This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft File: PesQRGPpILRVQravGifVlQ6G6aA.mft (raw, json) Hash identifier: vTt11X7C0aVDy5ojnkHBYXMw7A2zNNT63yCDJNcQxnI= Subject key identifier: 56:14:7A:14:14:C3:84:C6:C4:A4:0F:9E:C7:6D:58:8B:D9:81:8B:D3 Authority key identifier: 3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0 Certificate issuer: /CN=3deb104463e920b45542b6af1a27d5950e86e9a0 Certificate serial: 019B5A1B1E18FE76EE387E962F4F26B1B11D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft Manifest number: 1568 Signing time: Fri 26 Dec 2025 10:01:25 +0000 Manifest this update: Fri 26 Dec 2025 10:01:25 +0000 Manifest next update: Sat 27 Dec 2025 10:01:25 +0000 Files and hashes: 1: 1-gBlmRElwFozsXlk-zODgtGpAuA.roa (hash: xVfyWKViH35Kce9xfyzBsAu8tiyl2DKuvLolO3h9f4s=) 2: 3X_OCsm4wSXVQQmIGXvbWiOwwPk.roa (hash: uAifQhxv7JsH18zEmjWnpWg6H+QdTkCHwp4ioEB51v8=) 3: CGYCoXePbFBrriJrNgrZF9Uefow.roa (hash: KPb5usKgdYQ3JpgKFKA1WlcbtVkuv48+f5lB1B8M9IA=) 4: PesQRGPpILRVQravGifVlQ6G6aA.crl (hash: t66mLr2Q4XxrazJXlkWGpYjot5Sqz3MuDbIVIRiv0PU=) 5: PyMiLV0wnNJXQTQMDEPMVXWx9ZQ.roa (hash: gY7gqfT3zhDP3uAkWWCqVVxfWQ7GvCSgS8lQh0U5EGA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.crl rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1b:1e:18:fe:76:ee:38:7e:96:2f:4f:26:b1:b1:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3deb104463e920b45542b6af1a27d5950e86e9a0 Validity Not Before: Dec 26 10:01:25 2025 GMT Not After : Dec 27 10:01:25 2025 GMT Subject: CN=56147a1414c384c6c4a40f9ec76d588bd9818bd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d9:10:c3:b3:11:06:1c:f9:32:53:1c:a5:82: 47:a4:32:1d:6a:7b:07:5b:5f:3e:77:32:3e:2b:57: c1:35:52:7b:ea:9a:14:19:99:f3:30:8a:e2:c2:e7: 15:ef:d8:00:15:a8:cb:78:ff:b4:9e:41:23:fc:46: e0:c3:9d:4f:6a:c8:c3:74:b0:cd:c5:cf:b4:59:91: d9:e8:ef:24:93:79:81:03:8e:55:05:d7:d6:75:81: 35:42:62:3c:00:47:9a:a9:6b:10:a1:b6:47:a8:1a: 47:34:96:ff:99:4a:f7:16:cc:fc:01:5e:8c:1a:8a: b2:99:88:e0:0e:7c:2f:16:4d:e7:e5:89:3c:01:7c: 83:d9:12:73:0f:dd:f7:d3:2e:8c:3d:11:e1:0f:31: 7f:23:99:54:7a:3a:f4:e9:c2:63:d9:ae:72:44:70: e5:73:2e:fa:d2:af:ca:80:4a:0c:f4:2b:95:a7:6f: d6:62:cc:ad:43:6e:92:7c:96:d0:af:49:7d:16:c6: 47:97:ef:16:59:46:56:75:c4:a8:cd:3e:9d:f7:92: d3:bf:9b:3c:a8:7d:d9:a9:fb:30:36:95:55:23:7b: 60:98:6b:4c:e1:62:c7:62:1e:ec:5f:25:35:74:75: 2c:8c:4a:22:95:33:b6:c4:72:23:b7:23:29:17:f2: a0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:14:7A:14:14:C3:84:C6:C4:A4:0F:9E:C7:6D:58:8B:D9:81:8B:D3 X509v3 Authority Key Identifier: keyid:3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:84:2a:58:5b:69:03:69:38:18:cd:06:6f:4d:38:04:c6:54: c3:72:7b:ce:5a:4d:d1:67:7d:21:af:37:b6:25:7b:29:e0:ac: 14:3b:99:f8:44:2d:0f:7f:b7:53:eb:38:8e:08:37:b7:fa:25: 76:1f:49:1e:21:50:5a:f8:c8:3a:9f:e4:eb:f9:56:75:cf:04: b2:82:de:9b:63:0a:e9:36:86:f1:d3:a0:1e:cd:b9:8b:98:7e: 18:79:ac:cc:b8:88:7e:fd:b2:55:95:7f:2d:4a:32:6e:b9:33: e3:49:46:7b:7e:90:11:d1:64:da:7d:db:5c:ab:fa:be:4b:4b: 90:da:ed:bf:b8:49:d2:ba:14:e5:76:cf:43:82:43:ff:8c:60: a2:0f:bc:c5:b0:5d:04:5d:ef:70:14:74:0d:35:4a:62:26:e8: 2e:95:2b:8a:49:5a:c0:9e:db:6c:ca:bc:87:5b:30:4a:4a:36: 1b:ed:53:92:18:67:26:73:6c:5f:16:d4:f7:ba:5f:c6:de:71: f9:60:94:3d:a7:f4:e3:2d:46:3b:b6:7a:d5:9c:87:2a:3d:f8: 42:4d:36:96:0f:fb:4d:83:f0:ca:d0:77:0a:69:01:46:ce:14: 7d:6b:40:0b:b6:60:a7:3a:bb:9b:bc:95:6e:1e:02:fa:04:c2: c8:be:90:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGx4Y/nbuOH6WL08msbEdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkZWIxMDQ0NjNlOTIwYjQ1NTQyYjZhZjFhMjdkNTk1MGU4 NmU5YTAwHhcNMjUxMjI2MTAwMTI1WhcNMjUxMjI3MTAwMTI1WjAzMTEwLwYDVQQD Eyg1NjE0N2ExNDE0YzM4NGM2YzRhNDBmOWVjNzZkNTg4YmQ5ODE4YmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNkQw7MRBhz5MlMcpYJHpDIdansH W18+dzI+K1fBNVJ76poUGZnzMIriwucV79gAFajLeP+0nkEj/Ebgw51PasjDdLDN xc+0WZHZ6O8kk3mBA45VBdfWdYE1QmI8AEeaqWsQobZHqBpHNJb/mUr3Fsz8AV6M GoqymYjgDnwvFk3n5Yk8AXyD2RJzD9330y6MPRHhDzF/I5lUejr06cJj2a5yRHDl cy760q/KgEoM9CuVp2/WYsytQ26SfJbQr0l9FsZHl+8WWUZWdcSozT6d95LTv5s8 qH3ZqfswNpVVI3tgmGtM4WLHYh7sXyU1dHUsjEoilTO2xHIjtyMpF/Kg1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFYUehQUw4TGxKQPnsdtWIvZgYvTMB8GA1UdIwQY MBaAFD3rEERj6SC0VUK2rxon1ZUOhumgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGVzUVJHUHBJTFJWUXJhdkdpZlZsUTZHNmFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9jNjg2YjMtZTdhOS00ZjljLTg0MmMt MTE5ZDhiZjcxN2JiLzEvUGVzUVJHUHBJTFJWUXJhdkdpZlZsUTZHNmFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9jNjg2YjMtZTdhOS00ZjljLTg0MmMtMTE5ZDhiZjcxN2Ji LzEvUGVzUVJHUHBJTFJWUXJhdkdpZlZsUTZHNmFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE4QqWFtp A2k4GM0Gb004BMZUw3J7zlpN0Wd9Ia83tiV7KeCsFDuZ+EQtD3+3U+s4jgg3t/ol dh9JHiFQWvjIOp/k6/lWdc8EsoLem2MK6TaG8dOgHs25i5h+GHmszLiIfv2yVZV/ LUoybrkz40lGe36QEdFk2n3bXKv6vktLkNrtv7hJ0roU5XbPQ4JD/4xgog+8xbBd BF3vcBR0DTVKYiboLpUriklawJ7bbMq8h1swSko2G+1TkhhnJnNsXxbU97pfxt5x +WCUPaf04y1GO7Z61ZyHKj34Qk02lg/7TYPwytB3CmkBRs4UfWtAC7Zgpzq7m7yV bh4C+gTCyL6Q/w== -----END CERTIFICATE-----Generated at Fri Dec 26 14:19:40 2025 by rpki-client