This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft File: PGu5kW2QqkR3ctA_Ce37or3PN5I.mft (raw, json) Hash identifier: N3AW+du9dcw+BQzgQVAbbr94x+YdK3LVacOBzgbPoQ0= Subject key identifier: D8:47:BD:7C:E0:C7:2B:0A:72:40:14:56:32:F6:9B:EE:6D:D2:81:A5 Authority key identifier: 3C:6B:B9:91:6D:90:AA:44:77:72:D0:3F:09:ED:FB:A2:BD:CF:37:92 Certificate issuer: /CN=3c6bb9916d90aa447772d03f09edfba2bdcf3792 Certificate serial: 019B378F04C00B6BB9769F7D942B025E864D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGu5kW2QqkR3ctA_Ce37or3PN5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft Manifest number: 086A Signing time: Fri 19 Dec 2025 17:01:18 +0000 Manifest this update: Fri 19 Dec 2025 17:01:18 +0000 Manifest next update: Sat 20 Dec 2025 17:01:18 +0000 Files and hashes: 1: PGu5kW2QqkR3ctA_Ce37or3PN5I.crl (hash: U0O1upVYnK751Ngz05SNRQmG+43v1d6xtLmPcuzbDXc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft rsync://rpki.ripe.net/repository/DEFAULT/PGu5kW2QqkR3ctA_Ce37or3PN5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8f:04:c0:0b:6b:b9:76:9f:7d:94:2b:02:5e:86:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c6bb9916d90aa447772d03f09edfba2bdcf3792 Validity Not Before: Dec 19 17:01:18 2025 GMT Not After : Dec 20 17:01:18 2025 GMT Subject: CN=d847bd7ce0c72b0a7240145632f69bee6dd281a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9d:de:fc:c5:14:15:e8:db:e5:4a:d6:ce:73: be:2f:2a:3c:d7:fb:de:77:76:a4:58:9c:72:de:3d: e9:fd:22:27:e2:54:18:e7:3c:4a:cc:3b:75:d1:81: e2:3b:08:c3:4d:43:49:80:92:97:26:96:56:a2:18: ec:e2:f0:b7:fc:66:6e:3c:4b:08:17:68:9d:ad:12: cf:f6:78:70:97:ad:6a:2a:56:f3:66:5d:d6:4e:ef: 2a:09:92:02:63:03:c8:fe:83:33:a3:0e:8c:d4:89: b0:9b:a5:bc:e5:db:22:eb:19:98:bd:da:01:6f:0a: a0:57:78:a1:b5:bc:2a:ab:7c:e3:7e:0f:c3:d4:39: 0b:39:4e:39:05:c2:e6:dc:31:9a:b3:75:b5:51:59: 89:6e:85:06:09:4c:4b:a5:7f:6f:9e:69:43:6d:c2: 4b:24:08:8d:90:4c:55:c3:2c:22:e2:fa:bb:75:2e: c6:4d:ea:ef:13:1b:1a:99:85:a3:37:bc:ff:44:54: a9:69:3d:df:04:ab:c4:72:89:38:6c:14:54:c8:27: 1f:3f:9b:8b:01:5e:92:43:73:ad:a9:5d:73:31:9d: 30:ee:92:88:ba:ee:54:4e:00:5f:8e:2a:2a:57:f6: e4:2d:db:0d:f8:f7:17:8d:dd:02:bb:e7:85:3d:a8: 82:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:47:BD:7C:E0:C7:2B:0A:72:40:14:56:32:F6:9B:EE:6D:D2:81:A5 X509v3 Authority Key Identifier: keyid:3C:6B:B9:91:6D:90:AA:44:77:72:D0:3F:09:ED:FB:A2:BD:CF:37:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGu5kW2QqkR3ctA_Ce37or3PN5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:54:ed:91:51:36:5a:5a:f9:ce:ff:d3:b7:2d:47:22:fc:21: df:0f:cb:04:0c:1f:b8:b7:fb:c5:f9:16:75:d1:06:41:52:e4: 8f:0c:ed:e2:91:04:97:89:9e:d3:22:f7:49:be:11:77:d1:24: e7:8a:f5:2b:fb:a5:85:1e:f3:5d:cc:48:cb:33:d9:5d:85:70: 26:c9:5c:a3:9b:bc:ef:93:49:9d:c9:bd:9a:10:df:d2:d5:5e: c5:89:4b:43:6e:5d:a6:a0:8d:ca:03:0b:28:ec:a9:8a:bb:8f: d5:02:a2:21:77:31:b7:e5:7f:00:60:bc:5d:9b:67:75:57:7e: 8e:44:01:43:a9:fd:95:15:dc:83:d5:77:6e:70:84:88:fe:32: fe:61:f2:c8:98:36:7c:34:68:71:f7:4b:6a:72:c6:49:74:68: 20:d5:ac:b8:2c:0f:53:8d:b6:f9:07:92:5d:fb:b8:5b:46:3d: e3:6f:f5:ea:2f:a3:6d:04:b1:97:f5:9a:c1:58:64:9f:c2:f9: 84:d0:a2:39:dc:f0:c8:ca:04:4e:db:2c:35:ab:57:8b:2e:ca: bf:ce:f5:eb:ae:21:8a:cd:9f:c7:33:31:f9:ed:c1:ff:93:32: cd:1d:a5:27:cb:25:d7:d4:3d:ab:ef:5e:df:d3:4c:2d:72:c9: 0c:50:95:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jwTAC2u5dp99lCsCXoZNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjNmJiOTkxNmQ5MGFhNDQ3NzcyZDAzZjA5ZWRmYmEyYmRj ZjM3OTIwHhcNMjUxMjE5MTcwMTE4WhcNMjUxMjIwMTcwMTE4WjAzMTEwLwYDVQQD EyhkODQ3YmQ3Y2UwYzcyYjBhNzI0MDE0NTYzMmY2OWJlZTZkZDI4MWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJ3e/MUUFejb5UrWznO+Lyo81/ve d3akWJxy3j3p/SIn4lQY5zxKzDt10YHiOwjDTUNJgJKXJpZWohjs4vC3/GZuPEsI F2idrRLP9nhwl61qKlbzZl3WTu8qCZICYwPI/oMzow6M1Imwm6W85dsi6xmYvdoB bwqgV3ihtbwqq3zjfg/D1DkLOU45BcLm3DGas3W1UVmJboUGCUxLpX9vnmlDbcJL JAiNkExVwywi4vq7dS7GTervExsamYWjN7z/RFSpaT3fBKvEcok4bBRUyCcfP5uL AV6SQ3OtqV1zMZ0w7pKIuu5UTgBfjioqV/bkLdsN+PcXjd0Cu+eFPaiCYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNhHvXzgxysKckAUVjL2m+5t0oGlMB8GA1UdIwQY MBaAFDxruZFtkKpEd3LQPwnt+6K9zzeSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEd1NWtXMlFxa1IzY3RBX0NlMzdvcjNQTjVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8zY2Y5ZWUtODY3Zi00MjE0LWEzOTQt Y2JlOTIwN2NmNTRlLzEvUEd1NWtXMlFxa1IzY3RBX0NlMzdvcjNQTjVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8zY2Y5ZWUtODY3Zi00MjE0LWEzOTQtY2JlOTIwN2NmNTRl LzEvUEd1NWtXMlFxa1IzY3RBX0NlMzdvcjNQTjVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVlTtkVE2 Wlr5zv/Tty1HIvwh3w/LBAwfuLf7xfkWddEGQVLkjwzt4pEEl4me0yL3Sb4Rd9Ek 54r1K/ulhR7zXcxIyzPZXYVwJslco5u875NJncm9mhDf0tVexYlLQ25dpqCNygML KOypiruP1QKiIXcxt+V/AGC8XZtndVd+jkQBQ6n9lRXcg9V3bnCEiP4y/mHyyJg2 fDRocfdLanLGSXRoINWsuCwPU422+QeSXfu4W0Y942/16i+jbQSxl/WawVhkn8L5 hNCiOdzwyMoETtssNatXiy7Kv871664his2fxzMx+e3B/5MyzR2lJ8sl19Q9q+9e 39NMLXLJDFCVjA== -----END CERTIFICATE-----Generated at Fri Dec 19 20:29:33 2025 by rpki-client