This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft File: PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft (raw, json) Hash identifier: 2ljMA00X3m6YJI/8ELbZ6XCoW+V1th+wOmw3mAjmzcc= Subject key identifier: B7:32:F8:7F:1F:8D:1B:D3:CA:6E:CD:13:AB:E0:32:BD:4A:FC:DD:4C Authority key identifier: 3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8 Certificate issuer: /CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8 Certificate serial: 019B085BA6C377A67E16C740442B72AA4887 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft Manifest number: 11AB Signing time: Wed 10 Dec 2025 13:03:02 +0000 Manifest this update: Wed 10 Dec 2025 13:03:02 +0000 Manifest next update: Thu 11 Dec 2025 13:03:02 +0000 Files and hashes: 1: I8U89O9tJpiXMO1-8M-1h4tHDe0.roa (hash: grEqNQsgQL87eOOxL5f7rnMv8IQ+ZhiUxpZ5tEaDHVs=) 2: PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl (hash: QIDXsoAUCNkL3M7m7Sm+8y5c6uhZ5ple5uT7ZP4WY1k=) 3: k0e8XrkRjigLyVCK_c8tyoDjXqU.roa (hash: VlaMdbNDNwgFwQ8MfYZ/SEPVePx9cKrNfoX/5Qh79Ow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:5b:a6:c3:77:a6:7e:16:c7:40:44:2b:72:aa:48:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8 Validity Not Before: Dec 10 13:03:02 2025 GMT Not After : Dec 11 13:03:02 2025 GMT Subject: CN=b732f87f1f8d1bd3ca6ecd13abe032bd4afcdd4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e1:11:40:b2:f9:54:41:c6:28:35:1c:3e:f9: 99:6f:ae:9e:6a:29:4d:b7:76:28:14:cc:63:cb:d9: 0f:87:ea:c2:5f:85:ca:0c:70:50:c3:41:71:bc:29: 81:f7:0a:02:fc:85:c3:1a:03:66:b2:d5:e4:ee:44: 2e:8d:bd:97:76:fe:4a:e0:d7:2a:34:4f:10:d4:ed: b5:49:74:51:d9:f9:a9:42:42:c8:99:91:1e:d3:9c: d9:03:f0:fd:1f:0d:ae:47:81:6f:a8:f7:5d:34:4c: 40:e6:fe:62:89:2f:74:1f:50:3d:cc:21:45:08:53: 9c:27:83:82:13:0f:d5:d1:d2:8d:53:c6:cb:6d:75: 92:57:81:ed:9a:48:5b:65:b0:8b:b1:1e:cd:59:bf: 82:da:5e:52:2f:24:b3:f5:33:9c:b1:64:91:6e:d2: 9d:ac:be:fd:00:2f:67:92:61:05:2a:d2:b8:1a:d9: 9f:d9:7f:63:4c:45:ba:2e:32:8d:c3:61:00:cc:bc: 9f:ca:95:91:04:7b:1c:df:2f:8d:11:22:4b:57:ad: 59:51:73:54:c6:4a:80:cb:07:e5:de:6e:a9:da:2f: a8:0c:5f:3a:83:85:ad:3c:b6:e8:67:d4:bf:86:ce: 96:1e:18:b6:c0:70:99:e3:60:1e:d1:d9:1d:96:65: 8b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:32:F8:7F:1F:8D:1B:D3:CA:6E:CD:13:AB:E0:32:BD:4A:FC:DD:4C X509v3 Authority Key Identifier: keyid:3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:85:a2:d0:7c:fa:2b:3c:2b:ab:ee:bc:b4:32:47:a0:bb:c6: f3:b3:f9:4a:79:14:e9:a2:7c:a1:ee:ec:2c:38:d6:8a:b2:a3: b7:da:2c:7c:09:8b:45:87:66:41:b0:e2:b9:e8:55:20:4b:b7: 7d:cc:47:05:62:28:18:5c:a5:fe:54:7e:0e:4f:6a:cf:cc:d7: 96:a9:cc:a8:b1:3f:45:89:db:5c:cb:83:00:78:62:a0:fe:ba: ba:8e:28:a5:4f:92:5b:59:05:f5:9e:8e:23:1f:aa:3b:04:5c: c2:8e:01:b3:55:30:07:af:37:83:bc:60:c7:5a:90:c7:68:9a: 7a:88:a7:26:b5:fa:5a:8f:e0:69:3d:47:d3:67:a9:74:be:5b: f1:e3:54:76:27:ac:d2:c4:30:83:54:6e:d4:a9:f8:52:90:7b: 86:e7:cf:7c:db:93:c8:56:3f:06:0f:25:c9:44:d1:c8:ab:0e: 21:34:ac:26:28:a7:6a:d8:6e:f3:a8:12:cd:64:41:60:8a:5e: 12:c9:cd:26:e6:43:a6:3e:96:d2:77:41:2c:4e:e0:4f:d2:77: 04:76:ac:07:9b:80:04:d6:94:3a:51:5f:15:11:e3:f1:d9:4f: 81:ae:82:ea:f1:a7:7a:a2:bd:db:40:32:dc:8f:78:56:7a:61: 27:c0:3b:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsIW6bDd6Z+FsdARCtyqkiHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkZmEyOTM2OGM4YmU2OWM4ZWRkNWFhMTkzNTU3ZmNiYTJh NTdlYzgwHhcNMjUxMjEwMTMwMzAyWhcNMjUxMjExMTMwMzAyWjAzMTEwLwYDVQQD EyhiNzMyZjg3ZjFmOGQxYmQzY2E2ZWNkMTNhYmUwMzJiZDRhZmNkZDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uERQLL5VEHGKDUcPvmZb66eailN t3YoFMxjy9kPh+rCX4XKDHBQw0FxvCmB9woC/IXDGgNmstXk7kQujb2Xdv5K4Ncq NE8Q1O21SXRR2fmpQkLImZEe05zZA/D9Hw2uR4FvqPddNExA5v5iiS90H1A9zCFF CFOcJ4OCEw/V0dKNU8bLbXWSV4HtmkhbZbCLsR7NWb+C2l5SLySz9TOcsWSRbtKd rL79AC9nkmEFKtK4Gtmf2X9jTEW6LjKNw2EAzLyfypWRBHsc3y+NESJLV61ZUXNU xkqAywfl3m6p2i+oDF86g4WtPLboZ9S/hs6WHhi2wHCZ42Ae0dkdlmWLGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLcy+H8fjRvTym7NE6vgMr1K/N1MMB8GA1UdIwQY MBaAFD36KTaMi+acjt1aoZNVf8uipX7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGZvcE5veUw1cHlPM1ZxaGsxVl95NktsZnNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8yZDRmN2YtMTZlNy00ZmU2LWExODkt YmQ1OGQwMDIxYTA5LzEvUGZvcE5veUw1cHlPM1ZxaGsxVl95NktsZnNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8yZDRmN2YtMTZlNy00ZmU2LWExODktYmQ1OGQwMDIxYTA5 LzEvUGZvcE5veUw1cHlPM1ZxaGsxVl95NktsZnNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP4Wi0Hz6 Kzwrq+68tDJHoLvG87P5SnkU6aJ8oe7sLDjWirKjt9osfAmLRYdmQbDiuehVIEu3 fcxHBWIoGFyl/lR+Dk9qz8zXlqnMqLE/RYnbXMuDAHhioP66uo4opU+SW1kF9Z6O Ix+qOwRcwo4Bs1UwB683g7xgx1qQx2iaeoinJrX6Wo/gaT1H02epdL5b8eNUdies 0sQwg1Ru1Kn4UpB7hufPfNuTyFY/Bg8lyUTRyKsOITSsJiinathu86gSzWRBYIpe EsnNJuZDpj6W0ndBLE7gT9J3BHasB5uABNaUOlFfFRHj8dlPga6C6vGneqK920Ay 3I94VnphJ8A7ag== -----END CERTIFICATE-----Generated at Wed Dec 10 18:39:20 2025 by rpki-client