This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft File: _PmtqbKLaZf9ocRoqNhpY4QHoLs.mft (raw, json) Hash identifier: e9DFev8XaPqN58X8i2ZFYAUXiCQIMUdw5OTdGY60JFs= Subject key identifier: 80:CB:B3:7B:1D:27:4D:E4:EC:66:41:CA:12:71:0A:21:04:BF:CD:DC Authority key identifier: FC:F9:AD:A9:B2:8B:69:97:FD:A1:C4:68:A8:D8:69:63:84:07:A0:BB Certificate issuer: /CN=fcf9ada9b28b6997fda1c468a8d869638407a0bb Certificate serial: 019B2D0B8C8BF265F5B72B66CB2ADE91D698 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft Manifest number: 1780 Signing time: Wed 17 Dec 2025 16:01:30 +0000 Manifest this update: Wed 17 Dec 2025 16:01:30 +0000 Manifest next update: Thu 18 Dec 2025 16:01:30 +0000 Files and hashes: 1: Le3v2H0wAOnsDtbYpl9GWGKprW8.roa (hash: 3pH+MsH30Kao3JM7UhwFK9NiYfes8F3zq57Gt61L8AQ=) 2: _PmtqbKLaZf9ocRoqNhpY4QHoLs.crl (hash: ZVxfG7uQRQnefiaj1xuXyAQa+sWrm5+lRrVMTlazmfw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:8c:8b:f2:65:f5:b7:2b:66:cb:2a:de:91:d6:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcf9ada9b28b6997fda1c468a8d869638407a0bb Validity Not Before: Dec 17 16:01:30 2025 GMT Not After : Dec 18 16:01:30 2025 GMT Subject: CN=80cbb37b1d274de4ec6641ca12710a2104bfcddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:73:6f:33:f4:8e:02:d9:56:a3:a9:46:46:b2: 6e:bd:98:93:26:5a:b0:48:4f:b2:b2:43:2e:1b:d3: 17:33:71:98:52:9a:62:ca:9b:e5:4e:d9:54:9e:76: 1f:56:73:b3:f1:89:a6:97:ba:53:92:02:1b:53:d2: 94:a4:b3:d6:db:a6:b2:a0:88:a4:00:42:31:38:56: 5e:b1:1c:58:81:04:f8:f8:10:e2:bf:23:23:85:e8: 4f:12:76:97:e7:7e:2f:70:8d:38:48:59:d5:05:bf: 49:f8:e3:d8:52:84:94:6e:0b:8a:70:0a:58:00:b8: f9:ea:9b:fe:e3:97:4c:64:b8:d2:a5:27:bf:76:33: 9d:f7:d6:a7:7b:db:2c:9a:2a:16:41:b6:d1:ae:fb: ce:0d:7b:ed:e4:61:e4:86:54:f0:1d:1a:cf:8c:fb: ca:91:4d:be:06:82:9d:e5:2c:2a:c5:3f:20:f4:4e: 0a:7e:d1:10:cf:30:df:e5:22:94:a7:aa:f8:1b:3b: 6a:68:ef:60:e3:b9:09:8d:3d:67:5a:ab:d8:d8:20: 10:52:ee:00:04:aa:b8:3b:5b:63:4a:24:58:4a:70: 8e:99:51:28:68:86:e7:04:ba:fc:2f:3b:6e:34:e5: ce:01:a4:32:a9:57:c0:d2:d1:2e:3e:b9:da:da:5e: 21:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:CB:B3:7B:1D:27:4D:E4:EC:66:41:CA:12:71:0A:21:04:BF:CD:DC X509v3 Authority Key Identifier: keyid:FC:F9:AD:A9:B2:8B:69:97:FD:A1:C4:68:A8:D8:69:63:84:07:A0:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:42:c6:97:47:7e:cf:01:e4:cf:09:83:d0:fe:85:19:69:a5: d2:51:38:dc:ab:90:ca:b6:20:32:43:f8:ff:23:f1:37:fd:b7: c4:b8:84:20:da:21:62:fa:95:4b:d3:5a:aa:b4:bf:3a:4c:d3: 93:ae:67:28:35:09:d4:28:e8:10:17:a3:92:b1:bf:40:dc:1b: df:96:be:87:4a:ec:f8:6f:6c:1a:91:15:10:f9:36:14:22:04: 0d:ff:28:06:e9:f9:38:9c:09:50:5d:74:24:4b:61:0e:84:64: 73:a6:3f:3a:45:b7:a3:6b:2e:ed:48:2b:d3:01:c9:2c:41:d5: 6f:15:73:0a:84:30:34:9b:ce:28:6f:09:b3:32:4a:5c:60:bc: 44:b5:c9:f7:17:6f:0b:1e:73:78:ea:ed:15:39:77:ce:60:4c: a4:ca:64:e3:a3:ae:07:b5:ae:2e:1f:13:75:2c:1d:4a:8e:59: 24:3a:f5:2e:d1:9a:e9:fe:9c:5f:df:b5:97:9b:e2:8f:8e:56: 5c:01:59:4a:03:22:46:5b:cf:1f:b7:e8:6a:e8:d0:7e:86:b4: 6f:be:5b:51:cf:dd:65:96:e0:3c:c4:03:57:97:62:8d:f8:73: 36:cb:57:74:58:51:57:1e:9a:60:67:f5:c9:90:ba:fa:c7:a8: e4:28:6e:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstC4yL8mX1tytmyyrekdaYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjZjlhZGE5YjI4YjY5OTdmZGExYzQ2OGE4ZDg2OTYzODQw N2EwYmIwHhcNMjUxMjE3MTYwMTMwWhcNMjUxMjE4MTYwMTMwWjAzMTEwLwYDVQQD Eyg4MGNiYjM3YjFkMjc0ZGU0ZWM2NjQxY2ExMjcxMGEyMTA0YmZjZGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHNvM/SOAtlWo6lGRrJuvZiTJlqw SE+yskMuG9MXM3GYUppiypvlTtlUnnYfVnOz8Ymml7pTkgIbU9KUpLPW26ayoIik AEIxOFZesRxYgQT4+BDivyMjhehPEnaX534vcI04SFnVBb9J+OPYUoSUbguKcApY ALj56pv+45dMZLjSpSe/djOd99ane9ssmioWQbbRrvvODXvt5GHkhlTwHRrPjPvK kU2+BoKd5SwqxT8g9E4KftEQzzDf5SKUp6r4GztqaO9g47kJjT1nWqvY2CAQUu4A BKq4O1tjSiRYSnCOmVEoaIbnBLr8LztuNOXOAaQyqVfA0tEuPrna2l4hDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIDLs3sdJ03k7GZByhJxCiEEv83cMB8GA1UdIwQY MBaAFPz5ramyi2mX/aHEaKjYaWOEB6C7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1BtdHFiS0xhWmY5b2NSb3FOaHBZNFFIb0xzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS83YTk2ZDEtY2YxYi00ZjQ3LTkzZWUt MjU5ZmUxNzUwZWViLzEvX1BtdHFiS0xhWmY5b2NSb3FOaHBZNFFIb0xzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS83YTk2ZDEtY2YxYi00ZjQ3LTkzZWUtMjU5ZmUxNzUwZWVi LzEvX1BtdHFiS0xhWmY5b2NSb3FOaHBZNFFIb0xzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaELGl0d+ zwHkzwmD0P6FGWml0lE43KuQyrYgMkP4/yPxN/23xLiEINohYvqVS9NaqrS/OkzT k65nKDUJ1CjoEBejkrG/QNwb35a+h0rs+G9sGpEVEPk2FCIEDf8oBun5OJwJUF10 JEthDoRkc6Y/OkW3o2su7Ugr0wHJLEHVbxVzCoQwNJvOKG8JszJKXGC8RLXJ9xdv Cx5zeOrtFTl3zmBMpMpk46OuB7WuLh8TdSwdSo5ZJDr1LtGa6f6cX9+1l5vij45W XAFZSgMiRlvPH7foaujQfoa0b75bUc/dZZbgPMQDV5dijfhzNstXdFhRVx6aYGf1 yZC6+seo5ChuYQ== -----END CERTIFICATE-----Generated at Wed Dec 17 19:04:53 2025 by rpki-client