This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft File: PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft (raw, json) Hash identifier: nNTSLOyUk4p46zZylluaniCzBj8+m8D7G99yteWV4u4= Subject key identifier: 99:A2:2B:29:37:9D:8C:77:AF:44:FD:A2:1A:7A:38:52:4C:0D:36:CD Authority key identifier: 3C:4E:E9:11:0B:85:FD:DE:3E:B6:E4:46:25:41:BA:BC:32:36:E8:BA Certificate issuer: /CN=3c4ee9110b85fdde3eb6e4462541babc3236e8ba Certificate serial: 019B5976D1F940CED814B6D182A51B7F5E41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7pEQuF_d4-tuRGJUG6vDI26Lo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft Manifest number: 0F08 Signing time: Fri 26 Dec 2025 07:01:57 +0000 Manifest this update: Fri 26 Dec 2025 07:01:57 +0000 Manifest next update: Sat 27 Dec 2025 07:01:57 +0000 Files and hashes: 1: FYDxNKC7eVGhTXJyh7DYdQpF13Q.roa (hash: QGlq0akFOdxYp0jPfxez742IAGFVAdJ6BpKN9aAo6FU=) 2: PE7pEQuF_d4-tuRGJUG6vDI26Lo.crl (hash: tJDUiMlcYKI02SG9Fu3yndh4QWhPC6vyViuWduqmf9k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft rsync://rpki.ripe.net/repository/DEFAULT/PE7pEQuF_d4-tuRGJUG6vDI26Lo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:d1:f9:40:ce:d8:14:b6:d1:82:a5:1b:7f:5e:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4ee9110b85fdde3eb6e4462541babc3236e8ba Validity Not Before: Dec 26 07:01:57 2025 GMT Not After : Dec 27 07:01:57 2025 GMT Subject: CN=99a22b29379d8c77af44fda21a7a38524c0d36cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a5:2e:29:cb:87:f9:55:ba:2f:70:d2:31:4c: f9:cc:a3:84:f9:70:34:09:d1:cd:a6:df:47:eb:ba: ed:ee:92:73:da:7a:b5:1f:2c:2b:50:86:15:5b:2a: 76:93:e0:fe:3b:2f:76:4d:6f:94:21:9c:3d:59:e4: 97:d9:98:7d:37:02:38:85:8f:7e:f0:db:3c:c1:8f: 60:38:14:cd:0e:56:97:eb:a5:ec:72:15:30:2b:88: 0f:cd:6b:56:ce:1b:6a:ee:58:66:18:ab:39:d6:33: 3c:4f:99:49:84:07:e8:ef:ee:75:28:f2:9e:98:33: f8:be:3b:6f:0d:0b:67:6f:ad:da:e9:cc:45:bd:fa: a4:8a:c8:c9:11:44:af:a8:31:20:9b:14:5d:cc:ef: ea:14:27:f7:a2:6e:14:f8:f9:d3:12:b3:d0:94:0a: ee:d8:34:ee:80:e8:b8:c4:6e:5f:b1:cd:6d:65:d1: 09:47:85:f1:77:f6:11:d5:b6:6c:80:b3:45:08:68: 09:a8:b0:0f:6c:35:3c:d8:b7:b3:5f:dc:a6:68:e9: d6:08:90:13:02:e3:c0:ca:6d:bf:35:fb:3b:49:1c: bc:81:cd:af:5b:0a:8c:15:fc:39:75:01:ad:3d:71: 9f:d2:23:e4:7d:d8:00:f3:0d:6b:c4:45:13:5f:b3: 49:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A2:2B:29:37:9D:8C:77:AF:44:FD:A2:1A:7A:38:52:4C:0D:36:CD X509v3 Authority Key Identifier: keyid:3C:4E:E9:11:0B:85:FD:DE:3E:B6:E4:46:25:41:BA:BC:32:36:E8:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7pEQuF_d4-tuRGJUG6vDI26Lo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:1f:73:e5:43:c4:8e:4f:e4:8d:fe:d9:08:23:0b:0a:c9:d7: 91:ce:d2:0f:3c:f5:a8:18:96:04:3e:98:5e:b3:0e:2c:e1:ca: f4:42:70:d9:cd:1e:45:19:5b:e1:a9:2c:f9:da:42:31:15:11: be:d6:e3:ab:af:ab:c1:1a:0d:8e:ca:a0:0d:8f:88:6c:13:cb: 58:fb:5c:20:2c:8a:bd:8e:e9:ef:93:8f:bc:3b:9d:69:b8:26: 48:82:18:18:b6:ab:6c:06:60:4d:f9:fa:8a:28:ad:ab:7e:3c: 59:ba:7a:85:fb:8f:8f:b2:bd:3c:02:a8:f4:26:29:49:50:fc: 2d:74:c1:1a:0e:4a:d5:0f:d1:a0:22:ef:b2:96:3f:6f:df:d1: 43:34:16:19:47:1d:72:b3:3e:75:f1:06:7d:83:53:2d:b8:6d: da:05:c1:cf:6b:9d:73:33:98:cd:d4:e5:8c:54:4c:2f:9f:4a: 2a:bb:3a:a5:10:4d:be:0e:2b:4e:66:60:f4:9d:1f:2c:ef:15: 71:e7:fc:0b:65:a4:a2:ba:30:1a:35:61:43:74:9a:66:82:2e: 26:2f:f0:ea:65:96:d2:d4:1d:eb:09:2c:e7:5e:b9:a2:bc:43: 90:d1:d0:c6:7f:d3:3a:9e:79:a3:e7:0e:28:04:a0:6e:da:db: c5:31:f1:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdtH5QM7YFLbRgqUbf15BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjNGVlOTExMGI4NWZkZGUzZWI2ZTQ0NjI1NDFiYWJjMzIz NmU4YmEwHhcNMjUxMjI2MDcwMTU3WhcNMjUxMjI3MDcwMTU3WjAzMTEwLwYDVQQD Eyg5OWEyMmIyOTM3OWQ4Yzc3YWY0NGZkYTIxYTdhMzg1MjRjMGQzNmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qUuKcuH+VW6L3DSMUz5zKOE+XA0 CdHNpt9H67rt7pJz2nq1HywrUIYVWyp2k+D+Oy92TW+UIZw9WeSX2Zh9NwI4hY9+ 8Ns8wY9gOBTNDlaX66XschUwK4gPzWtWzhtq7lhmGKs51jM8T5lJhAfo7+51KPKe mDP4vjtvDQtnb63a6cxFvfqkisjJEUSvqDEgmxRdzO/qFCf3om4U+PnTErPQlAru 2DTugOi4xG5fsc1tZdEJR4Xxd/YR1bZsgLNFCGgJqLAPbDU82LezX9ymaOnWCJAT AuPAym2/Nfs7SRy8gc2vWwqMFfw5dQGtPXGf0iPkfdgA8w1rxEUTX7NJzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJmiKyk3nYx3r0T9ohp6OFJMDTbNMB8GA1UdIwQY MBaAFDxO6RELhf3ePrbkRiVBurwyNui6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEU3cEVRdUZfZDQtdHVSR0pVRzZ2REkyNkxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9kZDE4ZDAtZDFhMi00NmQ0LTg0NjQt Yzk0YThmMmUzMjMwLzEvUEU3cEVRdUZfZDQtdHVSR0pVRzZ2REkyNkxvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9kZDE4ZDAtZDFhMi00NmQ0LTg0NjQtYzk0YThmMmUzMjMw LzEvUEU3cEVRdUZfZDQtdHVSR0pVRzZ2REkyNkxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtB9z5UPE jk/kjf7ZCCMLCsnXkc7SDzz1qBiWBD6YXrMOLOHK9EJw2c0eRRlb4aks+dpCMRUR vtbjq6+rwRoNjsqgDY+IbBPLWPtcICyKvY7p75OPvDudabgmSIIYGLarbAZgTfn6 iiitq348Wbp6hfuPj7K9PAKo9CYpSVD8LXTBGg5K1Q/RoCLvspY/b9/RQzQWGUcd crM+dfEGfYNTLbht2gXBz2udczOYzdTljFRML59KKrs6pRBNvg4rTmZg9J0fLO8V cef8C2WkorowGjVhQ3SaZoIuJi/w6mWW0tQd6wks5165orxDkNHQxn/TOp55o+cO KASgbtrbxTHxdg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:44:24 2025 by rpki-client