This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft File: PE0_sETrHAoRvgYCrO74jl9dLd8.mft (raw, json) Hash identifier: N81Y4Fju/AbiwNAwWDomjhqyzjFwGNz+bccPe7WCFcA= Subject key identifier: 8C:CD:4E:29:AF:84:BB:F1:32:F4:31:6B:4D:25:A2:66:20:72:19:6D Authority key identifier: 3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF Certificate issuer: /CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf Certificate serial: 019AEFACB7DF1FD25864B7E4FEF1EBF96B53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft Manifest number: 121F Signing time: Fri 05 Dec 2025 18:01:05 +0000 Manifest this update: Fri 05 Dec 2025 18:01:05 +0000 Manifest next update: Sat 06 Dec 2025 18:01:05 +0000 Files and hashes: 1: 1qkc6Y9jXUF8IhL-xIP9OmQuRxQ.roa (hash: FyT7i1iA2UYuQa2unCvmYr0/izQdX0gwOaXqE1QmUDA=) 2: 4pndJR5YmydmS9JXz_iQx8ck7j0.roa (hash: Z1im/UM2UzYVlqGcYguPnrUORp/DmOYEtnYcSLNDNIU=) 3: 790_0aC0pIVxZhv7VxK50ulYRQA.roa (hash: Omml7Q0FvpnQPClJTkXnFHAOdNcYGcFxuVbnF3UpV4k=) 4: 7TRbsGhzrO0599svAEtwSgPzAhc.roa (hash: W3VT9OquRIsAh2qTrbG0g8QkGqxQgHgPGhS6fP34/Qo=) 5: PE0_sETrHAoRvgYCrO74jl9dLd8.crl (hash: jsM35s6IAr09Wp6JvsUdpxRH4/lT5md7MZQ4x/nqu30=) 6: rq9aneEoVWHNrooCWNRA9paJqvA.roa (hash: yfPP93JQllNK5aLLASi/RUmEtM270jETA3o9ZRbSPvY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ef:ac:b7:df:1f:d2:58:64:b7:e4:fe:f1:eb:f9:6b:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf Validity Not Before: Dec 5 18:01:05 2025 GMT Not After : Dec 6 18:01:05 2025 GMT Subject: CN=8ccd4e29af84bbf132f4316b4d25a2662072196d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:db:3a:46:bd:c1:a3:bc:8f:0c:76:62:ab:07: 1f:fa:6b:71:ea:a0:c5:65:e3:d4:81:01:c0:5a:5b: d7:27:c8:1c:b0:63:2a:3c:e9:4b:89:e1:48:91:72: 6a:f4:be:fa:a7:9c:2b:97:63:aa:3e:17:9e:7a:04: 9f:ef:cf:4b:a7:62:46:bf:ba:f3:9b:e6:0a:85:c4: 6d:44:a6:e4:b8:48:b9:6e:3b:b0:4f:d9:75:3e:52: d3:61:d0:7a:ad:02:44:f4:38:66:45:9b:f7:f3:f0: d3:2f:49:5f:f2:30:2e:dd:01:3d:38:ee:4f:d6:68: 96:d0:e9:8f:48:25:dd:36:b0:6d:23:a6:ad:bd:fc: ca:9f:c6:b6:98:f5:23:23:f9:55:49:c1:c6:fe:29: 08:97:ee:8a:47:31:dc:c6:d3:a5:68:39:fc:35:c7: e9:4a:f4:cf:16:18:22:d7:e1:01:0e:c9:ca:e1:ec: 32:05:4d:f6:ea:9e:7c:e5:18:21:4f:3d:5f:f0:94: 2b:d6:55:ab:9a:e9:a5:a0:da:31:89:8d:fc:a6:b5: da:c8:cb:83:5e:18:85:39:03:82:62:aa:7a:11:80: a3:38:6b:fb:61:62:a3:09:8f:b6:5c:aa:62:0f:92: c6:20:6f:87:3c:d7:84:b0:c6:af:c9:bd:19:5d:d0: 48:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:CD:4E:29:AF:84:BB:F1:32:F4:31:6B:4D:25:A2:66:20:72:19:6D X509v3 Authority Key Identifier: keyid:3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:59:e4:53:d5:74:7b:80:1f:fb:d5:93:7c:94:64:93:3f:98: f2:61:76:92:20:7d:78:db:ec:16:8f:91:b0:cb:1e:10:67:db: 4e:97:81:1e:82:3b:dd:8a:da:ed:dc:5f:71:be:ea:d5:f2:74: 84:0f:c9:ac:43:62:b5:8e:48:b1:18:54:2a:c5:7a:5c:18:89: aa:88:7e:42:0f:57:35:51:18:a1:bf:e0:6c:6d:b8:0e:75:28: c5:40:83:06:38:9d:2a:a9:eb:db:83:58:77:5e:1e:26:ae:a5: a6:2b:fe:a0:98:86:b2:8c:7e:55:b8:73:04:1e:fc:c4:6b:b1: 9a:5b:95:28:14:2c:6b:02:2c:09:43:98:1d:52:cf:7d:4c:92: 99:66:98:6d:41:ff:94:82:91:9d:f3:8c:73:97:50:3f:17:6e: 35:1f:fd:24:9e:15:10:72:3b:0b:7c:5d:b5:b9:74:94:18:d1: 48:f2:b5:22:51:ac:42:a5:80:68:46:c4:f2:36:f8:3a:db:5b: 90:6c:6d:64:1c:17:6f:34:5c:00:52:c7:de:b6:22:93:a9:3c: 76:a8:d0:d5:88:98:5a:71:e2:45:bb:53:94:7f:fd:2f:0b:0b: 55:63:a6:86:de:0a:8e:4f:4b:dc:71:08:93:b2:f0:6f:96:7b: 05:9f:61:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrvrLffH9JYZLfk/vHr+WtTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjNGQzZmIwNDRlYjFjMGExMWJlMDYwMmFjZWVmODhlNWY1 ZDJkZGYwHhcNMjUxMjA1MTgwMTA1WhcNMjUxMjA2MTgwMTA1WjAzMTEwLwYDVQQD Eyg4Y2NkNGUyOWFmODRiYmYxMzJmNDMxNmI0ZDI1YTI2NjIwNzIxOTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzds6Rr3Bo7yPDHZiqwcf+mtx6qDF ZePUgQHAWlvXJ8gcsGMqPOlLieFIkXJq9L76p5wrl2OqPheeegSf789Lp2JGv7rz m+YKhcRtRKbkuEi5bjuwT9l1PlLTYdB6rQJE9DhmRZv38/DTL0lf8jAu3QE9OO5P 1miW0OmPSCXdNrBtI6atvfzKn8a2mPUjI/lVScHG/ikIl+6KRzHcxtOlaDn8Ncfp SvTPFhgi1+EBDsnK4ewyBU326p585RghTz1f8JQr1lWrmumloNoxiY38prXayMuD XhiFOQOCYqp6EYCjOGv7YWKjCY+2XKpiD5LGIG+HPNeEsMavyb0ZXdBISQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIzNTimvhLvxMvQxa00lomYgchltMB8GA1UdIwQY MBaAFDxNP7BE6xwKEb4GAqzu+I5fXS3fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEUwX3NFVHJIQW9SdmdZQ3JPNzRqbDlkTGQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS83NmUwN2MtOGEzMi00ODlkLTkxZDEt YjE4NGUzZjRiNTBlLzEvUEUwX3NFVHJIQW9SdmdZQ3JPNzRqbDlkTGQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS83NmUwN2MtOGEzMi00ODlkLTkxZDEtYjE4NGUzZjRiNTBl LzEvUEUwX3NFVHJIQW9SdmdZQ3JPNzRqbDlkTGQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUFnkU9V0 e4Af+9WTfJRkkz+Y8mF2kiB9eNvsFo+RsMseEGfbTpeBHoI73Yra7dxfcb7q1fJ0 hA/JrENitY5IsRhUKsV6XBiJqoh+Qg9XNVEYob/gbG24DnUoxUCDBjidKqnr24NY d14eJq6lpiv+oJiGsox+VbhzBB78xGuxmluVKBQsawIsCUOYHVLPfUySmWaYbUH/ lIKRnfOMc5dQPxduNR/9JJ4VEHI7C3xdtbl0lBjRSPK1IlGsQqWAaEbE8jb4Ottb kGxtZBwXbzRcAFLH3rYik6k8dqjQ1YiYWnHiRbtTlH/9LwsLVWOmht4Kjk9L3HEI k7Lwb5Z7BZ9hsg== -----END CERTIFICATE-----Generated at Fri Dec 5 19:51:00 2025 by rpki-client