This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft File: PQSDU4c3RT4vV_-1dJnDki6DY20.mft (raw, json) Hash identifier: GohMKS4pHkNp3EAINpy0UKIVwOl/DWXIFMHCHOvULjM= Subject key identifier: F8:7E:AD:AD:9B:1E:48:5C:F8:C1:F4:7C:45:23:E4:22:20:16:05:FF Authority key identifier: 3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D Certificate issuer: /CN=3d0483538737453e2f57ffb57499c3922e83636d Certificate serial: 019B16F141F2C3940AD9E98F18AA2476517E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft Manifest number: 16A2 Signing time: Sat 13 Dec 2025 09:01:08 +0000 Manifest this update: Sat 13 Dec 2025 09:01:08 +0000 Manifest next update: Sun 14 Dec 2025 09:01:08 +0000 Files and hashes: 1: 09rZaDf9P6R4diZdTpqbdJFmS5g.roa (hash: nJaLySku8ZYvCwVFCoV24PH4wOMxHH06lLCXG71Fdv0=) 2: 2kjnNcqey0OLGfySAKowHBG5Guo.roa (hash: 9jemYzIQoMUwDIBYN/+zDuFoechTYsBGwQpOaXYxFKk=) 3: 8jdJFfwz0f1bOSecP72_M36iRRI.roa (hash: 82Bf1Auf8nRCamjssfldTKSxot7XSbfVdi0kTqeYaRU=) 4: C4Wnra33s7vzTKpZqkw-dbYY55M.roa (hash: hVOornvwVn2Bg/Fh05dDWBnBXCHA01Bg7itlOVetmo0=) 5: OSXtgZFTRCqapZbj1Rss-9P6qbI.roa (hash: AUmjKUojOqL9JzPQrWExZ3cDw/gVJywbQJ3W19HFEWU=) 6: PQSDU4c3RT4vV_-1dJnDki6DY20.crl (hash: cK7A3IpZ/7BEnpX3p1q1cVeTMTEyPp9FbWTwY0UarNk=) 7: _9T_S-kr42TO8YpZQ1p1cNkCs8k.roa (hash: DCwl+cJRNegCixrl6T1943uL08w3GonOBX/1cFtnPHo=) 8: pV07vwevm-8BJLnT3hJuAHpGkJ4.roa (hash: uUXRNFSfG2j7vXcwLg3l6DuZ/886vt2liizx+IzMA7g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 09:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:16:f1:41:f2:c3:94:0a:d9:e9:8f:18:aa:24:76:51:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d0483538737453e2f57ffb57499c3922e83636d Validity Not Before: Dec 13 09:01:08 2025 GMT Not After : Dec 14 09:01:08 2025 GMT Subject: CN=f87eadad9b1e485cf8c1f47c4523e422201605ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:75:dd:c2:08:12:35:1f:f1:b7:45:4e:e8:42: 63:69:63:d7:8d:e6:a2:e6:bd:a0:16:7f:15:23:81: e5:8f:b0:1b:28:38:f9:56:84:7b:ea:28:1d:6e:6a: c0:c1:86:ec:14:cc:9f:93:27:56:b2:9d:fb:74:77: 0c:9d:de:94:14:4e:90:28:4d:7d:89:ab:cb:59:02: 6c:e5:f8:72:f9:3f:5d:30:c3:01:3a:88:ef:86:9f: 2a:34:9b:94:71:e4:69:ee:54:80:d7:83:2d:a6:96: 87:bd:cf:cf:49:5d:6c:29:96:d8:76:c4:8e:35:5d: b9:d5:3c:76:8d:64:48:41:f6:1c:98:7b:85:d2:d8: a5:d4:f8:54:6b:97:bf:6c:0f:3b:65:70:2a:86:b2: 8d:75:b3:65:98:50:78:33:10:92:42:8b:ea:46:3b: 41:bb:62:7a:20:20:62:4b:2d:4d:4b:7d:0e:75:42: ee:75:50:0d:9a:17:9c:2b:07:5b:90:8b:a0:b4:ea: 0c:fb:d6:1d:19:98:f3:49:5b:6d:1f:22:81:de:01: 56:15:d0:8a:fe:2a:92:a0:57:e3:55:f0:ae:5b:ad: 4c:10:90:31:d2:b5:4a:31:ba:c5:a6:7d:df:4b:3a: b8:fe:e8:99:0a:24:e3:ea:25:79:f9:b2:4e:cb:6a: 16:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:7E:AD:AD:9B:1E:48:5C:F8:C1:F4:7C:45:23:E4:22:20:16:05:FF X509v3 Authority Key Identifier: keyid:3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:88:48:41:62:d1:93:fd:78:ab:ab:3b:a8:12:ab:99:08:6f: 8a:5a:fe:5a:e4:ed:08:cf:64:2d:5a:49:ef:7a:30:4a:bc:38: b8:42:64:97:73:9f:cf:06:96:13:e7:9e:2c:ff:91:f8:98:96: 9b:67:bf:56:fb:9e:07:e0:31:00:88:4c:10:27:22:04:e8:be: 09:dc:82:46:bf:56:1a:1b:42:f7:d7:30:12:05:f6:8e:ff:16: 26:ef:f1:06:f1:f9:9a:8c:c4:96:26:f5:40:09:58:06:39:7d: 45:f0:83:39:7e:97:4d:9a:8e:95:9d:2f:7a:73:8e:de:54:44: 8c:f8:a3:14:8f:5c:2c:c2:bf:4b:8a:e3:25:eb:51:ef:a3:d3: 7e:83:39:40:6e:08:f6:c8:f2:b4:03:7a:14:f0:61:58:6c:52: 34:88:d9:d3:06:c4:07:1b:3d:a4:14:73:0b:0f:2c:86:d4:b5: 39:1b:f1:c2:6a:59:6d:47:e5:4a:86:63:d9:a5:82:44:12:86: fc:d6:3b:fb:15:46:40:7c:26:57:08:b8:3f:7c:e0:2c:63:86: 83:39:c0:69:8d:09:d4:fa:39:72:9c:4f:5f:a3:00:b5:a0:82: ad:07:b6:14:2d:95:15:08:65:23:30:f6:59:2a:67:01:bf:10: 48:e5:14:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsW8UHyw5QK2emPGKokdlF+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkMDQ4MzUzODczNzQ1M2UyZjU3ZmZiNTc0OTljMzkyMmU4 MzYzNmQwHhcNMjUxMjEzMDkwMTA4WhcNMjUxMjE0MDkwMTA4WjAzMTEwLwYDVQQD EyhmODdlYWRhZDliMWU0ODVjZjhjMWY0N2M0NTIzZTQyMjIwMTYwNWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nXdwggSNR/xt0VO6EJjaWPXjeai 5r2gFn8VI4Hlj7AbKDj5VoR76igdbmrAwYbsFMyfkydWsp37dHcMnd6UFE6QKE19 iavLWQJs5fhy+T9dMMMBOojvhp8qNJuUceRp7lSA14MtppaHvc/PSV1sKZbYdsSO NV251Tx2jWRIQfYcmHuF0til1PhUa5e/bA87ZXAqhrKNdbNlmFB4MxCSQovqRjtB u2J6ICBiSy1NS30OdULudVANmhecKwdbkIugtOoM+9YdGZjzSVttHyKB3gFWFdCK /iqSoFfjVfCuW61MEJAx0rVKMbrFpn3fSzq4/uiZCiTj6iV5+bJOy2oWJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPh+ra2bHkhc+MH0fEUj5CIgFgX/MB8GA1UdIwQY MBaAFD0Eg1OHN0U+L1f/tXSZw5Iug2NtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFFTRFU0YzNSVDR2Vl8tMWRKbkRraTZEWTIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9lMTA2YzMtMGIxZi00MDEwLTg2ZjEt NjVhNDZjOGU0MWU5LzEvUFFTRFU0YzNSVDR2Vl8tMWRKbkRraTZEWTIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9lMTA2YzMtMGIxZi00MDEwLTg2ZjEtNjVhNDZjOGU0MWU5 LzEvUFFTRFU0YzNSVDR2Vl8tMWRKbkRraTZEWTIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhIhIQWLR k/14q6s7qBKrmQhvilr+WuTtCM9kLVpJ73owSrw4uEJkl3OfzwaWE+eeLP+R+JiW m2e/VvueB+AxAIhMECciBOi+CdyCRr9WGhtC99cwEgX2jv8WJu/xBvH5mozElib1 QAlYBjl9RfCDOX6XTZqOlZ0venOO3lREjPijFI9cLMK/S4rjJetR76PTfoM5QG4I 9sjytAN6FPBhWGxSNIjZ0wbEBxs9pBRzCw8shtS1ORvxwmpZbUflSoZj2aWCRBKG /NY7+xVGQHwmVwi4P3zgLGOGgznAaY0J1Po5cpxPX6MAtaCCrQe2FC2VFQhlIzD2 WSpnAb8QSOUUzw== -----END CERTIFICATE-----Generated at Sat Dec 13 13:55:08 2025 by rpki-client