This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft File: pcEGAjxJWQSwQKy5l49Po7DF4tw.mft (raw, json) Hash identifier: y5vYqi8rj2awrWZURRcqJPO0wMV4XYGdy+Y2bVgvfN4= Subject key identifier: 07:C6:DB:15:96:A4:5A:08:D8:3D:CB:AE:65:98:96:58:84:EA:51:F8 Authority key identifier: A5:C1:06:02:3C:49:59:04:B0:40:AC:B9:97:8F:4F:A3:B0:C5:E2:DC Certificate issuer: /CN=a5c106023c495904b040acb9978f4fa3b0c5e2dc Certificate serial: 019B386A31ECAC9B328CBCA86DEC3B9F0944 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcEGAjxJWQSwQKy5l49Po7DF4tw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft Manifest number: 05B4 Signing time: Fri 19 Dec 2025 21:00:42 +0000 Manifest this update: Fri 19 Dec 2025 21:00:42 +0000 Manifest next update: Sat 20 Dec 2025 21:00:42 +0000 Files and hashes: 1: pcEGAjxJWQSwQKy5l49Po7DF4tw.crl (hash: LrUs8hPM2/Y0waOAGXJAgkMAz/I39akiyfakLEnwM6A=) 2: yTZlHlMAE_3YBA7oQmF4fIZqHOM.roa (hash: lfCvg73z+0fvdagtNm9IPM2kVoIfwTGx2gcIBEuq7Qk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft rsync://rpki.ripe.net/repository/DEFAULT/pcEGAjxJWQSwQKy5l49Po7DF4tw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 21:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:6a:31:ec:ac:9b:32:8c:bc:a8:6d:ec:3b:9f:09:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5c106023c495904b040acb9978f4fa3b0c5e2dc Validity Not Before: Dec 19 21:00:42 2025 GMT Not After : Dec 20 21:00:42 2025 GMT Subject: CN=07c6db1596a45a08d83dcbae6598965884ea51f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:36:ba:f7:99:22:a2:94:23:e2:18:5e:15:61: 23:73:39:30:3e:31:9b:b3:ea:a7:42:09:62:00:cf: 10:df:03:ed:4d:75:d1:29:a9:57:6e:ad:01:81:6a: 55:0d:5f:cb:6e:b4:16:ee:7d:62:05:bc:f9:00:9b: f3:55:fa:f3:3e:52:fa:b3:03:c8:fe:84:50:d1:2e: 55:33:8c:9b:bb:7b:7e:45:02:3d:01:0e:72:e3:08: 5c:b4:40:f1:9c:5a:df:cd:95:7b:4c:77:09:7a:61: 4b:ed:ad:ae:07:7f:25:7a:d9:87:b7:78:f1:4b:19: 0e:4c:26:22:4b:80:6b:ea:f0:0f:02:47:e6:aa:3d: d5:61:a2:44:15:e9:4a:ce:ac:43:21:7b:7e:94:eb: eb:e6:b9:25:02:4f:ed:39:fb:3c:b5:2b:1e:b1:2e: b6:45:70:13:cd:33:50:ef:ce:7d:9e:6f:f4:d3:94: 61:7a:5a:42:13:99:de:29:88:11:bc:01:a3:48:a5: 11:20:f4:1c:9c:41:c9:e2:2c:05:92:97:0a:f0:7b: d8:15:4b:44:dd:51:23:9c:52:d4:6d:a3:af:c6:27: ce:90:a9:df:47:29:84:09:73:f1:c5:01:5c:8e:34: b0:5d:f1:b6:93:85:6a:8d:5e:d0:2d:a1:bc:04:4c: fb:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:C6:DB:15:96:A4:5A:08:D8:3D:CB:AE:65:98:96:58:84:EA:51:F8 X509v3 Authority Key Identifier: keyid:A5:C1:06:02:3C:49:59:04:B0:40:AC:B9:97:8F:4F:A3:B0:C5:E2:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcEGAjxJWQSwQKy5l49Po7DF4tw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:3a:16:c7:42:2d:aa:46:79:02:57:20:25:c7:23:bb:85:06: fa:7f:e4:4b:86:ea:79:62:fe:ba:fb:8d:58:39:5f:ee:24:ce: d3:80:29:7e:df:a3:d9:94:d2:2b:f8:af:d3:e1:f0:69:ba:e7: 53:d8:06:8c:46:0b:02:89:59:e5:99:21:1a:e5:e3:eb:f1:bf: 0a:0e:2b:9f:9b:b9:0d:d1:a1:b5:9c:f3:25:88:d7:3c:b5:81: b3:f8:2e:bd:a0:94:cf:ec:e0:07:99:4e:38:6e:1c:1e:37:53: 59:56:bc:a2:56:51:43:55:ad:fc:b7:43:a6:48:a4:88:76:63: fe:78:6d:0f:f6:66:8e:d6:b0:ff:86:9a:a7:07:a4:52:ae:7a: 02:59:7b:f5:a1:e9:a9:d7:52:9a:4f:9d:84:8e:f8:25:6d:af: 7c:7a:8f:08:e5:d9:ab:b6:95:ee:a1:21:98:00:3a:6a:4c:28: 3e:fd:83:14:77:ac:1b:72:67:f7:c1:40:aa:c1:91:be:4d:8e: c3:a4:d4:07:89:0a:d1:35:5d:eb:72:3d:38:64:c5:bd:4c:1b: d7:5a:0d:07:1b:bb:92:93:23:dc:cc:04:8d:d7:a8:b7:89:90: 61:73:94:62:ce:5a:63:c1:a6:a1:de:11:73:d9:9a:31:fe:c4: 5a:ce:3a:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4ajHsrJsyjLyobew7nwlEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YzEwNjAyM2M0OTU5MDRiMDQwYWNiOTk3OGY0ZmEzYjBj NWUyZGMwHhcNMjUxMjE5MjEwMDQyWhcNMjUxMjIwMjEwMDQyWjAzMTEwLwYDVQQD EygwN2M2ZGIxNTk2YTQ1YTA4ZDgzZGNiYWU2NTk4OTY1ODg0ZWE1MWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTa695kiopQj4hheFWEjczkwPjGb s+qnQgliAM8Q3wPtTXXRKalXbq0BgWpVDV/LbrQW7n1iBbz5AJvzVfrzPlL6swPI /oRQ0S5VM4ybu3t+RQI9AQ5y4whctEDxnFrfzZV7THcJemFL7a2uB38letmHt3jx SxkOTCYiS4Br6vAPAkfmqj3VYaJEFelKzqxDIXt+lOvr5rklAk/tOfs8tSsesS62 RXATzTNQ7859nm/005RhelpCE5neKYgRvAGjSKURIPQcnEHJ4iwFkpcK8HvYFUtE 3VEjnFLUbaOvxifOkKnfRymECXPxxQFcjjSwXfG2k4VqjV7QLaG8BEz7mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAfG2xWWpFoI2D3LrmWYlliE6lH4MB8GA1UdIwQY MBaAFKXBBgI8SVkEsECsuZePT6OwxeLcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGNFR0FqeEpXUVN3UUt5NWw0OVBvN0RGNHR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8wNzAwMzItMGJiMy00MzUyLTg5ZWIt NDkxM2EwY2E3NDA5LzEvcGNFR0FqeEpXUVN3UUt5NWw0OVBvN0RGNHR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8wNzAwMzItMGJiMy00MzUyLTg5ZWItNDkxM2EwY2E3NDA5 LzEvcGNFR0FqeEpXUVN3UUt5NWw0OVBvN0RGNHR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADDoWx0It qkZ5AlcgJccju4UG+n/kS4bqeWL+uvuNWDlf7iTO04Apft+j2ZTSK/iv0+Hwabrn U9gGjEYLAolZ5ZkhGuXj6/G/Cg4rn5u5DdGhtZzzJYjXPLWBs/guvaCUz+zgB5lO OG4cHjdTWVa8olZRQ1Wt/LdDpkikiHZj/nhtD/Zmjtaw/4aapwekUq56All79aHp qddSmk+dhI74JW2vfHqPCOXZq7aV7qEhmAA6akwoPv2DFHesG3Jn98FAqsGRvk2O w6TUB4kK0TVd63I9OGTFvUwb11oNBxu7kpMj3MwEjdeot4mQYXOUYs5aY8Gmod4R c9maMf7EWs46Hw== -----END CERTIFICATE-----Generated at Sat Dec 20 05:30:56 2025 by rpki-client