This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft File: PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft (raw, json) Hash identifier: sopwvyVfwH4+keQIh0o7Aqaj6VYWeQbTRW5qFPSUkuI= Subject key identifier: 85:F0:85:81:0F:17:21:E5:7B:54:E7:C4:8F:03:B3:F4:09:A6:BC:27 Authority key identifier: 3E:E5:A1:DD:0C:EE:87:4C:06:E1:EA:1F:72:82:7D:97:CB:C6:71:87 Certificate issuer: /CN=3ee5a1dd0cee874c06e1ea1f72827d97cbc67187 Certificate serial: 019B5A517F4A3FBE692CCB9D057774AAD3CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 11:00:48 +0000 Manifest this update: Fri 26 Dec 2025 11:00:48 +0000 Manifest next update: Sat 27 Dec 2025 11:00:48 +0000 Files and hashes: 1: 3Gi7K5otbF8YAPl6ViRUI8XiRNU.roa (hash: aFHAU+eeRwSzWLG9T2U4VKkPQW4ZT7Ys728VZHAX80s=) 2: PuWh3Qzuh0wG4eofcoJ9l8vGcYc.crl (hash: 6NSpHOwkQ2iWaGf/Jwpbye+Afi5Hv+v8eirLEF+XODA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft rsync://rpki.ripe.net/repository/DEFAULT/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:7f:4a:3f:be:69:2c:cb:9d:05:77:74:aa:d3:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee5a1dd0cee874c06e1ea1f72827d97cbc67187 Validity Not Before: Dec 26 11:00:48 2025 GMT Not After : Dec 27 11:00:48 2025 GMT Subject: CN=85f085810f1721e57b54e7c48f03b3f409a6bc27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7b:41:92:8e:4c:a2:ba:21:7d:0f:87:ec:60: e8:8e:98:89:00:40:8c:82:04:50:cb:87:9b:8e:8c: 3d:46:db:2e:ac:f0:f1:7b:91:24:fb:d0:f7:56:65: 2e:45:f1:21:20:2a:11:23:fa:9c:11:12:05:fa:a6: 74:a6:7f:76:f6:55:19:94:a8:80:34:ff:23:46:d7: f0:ff:62:c5:65:5f:e3:c7:cc:0e:fd:cf:8d:f4:9b: 56:49:ff:3d:ac:06:de:1a:ad:fc:41:f1:06:05:e4: 01:4d:b8:53:43:93:17:ae:14:08:46:af:dd:bd:0e: ad:95:5b:82:6b:75:9b:70:ee:8b:2c:8a:84:d7:15: fd:7e:72:7d:eb:53:c3:45:4a:2d:b2:ef:b0:62:8e: c3:1f:c6:50:9a:90:1e:67:5c:af:83:db:c5:ae:bd: 29:1c:3f:eb:91:69:ee:82:44:72:b6:ca:e0:3d:01: cd:a2:c6:ea:12:59:51:db:e1:55:68:e8:65:61:78: e5:09:4c:07:02:a9:f2:9c:da:37:85:b9:71:b3:88: 52:48:59:6f:c9:9a:37:c4:cb:51:56:2e:4c:46:aa: a1:c0:db:ca:a8:73:20:78:f5:bc:2a:9e:3d:0e:a5: cc:19:e4:28:48:b9:19:b3:7e:ee:79:56:fc:17:19: b2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:F0:85:81:0F:17:21:E5:7B:54:E7:C4:8F:03:B3:F4:09:A6:BC:27 X509v3 Authority Key Identifier: keyid:3E:E5:A1:DD:0C:EE:87:4C:06:E1:EA:1F:72:82:7D:97:CB:C6:71:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:45:90:d1:77:12:04:68:0b:94:7c:9c:8e:6a:a1:13:80:40: 37:87:4f:fe:bb:6f:71:ed:65:4a:94:31:c3:e3:4f:9a:a1:89: 6a:9b:30:66:d4:fa:ea:0c:e2:ef:9b:7a:71:a0:e5:88:d1:67: a5:7c:70:12:02:a5:ef:5e:8b:ea:0d:69:1b:4d:5c:55:a3:bc: ff:b5:01:7c:3a:0c:33:45:b8:54:67:fb:fc:fb:2d:5d:04:92: 4c:37:32:61:8b:a4:b1:d0:64:56:2a:39:70:8d:fb:94:85:13: ed:8e:37:ae:96:13:ab:d8:77:27:3b:fb:ad:9f:e5:a2:d4:23: a7:dd:81:c9:57:01:68:a4:dc:b1:55:5c:f2:73:9a:8a:b1:33: 61:2d:72:f1:ad:38:dd:42:33:a0:4b:41:da:7e:46:dc:1b:c5: 41:1e:4f:a6:20:3f:2e:4b:31:9c:fe:b9:5b:d4:35:22:a7:41: be:b5:01:04:86:4f:52:5e:e5:68:24:5a:3a:1c:19:03:d2:d9: 2e:0f:ef:5b:d2:5a:41:aa:38:a1:a6:e8:29:57:e1:a9:20:9c: da:91:52:99:a0:23:b9:d7:94:d9:61:98:2a:73:aa:a1:cb:e5: 6e:ed:44:dd:c4:a8:c2:cd:29:6e:80:df:c2:24:62:bd:2a:92: 35:08:47:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUX9KP75pLMudBXd0qtPNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZTVhMWRkMGNlZTg3NGMwNmUxZWExZjcyODI3ZDk3Y2Jj NjcxODcwHhcNMjUxMjI2MTEwMDQ4WhcNMjUxMjI3MTEwMDQ4WjAzMTEwLwYDVQQD Eyg4NWYwODU4MTBmMTcyMWU1N2I1NGU3YzQ4ZjAzYjNmNDA5YTZiYzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyntBko5MorohfQ+H7GDojpiJAECM ggRQy4ebjow9RtsurPDxe5Ek+9D3VmUuRfEhICoRI/qcERIF+qZ0pn929lUZlKiA NP8jRtfw/2LFZV/jx8wO/c+N9JtWSf89rAbeGq38QfEGBeQBTbhTQ5MXrhQIRq/d vQ6tlVuCa3WbcO6LLIqE1xX9fnJ961PDRUotsu+wYo7DH8ZQmpAeZ1yvg9vFrr0p HD/rkWnugkRytsrgPQHNosbqEllR2+FVaOhlYXjlCUwHAqnynNo3hblxs4hSSFlv yZo3xMtRVi5MRqqhwNvKqHMgePW8Kp49DqXMGeQoSLkZs37ueVb8Fxmy2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIXwhYEPFyHle1TnxI8Ds/QJprwnMB8GA1UdIwQY MBaAFD7lod0M7odMBuHqH3KCfZfLxnGHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHVXaDNRenVoMHdHNGVvZmNvSjlsOHZHY1ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny85NWZmZDktMTlkMy00NTE3LThjNDct YzYxNjYxZDFiNzFiLzEvUHVXaDNRenVoMHdHNGVvZmNvSjlsOHZHY1ljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny85NWZmZDktMTlkMy00NTE3LThjNDctYzYxNjYxZDFiNzFi LzEvUHVXaDNRenVoMHdHNGVvZmNvSjlsOHZHY1ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtEWQ0XcS BGgLlHycjmqhE4BAN4dP/rtvce1lSpQxw+NPmqGJapswZtT66gzi75t6caDliNFn pXxwEgKl716L6g1pG01cVaO8/7UBfDoMM0W4VGf7/PstXQSSTDcyYYuksdBkVio5 cI37lIUT7Y43rpYTq9h3Jzv7rZ/lotQjp92ByVcBaKTcsVVc8nOairEzYS1y8a04 3UIzoEtB2n5G3BvFQR5PpiA/LksxnP65W9Q1IqdBvrUBBIZPUl7laCRaOhwZA9LZ Lg/vW9JaQao4oaboKVfhqSCc2pFSmaAjudeU2WGYKnOqocvlbu1E3cSows0pboDf wiRivSqSNQhH2w== -----END CERTIFICATE-----Generated at Fri Dec 26 21:12:59 2025 by rpki-client