This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft File: pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft (raw, json) Hash identifier: EQQjwXG4JVBspHZ07JTcPjDRWWNJ5tp2JjMepGITCjE= Subject key identifier: F6:88:E5:3F:85:EB:C9:1E:4F:52:AF:A2:64:B7:B8:D3:08:05:6C:1F Authority key identifier: A5:EC:7F:FD:60:3D:A1:48:92:28:0B:18:37:C3:A0:37:76:35:2D:54 Certificate issuer: /CN=a5ec7ffd603da14892280b1837c3a03776352d54 Certificate serial: 019B5975E35D8900C1B4D427FCA4155DEDB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft Manifest number: 1795 Signing time: Fri 26 Dec 2025 07:00:56 +0000 Manifest this update: Fri 26 Dec 2025 07:00:56 +0000 Manifest next update: Sat 27 Dec 2025 07:00:56 +0000 Files and hashes: 1: pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl (hash: Dm4mz0dV4SE75eNLuLQCQvkQDKbx2Udlx9JlhqDHpYM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:e3:5d:89:00:c1:b4:d4:27:fc:a4:15:5d:ed:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5ec7ffd603da14892280b1837c3a03776352d54 Validity Not Before: Dec 26 07:00:56 2025 GMT Not After : Dec 27 07:00:56 2025 GMT Subject: CN=f688e53f85ebc91e4f52afa264b7b8d308056c1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4c:2f:97:24:e0:15:07:01:ae:1a:b5:29:2a: 9b:2d:cd:91:c5:18:d9:e8:69:0a:1d:37:34:e6:55: 07:ca:5e:9a:b2:80:6f:28:23:c0:42:c5:d0:46:be: 99:a5:f5:fc:08:7a:e1:59:c7:88:9f:22:38:18:a5: c6:bf:97:99:2f:d5:c3:4b:9d:12:82:6f:da:42:a2: 0a:f6:01:bf:aa:c2:21:4c:84:89:7f:1e:ba:d6:6a: 2c:7d:6e:ee:a5:0e:14:8f:41:8d:6b:d5:e3:5d:e1: eb:2f:a7:79:b9:b2:42:88:fe:cb:28:70:6e:1d:a7: 04:ca:d6:ab:d2:73:b0:12:6f:54:39:ba:f2:89:7d: 2a:17:b0:57:78:18:c1:27:78:ff:93:1c:b4:04:9f: ba:ec:e2:c6:b4:54:28:7f:bb:bb:aa:b8:0e:5e:8e: 0c:8d:e2:7d:5a:c1:74:3b:20:2b:2e:fd:89:66:5f: 03:af:cf:bc:18:f6:f0:a1:e6:15:ea:f1:79:e2:73: 73:b6:24:59:67:e6:55:4f:ec:47:9a:5d:4a:be:40: 1b:e3:69:27:1b:54:7c:61:90:71:fa:a2:cd:7f:f5: 9d:e4:ca:ec:11:5e:c9:6a:4d:d8:07:b0:70:30:5d: d8:30:82:36:75:2e:a6:ef:43:87:3c:41:8a:ed:1e: 69:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:88:E5:3F:85:EB:C9:1E:4F:52:AF:A2:64:B7:B8:D3:08:05:6C:1F X509v3 Authority Key Identifier: keyid:A5:EC:7F:FD:60:3D:A1:48:92:28:0B:18:37:C3:A0:37:76:35:2D:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:95:61:c2:5f:b8:8a:74:56:d6:a6:13:38:57:be:6d:52:c3: 83:43:7c:ae:f4:99:14:9c:42:1d:e4:64:9c:e6:b4:2f:c7:89: 92:dd:00:5d:4a:5e:d5:59:e1:08:d8:ef:29:31:4d:02:49:c0: fb:c2:83:0e:c7:39:4e:eb:91:a7:6b:87:88:c1:e7:3d:b3:da: 1e:86:67:e8:4b:89:c1:9e:5a:88:b5:99:d1:56:cc:5c:19:5e: 12:e2:d1:36:6f:fc:e0:d3:3e:eb:d8:94:f7:d4:c5:60:60:16: eb:24:f8:57:f9:53:63:18:a4:e4:b1:14:4f:dc:62:63:6d:ea: 6a:b6:29:a5:bb:f6:05:d0:c8:32:40:6c:c8:18:1c:f4:b2:d6: 5b:a9:9b:02:f6:6d:f2:7d:f6:e2:df:dc:1b:c5:e8:e2:73:e4: 9a:a7:cd:d4:21:d6:06:50:2a:bc:81:ee:98:cf:ea:a9:60:4a: 3c:99:6c:a0:03:36:98:1e:81:ff:bf:15:bf:91:9f:90:80:37: bf:48:dd:e3:a7:8e:79:b0:f6:70:f2:76:22:f0:ef:02:e0:af: 9d:75:9f:46:b9:af:6e:65:5b:e0:c6:a6:83:c8:38:0d:81:69: ce:a5:1b:cf:13:a7:4b:6e:88:4c:59:3c:ed:9d:23:f3:91:a5: 5f:0c:1a:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdeNdiQDBtNQn/KQVXe2xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1ZWM3ZmZkNjAzZGExNDg5MjI4MGIxODM3YzNhMDM3NzYz NTJkNTQwHhcNMjUxMjI2MDcwMDU2WhcNMjUxMjI3MDcwMDU2WjAzMTEwLwYDVQQD EyhmNjg4ZTUzZjg1ZWJjOTFlNGY1MmFmYTI2NGI3YjhkMzA4MDU2YzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkwvlyTgFQcBrhq1KSqbLc2RxRjZ 6GkKHTc05lUHyl6asoBvKCPAQsXQRr6ZpfX8CHrhWceInyI4GKXGv5eZL9XDS50S gm/aQqIK9gG/qsIhTISJfx661mosfW7upQ4Uj0GNa9XjXeHrL6d5ubJCiP7LKHBu HacEytar0nOwEm9UObryiX0qF7BXeBjBJ3j/kxy0BJ+67OLGtFQof7u7qrgOXo4M jeJ9WsF0OyArLv2JZl8Dr8+8GPbwoeYV6vF54nNztiRZZ+ZVT+xHml1KvkAb42kn G1R8YZBx+qLNf/Wd5MrsEV7Jak3YB7BwMF3YMII2dS6m70OHPEGK7R5pjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPaI5T+F68keT1KvomS3uNMIBWwfMB8GA1UdIwQY MBaAFKXsf/1gPaFIkigLGDfDoDd2NS1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGV4X19XQTlvVWlTS0FzWU44T2dOM1kxTFZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS82MjIzNTMtMmJjZi00NTYwLTljYWUt N2RiMjBlNmZjMTFkLzEvcGV4X19XQTlvVWlTS0FzWU44T2dOM1kxTFZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS82MjIzNTMtMmJjZi00NTYwLTljYWUtN2RiMjBlNmZjMTFk LzEvcGV4X19XQTlvVWlTS0FzWU44T2dOM1kxTFZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX5Vhwl+4 inRW1qYTOFe+bVLDg0N8rvSZFJxCHeRknOa0L8eJkt0AXUpe1VnhCNjvKTFNAknA +8KDDsc5TuuRp2uHiMHnPbPaHoZn6EuJwZ5aiLWZ0VbMXBleEuLRNm/84NM+69iU 99TFYGAW6yT4V/lTYxik5LEUT9xiY23qarYppbv2BdDIMkBsyBgc9LLWW6mbAvZt 8n324t/cG8Xo4nPkmqfN1CHWBlAqvIHumM/qqWBKPJlsoAM2mB6B/78Vv5GfkIA3 v0jd46eOebD2cPJ2IvDvAuCvnXWfRrmvbmVb4Mamg8g4DYFpzqUbzxOnS26ITFk8 7Z0j85GlXwwawA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:50 2025 by rpki-client