This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft File: Psb9kdKkNl09wWch_t9pIXK7MHM.mft (raw, json) Hash identifier: d4zlE8NRIHjr19dz8BFvbNZcgVE53aIMap59NxQgiwU= Subject key identifier: 36:23:70:CA:6D:AB:FF:BC:6E:0C:7A:71:A9:4D:C0:FF:AA:A1:7D:A6 Authority key identifier: 3E:C6:FD:91:D2:A4:36:5D:3D:C1:67:21:FE:DF:69:21:72:BB:30:73 Certificate issuer: /CN=3ec6fd91d2a4365d3dc16721fedf692172bb3073 Certificate serial: 019B597657430211D869C8BFA36495392E69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft Manifest number: 14DB Signing time: Fri 26 Dec 2025 07:01:26 +0000 Manifest this update: Fri 26 Dec 2025 07:01:26 +0000 Manifest next update: Sat 27 Dec 2025 07:01:26 +0000 Files and hashes: 1: 0OYfvohoTXtpi59LO0J22cI1s3U.roa (hash: s7dK6PK+eP+XDZZ2HKEucZtuMEm89+4+6MLOTTKFjE0=) 2: Psb9kdKkNl09wWch_t9pIXK7MHM.crl (hash: WHOTxaJJaCtN1XnNktzSoDToBdibT7TmOHG4jh9Z0qc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.crl rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:57:43:02:11:d8:69:c8:bf:a3:64:95:39:2e:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ec6fd91d2a4365d3dc16721fedf692172bb3073 Validity Not Before: Dec 26 07:01:26 2025 GMT Not After : Dec 27 07:01:26 2025 GMT Subject: CN=362370ca6dabffbc6e0c7a71a94dc0ffaaa17da6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0c:c9:0f:71:fb:ea:a2:c2:ee:5c:bb:28:e5: 56:7a:d3:fe:8c:3c:ec:ba:ae:c8:e1:2c:91:fc:7b: b1:92:ce:75:05:c4:cd:d0:a7:75:c8:ae:b0:3d:98: bb:a8:20:d6:c0:5f:53:1c:db:09:7d:6f:18:cd:34: db:d6:6c:4b:d3:f9:9a:ef:e2:14:85:b0:92:9d:73: 5d:e6:5e:b0:ee:e3:82:97:7e:8d:1e:9e:6f:67:d6: 67:6f:f4:98:ef:0e:3e:47:ac:e6:65:90:74:e5:68: 40:da:c4:a9:f1:d0:87:0b:b8:21:57:56:39:77:f8: 0a:6e:88:33:ed:f9:6d:7d:ea:60:5b:f8:85:eb:14: cd:3b:e4:da:27:b4:92:71:bd:db:ee:df:6a:4a:fe: d1:42:13:18:b4:8e:9e:a6:37:04:8d:3b:f2:ef:88: 17:c7:47:08:3b:a2:a5:ba:66:24:cc:86:53:bc:68: 76:52:12:56:9e:f3:41:7d:5a:e1:64:85:be:f9:a8: 23:06:b5:9a:d8:ba:1a:a4:cd:9b:60:1a:c5:3b:0d: 0b:3e:98:e8:2f:08:af:b1:f4:07:0e:d1:0b:2f:cb: 79:22:5f:6c:0a:40:81:03:f7:9c:59:ae:c7:f1:ae: 98:1f:78:7d:d3:8b:69:94:9a:98:b5:64:f9:30:92: f8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:23:70:CA:6D:AB:FF:BC:6E:0C:7A:71:A9:4D:C0:FF:AA:A1:7D:A6 X509v3 Authority Key Identifier: keyid:3E:C6:FD:91:D2:A4:36:5D:3D:C1:67:21:FE:DF:69:21:72:BB:30:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:aa:f8:8e:83:f2:7c:0a:0f:95:c3:cc:95:57:c1:7a:d0:df: 0e:74:46:75:41:67:e8:3b:a0:0c:6f:84:6b:30:e0:a9:c0:13: 1a:8c:6f:af:d5:88:bc:8c:05:bf:69:75:63:d4:c5:17:92:3b: 8a:e7:3a:dc:3f:bf:d9:3c:a2:48:45:53:1e:c0:5b:42:8d:e3: 45:3b:48:69:f0:35:aa:5a:de:68:0b:6a:e4:fa:fc:6c:a0:5c: 59:8c:9e:82:95:52:44:e3:2c:55:70:17:11:e1:84:ef:24:22: ea:26:3c:a7:2f:ba:cd:fa:c7:3c:be:7b:c0:52:01:78:33:72: 13:bf:ba:dd:a2:c1:e1:42:ad:53:23:bb:25:e2:33:af:37:72: 31:f3:3c:7e:3d:eb:88:2b:52:6e:81:37:e3:1d:82:da:c8:fb: 6c:c0:94:51:dc:c8:f6:61:1c:a7:fc:7d:35:d2:7d:d0:12:7c: 28:36:c8:c3:f3:0c:af:3d:a9:f3:75:f3:df:91:59:da:f5:bc: b2:44:c7:0b:55:a3:c5:a2:b6:2a:c9:6e:04:d0:e1:f3:6d:8b: 98:1a:5d:66:07:30:a4:29:bd:b3:fe:66:2f:a3:2b:ef:e4:5d: a7:1d:c1:e2:fb:ff:a1:e4:11:6d:a3:21:bb:77:d9:89:ee:30: 9c:1b:bf:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdldDAhHYaci/o2SVOS5pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYzZmZDkxZDJhNDM2NWQzZGMxNjcyMWZlZGY2OTIxNzJi YjMwNzMwHhcNMjUxMjI2MDcwMTI2WhcNMjUxMjI3MDcwMTI2WjAzMTEwLwYDVQQD EygzNjIzNzBjYTZkYWJmZmJjNmUwYzdhNzFhOTRkYzBmZmFhYTE3ZGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygzJD3H76qLC7ly7KOVWetP+jDzs uq7I4SyR/Huxks51BcTN0Kd1yK6wPZi7qCDWwF9THNsJfW8YzTTb1mxL0/ma7+IU hbCSnXNd5l6w7uOCl36NHp5vZ9Znb/SY7w4+R6zmZZB05WhA2sSp8dCHC7ghV1Y5 d/gKbogz7fltfepgW/iF6xTNO+TaJ7SScb3b7t9qSv7RQhMYtI6epjcEjTvy74gX x0cIO6KlumYkzIZTvGh2UhJWnvNBfVrhZIW++agjBrWa2LoapM2bYBrFOw0LPpjo LwivsfQHDtELL8t5Il9sCkCBA/ecWa7H8a6YH3h904tplJqYtWT5MJL4AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDYjcMptq/+8bgx6calNwP+qoX2mMB8GA1UdIwQY MBaAFD7G/ZHSpDZdPcFnIf7faSFyuzBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHNiOWtkS2tObDA5d1djaF90OXBJWEs3TUhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC80Y2RhNDctMzg0YS00MzU0LWJjYjQt YmVmMzU2MDViY2Q0LzEvUHNiOWtkS2tObDA5d1djaF90OXBJWEs3TUhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC80Y2RhNDctMzg0YS00MzU0LWJjYjQtYmVmMzU2MDViY2Q0 LzEvUHNiOWtkS2tObDA5d1djaF90OXBJWEs3TUhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe6r4joPy fAoPlcPMlVfBetDfDnRGdUFn6DugDG+EazDgqcATGoxvr9WIvIwFv2l1Y9TFF5I7 iuc63D+/2TyiSEVTHsBbQo3jRTtIafA1qlreaAtq5Pr8bKBcWYyegpVSROMsVXAX EeGE7yQi6iY8py+6zfrHPL57wFIBeDNyE7+63aLB4UKtUyO7JeIzrzdyMfM8fj3r iCtSboE34x2C2sj7bMCUUdzI9mEcp/x9NdJ90BJ8KDbIw/MMrz2p83Xz35FZ2vW8 skTHC1WjxaK2KsluBNDh822LmBpdZgcwpCm9s/5mL6Mr7+Rdpx3B4vv/oeQRbaMh u3fZie4wnBu/jA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:06:28 2025 by rpki-client