This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft File: Ps1TxmQkw_Npyojuevdq2yXhhFE.mft (raw, json) Hash identifier: 7vIhKqGGOWgf4o/u/9mCunY1lMLVO8vMhBSJnITdqRs= Subject key identifier: FF:FD:21:F4:AC:E0:7E:C9:3E:D1:73:AA:7F:A5:43:F1:75:BE:56:85 Authority key identifier: 3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51 Certificate issuer: /CN=3ecd53c66424c3f369ca88ee7af76adb25e18451 Certificate serial: 019B35A0531D928099151509960B1769182A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft Manifest number: 114C Signing time: Fri 19 Dec 2025 08:00:57 +0000 Manifest this update: Fri 19 Dec 2025 08:00:57 +0000 Manifest next update: Sat 20 Dec 2025 08:00:57 +0000 Files and hashes: 1: NFHPImufF3uRqUgALoiOKsyNAWY.roa (hash: P38WvGerxAQEhXHw97XFuU4GA9ZzpqGUq811jnutzZs=) 2: Ps1TxmQkw_Npyojuevdq2yXhhFE.crl (hash: IpU9PiWIWhU++RgrjfExZWCb7nUxwbmIXON4O/hCT8E=) 3: mI6j4UadWN59Ry8sBr4KvB0K8Yc.roa (hash: OgHmwZEN5FVoA8wv5XCNl8ngdl4mQaBcOydLvBf7mUc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:53:1d:92:80:99:15:15:09:96:0b:17:69:18:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ecd53c66424c3f369ca88ee7af76adb25e18451 Validity Not Before: Dec 19 08:00:57 2025 GMT Not After : Dec 20 08:00:57 2025 GMT Subject: CN=fffd21f4ace07ec93ed173aa7fa543f175be5685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:72:dc:41:5c:56:83:b9:0f:36:17:cb:21:fe: 40:ab:2e:ab:95:20:b6:fa:2b:89:2e:9f:a5:af:58: 6b:7a:1a:dc:02:22:32:9a:9c:ed:49:d6:33:d2:7f: d0:23:72:8e:28:c8:f6:96:4b:1f:24:50:b1:e1:7e: 1e:fc:ee:8f:42:26:2a:56:9c:8d:42:6b:73:78:08: 4c:91:ae:36:ff:c0:57:63:db:f5:f7:51:bf:31:28: e5:93:4f:80:8d:cd:47:4c:d8:b8:0a:e4:ee:7b:74: 30:7d:99:92:ed:5d:4a:c6:ea:47:64:17:4d:15:80: 0d:5f:8d:8e:76:2a:20:c4:0a:a1:d0:4b:4f:b3:95: 6a:c4:f0:16:ad:a3:6a:46:87:72:26:08:fc:d0:48: f5:18:3a:3f:52:ef:c3:dc:73:53:5a:4f:04:96:32: 05:0c:38:28:60:8a:7d:ae:fa:1f:c5:76:4d:69:88: 4b:6c:5a:0f:14:9b:91:2e:99:36:2a:ee:29:2e:ac: 42:06:f1:10:71:74:36:65:3e:a3:76:ec:2e:d5:0f: 82:67:51:59:aa:d9:de:bb:35:a5:d8:c0:5e:37:19: 94:fb:9a:4a:c0:42:40:fe:ca:00:87:dc:90:6a:e8: 4c:ed:93:2d:26:b4:61:cd:fe:b3:63:28:70:b4:25: 39:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:FD:21:F4:AC:E0:7E:C9:3E:D1:73:AA:7F:A5:43:F1:75:BE:56:85 X509v3 Authority Key Identifier: keyid:3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:ce:d5:77:77:8d:f4:62:11:29:3c:85:ed:a9:a0:25:2d:1a: 37:96:ec:4b:52:12:0c:13:9d:4a:69:fe:2b:d0:39:09:92:90: 0e:96:20:0f:26:b4:9d:db:04:44:6e:ef:87:11:6b:42:6c:d1: e3:17:01:e3:34:a8:5e:0d:2b:80:ea:e1:2a:fa:8d:c0:31:06: 87:b9:85:97:c8:0b:6b:35:70:26:d4:a2:c6:d1:31:fc:1c:3e: 7f:60:48:7c:26:3e:8c:40:35:89:fa:bf:4f:8e:c0:43:58:d3: 9a:99:b6:00:d9:1d:e4:50:2e:4d:38:f2:61:07:78:63:33:fd: 75:03:e6:8b:3c:f2:9b:2e:e6:f9:f7:8a:2b:1e:63:90:56:40: 6e:e6:c5:0d:e0:06:5f:42:a9:7d:3b:3b:37:d0:38:40:9c:20: 56:67:e2:1e:8f:cf:3f:8d:dd:84:bb:02:19:0e:fe:79:be:f7: c6:12:9a:d8:7d:67:94:13:74:a6:6a:8b:a4:d8:6b:23:09:26: 70:2c:df:27:b1:67:c2:11:2d:e7:dc:7f:e4:ef:c3:0d:ed:11: 80:58:74:c3:a5:6b:b2:c9:e4:64:b8:17:08:17:a8:42:d7:06: 81:0d:f8:c0:47:27:99:65:b0:4d:b7:0a:66:81:a5:f4:f4:b1: cf:79:ba:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oFMdkoCZFRUJlgsXaRgqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlY2Q1M2M2NjQyNGMzZjM2OWNhODhlZTdhZjc2YWRiMjVl MTg0NTEwHhcNMjUxMjE5MDgwMDU3WhcNMjUxMjIwMDgwMDU3WjAzMTEwLwYDVQQD EyhmZmZkMjFmNGFjZTA3ZWM5M2VkMTczYWE3ZmE1NDNmMTc1YmU1Njg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXLcQVxWg7kPNhfLIf5Aqy6rlSC2 +iuJLp+lr1hrehrcAiIympztSdYz0n/QI3KOKMj2lksfJFCx4X4e/O6PQiYqVpyN QmtzeAhMka42/8BXY9v191G/MSjlk0+Ajc1HTNi4CuTue3QwfZmS7V1KxupHZBdN FYANX42OdiogxAqh0EtPs5VqxPAWraNqRodyJgj80Ej1GDo/Uu/D3HNTWk8EljIF DDgoYIp9rvofxXZNaYhLbFoPFJuRLpk2Ku4pLqxCBvEQcXQ2ZT6jduwu1Q+CZ1FZ qtneuzWl2MBeNxmU+5pKwEJA/soAh9yQauhM7ZMtJrRhzf6zYyhwtCU5pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/9IfSs4H7JPtFzqn+lQ/F1vlaFMB8GA1UdIwQY MBaAFD7NU8ZkJMPzacqI7nr3atsl4YRRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHMxVHhtUWt3X05weW9qdWV2ZHEyeVhoaEZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lNjVhZGEtNGQ0YS00MDRkLTg3MDAt YzIyNTY4MDRlOTIyLzEvUHMxVHhtUWt3X05weW9qdWV2ZHEyeVhoaEZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9lNjVhZGEtNGQ0YS00MDRkLTg3MDAtYzIyNTY4MDRlOTIy LzEvUHMxVHhtUWt3X05weW9qdWV2ZHEyeVhoaEZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhM7Vd3eN 9GIRKTyF7amgJS0aN5bsS1ISDBOdSmn+K9A5CZKQDpYgDya0ndsERG7vhxFrQmzR 4xcB4zSoXg0rgOrhKvqNwDEGh7mFl8gLazVwJtSixtEx/Bw+f2BIfCY+jEA1ifq/ T47AQ1jTmpm2ANkd5FAuTTjyYQd4YzP9dQPmizzymy7m+feKKx5jkFZAbubFDeAG X0KpfTs7N9A4QJwgVmfiHo/PP43dhLsCGQ7+eb73xhKa2H1nlBN0pmqLpNhrIwkm cCzfJ7FnwhEt59x/5O/DDe0RgFh0w6VrssnkZLgXCBeoQtcGgQ34wEcnmWWwTbcK ZoGl9PSxz3m6zw== -----END CERTIFICATE-----Generated at Fri Dec 19 16:21:41 2025 by rpki-client