This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft File: PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft (raw, json) Hash identifier: l3B8/fKTJ/LhXC/mUX7ZsmBnABIvQ+FFVVUs6WH2muc= Subject key identifier: E0:F6:BB:D2:19:17:71:0E:E1:BA:FF:A1:B9:AE:29:CD:32:F2:3F:78 Authority key identifier: 3D:E2:68:1D:DA:00:70:2A:75:97:A7:12:57:E1:4F:7A:72:5E:89:0E Certificate issuer: /CN=3de2681dda00702a7597a71257e14f7a725e890e Certificate serial: 019AF68A65ACD02D52EF9E073B568E0329C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft Manifest number: 0C1B Signing time: Sun 07 Dec 2025 02:00:56 +0000 Manifest this update: Sun 07 Dec 2025 02:00:56 +0000 Manifest next update: Mon 08 Dec 2025 02:00:56 +0000 Files and hashes: 1: 3bt8Km81z8fgEHaLeSOeYgfebxU.roa (hash: pKoz7jrxy/U6s9br1hGRmLBPhCh8rgMf271vqsN5GJk=) 2: 4Mdmn6MaRoFLUycUXlZaFSGboEs.roa (hash: C9ut+tYKUryPFgIx2+ThOOLJz+YjKuj147RuRXfxtis=) 3: H7RDadMRjVcvma8PhFugcKUdoT0.roa (hash: 6sD2c8/NrghCekThtfpslB8AAW0einNgCY8Rjyouu9I=) 4: Oioxvop9FV5K4rtOSvh02jeAj-g.roa (hash: 1Oax9rdfDuKch357rIzJmOSBUOYvQbkuoDRF8in9c8A=) 5: P0-q-BdDXYrwKYDCUC5gegtCTZE.roa (hash: oO/hx6p/KCHt0e0eW15T8NOjsXnklfDaMDxz69ADiuE=) 6: PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl (hash: YHX+T3RxClOhI6NISsC5zDHwdbh+zyEtjpg9za4YrOk=) 7: ceFPC_Zj6p3cuB8qXQeMqvZfZa4.roa (hash: 01KlZ4a2kJZ4Ly4Y7K5EQ5UlAiINB2ZUF09ye0hG3lc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:65:ac:d0:2d:52:ef:9e:07:3b:56:8e:03:29:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3de2681dda00702a7597a71257e14f7a725e890e Validity Not Before: Dec 7 02:00:56 2025 GMT Not After : Dec 8 02:00:56 2025 GMT Subject: CN=e0f6bbd21917710ee1baffa1b9ae29cd32f23f78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4b:e4:fd:53:b3:0c:95:ee:75:44:f1:43:53: ba:cf:26:6c:e2:e5:e7:1c:fb:7f:72:f7:0d:0a:62: 97:db:3d:d6:45:99:c1:84:96:64:44:a3:65:d3:ad: c1:c6:2b:fc:eb:2d:35:a0:d0:b4:c6:8b:95:8d:11: d5:01:eb:f3:61:58:d3:99:7d:ca:1d:c3:6e:25:40: 77:0e:eb:02:3f:ea:81:0c:65:28:80:07:7d:fd:c8: 7a:b0:82:b1:a4:5e:08:77:b6:39:1a:53:d3:af:ce: fe:68:cf:bf:9f:fc:96:d1:b8:fe:ff:10:d8:f7:35: f7:07:f4:40:d0:00:9e:34:66:74:71:36:c0:73:e9: b3:4c:b9:ed:94:1e:ee:51:82:ca:7e:c9:a3:41:e6: 6d:21:75:ec:00:69:b1:fb:8b:1c:e0:9e:b9:da:61: 27:8c:f5:65:49:04:de:85:b5:23:70:da:b2:df:33: 6c:80:c0:15:28:aa:2d:2c:13:1f:54:e5:bc:37:c4: f0:ca:b6:e1:bf:02:26:41:79:a3:81:68:05:c9:fd: 99:ac:03:dc:65:70:8d:b6:53:ca:00:e7:d4:ee:3d: fe:2f:9c:45:2e:f9:35:88:84:d5:3e:75:1e:9b:27: 19:28:ac:bd:fa:c1:f6:c9:b6:22:72:e0:08:c4:a5: 00:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:F6:BB:D2:19:17:71:0E:E1:BA:FF:A1:B9:AE:29:CD:32:F2:3F:78 X509v3 Authority Key Identifier: keyid:3D:E2:68:1D:DA:00:70:2A:75:97:A7:12:57:E1:4F:7A:72:5E:89:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:c9:9c:e1:35:e2:19:72:ed:1e:50:47:67:a2:61:2c:68:6b: 33:27:96:bb:ed:6b:dc:71:32:17:b3:58:e2:88:95:01:29:79: c6:a6:bc:66:74:a3:4e:06:f3:10:b7:66:ab:3a:46:62:d6:78: 1b:5e:5c:22:10:28:99:af:84:d7:d2:05:fd:74:dc:42:87:11: 41:ae:8a:03:14:d6:d6:58:1c:38:8c:e3:9f:bc:c4:e1:7a:8c: 50:e0:1d:3c:d7:4c:7d:05:09:16:aa:f5:9f:ce:1b:da:57:7a: d8:96:f9:bb:37:90:0b:02:d1:69:a8:d6:13:9d:a8:cf:b3:53: 45:a6:dc:22:23:f6:7d:13:c1:0f:1d:98:88:77:c1:d9:c1:00: 39:f7:66:85:a3:59:02:24:ab:3e:d2:01:01:be:da:b0:2a:97: a3:c7:0f:e7:8f:76:2d:2b:8f:a5:57:8f:7b:ac:41:df:d8:d7: d2:40:16:f5:02:09:fe:c0:d5:39:92:76:13:42:a5:af:47:f8: fa:5c:df:ba:fc:04:72:25:3c:d4:7e:b6:d0:79:49:82:e5:01: a2:23:d0:24:af:f8:cb:10:a3:b3:76:06:38:27:fa:f3:af:c0: 07:a4:58:62:23:74:df:20:a2:d1:bb:03:69:b9:e4:f8:9a:8e: a7:d1:6c:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2imWs0C1S754HO1aOAynGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkZTI2ODFkZGEwMDcwMmE3NTk3YTcxMjU3ZTE0ZjdhNzI1 ZTg5MGUwHhcNMjUxMjA3MDIwMDU2WhcNMjUxMjA4MDIwMDU2WjAzMTEwLwYDVQQD EyhlMGY2YmJkMjE5MTc3MTBlZTFiYWZmYTFiOWFlMjljZDMyZjIzZjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUvk/VOzDJXudUTxQ1O6zyZs4uXn HPt/cvcNCmKX2z3WRZnBhJZkRKNl063Bxiv86y01oNC0xouVjRHVAevzYVjTmX3K HcNuJUB3DusCP+qBDGUogAd9/ch6sIKxpF4Id7Y5GlPTr87+aM+/n/yW0bj+/xDY 9zX3B/RA0ACeNGZ0cTbAc+mzTLntlB7uUYLKfsmjQeZtIXXsAGmx+4sc4J652mEn jPVlSQTehbUjcNqy3zNsgMAVKKotLBMfVOW8N8TwyrbhvwImQXmjgWgFyf2ZrAPc ZXCNtlPKAOfU7j3+L5xFLvk1iITVPnUemycZKKy9+sH2ybYicuAIxKUA+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOD2u9IZF3EO4br/obmuKc0y8j94MB8GA1UdIwQY MBaAFD3iaB3aAHAqdZenElfhT3pyXokOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGVKb0hkb0FjQ3AxbDZjU1YtRlBlbkplaVE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8zNmQ2ZTQtOGQ3Ny00OGQ1LWFmYjYt ZTBhYzcyNjNkYjEyLzEvUGVKb0hkb0FjQ3AxbDZjU1YtRlBlbkplaVE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8zNmQ2ZTQtOGQ3Ny00OGQ1LWFmYjYtZTBhYzcyNjNkYjEy LzEvUGVKb0hkb0FjQ3AxbDZjU1YtRlBlbkplaVE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK8mc4TXi GXLtHlBHZ6JhLGhrMyeWu+1r3HEyF7NY4oiVASl5xqa8ZnSjTgbzELdmqzpGYtZ4 G15cIhAoma+E19IF/XTcQocRQa6KAxTW1lgcOIzjn7zE4XqMUOAdPNdMfQUJFqr1 n84b2ld62Jb5uzeQCwLRaajWE52oz7NTRabcIiP2fRPBDx2YiHfB2cEAOfdmhaNZ AiSrPtIBAb7asCqXo8cP5492LSuPpVePe6xB39jX0kAW9QIJ/sDVOZJ2E0Klr0f4 +lzfuvwEciU81H620HlJguUBoiPQJK/4yxCjs3YGOCf686/AB6RYYiN03yCi0bsD abnk+JqOp9FsHA== -----END CERTIFICATE-----Generated at Sun Dec 7 06:33:53 2025 by rpki-client