +0000 Manifest this update: Thu 18 Dec 2025 17:01:18 +0000 Manifest next update: Fri 19 Dec 2025 17:01:18 +0000 Files and hashes: 1: FcNY2ovl7yF-URMS0Ey2NMjx_wo.roa (hash: u+b9OZLTWgc4ylA+6a19u9K+8czzP5mhCM7NuK4dmF4=) 2: Pert7aEF1-kSmpsM5Wub_LnGc5Q.crl (hash: nzdANVnJSBZ4cBKnk/UU9T4Pa7Ahr2U6QjTvUaOaTmI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 17:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:a8:b1:6d:a5:0f:52:b3:91:43:20:72:69:0d:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3deaededa105d7e9129a9b0ce56b9bfcb9c67394 Validity Not Before: Dec 18 17:01:18 2025 GMT Not After : Dec 19 17:01:18 2025 GMT Subject: CN=39919ab61cae8eccb1bcf577ffccd5acadcdc849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8b:c6:84:cc:5c:6b:93:3d:fd:a1:e2:fd:51: 7f:ec:fc:34:e1:b3:77:95:9a:71:96:e5:3e:e5:3b: 9f:46:82:42:a7:49:8b:11:e8:d6:4f:56:ad:44:03: 13:70:43:ec:90:e1:7b:db:ec:5d:00:4f:52:63:ac: d3:4c:33:23:1f:00:ee:13:cc:14:86:47:e9:ac:b6: 6f:cb:ac:90:5f:56:9a:79:84:0d:f0:ba:4e:8f:d5: c8:c1:43:99:e8:25:66:93:4e:61:37:c0:d2:3d:ab: 33:fb:f3:dc:6f:77:f6:37:11:13:f3:df:fb:17:2d: 03:e7:66:60:d5:81:4d:4f:8a:57:5b:8e:52:59:40: 28:c7:85:38:d6:71:a2:20:39:de:56:e9:b1:34:7f: 3d:6a:a4:c7:54:30:41:27:b1:57:3f:ba:70:b2:a5: 58:6f:7d:1c:20:b9:23:9d:64:d2:53:a3:22:31:d8: 40:d2:32:b7:25:c6:91:5c:e1:7f:37:7c:a2:86:fd: 35:5d:73:d6:6b:29:e6:86:d8:84:88:13:45:2d:f9: 2d:f5:df:5c:97:bc:74:25:2f:b4:a8:38:0b:33:02: 16:54:5a:08:c1:38:28:0d:b4:6b:3d:d3:96:8c:ee: 90:c7:71:76:e2:f1:8f:5e:20:fc:76:29:d6:62:e5: 78:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:91:9A:B6:1C:AE:8E:CC:B1:BC:F5:77:FF:CC:D5:AC:AD:CD:C8:49 X509v3 Authority Key Identifier: keyid:3D:EA:ED:ED:A1:05:D7:E9:12:9A:9B:0C:E5:6B:9B:FC:B9:C6:73:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:fc:cf:84:72:ad:6b:34:d9:80:dc:7f:b8:3a:e8:13:5c:2d: 8e:1f:a2:78:77:7b:56:a9:a8:69:14:df:b0:1f:bd:23:0e:7d: 95:89:25:fc:24:02:10:89:fa:fe:d0:05:f2:47:da:1c:b3:57: b8:91:d4:1c:6a:82:38:07:ec:46:02:af:4a:dc:ec:61:0b:1c: 82:a8:6d:25:e6:95:6b:b1:d3:96:e6:ac:40:a8:3f:e1:ed:ad: 3e:4b:52:2f:d3:f7:6c:4d:a5:ed:8f:28:2b:65:a7:6f:7d:5c: 8f:c4:9e:40:f0:ff:6e:e4:82:53:21:b9:6d:14:04:7e:95:e6: 7c:2f:00:2a:54:51:02:ad:c7:66:2c:3a:b7:0a:94:3b:a9:dc: 23:d6:0c:72:f2:79:8a:64:6b:a9:30:b7:9b:74:7d:84:e0:63: 5d:af:a3:12:e1:1e:38:d9:16:63:c2:14:dd:40:74:79:ff:77: e9:cc:38:a1:a8:10:10:9d:af:d1:60:11:42:1e:ff:e6:72:b2: da:79:7d:16:8e:5c:24:74:66:d1:67:ee:37:05:95:00:40:03: 95:82:be:fe:01:4f:79:03:85:1a:17:92:7c:c5:1c:56:e9:ef: f7:46:18:1d:c4:5b:f0:05:32:83:6d:7c:29:7c:87:2d:ef:4b: 79:95:5e:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaKixbaUPUrORQyByaQ3uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkZWFlZGVkYTEwNWQ3ZTkxMjlhOWIwY2U1NmI5YmZjYjlj NjczOTQwHhcNMjUxMjE4MTcwMTE4WhcNMjUxMjE5MTcwMTE4WjAzMTEwLwYDVQQD EygzOTkxOWFiNjFjYWU4ZWNjYjFiY2Y1NzdmZmNjZDVhY2FkY2RjODQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4vGhMxca5M9/aHi/VF/7Pw04bN3 lZpxluU+5TufRoJCp0mLEejWT1atRAMTcEPskOF72+xdAE9SY6zTTDMjHwDuE8wU hkfprLZvy6yQX1aaeYQN8LpOj9XIwUOZ6CVmk05hN8DSPasz+/Pcb3f2NxET89/7 Fy0D52Zg1YFNT4pXW45SWUAox4U41nGiIDneVumxNH89aqTHVDBBJ7FXP7pwsqVY b30cILkjnWTSU6MiMdhA0jK3JcaRXOF/N3yihv01XXPWaynmhtiEiBNFLfkt9d9c l7x0JS+0qDgLMwIWVFoIwTgoDbRrPdOWjO6Qx3F24vGPXiD8dinWYuV48wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDmRmrYcro7Msbz1d//M1aytzchJMB8GA1UdIwQY MBaAFD3q7e2hBdfpEpqbDOVrm/y5xnOUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGVydDdhRUYxLWtTbXBzTTVXdWJfTG5HYzVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9jYzRlYjMtNzY4YS00ZjkxLTg4MmMt MGRiMTA4NTBjNzk0LzEvUGVydDdhRUYxLWtTbXBzTTVXdWJfTG5HYzVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9jYzRlYjMtNzY4YS00ZjkxLTg4MmMtMGRiMTA4NTBjNzk0 LzEvUGVydDdhRUYxLWtTbXBzTTVXdWJfTG5HYzVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh/zPhHKt azTZgNx/uDroE1wtjh+ieHd7VqmoaRTfsB+9Iw59lYkl/CQCEIn6/tAF8kfaHLNX uJHUHGqCOAfsRgKvStzsYQscgqhtJeaVa7HTluasQKg/4e2tPktSL9P3bE2l7Y8o K2Wnb31cj8SeQPD/buSCUyG5bRQEfpXmfC8AKlRRAq3HZiw6twqUO6ncI9YMcvJ5 imRrqTC3m3R9hOBjXa+jEuEeONkWY8IU3UB0ef936cw4oagQEJ2v0WARQh7/5nKy 2nl9Fo5cJHRm0WfuNwWVAEADlYK+/gFPeQOFGheSfMUcVunv90YYHcRb8AUyg218 KXyHLe9LeZVeww== -----END CERTIFICATE-----Generated at Fri Dec 19 00:56:57 2025 by rpki-client