This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft File: PcI-io7JOWsbVM_7JxxVdm2UkZk.mft (raw, json) Hash identifier: o/RcAa0OYwayomSxHI8tR7H+NFQMqmuR4CWXbed9tLM= Subject key identifier: A1:59:51:A9:37:D8:10:DA:5F:79:77:7A:56:80:4A:F1:5A:C9:07:93 Authority key identifier: 3D:C2:3E:8A:8E:C9:39:6B:1B:54:CF:FB:27:1C:55:76:6D:94:91:99 Certificate issuer: /CN=3dc23e8a8ec9396b1b54cffb271c55766d949199 Certificate serial: 019B5A889B5FD1871C4523E47CB6563F86E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft Manifest number: 1300 Signing time: Fri 26 Dec 2025 12:01:00 +0000 Manifest this update: Fri 26 Dec 2025 12:01:00 +0000 Manifest next update: Sat 27 Dec 2025 12:01:00 +0000 Files and hashes: 1: 1-dSijOlomtrsqkND-2jGvkzEh1s.roa (hash: vAMtZ2jKMP2IiV0cN+Yk3wrsh8M5v/wTw365APu16Sc=) 2: PcI-io7JOWsbVM_7JxxVdm2UkZk.crl (hash: xtH9bfsKfT3GRnCjmKuv0zbQgA0AB5is+eMRSihoj30=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:9b:5f:d1:87:1c:45:23:e4:7c:b6:56:3f:86:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3dc23e8a8ec9396b1b54cffb271c55766d949199 Validity Not Before: Dec 26 12:01:00 2025 GMT Not After : Dec 27 12:01:00 2025 GMT Subject: CN=a15951a937d810da5f79777a56804af15ac90793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3d:58:33:4c:9f:78:46:8d:00:58:52:8a:43: 07:6a:66:fa:7b:1d:46:17:7e:4d:1c:4f:2b:22:c1: d0:5f:48:21:61:ad:b7:c3:27:6e:c0:9e:fb:94:0f: bf:9e:71:73:b0:72:99:a6:7b:a3:d9:03:3c:9d:de: bb:b6:f9:f9:0b:51:eb:0e:ce:f8:d2:7a:05:bd:e5: 3b:81:68:58:84:d7:5b:8f:71:f8:2b:4e:cf:77:47: 9b:30:ab:7a:53:fa:ed:a9:86:bd:99:ed:0b:0e:c7: 1a:94:b5:85:e4:ce:3c:54:97:3b:b7:57:83:77:02: bf:e8:cc:a8:e8:b6:04:34:21:06:72:28:15:17:47: 5c:e7:be:e9:4f:f6:ba:c4:41:bd:9c:be:a5:20:ef: d6:48:4b:a3:04:7d:d1:55:4a:af:1d:4c:ba:c4:51: df:f6:80:10:ab:e1:a1:6e:56:84:1b:3f:87:a9:0c: cd:63:77:ae:ac:5d:cd:56:e8:33:48:c3:2e:82:e9: 3f:f5:69:19:20:f2:cf:d4:a3:e3:3f:86:b4:07:fe: 7a:37:7d:f6:9c:0b:fe:b4:e0:f6:8b:f7:37:41:be: 19:f0:75:b1:16:f1:e2:88:8d:a7:e2:28:a8:d1:c5: 18:a5:a9:5b:35:4c:2a:61:2e:59:b3:95:19:e6:b0: 61:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:59:51:A9:37:D8:10:DA:5F:79:77:7A:56:80:4A:F1:5A:C9:07:93 X509v3 Authority Key Identifier: keyid:3D:C2:3E:8A:8E:C9:39:6B:1B:54:CF:FB:27:1C:55:76:6D:94:91:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:69:b4:e2:f2:70:c1:39:b4:5c:8e:b8:03:90:b5:fe:cc:70: c9:f9:e0:37:3a:3a:ed:3b:fa:e4:b9:a5:5e:4f:38:12:10:63: ec:79:30:b5:2e:2d:92:3d:c3:3a:aa:d8:0c:89:a6:50:f5:2d: 17:c6:17:d7:85:9f:63:06:c6:b3:3d:97:26:c0:1b:42:ea:fd: 07:83:00:45:d8:ef:75:1b:45:1d:97:63:6d:d9:62:b2:f3:20: 09:88:46:2c:b4:7b:77:f3:9c:3a:52:a2:a3:0d:9b:32:00:46: 47:b8:3b:b4:de:7f:ee:48:c0:84:c1:7f:d8:43:3e:b1:eb:c8: 8a:46:7e:77:2a:5c:e2:b3:6b:f8:0f:63:ac:1c:e3:42:d2:14: bd:4e:ae:2e:67:df:92:c8:ff:ac:30:e9:94:5e:03:98:4a:16: ea:db:4d:f3:bd:bb:ed:d4:18:b2:33:f4:d7:ec:12:47:fc:0e: 1a:bf:15:d3:57:ae:d4:e6:e6:ae:7c:a4:15:81:9f:79:0a:c3: c6:f5:91:91:f0:80:57:75:f5:bd:95:9d:84:41:e1:c1:94:37: e0:19:fb:98:82:10:c0:3b:fe:10:77:c7:ae:39:17:bd:57:37: 6b:39:31:8e:34:58:6a:00:e6:65:18:8d:a7:58:c3:93:f8:8c: fa:98:fc:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiJtf0YccRSPkfLZWP4biMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkYzIzZThhOGVjOTM5NmIxYjU0Y2ZmYjI3MWM1NTc2NmQ5 NDkxOTkwHhcNMjUxMjI2MTIwMTAwWhcNMjUxMjI3MTIwMTAwWjAzMTEwLwYDVQQD EyhhMTU5NTFhOTM3ZDgxMGRhNWY3OTc3N2E1NjgwNGFmMTVhYzkwNzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwz1YM0yfeEaNAFhSikMHamb6ex1G F35NHE8rIsHQX0ghYa23wyduwJ77lA+/nnFzsHKZpnuj2QM8nd67tvn5C1HrDs74 0noFveU7gWhYhNdbj3H4K07Pd0ebMKt6U/rtqYa9me0LDscalLWF5M48VJc7t1eD dwK/6Myo6LYENCEGcigVF0dc577pT/a6xEG9nL6lIO/WSEujBH3RVUqvHUy6xFHf 9oAQq+GhblaEGz+HqQzNY3eurF3NVugzSMMuguk/9WkZIPLP1KPjP4a0B/56N332 nAv+tOD2i/c3Qb4Z8HWxFvHiiI2n4iio0cUYpalbNUwqYS5Zs5UZ5rBhswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKFZUak32BDaX3l3elaASvFayQeTMB8GA1UdIwQY MBaAFD3CPoqOyTlrG1TP+yccVXZtlJGZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGNJLWlvN0pPV3NiVk1fN0p4eFZkbTJVa1prLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9kMWNmZDctOThkMy00M2I5LTk4MWUt YzBkZDQ3NzFjMmFhLzEvUGNJLWlvN0pPV3NiVk1fN0p4eFZkbTJVa1prLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9kMWNmZDctOThkMy00M2I5LTk4MWUtYzBkZDQ3NzFjMmFh LzEvUGNJLWlvN0pPV3NiVk1fN0p4eFZkbTJVa1prLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlWm04vJw wTm0XI64A5C1/sxwyfngNzo67Tv65LmlXk84EhBj7HkwtS4tkj3DOqrYDImmUPUt F8YX14WfYwbGsz2XJsAbQur9B4MARdjvdRtFHZdjbdlisvMgCYhGLLR7d/OcOlKi ow2bMgBGR7g7tN5/7kjAhMF/2EM+sevIikZ+dypc4rNr+A9jrBzjQtIUvU6uLmff ksj/rDDplF4DmEoW6ttN87277dQYsjP01+wSR/wOGr8V01eu1ObmrnykFYGfeQrD xvWRkfCAV3X1vZWdhEHhwZQ34Bn7mIIQwDv+EHfHrjkXvVc3azkxjjRYagDmZRiN p1jDk/iM+pj8eA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:57 2025 by rpki-client