This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft File: PDULqC8_61ruKJOPvxsJweL9GbQ.mft (raw, json) Hash identifier: VnsnPVRSyUvp12z3hoYx05tHcnxDNnqLAneV049D2oo= Subject key identifier: D4:0C:64:AC:23:BE:4B:E3:29:97:1F:95:A1:95:D0:97:4D:9D:1A:01 Authority key identifier: 3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4 Certificate issuer: /CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4 Certificate serial: 019B1CF30779F1532AD02598709DCD889639 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft Manifest number: 1778 Signing time: Sun 14 Dec 2025 13:00:47 +0000 Manifest this update: Sun 14 Dec 2025 13:00:47 +0000 Manifest next update: Mon 15 Dec 2025 13:00:47 +0000 Files and hashes: 1: 1-Csr3W7RFkTtbpc5vegpM0x3SJg.roa (hash: OEps/3ayuoO5bERjIwyI74TPDpt1ijmiHI+Ru4dOW1I=) 2: PDULqC8_61ruKJOPvxsJweL9GbQ.crl (hash: EUILsJ0fz/dRQEN8618umg4ocOxoJBWBskmh1X4QiPY=) 3: aI9PtDrL1wGCUURcBpHMKfTf4hE.roa (hash: 4oSaxJpQHFX+hBtLYICwFPgrE4wCzYMHUMuoAxfYBXE=) 4: j6dQ2cjzXA3192uDTyOAiZGLE8Q.roa (hash: b9/CxQNUb4cLntaVBU/KEYsxwEObm97HgDwZmznQiH0=) 5: jyPlSfMwE97ShJiNEree4W-YnKc.roa (hash: RPRkI69AUdx22PSRgMKu/d39p+trzoeOCprFB1jyo6s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:f3:07:79:f1:53:2a:d0:25:98:70:9d:cd:88:96:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4 Validity Not Before: Dec 14 13:00:47 2025 GMT Not After : Dec 15 13:00:47 2025 GMT Subject: CN=d40c64ac23be4be329971f95a195d0974d9d1a01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:20:60:6c:2d:74:45:83:3a:06:d5:03:f1:f8: 23:e7:35:a6:5b:8c:fe:8b:91:19:3e:3f:6e:e5:11: 00:78:b1:89:1f:82:bc:c7:f4:65:2b:45:58:15:ab: 07:3d:d2:92:d8:03:cd:ed:17:44:1c:fb:aa:5a:91: 44:06:fd:72:5f:74:57:81:ed:5c:94:4f:9a:ce:77: e8:40:c7:e9:10:7e:b4:3f:9a:c3:a3:7f:eb:89:18: 4b:e2:c5:62:b4:6e:0c:07:2b:2a:8c:62:50:e7:19: cf:7b:2c:10:0f:23:fd:e7:bc:b4:37:27:12:c7:78: 8f:c4:3a:9f:d7:af:ab:7b:51:ef:d6:92:49:8e:98: c1:78:20:b7:cf:ba:51:aa:ec:41:de:11:25:f3:fd: 76:a2:2b:82:a0:92:d4:e2:70:67:8d:9e:4a:0b:13: ed:f6:97:bf:63:e0:96:64:4a:2e:ec:1e:a6:c7:b8: 75:6b:ad:da:f5:87:3a:3c:a7:23:96:85:c1:de:a1: 20:b1:52:30:1b:77:8d:49:2f:6a:1e:78:8b:55:27: f0:36:7e:ed:3d:ad:e1:7a:d4:92:3f:57:7c:0d:2a: e3:bc:87:df:d7:0c:88:a9:01:3c:90:d6:65:61:c1: c7:08:b8:3e:3c:92:25:84:07:9d:5f:8b:02:10:a3: 66:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:0C:64:AC:23:BE:4B:E3:29:97:1F:95:A1:95:D0:97:4D:9D:1A:01 X509v3 Authority Key Identifier: keyid:3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:ec:c8:87:ef:eb:62:26:7f:dc:82:68:11:77:4b:28:ce:2a: 6c:fb:d9:bd:f3:90:c2:58:20:2b:57:7f:89:2d:3b:52:90:4c: 4d:61:9e:59:cb:e8:77:64:f0:e8:f7:21:fd:30:c8:25:a3:82: 62:b9:df:40:1a:3b:2f:50:67:04:56:91:e6:77:45:87:ad:e8: 53:b5:a0:fb:e4:1d:94:4e:b3:2d:1e:ed:b5:d4:2c:b5:73:8f: c6:31:c9:c9:79:85:19:1b:49:f5:12:ed:dc:0b:3e:22:a4:9a: ea:a1:92:dc:37:fd:1f:7b:a0:d2:41:9d:6d:c3:07:33:f0:cb: 7d:6f:a2:89:65:c9:4e:d5:a0:09:e1:bb:80:6e:24:6d:34:19: 1b:a6:ef:82:02:be:91:9e:89:99:54:7e:f3:47:1d:46:69:0c: b4:49:6c:34:60:ea:c6:87:05:d0:fb:bc:0a:2b:0e:87:b0:4a: 86:19:ee:cc:aa:be:29:e8:3a:34:d1:98:78:5c:f3:b8:dc:86: 58:21:bc:68:d9:dd:be:e3:bd:18:a4:90:b4:3a:79:7c:03:e1: f8:c3:98:0a:de:9b:23:70:39:28:ae:1e:3a:56:22:0d:b0:01: 83:af:df:41:e5:7a:a6:e0:70:ff:2d:1d:8f:c5:d9:43:1b:5f: e5:64:09:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsc8wd58VMq0CWYcJ3NiJY5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMzUwYmE4MmYzZmViNWFlZTI4OTM4ZmJmMWIwOWMxZTJm ZDE5YjQwHhcNMjUxMjE0MTMwMDQ3WhcNMjUxMjE1MTMwMDQ3WjAzMTEwLwYDVQQD EyhkNDBjNjRhYzIzYmU0YmUzMjk5NzFmOTVhMTk1ZDA5NzRkOWQxYTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSBgbC10RYM6BtUD8fgj5zWmW4z+ i5EZPj9u5REAeLGJH4K8x/RlK0VYFasHPdKS2APN7RdEHPuqWpFEBv1yX3RXge1c lE+aznfoQMfpEH60P5rDo3/riRhL4sVitG4MBysqjGJQ5xnPeywQDyP957y0NycS x3iPxDqf16+re1Hv1pJJjpjBeCC3z7pRquxB3hEl8/12oiuCoJLU4nBnjZ5KCxPt 9pe/Y+CWZEou7B6mx7h1a63a9Yc6PKcjloXB3qEgsVIwG3eNSS9qHniLVSfwNn7t Pa3hetSSP1d8DSrjvIff1wyIqQE8kNZlYcHHCLg+PJIlhAedX4sCEKNmgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNQMZKwjvkvjKZcflaGV0JdNnRoBMB8GA1UdIwQY MBaAFDw1C6gvP+ta7iiTj78bCcHi/Rm0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUERVTHFDOF82MXJ1S0pPUHZ4c0p3ZUw5R2JRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82NGQ3YTktY2FjMy00NTQ5LWE3YWEt NjFiNzkwMmVlMjA0LzEvUERVTHFDOF82MXJ1S0pPUHZ4c0p3ZUw5R2JRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS82NGQ3YTktY2FjMy00NTQ5LWE3YWEtNjFiNzkwMmVlMjA0 LzEvUERVTHFDOF82MXJ1S0pPUHZ4c0p3ZUw5R2JRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARuzIh+/r YiZ/3IJoEXdLKM4qbPvZvfOQwlggK1d/iS07UpBMTWGeWcvod2Tw6Pch/TDIJaOC YrnfQBo7L1BnBFaR5ndFh63oU7Wg++QdlE6zLR7ttdQstXOPxjHJyXmFGRtJ9RLt 3As+IqSa6qGS3Df9H3ug0kGdbcMHM/DLfW+iiWXJTtWgCeG7gG4kbTQZG6bvggK+ kZ6JmVR+80cdRmkMtElsNGDqxocF0Pu8CisOh7BKhhnuzKq+Keg6NNGYeFzzuNyG WCG8aNndvuO9GKSQtDp5fAPh+MOYCt6bI3A5KK4eOlYiDbABg6/fQeV6puBw/y0d j8XZQxtf5WQJgQ== -----END CERTIFICATE-----Generated at Sun Dec 14 21:35:19 2025 by rpki-client