This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft File: PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft (raw, json) Hash identifier: Clv3kD+8Jr/dwkJ3zMRaIinpOhIl/lEb5pRm+cNOQnQ= Subject key identifier: CD:E1:FA:8E:02:2A:C8:85:F1:9F:82:8E:CB:80:CF:7C:AA:84:0F:3F Authority key identifier: 3E:E0:21:4C:60:9C:6C:D6:78:03:AC:7C:73:6E:F8:DA:51:7C:A5:9D Certificate issuer: /CN=3ee0214c609c6cd67803ac7c736ef8da517ca59d Certificate serial: 019B59E3B023EDC37CC65A0FDCCE5A21F6C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft Manifest number: 0210 Signing time: Fri 26 Dec 2025 09:00:52 +0000 Manifest this update: Fri 26 Dec 2025 09:00:52 +0000 Manifest next update: Sat 27 Dec 2025 09:00:52 +0000 Files and hashes: 1: PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl (hash: TdZWlbeGP0ZIAm7Hbrl24xdMDc0+Jl0Nfe5Iqg+9Jn4=) 2: mTUK0_cMYs_FlNXkmrwcNZ-A9WU.roa (hash: vFAKDgKtbcMdQ9fcPL7goyOKxpH3iASXmuoUDIoP9TQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:b0:23:ed:c3:7c:c6:5a:0f:dc:ce:5a:21:f6:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee0214c609c6cd67803ac7c736ef8da517ca59d Validity Not Before: Dec 26 09:00:52 2025 GMT Not After : Dec 27 09:00:52 2025 GMT Subject: CN=cde1fa8e022ac885f19f828ecb80cf7caa840f3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:19:6f:b3:89:b6:bf:1d:7e:db:ff:0f:61:f4: f8:6f:f7:4b:d6:b0:0e:c2:d9:6e:7f:68:4c:a9:dc: 6a:73:c0:e7:15:5b:f2:81:ce:a5:43:42:5d:a2:2f: 94:be:0a:4c:32:dd:ea:69:d5:5f:f9:03:f1:54:1c: d4:24:b1:0b:17:38:35:f2:2e:2e:4c:03:79:fb:4c: 97:90:c3:fc:e0:53:f6:0b:55:d8:5a:8f:df:e0:84: 9d:12:50:ea:1a:bd:e9:f2:c7:8a:b1:ff:dd:a6:ee: ab:e3:22:90:46:76:11:fa:20:c2:72:6a:09:d3:ab: d4:f3:99:3b:22:01:a2:f4:70:0e:ea:21:ae:71:68: 6e:28:0c:3d:f1:c7:c5:25:84:02:c8:d1:b0:a3:a6: 61:44:69:74:b9:7f:a3:6b:9d:34:7b:b3:f7:d0:12: 72:34:d6:ee:36:6a:15:c3:3b:93:ed:43:d8:41:c3: 2b:4e:8d:9d:a7:56:f6:44:84:c4:0b:1b:c9:95:a3: da:95:44:f1:ba:07:13:ac:13:b1:73:9e:8b:8f:44: 74:49:cb:e0:91:17:cf:b4:0e:ab:d9:1d:ad:66:a1: 63:36:c6:fc:41:b4:12:57:05:88:47:5d:cd:cc:1b: 20:d0:1f:16:a7:95:76:ee:58:ec:d7:10:fd:c6:72: 7e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E1:FA:8E:02:2A:C8:85:F1:9F:82:8E:CB:80:CF:7C:AA:84:0F:3F X509v3 Authority Key Identifier: keyid:3E:E0:21:4C:60:9C:6C:D6:78:03:AC:7C:73:6E:F8:DA:51:7C:A5:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:ff:32:27:7d:d0:8e:84:93:b9:ac:dc:1b:ed:36:f9:03:b0: fd:c8:12:06:d1:98:57:4f:88:e2:cc:2a:26:6b:cc:cb:c1:33: 63:4e:c3:f5:79:85:bb:ca:48:fe:19:72:85:32:c2:47:d4:50: 3b:da:ed:13:70:f0:91:0b:ea:5a:4f:3f:93:1d:fc:89:14:ca: 8f:9a:1d:7b:f4:3c:b3:14:f3:02:ef:f7:dd:c1:76:04:1b:88: ee:67:31:3b:5a:26:d7:65:f4:0a:eb:b7:a4:82:4d:7a:84:34: 8e:19:5a:df:2f:49:ca:d5:01:35:bc:e9:08:45:ab:e4:e7:8a: 9d:72:6c:27:02:38:c0:4f:88:2c:b3:a4:28:41:af:94:08:78: 8f:8a:57:d4:b5:4b:15:7b:bc:c8:17:29:d8:60:3c:eb:ef:02: 77:28:5c:57:15:81:68:49:a6:66:5b:f0:58:d0:94:4d:ce:59: 28:3a:41:26:72:2e:00:23:be:52:31:3f:9c:c6:5a:cb:0e:e3: 3b:41:c1:1e:8e:a9:32:30:c6:3d:be:99:c5:e0:24:63:6e:40: 1b:90:6d:f4:d3:cd:43:2f:98:0f:43:85:23:f8:2e:df:0e:69: a8:d7:7d:f9:de:fc:fd:99:dc:f2:f3:0b:c7:fe:4d:ca:57:d6: a4:5f:0c:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ47Aj7cN8xloP3M5aIfbHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZTAyMTRjNjA5YzZjZDY3ODAzYWM3YzczNmVmOGRhNTE3 Y2E1OWQwHhcNMjUxMjI2MDkwMDUyWhcNMjUxMjI3MDkwMDUyWjAzMTEwLwYDVQQD EyhjZGUxZmE4ZTAyMmFjODg1ZjE5ZjgyOGVjYjgwY2Y3Y2FhODQwZjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRlvs4m2vx1+2/8PYfT4b/dL1rAO wtluf2hMqdxqc8DnFVvygc6lQ0Jdoi+UvgpMMt3qadVf+QPxVBzUJLELFzg18i4u TAN5+0yXkMP84FP2C1XYWo/f4ISdElDqGr3p8seKsf/dpu6r4yKQRnYR+iDCcmoJ 06vU85k7IgGi9HAO6iGucWhuKAw98cfFJYQCyNGwo6ZhRGl0uX+ja500e7P30BJy NNbuNmoVwzuT7UPYQcMrTo2dp1b2RITECxvJlaPalUTxugcTrBOxc56Lj0R0Scvg kRfPtA6r2R2tZqFjNsb8QbQSVwWIR13NzBsg0B8Wp5V27ljs1xD9xnJ+rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM3h+o4CKsiF8Z+CjsuAz3yqhA8/MB8GA1UdIwQY MBaAFD7gIUxgnGzWeAOsfHNu+NpRfKWdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHVBaFRHQ2NiTlo0QTZ4OGMyNzQybEY4cFowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8yZTZlZTMtODE1OC00NThlLWEwYWMt YWU4MWVkYzZmYmQ3LzEvUHVBaFRHQ2NiTlo0QTZ4OGMyNzQybEY4cFowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS8yZTZlZTMtODE1OC00NThlLWEwYWMtYWU4MWVkYzZmYmQ3 LzEvUHVBaFRHQ2NiTlo0QTZ4OGMyNzQybEY4cFowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYf8yJ33Q joSTuazcG+02+QOw/cgSBtGYV0+I4swqJmvMy8EzY07D9XmFu8pI/hlyhTLCR9RQ O9rtE3DwkQvqWk8/kx38iRTKj5ode/Q8sxTzAu/33cF2BBuI7mcxO1om12X0Cuu3 pIJNeoQ0jhla3y9JytUBNbzpCEWr5OeKnXJsJwI4wE+ILLOkKEGvlAh4j4pX1LVL FXu8yBcp2GA86+8CdyhcVxWBaEmmZlvwWNCUTc5ZKDpBJnIuACO+UjE/nMZayw7j O0HBHo6pMjDGPb6ZxeAkY25AG5Bt9NPNQy+YD0OFI/gu3w5pqNd9+d78/Znc8vML x/5NylfWpF8MhA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:01:02 2025 by rpki-client