This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft File: PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft (raw, json) Hash identifier: 89a4zyli8/YbQ0H5WmiBwPnFchaiJR9oh7rJ5GNwc1w= Subject key identifier: 6E:B1:4C:90:20:A5:D9:56:F9:53:05:75:4A:7A:5D:F4:AF:A7:A2:9E Authority key identifier: 3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4 Certificate issuer: /CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4 Certificate serial: 019B435B907DC207BF56C4C9F94E021FCB71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft Manifest number: 1127 Signing time: Mon 22 Dec 2025 00:00:32 +0000 Manifest this update: Mon 22 Dec 2025 00:00:32 +0000 Manifest next update: Tue 23 Dec 2025 00:00:32 +0000 Files and hashes: 1: 9fywOGNsk6OIfuzuy-reOW9V4kc.roa (hash: b/vhaQiKQhhebnkpqZc4spciDDH3KeMp+AUrKHHSWv4=) 2: PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl (hash: cp7yRVozpizlO4Ii6CBR8q2HYBaMHUvKRO1YNzex2d4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5b:90:7d:c2:07:bf:56:c4:c9:f9:4e:02:1f:cb:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4 Validity Not Before: Dec 22 00:00:32 2025 GMT Not After : Dec 23 00:00:32 2025 GMT Subject: CN=6eb14c9020a5d956f95305754a7a5df4afa7a29e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:70:fa:90:ee:66:93:47:89:31:18:be:af:61: 79:47:8c:33:ea:e0:33:e4:fa:c6:ba:9c:b5:ed:14: 9a:ac:19:bb:28:4e:b7:20:32:49:76:0c:93:55:e6: e2:ed:12:be:97:ef:de:36:14:71:0a:ce:15:04:e0: 6c:8f:3a:b6:ec:78:86:c4:6f:87:24:f7:e7:cc:69: 61:ae:81:d9:41:c2:ea:fe:81:d7:dc:e9:bd:4c:4b: d4:78:25:02:5c:cd:9a:6e:e8:46:f7:a8:ed:56:8d: ff:31:0f:52:60:a4:fe:45:81:e1:1c:a3:7a:1f:85: f0:c4:83:0c:75:93:89:83:33:44:e3:0d:3d:b0:26: ff:80:b0:d1:f3:34:61:53:14:bd:83:5c:07:14:d9: df:12:1d:6f:9e:cc:3b:5b:fb:99:e1:43:eb:12:04: 55:45:3c:e9:4c:10:67:e7:b7:00:05:eb:5a:0b:e3: de:e1:50:fa:6d:8c:7a:d1:f5:76:f5:f9:4e:e1:e6: 85:2a:c2:66:4e:01:bb:54:9b:71:95:d9:4e:3f:7d: 20:47:b3:bf:b6:d9:60:1a:4c:28:aa:59:5a:8a:8b: af:05:fd:6d:e2:52:14:b2:34:71:77:43:e4:13:1b: ce:92:02:50:04:e2:a8:f6:8b:f0:f6:35:1e:1a:e1: 67:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:B1:4C:90:20:A5:D9:56:F9:53:05:75:4A:7A:5D:F4:AF:A7:A2:9E X509v3 Authority Key Identifier: keyid:3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:63:a5:a3:62:18:93:3d:6a:da:90:d7:62:a9:32:9b:c2:33: d0:bb:25:7c:2d:48:07:10:9d:e5:31:40:b7:d4:39:32:9c:47: 69:e2:f6:9c:50:44:09:82:be:e5:fd:0b:6f:50:0f:ad:03:88: b3:0b:e0:90:4b:80:bd:03:82:8a:b9:dd:85:2e:82:48:2b:57: cf:78:49:6c:32:da:b2:b0:a5:d9:c0:d7:6d:07:0e:22:fd:d2: fb:f1:3d:eb:37:64:c2:1a:8a:67:c6:6b:fb:b3:e2:e0:52:2d: 8d:76:e0:41:6c:85:bb:92:9a:c6:85:af:1c:56:90:b5:d8:8e: ec:0d:b4:59:eb:12:1e:65:79:cb:81:77:a4:b0:b1:b7:94:f6: e7:9c:22:63:f3:c5:d3:69:01:c7:09:b5:63:c4:43:5c:5d:fd: 61:65:eb:6d:d2:eb:61:7d:bd:63:4f:79:b0:8d:96:8f:9b:2b: 5c:a0:e1:22:cb:c0:30:53:69:98:c8:c2:3e:25:fc:5e:27:0b: a1:f6:3e:c3:a2:c2:f5:93:9d:82:60:0e:11:cb:8d:3f:2a:89: ec:49:89:b6:90:78:64:f7:d0:bb:b8:84:16:db:4c:da:dd:52: 05:15:4c:d9:8d:8a:3d:a3:30:11:e0:c7:d8:43:89:b1:a6:44: 9b:37:2f:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDW5B9wge/VsTJ+U4CH8txMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYTU1NDA5OGM3YTg4YWEzNDI2NGI5MmQ4YmYyMjU3ZWMw YmNkYTQwHhcNMjUxMjIyMDAwMDMyWhcNMjUxMjIzMDAwMDMyWjAzMTEwLwYDVQQD Eyg2ZWIxNGM5MDIwYTVkOTU2Zjk1MzA1NzU0YTdhNWRmNGFmYTdhMjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nD6kO5mk0eJMRi+r2F5R4wz6uAz 5PrGupy17RSarBm7KE63IDJJdgyTVebi7RK+l+/eNhRxCs4VBOBsjzq27HiGxG+H JPfnzGlhroHZQcLq/oHX3Om9TEvUeCUCXM2abuhG96jtVo3/MQ9SYKT+RYHhHKN6 H4XwxIMMdZOJgzNE4w09sCb/gLDR8zRhUxS9g1wHFNnfEh1vnsw7W/uZ4UPrEgRV RTzpTBBn57cABetaC+Pe4VD6bYx60fV29flO4eaFKsJmTgG7VJtxldlOP30gR7O/ ttlgGkwoqllaiouvBf1t4lIUsjRxd0PkExvOkgJQBOKo9ovw9jUeGuFnBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG6xTJAgpdlW+VMFdUp6XfSvp6KeMB8GA1UdIwQY MBaAFD6lVAmMeoiqNCZLkti/IlfsC82kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHFWVUNZeDZpS28wSmt1UzJMOGlWLXdMemFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy80NzY3Y2UtNDQ0OC00MzZiLWE5MTAt NjZkZTk4NjVkYmFjLzEvUHFWVUNZeDZpS28wSmt1UzJMOGlWLXdMemFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy80NzY3Y2UtNDQ0OC00MzZiLWE5MTAtNjZkZTk4NjVkYmFj LzEvUHFWVUNZeDZpS28wSmt1UzJMOGlWLXdMemFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL2Olo2IY kz1q2pDXYqkym8Iz0LslfC1IBxCd5TFAt9Q5MpxHaeL2nFBECYK+5f0Lb1APrQOI swvgkEuAvQOCirndhS6CSCtXz3hJbDLasrCl2cDXbQcOIv3S+/E96zdkwhqKZ8Zr +7Pi4FItjXbgQWyFu5KaxoWvHFaQtdiO7A20WesSHmV5y4F3pLCxt5T255wiY/PF 02kBxwm1Y8RDXF39YWXrbdLrYX29Y095sI2Wj5srXKDhIsvAMFNpmMjCPiX8XicL ofY+w6LC9ZOdgmAOEcuNPyqJ7EmJtpB4ZPfQu7iEFttM2t1SBRVM2Y2KPaMwEeDH 2EOJsaZEmzcv4w== -----END CERTIFICATE-----Generated at Mon Dec 22 07:58:53 2025 by rpki-client