This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft File: PvMl70y6pmzHH_zGiAh3524Umv0.mft (raw, json) Hash identifier: VXjPxsdnPDfPzX9nFzlvEaB7jFlqLHV0RyikFjZd9HU= Subject key identifier: B5:B4:98:EB:27:4F:32:F0:F0:AF:F3:F4:C0:51:E8:05:6B:03:26:4C Authority key identifier: 3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD Certificate issuer: /CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd Certificate serial: 019B5A1AF1E37856B9B317A6F51C5A23702B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft Manifest number: 179C Signing time: Fri 26 Dec 2025 10:01:13 +0000 Manifest this update: Fri 26 Dec 2025 10:01:13 +0000 Manifest next update: Sat 27 Dec 2025 10:01:13 +0000 Files and hashes: 1: 2dLH0vNFJnWg2lZelybNLzc06cc.roa (hash: r/Z+8xB7CHc6LECAv+vBuRY+QqUaeEKJ5DtFzihx2Zs=) 2: PvMl70y6pmzHH_zGiAh3524Umv0.crl (hash: In2zsA4n7YfhLnwVSBbHWqKFzEezuiAmHmLaTwwBhD4=) 3: THythJBp9HlvhR4Ucra3aB5a1rw.roa (hash: s/hqAL5pfO/TIJ20hhiLhrBaWL37u8uzz5dP4J4SZhw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:f1:e3:78:56:b9:b3:17:a6:f5:1c:5a:23:70:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd Validity Not Before: Dec 26 10:01:13 2025 GMT Not After : Dec 27 10:01:13 2025 GMT Subject: CN=b5b498eb274f32f0f0aff3f4c051e8056b03264c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:65:cb:c1:64:01:53:39:70:64:78:16:47:cb: 8c:f8:fe:85:6d:9b:c4:02:59:4e:bf:e4:1a:20:10: 5d:ef:f9:a6:1f:49:c3:ee:a1:8c:34:8e:4b:5f:62: c6:4d:50:f9:5a:55:4f:3c:66:74:2e:93:54:aa:4b: 24:b1:63:26:3c:f6:1f:25:a9:2f:e6:75:ae:4a:47: f0:39:9e:9f:34:05:ed:e8:f0:fd:18:4e:91:b4:90: fd:90:4d:d3:01:a2:5a:5a:97:7a:42:9b:97:7b:04: 2d:b0:b4:9f:2b:68:0a:8b:aa:6f:b0:44:65:2a:5d: e4:b2:fd:a0:fb:fe:b5:bc:12:30:aa:32:77:17:03: 14:80:09:73:61:a9:e0:17:3a:14:02:a7:a4:4d:d3: 75:d8:ff:06:10:ea:ae:5c:22:de:79:51:e8:1e:33: b7:c0:a5:8b:b4:53:b8:1f:28:c9:2e:ea:dc:a3:6d: ce:4b:81:53:08:91:dc:ac:4f:30:c8:c9:7e:74:d1: bf:0b:83:ee:29:9a:33:b5:2e:fe:c0:b0:61:d4:70: a9:05:5a:30:d3:cc:72:d1:c9:50:d8:e6:7e:71:f8: 95:fc:ce:e2:06:b4:f7:fd:ec:f2:52:c5:26:16:3b: ab:72:4a:f9:9d:91:f0:ff:aa:0d:8d:c9:c9:0c:f4: a0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B4:98:EB:27:4F:32:F0:F0:AF:F3:F4:C0:51:E8:05:6B:03:26:4C X509v3 Authority Key Identifier: keyid:3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:cd:c2:05:4c:00:66:0c:88:99:b9:cd:49:f6:c0:de:73:53: 35:0e:50:17:be:6e:14:e9:74:47:17:7a:65:86:91:7b:65:44: 60:ec:68:64:8d:67:86:1b:8a:ea:be:49:24:bb:f1:e4:69:47: 37:65:62:12:84:98:83:31:4d:5f:df:3c:0e:e0:69:96:82:ed: 8e:d8:c4:d4:84:0d:13:fc:7d:77:da:89:fc:37:79:0f:28:17: 20:36:8e:01:ed:04:d7:e0:32:12:24:1d:45:e7:c8:ab:54:29: 85:a5:97:56:79:c4:c8:5e:5c:a6:5e:01:d4:04:ee:f6:5b:26: eb:ac:9c:ac:ac:0f:8e:4b:f5:58:2a:ae:59:1e:d1:bc:76:d5: dd:d3:97:88:db:00:ee:45:ed:54:34:95:45:b6:74:2a:50:8c: 0f:27:b1:a7:55:31:9d:7a:d9:56:ba:ac:59:c4:9d:8e:9c:c0: 48:31:0f:06:88:8e:e8:33:5e:07:74:88:3a:aa:09:82:50:45: da:1c:1c:28:fc:bc:a2:87:8b:a8:8e:f3:08:45:f6:7a:06:a6: c0:ce:d9:1a:5f:fc:17:07:34:1d:da:0c:a6:55:c9:0d:93:16: de:0c:09:98:3b:fe:f2:e9:47:5f:07:5c:13:5c:ae:3d:2b:54: 2b:2d:42:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGvHjeFa5sxem9RxaI3ArMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZjMyNWVmNGNiYWE2NmNjNzFmZmNjNjg4MDg3N2U3NmUx NDlhZmQwHhcNMjUxMjI2MTAwMTEzWhcNMjUxMjI3MTAwMTEzWjAzMTEwLwYDVQQD EyhiNWI0OThlYjI3NGYzMmYwZjBhZmYzZjRjMDUxZTgwNTZiMDMyNjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmXLwWQBUzlwZHgWR8uM+P6FbZvE AllOv+QaIBBd7/mmH0nD7qGMNI5LX2LGTVD5WlVPPGZ0LpNUqksksWMmPPYfJakv 5nWuSkfwOZ6fNAXt6PD9GE6RtJD9kE3TAaJaWpd6QpuXewQtsLSfK2gKi6pvsERl Kl3ksv2g+/61vBIwqjJ3FwMUgAlzYangFzoUAqekTdN12P8GEOquXCLeeVHoHjO3 wKWLtFO4HyjJLurco23OS4FTCJHcrE8wyMl+dNG/C4PuKZoztS7+wLBh1HCpBVow 08xy0clQ2OZ+cfiV/M7iBrT3/ezyUsUmFjurckr5nZHw/6oNjcnJDPSglQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLW0mOsnTzLw8K/z9MBR6AVrAyZMMB8GA1UdIwQY MBaAFD7zJe9MuqZsxx/8xogId+duFJr9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHZNbDcweTZwbXpISF96R2lBaDM1MjRVbXYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80ZmQwOTAtNmZhZS00YTZhLThmOWUt MzRkNzE0ODVjNTQ3LzEvUHZNbDcweTZwbXpISF96R2lBaDM1MjRVbXYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS80ZmQwOTAtNmZhZS00YTZhLThmOWUtMzRkNzE0ODVjNTQ3 LzEvUHZNbDcweTZwbXpISF96R2lBaDM1MjRVbXYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm83CBUwA ZgyImbnNSfbA3nNTNQ5QF75uFOl0Rxd6ZYaRe2VEYOxoZI1nhhuK6r5JJLvx5GlH N2ViEoSYgzFNX988DuBploLtjtjE1IQNE/x9d9qJ/Dd5DygXIDaOAe0E1+AyEiQd RefIq1QphaWXVnnEyF5cpl4B1ATu9lsm66ycrKwPjkv1WCquWR7RvHbV3dOXiNsA 7kXtVDSVRbZ0KlCMDyexp1UxnXrZVrqsWcSdjpzASDEPBoiO6DNeB3SIOqoJglBF 2hwcKPy8ooeLqI7zCEX2egamwM7ZGl/8Fwc0HdoMplXJDZMW3gwJmDv+8ulHXwdc E1yuPStUKy1CFw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:26 2025 by rpki-client