This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft File: PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft (raw, json) Hash identifier: tpeM1oIn97cSi78fBg7hQle9wvKIHJk9pSPkbSpJRsM= Subject key identifier: 61:C3:F5:0C:14:8F:5B:B1:FE:E0:93:86:FD:FE:64:FC:73:F4:2B:71 Authority key identifier: 3C:22:64:3B:A6:A0:EA:EF:57:32:9B:F5:BD:C9:0B:31:C3:86:F8:A7 Certificate issuer: /CN=3c22643ba6a0eaef57329bf5bdc90b31c386f8a7 Certificate serial: 019B59E3580F518535A0735C6191C35D3D57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft Manifest number: 022C Signing time: Fri 26 Dec 2025 09:00:29 +0000 Manifest this update: Fri 26 Dec 2025 09:00:29 +0000 Manifest next update: Sat 27 Dec 2025 09:00:29 +0000 Files and hashes: 1: 1-AcyZzR_rYiM2ehdDTTg0kr4UTw.roa (hash: qHmoXJmRx4dkuxN3uy5t1kjSUTwhuDfIP867Nh4f5Ts=) 2: LbGHBzwRAfceRmxwP2ccsuOGwGU.roa (hash: ZwRIC8Resn0brXABJWxiiw1dDspM+fWK1hVb1pb6YYQ=) 3: PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl (hash: 3e9tw1ewK481p+OZJyx5wyrspQnMK0wtTJcHPOeoTJM=) 4: VjUF6mkOxxkGBT69SzLniaN5UYw.roa (hash: JTMUgsA+g5cqMZGbs8rgNYEsQMEwv0Fop5cCQWjZZZ0=) 5: dUEg2uHl_mzH4Gc59hF0SQlEOPk.roa (hash: FAec0jGTBdqWnGcu6aY23AJJHb4v1uDZ1rxzpmt/9ug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:58:0f:51:85:35:a0:73:5c:61:91:c3:5d:3d:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c22643ba6a0eaef57329bf5bdc90b31c386f8a7 Validity Not Before: Dec 26 09:00:29 2025 GMT Not After : Dec 27 09:00:29 2025 GMT Subject: CN=61c3f50c148f5bb1fee09386fdfe64fc73f42b71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:74:21:12:15:14:3d:4c:38:59:07:d5:00:65: 2a:53:3e:71:e5:3b:a4:ac:d6:1c:47:40:be:0e:b5: dd:07:df:60:40:5e:f0:1b:8f:eb:cf:99:87:f7:c2: e7:ca:6e:ec:af:10:a1:99:df:73:9e:66:91:6c:da: 01:be:46:85:ba:58:3a:d3:7c:6a:6e:2d:3b:f3:ca: 41:a6:99:2c:13:5f:92:37:da:b7:62:51:c1:b4:83: 01:fb:53:81:6c:f6:c7:89:d7:6b:9e:2b:88:1f:87: f6:c6:e8:3b:08:b9:18:d4:dc:23:0b:21:71:da:26: 2f:41:df:2a:e7:89:87:f2:ae:0a:66:70:89:53:a1: 7e:94:04:3b:e1:87:23:d0:ff:87:ca:cc:97:d9:06: 32:8f:ad:49:de:38:01:5a:09:c2:a6:d2:47:15:52: 3f:27:cc:a4:94:8e:b3:91:f7:c3:d8:78:5a:32:ee: b5:4e:f8:26:fd:3b:a0:17:25:ef:e9:a6:1d:32:63: fe:62:00:28:58:d9:4f:a5:4e:b4:22:89:6b:20:39: ea:7e:d1:c8:6c:3a:82:92:b8:e5:d9:3d:e9:e5:3f: 00:bb:5e:aa:c6:c7:d8:5e:a0:22:7f:f8:c1:a3:a1: 64:2e:02:a8:ba:c3:75:c3:0b:34:40:5c:68:32:af: 70:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C3:F5:0C:14:8F:5B:B1:FE:E0:93:86:FD:FE:64:FC:73:F4:2B:71 X509v3 Authority Key Identifier: keyid:3C:22:64:3B:A6:A0:EA:EF:57:32:9B:F5:BD:C9:0B:31:C3:86:F8:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:ab:14:16:5c:c5:d5:df:e2:c8:92:ff:98:ff:86:17:6d:69: db:43:24:c3:0e:ab:17:ce:f8:2b:78:5b:d0:3d:10:19:6d:32: 33:80:08:8f:29:61:b3:78:f9:30:56:48:17:d8:fb:53:5c:d7: 16:af:50:ed:58:7f:5a:78:7d:0b:fa:43:0e:2d:f3:e2:dd:6c: 81:4e:d1:73:a8:a9:10:44:97:03:a9:e9:9e:46:24:40:65:5a: 6e:53:f7:8b:20:d6:4a:59:09:c4:c4:cc:b5:bf:00:db:40:0a: 95:1d:4b:c3:99:b3:71:ca:e9:14:b1:a7:95:48:f8:20:a1:eb: 79:91:a7:91:9c:cb:bc:42:4e:f5:48:3b:49:39:e6:00:cf:46: e7:f0:5f:61:07:ef:fc:2f:88:e1:7f:e4:88:a4:8f:14:08:17: 28:01:c4:7b:c3:72:26:70:2d:10:bd:04:4e:8f:5d:e7:74:d3: 4d:5a:4e:4a:aa:05:6b:b5:01:9f:2b:2e:f3:8c:97:5e:24:ab: 39:1d:73:d3:ce:5f:81:0f:a0:97:75:a6:b2:ab:47:b3:35:b5: ff:1b:93:a4:9a:b0:06:e7:f1:6e:8a:69:bd:4c:1f:af:6a:db: c1:b9:77:82:26:83:88:38:1f:a2:0b:23:95:99:bb:c5:ce:35: dc:4f:23:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ41gPUYU1oHNcYZHDXT1XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMjI2NDNiYTZhMGVhZWY1NzMyOWJmNWJkYzkwYjMxYzM4 NmY4YTcwHhcNMjUxMjI2MDkwMDI5WhcNMjUxMjI3MDkwMDI5WjAzMTEwLwYDVQQD Eyg2MWMzZjUwYzE0OGY1YmIxZmVlMDkzODZmZGZlNjRmYzczZjQyYjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXQhEhUUPUw4WQfVAGUqUz5x5Tuk rNYcR0C+DrXdB99gQF7wG4/rz5mH98Lnym7srxChmd9znmaRbNoBvkaFulg603xq bi0788pBppksE1+SN9q3YlHBtIMB+1OBbPbHiddrniuIH4f2xug7CLkY1NwjCyFx 2iYvQd8q54mH8q4KZnCJU6F+lAQ74Ycj0P+HysyX2QYyj61J3jgBWgnCptJHFVI/ J8yklI6zkffD2HhaMu61Tvgm/TugFyXv6aYdMmP+YgAoWNlPpU60IolrIDnqftHI bDqCkrjl2T3p5T8Au16qxsfYXqAif/jBo6FkLgKousN1wws0QFxoMq9wNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGHD9QwUj1ux/uCThv3+ZPxz9CtxMB8GA1UdIwQY MBaAFDwiZDumoOrvVzKb9b3JCzHDhvinMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUENKa082YWc2dTlYTXB2MXZja0xNY09HLUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83YWVkOTktYTQ3ZC00ZWM3LWI0YzUt ZmExNDg2ZWE3OThjLzEvUENKa082YWc2dTlYTXB2MXZja0xNY09HLUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny83YWVkOTktYTQ3ZC00ZWM3LWI0YzUtZmExNDg2ZWE3OThj LzEvUENKa082YWc2dTlYTXB2MXZja0xNY09HLUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACKsUFlzF 1d/iyJL/mP+GF21p20Mkww6rF874K3hb0D0QGW0yM4AIjylhs3j5MFZIF9j7U1zX Fq9Q7Vh/Wnh9C/pDDi3z4t1sgU7Rc6ipEESXA6npnkYkQGVablP3iyDWSlkJxMTM tb8A20AKlR1Lw5mzccrpFLGnlUj4IKHreZGnkZzLvEJO9Ug7STnmAM9G5/BfYQfv /C+I4X/kiKSPFAgXKAHEe8NyJnAtEL0ETo9d53TTTVpOSqoFa7UBnysu84yXXiSr OR1z085fgQ+gl3WmsqtHszW1/xuTpJqwBufxboppvUwfr2rbwbl3giaDiDgfogsj lZm7xc413E8jgw== -----END CERTIFICATE-----Generated at Fri Dec 26 17:41:24 2025 by rpki-client