This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft File: peC5TwtOTIRu-c8nzciBEIdrHPM.mft (raw, json) Hash identifier: UoAxq3d26RFZOV68T7+pKmpME7XRCLvR8SoXWNwh7gQ= Subject key identifier: 3C:AC:4F:AE:D1:3B:54:29:98:A0:70:CD:C8:B7:79:7E:B7:9E:64:14 Authority key identifier: A5:E0:B9:4F:0B:4E:4C:84:6E:F9:CF:27:CD:C8:81:10:87:6B:1C:F3 Certificate issuer: /CN=a5e0b94f0b4e4c846ef9cf27cdc88110876b1cf3 Certificate serial: 019B07EBDCE2891726492263E3B1776DE262 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft Manifest number: 176F Signing time: Wed 10 Dec 2025 11:00:56 +0000 Manifest this update: Wed 10 Dec 2025 11:00:56 +0000 Manifest next update: Thu 11 Dec 2025 11:00:56 +0000 Files and hashes: 1: h7eLMCHte9yG-YlFcanGWeY98cc.roa (hash: XK6lpwQoOO2MYAb/MpQPPdSt14GbrWEwi/jo8t+GYvc=) 2: peC5TwtOTIRu-c8nzciBEIdrHPM.crl (hash: qg/Y177dHUxx4FmPcDp9Ol9HYSMV3XG+ZV6PCQSyNok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:eb:dc:e2:89:17:26:49:22:63:e3:b1:77:6d:e2:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5e0b94f0b4e4c846ef9cf27cdc88110876b1cf3 Validity Not Before: Dec 10 11:00:56 2025 GMT Not After : Dec 11 11:00:56 2025 GMT Subject: CN=3cac4faed13b542998a070cdc8b7797eb79e6414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:81:50:93:d3:03:e2:d8:5e:e8:3f:7f:05:a2: 94:46:0c:fa:cd:11:b6:44:6c:76:23:4e:ff:07:a7: bc:ec:4c:bf:c0:07:44:5c:ab:df:f4:55:09:9a:4e: 38:de:b9:8e:f0:c7:48:08:58:8e:b5:6d:97:40:ec: 97:66:b6:00:74:e0:da:b5:b2:fe:cb:f4:09:89:14: 11:c3:61:82:75:40:84:7e:83:34:03:b8:37:ee:5b: 06:c9:fd:40:49:83:30:f3:1c:7b:ec:76:2f:91:c2: c7:1f:fd:2a:2e:60:49:83:73:40:54:b9:1d:16:e5: ae:d7:99:71:91:33:74:32:43:de:ba:64:85:16:3b: f8:90:df:02:ed:d2:32:a3:94:ae:70:ac:c7:2f:15: 75:b9:cc:88:39:66:d7:08:8d:04:18:2f:a1:c2:b1: 14:58:8c:aa:e1:4b:6b:ac:77:3c:6e:98:8e:60:dc: f9:b1:ab:60:be:14:42:9d:8b:ea:96:6f:87:23:18: 79:f4:88:82:28:ed:4a:7b:ad:83:0c:c7:a8:ef:d9: 67:53:06:58:66:03:91:39:92:ea:0a:c7:de:2f:42: aa:f1:9e:40:c0:2e:af:73:16:ec:8d:d3:c0:52:d5: c3:87:21:21:6b:45:cd:c7:cf:1f:45:38:86:38:c2: 2d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:AC:4F:AE:D1:3B:54:29:98:A0:70:CD:C8:B7:79:7E:B7:9E:64:14 X509v3 Authority Key Identifier: keyid:A5:E0:B9:4F:0B:4E:4C:84:6E:F9:CF:27:CD:C8:81:10:87:6B:1C:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:1e:63:4d:ce:39:8e:8c:f7:0f:d5:33:56:9f:c6:db:98:17: 67:c4:c3:ac:d4:e1:46:9b:d4:9b:bd:af:5e:a0:d9:50:9e:a2: 6f:cb:0e:b9:51:8a:1e:c5:c5:f7:23:54:bd:e8:1e:20:03:0e: b3:d6:84:5e:31:1c:c7:35:68:05:fa:5a:ae:ee:73:bd:0e:25: 75:c9:f0:63:cd:cb:b5:b5:f9:ff:aa:61:ec:a5:11:a7:69:5c: 8e:4c:f1:ec:7d:af:5b:c8:ed:eb:15:55:0d:2b:a2:0a:4c:70: 3a:fd:85:f6:d7:2e:bb:76:10:ea:c2:3f:7c:d1:cb:52:42:56: 9d:6c:c6:85:20:94:cb:2c:4a:89:7d:a6:99:a1:cb:e7:eb:f2: 9e:19:a0:d3:34:79:48:a3:9f:55:ab:39:65:d8:67:fd:6f:30: 34:4e:b3:6f:88:d8:d4:38:90:a0:c0:54:dc:8a:42:8a:34:b0: fe:00:2f:ae:f7:68:9a:f9:7b:2d:72:27:1e:a6:6f:27:40:2c: 5f:da:68:6c:52:a3:a9:00:64:3d:93:f6:65:5a:94:58:27:51: ee:27:60:aa:38:c6:f8:5a:b6:e7:5e:ad:07:2a:cf:9b:9e:42: 8d:0f:3c:be:e6:ea:55:f0:7c:dd:a8:43:6b:67:fa:19:51:b9: 42:ab:3f:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsH69ziiRcmSSJj47F3beJiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1ZTBiOTRmMGI0ZTRjODQ2ZWY5Y2YyN2NkYzg4MTEwODc2 YjFjZjMwHhcNMjUxMjEwMTEwMDU2WhcNMjUxMjExMTEwMDU2WjAzMTEwLwYDVQQD EygzY2FjNGZhZWQxM2I1NDI5OThhMDcwY2RjOGI3Nzk3ZWI3OWU2NDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4FQk9MD4the6D9/BaKURgz6zRG2 RGx2I07/B6e87Ey/wAdEXKvf9FUJmk443rmO8MdICFiOtW2XQOyXZrYAdODatbL+ y/QJiRQRw2GCdUCEfoM0A7g37lsGyf1ASYMw8xx77HYvkcLHH/0qLmBJg3NAVLkd FuWu15lxkTN0MkPeumSFFjv4kN8C7dIyo5SucKzHLxV1ucyIOWbXCI0EGC+hwrEU WIyq4UtrrHc8bpiOYNz5satgvhRCnYvqlm+HIxh59IiCKO1Ke62DDMeo79lnUwZY ZgOROZLqCsfeL0Kq8Z5AwC6vcxbsjdPAUtXDhyEha0XNx88fRTiGOMItNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDysT67RO1QpmKBwzci3eX63nmQUMB8GA1UdIwQY MBaAFKXguU8LTkyEbvnPJ83IgRCHaxzzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGVDNVR3dE9USVJ1LWM4bnpjaUJFSWRySFBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zODc3MjAtNTc4NC00ZTAzLTgxM2Mt MTNiMjkwNzUwZmI5LzEvcGVDNVR3dE9USVJ1LWM4bnpjaUJFSWRySFBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8zODc3MjAtNTc4NC00ZTAzLTgxM2MtMTNiMjkwNzUwZmI5 LzEvcGVDNVR3dE9USVJ1LWM4bnpjaUJFSWRySFBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAB5jTc45 joz3D9UzVp/G25gXZ8TDrNThRpvUm72vXqDZUJ6ib8sOuVGKHsXF9yNUvegeIAMO s9aEXjEcxzVoBfparu5zvQ4ldcnwY83LtbX5/6ph7KURp2lcjkzx7H2vW8jt6xVV DSuiCkxwOv2F9tcuu3YQ6sI/fNHLUkJWnWzGhSCUyyxKiX2mmaHL5+vynhmg0zR5 SKOfVas5Zdhn/W8wNE6zb4jY1DiQoMBU3IpCijSw/gAvrvdomvl7LXInHqZvJ0As X9pobFKjqQBkPZP2ZVqUWCdR7idgqjjG+Fq2516tByrPm55CjQ88vubqVfB83ahD a2f6GVG5Qqs/2Q== -----END CERTIFICATE-----Generated at Wed Dec 10 18:23:49 2025 by rpki-client