This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft File: PnFWq-5roji5BzFd-cVShlrc2ug.mft (raw, json) Hash identifier: 8lSe+IyqHH8UVON0R9MC4Z718nrSlkUZtF/Tg5L1MtI= Subject key identifier: D8:8F:BB:63:3E:C0:80:31:76:06:C5:8B:E7:E9:C6:7B:95:36:35:D3 Authority key identifier: 3E:71:56:AB:EE:6B:A2:38:B9:07:31:5D:F9:C5:52:86:5A:DC:DA:E8 Certificate issuer: /CN=3e7156abee6ba238b907315df9c552865adcdae8 Certificate serial: 019B0747B365398A8230C3924D444C7BDD6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft Manifest number: 09DE Signing time: Wed 10 Dec 2025 08:01:37 +0000 Manifest this update: Wed 10 Dec 2025 08:01:37 +0000 Manifest next update: Thu 11 Dec 2025 08:01:37 +0000 Files and hashes: 1: DRXIRPlz989IQESya6WStEPwwfI.roa (hash: vzHP7wdlF/pn8v84Pbfgox37vxRmFYAJNGZAwD+DkvA=) 2: PnFWq-5roji5BzFd-cVShlrc2ug.crl (hash: xkPIlzG/vJ++mCgzN/Io+jsK2GJnIrzo9C6UFX/NURg=) 3: QWM4nrBr-pa9JzWD2Zz8wHHbmCU.roa (hash: VKweVNYicugh0mCYY3yIR2LnHnKsWIZPY+G4TQfXJ6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.crl rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:47:b3:65:39:8a:82:30:c3:92:4d:44:4c:7b:dd:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e7156abee6ba238b907315df9c552865adcdae8 Validity Not Before: Dec 10 08:01:37 2025 GMT Not After : Dec 11 08:01:37 2025 GMT Subject: CN=d88fbb633ec080317606c58be7e9c67b953635d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:65:db:fc:71:08:1c:71:85:1a:1b:b4:43:6e: 64:51:87:6b:ea:3e:97:e5:1b:8c:4c:fc:c8:d8:6b: 12:64:46:b5:37:95:92:64:33:bb:ed:c1:fa:bd:bf: a8:51:31:a9:11:ec:d5:d9:73:2f:19:d0:5d:71:bb: f7:fa:d6:03:ae:7f:a4:8b:8e:2b:02:71:5b:37:f8: 22:02:66:29:36:95:3c:c9:d2:62:84:fe:66:73:80: 54:f6:bd:fd:08:6f:2a:21:75:b1:db:c3:b4:65:40: c7:e7:f4:a1:f8:02:ef:b6:69:0b:79:8a:6b:a6:6b: 83:e2:46:11:88:65:33:18:a2:d1:17:a0:34:f1:d8: 57:a7:85:16:4a:ff:e6:85:dc:3f:c0:7c:dc:21:c5: e8:32:73:55:89:0c:d1:f2:13:67:8a:59:f6:dd:b1: 30:b0:40:a0:eb:f2:67:a4:4b:9c:bd:0d:b6:b8:af: 06:92:72:ee:b7:53:ce:1c:e5:1f:88:39:a1:67:41: 69:21:ba:5b:b2:d9:24:a5:d8:30:48:34:4c:62:a5: cb:be:83:22:1d:93:04:03:f8:94:da:46:41:ad:a0: da:f4:b2:04:13:bf:a3:ee:bd:ee:e0:c9:08:01:65: d5:73:c9:04:bf:45:a3:17:b5:bb:bd:60:6f:ee:be: 60:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:8F:BB:63:3E:C0:80:31:76:06:C5:8B:E7:E9:C6:7B:95:36:35:D3 X509v3 Authority Key Identifier: keyid:3E:71:56:AB:EE:6B:A2:38:B9:07:31:5D:F9:C5:52:86:5A:DC:DA:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:f5:3f:c1:3a:53:eb:69:88:57:bc:1d:3b:97:4d:cb:25:ac: 0b:45:25:53:b4:0c:cb:a4:bb:97:cb:fe:39:7b:a0:e3:a7:59: 31:2a:58:94:82:8b:ae:0f:26:24:50:7f:d9:d5:3d:f4:a6:9f: b3:e0:fe:c2:23:0a:a5:11:6a:1a:37:dd:8d:17:d8:94:ac:8f: 6f:51:b7:b8:91:28:b2:ae:a7:39:48:fa:b4:e5:29:fe:92:fa: 4f:94:b3:c5:23:d7:2a:a3:a6:11:b2:37:8a:3a:a8:50:9e:56: 81:e8:0e:11:d0:b8:15:9b:27:84:63:5c:6d:3d:7b:3e:23:52: 58:96:f4:b2:7c:ec:15:ac:f0:fa:8d:b9:c6:1c:bc:a1:bd:08: b1:25:38:4b:2c:32:a9:f6:8e:69:6b:7c:50:17:51:2c:dd:f5: 6d:4d:b5:6e:9e:92:e9:d2:89:86:7a:c0:8b:96:2d:27:80:52: 45:11:68:04:23:03:ba:97:68:50:5d:13:68:27:9d:f4:cb:d4: 71:56:2c:40:bd:1a:78:08:84:cb:69:d2:57:f6:92:8a:36:d5: c5:e6:fb:4c:69:24:1e:65:57:4d:ff:d7:4f:ce:f0:6f:30:98: b1:8b:4a:22:d6:20:34:9c:aa:dc:8e:d7:e7:4a:a9:a7:df:44: d4:1f:c4:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHR7NlOYqCMMOSTURMe91uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNzE1NmFiZWU2YmEyMzhiOTA3MzE1ZGY5YzU1Mjg2NWFk Y2RhZTgwHhcNMjUxMjEwMDgwMTM3WhcNMjUxMjExMDgwMTM3WjAzMTEwLwYDVQQD EyhkODhmYmI2MzNlYzA4MDMxNzYwNmM1OGJlN2U5YzY3Yjk1MzYzNWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2Xb/HEIHHGFGhu0Q25kUYdr6j6X 5RuMTPzI2GsSZEa1N5WSZDO77cH6vb+oUTGpEezV2XMvGdBdcbv3+tYDrn+ki44r AnFbN/giAmYpNpU8ydJihP5mc4BU9r39CG8qIXWx28O0ZUDH5/Sh+ALvtmkLeYpr pmuD4kYRiGUzGKLRF6A08dhXp4UWSv/mhdw/wHzcIcXoMnNViQzR8hNniln23bEw sECg6/JnpEucvQ22uK8GknLut1POHOUfiDmhZ0FpIbpbstkkpdgwSDRMYqXLvoMi HZMEA/iU2kZBraDa9LIEE7+j7r3u4MkIAWXVc8kEv0WjF7W7vWBv7r5g0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNiPu2M+wIAxdgbFi+fpxnuVNjXTMB8GA1UdIwQY MBaAFD5xVqvua6I4uQcxXfnFUoZa3NroMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG5GV3EtNXJvamk1QnpGZC1jVlNobHJjMnVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9hNGEwZjctN2RiZC00YjAzLWI3Zjkt NThmMmQ0NGZmMjgxLzEvUG5GV3EtNXJvamk1QnpGZC1jVlNobHJjMnVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9hNGEwZjctN2RiZC00YjAzLWI3ZjktNThmMmQ0NGZmMjgx LzEvUG5GV3EtNXJvamk1QnpGZC1jVlNobHJjMnVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAevU/wTpT 62mIV7wdO5dNyyWsC0UlU7QMy6S7l8v+OXug46dZMSpYlIKLrg8mJFB/2dU99Kaf s+D+wiMKpRFqGjfdjRfYlKyPb1G3uJEosq6nOUj6tOUp/pL6T5SzxSPXKqOmEbI3 ijqoUJ5WgegOEdC4FZsnhGNcbT17PiNSWJb0snzsFazw+o25xhy8ob0IsSU4Sywy qfaOaWt8UBdRLN31bU21bp6S6dKJhnrAi5YtJ4BSRRFoBCMDupdoUF0TaCed9MvU cVYsQL0aeAiEy2nSV/aSijbVxeb7TGkkHmVXTf/XT87wbzCYsYtKItYgNJyq3I7X 50qpp99E1B/ETw== -----END CERTIFICATE-----Generated at Wed Dec 10 09:23:16 2025 by rpki-client