This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft File: PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft (raw, json) Hash identifier: EHyezzv9TPJwGUGgv1ZauqfMgTmNxClGg5+PXd067RQ= Subject key identifier: 5E:EA:14:5F:B0:91:75:47:4C:D6:34:39:07:76:3F:44:89:49:82:5B Authority key identifier: 3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4 Certificate issuer: /CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4 Certificate serial: 019B492746327A7153DC2B89DC54A10B551C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft Manifest number: 112A Signing time: Tue 23 Dec 2025 03:01:09 +0000 Manifest this update: Tue 23 Dec 2025 03:01:09 +0000 Manifest next update: Wed 24 Dec 2025 03:01:09 +0000 Files and hashes: 1: 9fywOGNsk6OIfuzuy-reOW9V4kc.roa (hash: b/vhaQiKQhhebnkpqZc4spciDDH3KeMp+AUrKHHSWv4=) 2: PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl (hash: ME1130AalI+1lu0nr7OXmo/7LpR4FuAPOCnraxVShzg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:27:46:32:7a:71:53:dc:2b:89:dc:54:a1:0b:55:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4 Validity Not Before: Dec 23 03:01:09 2025 GMT Not After : Dec 24 03:01:09 2025 GMT Subject: CN=5eea145fb09175474cd6343907763f448949825b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ff:27:e5:85:aa:76:f1:90:43:ae:cc:59:c5: fd:2a:74:a6:4e:ed:ef:de:85:d1:77:e2:87:04:0d: 74:f0:7a:9c:d9:5f:da:cb:25:e6:e7:3e:26:8a:e0: bc:fd:76:be:4a:a5:8e:9f:27:12:f8:58:c6:42:30: ed:0d:bd:dd:e4:9f:85:56:1e:89:19:d5:d6:9d:88: 08:be:db:ee:80:25:4f:b2:c7:d5:07:00:88:1e:29: 06:e9:e6:3e:59:54:d9:65:88:2f:a5:6e:58:1d:93: da:24:55:21:7c:7e:14:aa:78:59:43:b3:c7:11:1f: 48:86:20:a6:12:e3:e6:93:9e:06:f5:38:7d:e1:1f: dd:c7:7d:7a:6f:30:3b:ff:30:49:70:83:0f:a1:8a: 44:b4:8b:cd:28:b4:9b:e5:05:82:f4:39:f9:cc:59: e1:35:12:82:8d:b4:b4:78:e0:01:c0:3d:56:1c:b4: b5:70:93:2a:90:3d:9f:e6:05:f0:28:d5:34:10:77: 4a:29:26:db:0e:2a:26:ff:7d:4b:db:0c:9e:3e:08: c7:e8:0c:26:ac:11:ed:47:48:c5:13:80:92:22:3a: 4f:22:6d:a4:23:98:c2:20:8a:a9:2e:33:2b:b0:b6: 46:2d:9d:76:9b:e6:fb:eb:26:6a:e0:9a:0e:3c:7a: 0a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:EA:14:5F:B0:91:75:47:4C:D6:34:39:07:76:3F:44:89:49:82:5B X509v3 Authority Key Identifier: keyid:3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:5e:4b:32:dc:23:a1:08:1d:62:4b:d2:57:72:bc:f1:a6:af: b8:86:51:4d:26:82:f4:37:2d:ac:89:f3:06:95:a9:18:12:59: 0a:78:f6:1e:37:37:8f:c4:1c:1d:42:1d:be:3f:c4:4f:50:12: 62:ea:e6:47:8f:7b:83:f9:2b:b0:06:78:93:31:fb:a7:8f:ee: d9:1f:2e:53:37:18:32:26:d5:2c:60:1b:f9:07:15:91:f2:4b: 31:2c:f8:94:21:38:a7:5c:63:2e:45:39:26:55:55:05:94:fd: 1a:8f:58:41:b1:46:88:97:7b:13:74:c0:30:65:89:d0:30:82: 1a:9b:8e:18:46:4a:74:aa:1a:bf:ec:f9:c4:19:61:fc:90:8c: 18:a4:3b:5b:6d:fd:7c:58:51:59:65:93:56:dd:e1:8e:b7:fa: 7f:7d:a7:ad:70:1f:87:43:cd:23:7f:18:d1:8f:45:e9:09:ed: c6:5f:e9:7c:4d:15:9f:42:2f:a9:fe:c8:c6:5c:26:63:39:6b: 6a:15:2f:6b:74:5c:dd:c3:c1:b2:6c:63:88:1f:71:71:9f:a0: 5e:8f:a5:fe:52:e6:e4:bf:13:54:99:e2:a0:03:b0:92:d8:5f: a0:19:47:61:bb:2c:1b:cd:1c:1f:3e:7b:35:18:56:a4:66:90: 6f:ac:ac:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJJ0YyenFT3CuJ3FShC1UcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYTU1NDA5OGM3YTg4YWEzNDI2NGI5MmQ4YmYyMjU3ZWMw YmNkYTQwHhcNMjUxMjIzMDMwMTA5WhcNMjUxMjI0MDMwMTA5WjAzMTEwLwYDVQQD Eyg1ZWVhMTQ1ZmIwOTE3NTQ3NGNkNjM0MzkwNzc2M2Y0NDg5NDk4MjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsP8n5YWqdvGQQ67MWcX9KnSmTu3v 3oXRd+KHBA108Hqc2V/ayyXm5z4miuC8/Xa+SqWOnycS+FjGQjDtDb3d5J+FVh6J GdXWnYgIvtvugCVPssfVBwCIHikG6eY+WVTZZYgvpW5YHZPaJFUhfH4UqnhZQ7PH ER9IhiCmEuPmk54G9Th94R/dx316bzA7/zBJcIMPoYpEtIvNKLSb5QWC9Dn5zFnh NRKCjbS0eOABwD1WHLS1cJMqkD2f5gXwKNU0EHdKKSbbDiom/31L2wyePgjH6Awm rBHtR0jFE4CSIjpPIm2kI5jCIIqpLjMrsLZGLZ12m+b76yZq4JoOPHoKdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF7qFF+wkXVHTNY0OQd2P0SJSYJbMB8GA1UdIwQY MBaAFD6lVAmMeoiqNCZLkti/IlfsC82kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHFWVUNZeDZpS28wSmt1UzJMOGlWLXdMemFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy80NzY3Y2UtNDQ0OC00MzZiLWE5MTAt NjZkZTk4NjVkYmFjLzEvUHFWVUNZeDZpS28wSmt1UzJMOGlWLXdMemFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy80NzY3Y2UtNDQ0OC00MzZiLWE5MTAtNjZkZTk4NjVkYmFj LzEvUHFWVUNZeDZpS28wSmt1UzJMOGlWLXdMemFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk15LMtwj oQgdYkvSV3K88aavuIZRTSaC9DctrInzBpWpGBJZCnj2Hjc3j8QcHUIdvj/ET1AS YurmR497g/krsAZ4kzH7p4/u2R8uUzcYMibVLGAb+QcVkfJLMSz4lCE4p1xjLkU5 JlVVBZT9Go9YQbFGiJd7E3TAMGWJ0DCCGpuOGEZKdKoav+z5xBlh/JCMGKQ7W239 fFhRWWWTVt3hjrf6f32nrXAfh0PNI38Y0Y9F6Qntxl/pfE0Vn0Ivqf7IxlwmYzlr ahUva3Rc3cPBsmxjiB9xcZ+gXo+l/lLm5L8TVJnioAOwkthfoBlHYbssG80cHz57 NRhWpGaQb6ysBg== -----END CERTIFICATE-----Generated at Tue Dec 23 06:45:03 2025 by rpki-client