This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.mft File: Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.mft (raw, json) Hash identifier: ZIRwrtM9NKMLtjhg7A0z1cQEq1fSGjZR/dv7sfgxAyM= Subject key identifier: 6F:96:23:B5:CA:36:BE:05:CB:25:23:E6:BD:A1:E3:03:58:F1:90:63 Authority key identifier: 3E:DD:1C:F4:37:00:85:B6:D2:57:14:09:14:36:F6:68:60:28:D5:58 Certificate issuer: /CN=3edd1cf4370085b6d25714091436f6686028d558 Certificate serial: 019B59778A2B74051DE264D68A959EEBFE6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.mft Manifest number: 024B Signing time: Fri 26 Dec 2025 07:02:44 +0000 Manifest this update: Fri 26 Dec 2025 07:02:44 +0000 Manifest next update: Sat 27 Dec 2025 07:02:44 +0000 Files and hashes: 1: Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.crl (hash: 6PilJJzlhZJFAJaWuW2liwSolEU3PzMeRkzY01Ivl1I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.crl rsync://rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.mft rsync://rpki.ripe.net/repository/DEFAULT/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:8a:2b:74:05:1d:e2:64:d6:8a:95:9e:eb:fe:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3edd1cf4370085b6d25714091436f6686028d558 Validity Not Before: Dec 26 07:02:44 2025 GMT Not After : Dec 27 07:02:44 2025 GMT Subject: CN=6f9623b5ca36be05cb2523e6bda1e30358f19063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b6:63:22:32:45:fc:5c:f9:01:80:1f:85:f2: c3:a4:d6:96:fb:1a:91:a8:e3:b0:7f:ba:71:fa:f1: 76:7d:8c:9e:7f:a1:a9:1b:a4:c7:0f:32:cc:9e:b9: 91:c5:cb:63:8f:b2:fb:3e:53:1b:94:4a:42:61:4a: 36:bb:7a:86:9d:5a:04:8e:30:21:bc:f8:ba:ee:15: 3b:46:79:8e:8e:91:65:0f:56:0a:bb:5e:db:69:f6: b6:52:a9:ba:e1:ba:e8:fc:30:ca:d8:d6:78:fd:81: 02:c5:2a:c0:a3:52:3d:85:65:a1:87:ef:a8:29:75: fb:3b:f0:a6:d6:a4:c7:c1:9f:4b:a1:9b:87:e3:86: a5:9d:e6:3a:30:76:b6:0b:9d:45:6c:73:d3:61:5c: 64:0c:24:30:76:99:2a:be:17:0a:b2:fd:08:31:40: df:05:35:ec:70:a6:aa:c4:00:6e:51:83:ac:4d:1c: 2e:3c:97:93:47:e6:2c:78:51:ad:8e:16:26:0c:89: 14:1a:b4:67:fb:b1:88:a1:eb:08:5a:93:ad:ce:1a: ba:60:f0:cb:39:97:fd:91:d2:37:49:9c:4e:36:79: ea:9e:9e:b5:49:af:10:e4:f0:c7:a4:5a:99:b6:98: a5:68:0d:ec:ce:58:3b:2d:7d:e8:b9:69:71:2d:31: 4d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:96:23:B5:CA:36:BE:05:CB:25:23:E6:BD:A1:E3:03:58:F1:90:63 X509v3 Authority Key Identifier: keyid:3E:DD:1C:F4:37:00:85:B6:D2:57:14:09:14:36:F6:68:60:28:D5:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:40:c0:da:be:ef:cc:ec:3c:40:1c:25:7d:51:5d:1c:a8:8c: c0:53:bd:7c:22:87:ec:2e:de:8f:c6:5b:bd:73:55:35:17:22: bc:e5:fc:f8:cf:ae:bd:0f:ef:97:5e:bb:7c:e4:28:f8:59:24: d4:a5:68:1a:d4:42:29:2d:bc:5e:3a:68:b9:bf:11:44:5a:ef: b6:57:31:02:fe:79:a0:a7:6e:11:09:f5:18:48:d5:de:00:63: 5a:be:b9:27:b4:58:bd:29:ef:ca:19:77:e0:15:53:f5:6b:09: 94:60:d6:cc:89:b2:64:93:1f:58:46:33:29:9b:81:94:9e:a0: e0:55:e5:73:22:23:33:c6:1d:7d:b7:20:fb:fd:22:b9:ac:97: 35:94:a2:32:07:be:d9:27:ad:c7:55:68:f8:1f:7f:04:51:34: 63:36:77:53:b6:29:e7:06:a9:eb:24:a7:9f:c9:61:f3:26:9e: ad:05:b7:2f:34:71:f1:90:1e:6f:93:f4:1a:cd:bd:ce:4d:a2: 9b:ee:f4:82:38:f6:cb:c5:82:ca:d7:b0:13:5c:2c:52:3a:b8: 93:2b:48:fc:43:a4:d1:db:92:f0:67:c2:30:42:67:64:c0:34: 77:9f:12:f7:1b:3e:4f:10:6e:ac:f0:78:eb:ed:83:7e:4c:04: 91:4e:22:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd4ordAUd4mTWipWe6/5tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZGQxY2Y0MzcwMDg1YjZkMjU3MTQwOTE0MzZmNjY4NjAy OGQ1NTgwHhcNMjUxMjI2MDcwMjQ0WhcNMjUxMjI3MDcwMjQ0WjAzMTEwLwYDVQQD Eyg2Zjk2MjNiNWNhMzZiZTA1Y2IyNTIzZTZiZGExZTMwMzU4ZjE5MDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrZjIjJF/Fz5AYAfhfLDpNaW+xqR qOOwf7px+vF2fYyef6GpG6THDzLMnrmRxctjj7L7PlMblEpCYUo2u3qGnVoEjjAh vPi67hU7RnmOjpFlD1YKu17bafa2Uqm64bro/DDK2NZ4/YECxSrAo1I9hWWhh++o KXX7O/Cm1qTHwZ9LoZuH44alneY6MHa2C51FbHPTYVxkDCQwdpkqvhcKsv0IMUDf BTXscKaqxABuUYOsTRwuPJeTR+YseFGtjhYmDIkUGrRn+7GIoesIWpOtzhq6YPDL OZf9kdI3SZxONnnqnp61Sa8Q5PDHpFqZtpilaA3szlg7LX3ouWlxLTFNxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG+WI7XKNr4FyyUj5r2h4wNY8ZBjMB8GA1UdIwQY MBaAFD7dHPQ3AIW20lcUCRQ29mhgKNVYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHQwYzlEY0FoYmJTVnhRSkZEYjJhR0FvMVZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9hMjU4YmYtNzlkZS00YzI4LThhMGYt ZThlZDkyN2M1NWE0LzEvUHQwYzlEY0FoYmJTVnhRSkZEYjJhR0FvMVZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9hMjU4YmYtNzlkZS00YzI4LThhMGYtZThlZDkyN2M1NWE0 LzEvUHQwYzlEY0FoYmJTVnhRSkZEYjJhR0FvMVZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABEDA2r7v zOw8QBwlfVFdHKiMwFO9fCKH7C7ej8ZbvXNVNRcivOX8+M+uvQ/vl167fOQo+Fkk 1KVoGtRCKS28Xjpoub8RRFrvtlcxAv55oKduEQn1GEjV3gBjWr65J7RYvSnvyhl3 4BVT9WsJlGDWzImyZJMfWEYzKZuBlJ6g4FXlcyIjM8Ydfbcg+/0iuayXNZSiMge+ 2Setx1Vo+B9/BFE0YzZ3U7Yp5wap6ySnn8lh8yaerQW3LzRx8ZAeb5P0Gs29zk2i m+70gjj2y8WCytewE1wsUjq4kytI/EOk0duS8GfCMEJnZMA0d58S9xs+TxBurPB4 6+2DfkwEkU4ilQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:44:25 2025 by rpki-client