This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft File: pe6Sbx8VN7m-detLnXkt9B0lzZk.mft (raw, json) Hash identifier: 5jLFycXS+DNrDRxKG4RJs+jvSnxFj0nuYDAJSCttzhk= Subject key identifier: 47:85:DC:E5:04:F3:6B:9A:9F:68:5D:AA:CC:08:77:A8:F8:DA:D7:52 Authority key identifier: A5:EE:92:6F:1F:15:37:B9:BE:75:EB:4B:9D:79:2D:F4:1D:25:CD:99 Certificate issuer: /CN=a5ee926f1f1537b9be75eb4b9d792df41d25cd99 Certificate serial: 019B33B26476D9AB910A5959481E87928DD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft Manifest number: 0E5A Signing time: Thu 18 Dec 2025 23:01:27 +0000 Manifest this update: Thu 18 Dec 2025 23:01:27 +0000 Manifest next update: Fri 19 Dec 2025 23:01:27 +0000 Files and hashes: 1: WDPyyXGbTlVNzNvHMt_u6jFAfDs.roa (hash: Io6wRfSHyznIog5I1/syrGcc1ZOg6epQfuj3AIJAZhg=) 2: pe6Sbx8VN7m-detLnXkt9B0lzZk.crl (hash: JDNO6H1hYUycSfLqljh9pTIsdQIxQDFdAj/+HAj6vbw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.crl rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b2:64:76:d9:ab:91:0a:59:59:48:1e:87:92:8d:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5ee926f1f1537b9be75eb4b9d792df41d25cd99 Validity Not Before: Dec 18 23:01:27 2025 GMT Not After : Dec 19 23:01:27 2025 GMT Subject: CN=4785dce504f36b9a9f685daacc0877a8f8dad752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0a:e8:dd:76:02:6b:46:38:32:b3:fe:bf:a5: 1a:e9:2a:a2:33:3c:36:a0:27:e7:6a:8c:42:3d:e8: 74:85:f9:27:f1:38:ed:8a:72:8e:44:8c:08:0f:94: 71:f1:e3:aa:30:2c:37:70:fb:2e:e9:56:3a:84:1d: 14:a4:60:7e:f5:c9:8e:93:5a:d2:dc:95:9f:14:a5: 00:f3:37:98:05:c1:06:8c:84:f7:ff:9c:d4:2f:90: f2:a7:86:db:96:dc:a6:d2:28:f6:7b:6d:23:0b:40: 2e:32:85:e9:92:26:31:78:e0:7a:55:b1:f4:de:90: 1a:53:07:01:ec:e3:cd:cd:7f:76:34:54:9e:0c:6b: 2d:72:02:8f:09:1f:a3:e3:60:64:d5:50:c4:0a:fb: 9e:79:fc:08:93:b4:a1:d6:ac:fe:ec:25:c2:34:57: 78:2b:31:07:af:4b:52:49:08:4b:c1:26:f0:e2:3a: 37:30:2a:b1:5a:de:7a:3b:06:87:85:34:02:3c:d6: 56:cc:81:c8:ca:94:3b:49:e0:bf:cd:0c:91:2e:ab: 21:97:03:2a:63:ad:73:a1:5f:03:18:aa:e8:96:ce: db:d8:e5:ad:8c:bf:dd:a5:db:ab:13:09:e8:eb:12: be:f9:54:f1:cd:44:a9:37:d9:90:44:1f:5c:17:a2: 81:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:85:DC:E5:04:F3:6B:9A:9F:68:5D:AA:CC:08:77:A8:F8:DA:D7:52 X509v3 Authority Key Identifier: keyid:A5:EE:92:6F:1F:15:37:B9:BE:75:EB:4B:9D:79:2D:F4:1D:25:CD:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:38:45:f5:47:45:6c:9f:92:4d:c2:8a:4c:0e:40:14:da:db: f8:0a:de:b0:ec:b6:11:62:49:58:cf:9e:8f:63:ad:a1:ed:75: a1:96:3a:b3:04:c6:ae:ed:a7:89:0f:ab:89:3e:7b:b9:f3:3b: 57:bb:d5:ec:28:04:f4:de:a1:b9:8a:fc:d4:74:1c:73:dc:ca: 07:d0:fc:86:3e:be:3a:2d:db:8a:96:24:87:2a:cd:7a:f9:ba: 65:56:4a:f5:b7:5b:d3:da:d6:9e:6d:fb:a1:66:d9:74:35:71: ec:e0:42:65:cc:2a:46:9d:bf:3d:c6:47:c6:0a:f0:ec:62:f9: 2b:42:bd:6f:38:e7:00:ef:3b:ac:ff:62:11:8d:12:57:39:bc: cc:a2:67:ee:32:1f:2c:6c:53:62:07:9a:56:65:05:38:34:10: cc:7b:89:35:2e:ac:70:d2:ca:4b:31:28:db:33:f6:6b:8b:fd: fa:38:b2:a3:9a:57:23:79:cc:ed:6d:e4:10:17:9f:e4:d9:6a: 14:9a:4a:00:e1:bc:d5:6d:32:8a:48:2c:b0:cd:50:72:f9:11: 0d:c9:d0:5f:0f:de:8e:ce:df:4a:80:ec:d6:92:ea:75:cd:35: 48:48:37:b2:ec:3c:38:87:02:07:aa:d9:76:33:6a:5e:cb:c3: ed:8a:b1:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsmR22auRCllZSB6Hko3ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1ZWU5MjZmMWYxNTM3YjliZTc1ZWI0YjlkNzkyZGY0MWQy NWNkOTkwHhcNMjUxMjE4MjMwMTI3WhcNMjUxMjE5MjMwMTI3WjAzMTEwLwYDVQQD Eyg0Nzg1ZGNlNTA0ZjM2YjlhOWY2ODVkYWFjYzA4NzdhOGY4ZGFkNzUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQro3XYCa0Y4MrP+v6Ua6SqiMzw2 oCfnaoxCPeh0hfkn8TjtinKORIwID5Rx8eOqMCw3cPsu6VY6hB0UpGB+9cmOk1rS 3JWfFKUA8zeYBcEGjIT3/5zUL5Dyp4bbltym0ij2e20jC0AuMoXpkiYxeOB6VbH0 3pAaUwcB7OPNzX92NFSeDGstcgKPCR+j42Bk1VDECvueefwIk7Sh1qz+7CXCNFd4 KzEHr0tSSQhLwSbw4jo3MCqxWt56OwaHhTQCPNZWzIHIypQ7SeC/zQyRLqshlwMq Y61zoV8DGKrols7b2OWtjL/dpdurEwno6xK++VTxzUSpN9mQRB9cF6KBSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEeF3OUE82uan2hdqswId6j42tdSMB8GA1UdIwQY MBaAFKXukm8fFTe5vnXrS515LfQdJc2ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGU2U2J4OFZON20tZGV0TG5Ya3Q5QjBselprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9hODdhZWMtYmVhYS00YWViLWE0OGUt OGYzNGJkMzkxZDE4LzEvcGU2U2J4OFZON20tZGV0TG5Ya3Q5QjBselprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9hODdhZWMtYmVhYS00YWViLWE0OGUtOGYzNGJkMzkxZDE4 LzEvcGU2U2J4OFZON20tZGV0TG5Ya3Q5QjBselprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFzhF9UdF bJ+STcKKTA5AFNrb+AresOy2EWJJWM+ej2Otoe11oZY6swTGru2niQ+riT57ufM7 V7vV7CgE9N6huYr81HQcc9zKB9D8hj6+Oi3bipYkhyrNevm6ZVZK9bdb09rWnm37 oWbZdDVx7OBCZcwqRp2/PcZHxgrw7GL5K0K9bzjnAO87rP9iEY0SVzm8zKJn7jIf LGxTYgeaVmUFODQQzHuJNS6scNLKSzEo2zP2a4v9+jiyo5pXI3nM7W3kEBef5Nlq FJpKAOG81W0yikgssM1QcvkRDcnQXw/ejs7fSoDs1pLqdc01SEg3suw8OIcCB6rZ djNqXsvD7Yqxlw== -----END CERTIFICATE-----Generated at Fri Dec 19 04:53:29 2025 by rpki-client