This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/afc9af-c0d6-41fa-937b-7dcb3907f396/1/PcJAKLjucj8XJvRZUfpc_mteQms.mft File: PcJAKLjucj8XJvRZUfpc_mteQms.mft (raw, json) Hash identifier: PfMwdAIjxRo6PjbQ+5JnySqMOv4QAcvSEOzu2xvlRFU= Subject key identifier: 26:FF:1D:AE:19:1C:44:B4:84:43:B7:78:2B:7F:7A:01:3F:05:DC:68 Authority key identifier: 3D:C2:40:28:B8:EE:72:3F:17:26:F4:59:51:FA:5C:FE:6B:5E:42:6B Certificate issuer: /CN=3dc24028b8ee723f1726f45951fa5cfe6b5e426b Certificate serial: 019B5ABF819BB248D0EF837468BD5FD3ED97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcJAKLjucj8XJvRZUfpc_mteQms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/afc9af-c0d6-41fa-937b-7dcb3907f396/1/PcJAKLjucj8XJvRZUfpc_mteQms.mft Manifest number: 022C Signing time: Fri 26 Dec 2025 13:00:58 +0000 Manifest this update: Fri 26 Dec 2025 13:00:58 +0000 Manifest next update: Sat 27 Dec 2025 13:00:58 +0000 Files and hashes: 1: PcJAKLjucj8XJvRZUfpc_mteQms.crl (hash: xHT3Rbc8xI7k+iiPCkQ0odDUQRgBx30sQCAqn1i1kfQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/afc9af-c0d6-41fa-937b-7dcb3907f396/1/PcJAKLjucj8XJvRZUfpc_mteQms.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/afc9af-c0d6-41fa-937b-7dcb3907f396/1/PcJAKLjucj8XJvRZUfpc_mteQms.mft rsync://rpki.ripe.net/repository/DEFAULT/PcJAKLjucj8XJvRZUfpc_mteQms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:81:9b:b2:48:d0:ef:83:74:68:bd:5f:d3:ed:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3dc24028b8ee723f1726f45951fa5cfe6b5e426b Validity Not Before: Dec 26 13:00:58 2025 GMT Not After : Dec 27 13:00:58 2025 GMT Subject: CN=26ff1dae191c44b48443b7782b7f7a013f05dc68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9b:4c:cd:38:c4:1a:08:ee:0b:35:41:3c:a2: a9:07:66:0c:a3:2b:19:93:cd:d5:f4:e6:6a:a8:bd: a1:21:01:1d:df:3e:d3:ac:37:d6:d7:90:97:24:9c: cf:e3:11:ac:11:78:56:c2:81:f5:c7:1e:81:81:21: 20:3a:29:db:7d:ce:41:cb:88:55:e4:20:72:ab:38: c1:3e:e7:cc:ce:73:bd:51:bb:19:0c:49:b4:bb:be: aa:41:39:c0:ff:bf:c1:63:a8:e9:98:e2:53:45:19: 65:d9:e6:f0:54:94:4e:ae:07:54:be:23:4d:57:e6: aa:c6:ae:b8:6f:22:9c:04:57:8a:f3:c4:f7:f8:c1: d2:be:04:0d:08:16:71:21:86:41:10:fb:c4:c1:04: 59:a2:09:95:10:75:44:80:bc:55:db:3c:01:53:88: ae:86:a8:c6:b4:36:b0:d8:c1:ff:0f:86:46:05:12: 17:0b:a4:d6:7d:0b:b0:dd:c7:12:7e:88:1e:dd:0c: a7:0e:d5:57:3a:47:1d:c6:ce:50:2c:da:ed:dd:31: 03:da:92:58:5b:95:4b:26:14:f1:6e:7e:51:93:eb: e8:d6:ae:d1:be:c5:e2:e3:0e:3c:d5:5e:7a:65:85: 32:d5:40:41:f0:62:6d:a0:2d:e9:7c:67:e2:7d:8b: 1e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:FF:1D:AE:19:1C:44:B4:84:43:B7:78:2B:7F:7A:01:3F:05:DC:68 X509v3 Authority Key Identifier: keyid:3D:C2:40:28:B8:EE:72:3F:17:26:F4:59:51:FA:5C:FE:6B:5E:42:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcJAKLjucj8XJvRZUfpc_mteQms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/afc9af-c0d6-41fa-937b-7dcb3907f396/1/PcJAKLjucj8XJvRZUfpc_mteQms.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/afc9af-c0d6-41fa-937b-7dcb3907f396/1/PcJAKLjucj8XJvRZUfpc_mteQms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:2a:ca:1c:b9:29:0a:53:3b:ac:50:47:75:44:96:d2:6b:14: c0:1c:57:16:47:21:36:08:c4:25:68:db:a7:2f:e4:44:6b:dc: 7b:62:50:95:3d:44:77:78:c4:bf:8b:e6:1c:4b:4f:9d:3a:59: dd:59:ae:c0:4d:33:ae:32:5d:f2:33:53:ec:d8:35:03:de:13: 46:5d:50:b7:d4:90:ff:c9:7d:67:90:49:aa:4d:7c:ec:c7:17: 61:38:69:22:da:5b:ac:10:f5:f3:25:e0:11:de:a7:23:ce:bf: 15:89:5e:31:59:04:9a:7f:27:44:b1:e9:ef:41:2a:d6:4d:c8: f7:9f:28:a2:36:c2:50:46:29:65:c8:aa:23:5b:11:36:4e:00: 31:9c:df:a6:ee:9b:e7:a3:51:91:41:e6:0a:23:26:aa:ea:96: 94:b6:e3:47:70:c7:69:60:e1:0f:06:dd:80:b9:39:61:ef:63: d9:df:b0:ca:43:b9:d2:8f:8d:61:41:d8:10:90:0c:db:cb:b0: fa:3c:8e:f5:11:2c:f2:e7:0c:1c:98:2e:a4:1e:9d:73:e5:7a: c4:60:61:b8:dd:78:06:f7:50:55:71:c1:ad:ad:f0:8e:4d:b0: bb:65:28:92:6f:b2:5a:b0:fd:dc:e6:ca:4e:37:99:27:21:31: 09:88:39:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav4GbskjQ74N0aL1f0+2XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkYzI0MDI4YjhlZTcyM2YxNzI2ZjQ1OTUxZmE1Y2ZlNmI1 ZTQyNmIwHhcNMjUxMjI2MTMwMDU4WhcNMjUxMjI3MTMwMDU4WjAzMTEwLwYDVQQD EygyNmZmMWRhZTE5MWM0NGI0ODQ0M2I3NzgyYjdmN2EwMTNmMDVkYzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzptMzTjEGgjuCzVBPKKpB2YMoysZ k83V9OZqqL2hIQEd3z7TrDfW15CXJJzP4xGsEXhWwoH1xx6BgSEgOinbfc5By4hV 5CByqzjBPufMznO9UbsZDEm0u76qQTnA/7/BY6jpmOJTRRll2ebwVJROrgdUviNN V+aqxq64byKcBFeK88T3+MHSvgQNCBZxIYZBEPvEwQRZogmVEHVEgLxV2zwBU4iu hqjGtDaw2MH/D4ZGBRIXC6TWfQuw3ccSfoge3QynDtVXOkcdxs5QLNrt3TED2pJY W5VLJhTxbn5Rk+vo1q7RvsXi4w481V56ZYUy1UBB8GJtoC3pfGfifYseewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCb/Ha4ZHES0hEO3eCt/egE/BdxoMB8GA1UdIwQY MBaAFD3CQCi47nI/Fyb0WVH6XP5rXkJrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGNKQUtManVjajhYSnZSWlVmcGNfbXRlUW1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9hZmM5YWYtYzBkNi00MWZhLTkzN2It N2RjYjM5MDdmMzk2LzEvUGNKQUtManVjajhYSnZSWlVmcGNfbXRlUW1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9hZmM5YWYtYzBkNi00MWZhLTkzN2ItN2RjYjM5MDdmMzk2 LzEvUGNKQUtManVjajhYSnZSWlVmcGNfbXRlUW1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaSrKHLkp ClM7rFBHdUSW0msUwBxXFkchNgjEJWjbpy/kRGvce2JQlT1Ed3jEv4vmHEtPnTpZ 3VmuwE0zrjJd8jNT7Ng1A94TRl1Qt9SQ/8l9Z5BJqk187McXYThpItpbrBD18yXg Ed6nI86/FYleMVkEmn8nRLHp70Eq1k3I958oojbCUEYpZciqI1sRNk4AMZzfpu6b 56NRkUHmCiMmquqWlLbjR3DHaWDhDwbdgLk5Ye9j2d+wykO50o+NYUHYEJAM28uw +jyO9REs8ucMHJgupB6dc+V6xGBhuN14BvdQVXHBra3wjk2wu2Uokm+yWrD93ObK TjeZJyExCYg54A== -----END CERTIFICATE-----Generated at Fri Dec 26 16:05:57 2025 by rpki-client