This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft File: PFaMWdeoMZnDp56g6DdblG7YhOI.mft (raw, json) Hash identifier: q6OzqYf3vkHouHGSU8MyjlTVbANP71pBDxroKwXuXIo= Subject key identifier: 60:83:F1:40:73:C1:16:FA:E1:A1:3F:C2:20:C2:7D:F7:59:8A:0C:6E Authority key identifier: 3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2 Certificate issuer: /CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2 Certificate serial: 019B59E46E8C00EC388027CBEDD626E7B579 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 09:01:41 +0000 Manifest this update: Fri 26 Dec 2025 09:01:41 +0000 Manifest next update: Sat 27 Dec 2025 09:01:41 +0000 Files and hashes: 1: 7WOP-_-MOSfX89KKSoy6v0ZdGmI.roa (hash: K5alUaOgD5qLhUU0KdZTL8p6umuUwQibq8QwoQYmgD8=) 2: HCoi5HM2CS9n54Michmh4KOI3ek.roa (hash: jtTZBvxkebDPFdaXtrlo0EAEQkLMF8pkeRtYqCQ7D0I=) 3: PFaMWdeoMZnDp56g6DdblG7YhOI.crl (hash: XJK0WytrUAJHDfp3IV6a3kXLlXyJ+9NdzwkkeT2M340=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:6e:8c:00:ec:38:80:27:cb:ed:d6:26:e7:b5:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2 Validity Not Before: Dec 26 09:01:41 2025 GMT Not After : Dec 27 09:01:41 2025 GMT Subject: CN=6083f14073c116fae1a13fc220c27df7598a0c6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bb:58:2e:54:7a:ba:b1:3f:52:84:cf:6f:bd: 0d:15:c0:32:ae:02:a9:94:e4:86:f4:a9:42:0d:29: 10:a3:22:c2:b1:cb:df:b1:2e:9d:57:2a:9a:a2:df: 1f:40:40:33:4a:c2:1b:5c:ce:0b:70:44:07:91:bb: f8:a6:2d:35:1c:14:13:60:20:e6:c7:4f:2f:e2:2f: 50:0d:8a:a2:9a:dd:79:9f:1e:c9:82:74:c6:fc:80: 11:f1:67:66:68:f2:68:65:f8:26:4c:45:69:e4:a4: 28:72:31:1c:9f:2e:71:83:db:8c:d7:d7:0c:d2:a2: 63:05:77:b5:68:a0:9b:1c:76:7b:7f:c2:e8:31:46: ed:ba:25:90:e9:32:95:be:82:73:a3:fc:cb:e5:fb: 3d:ab:91:5d:9e:ed:58:99:ae:fc:d6:23:4d:7f:d1: 90:30:55:2f:16:92:e7:97:88:dd:0f:8f:bf:66:35: 1c:6f:55:ea:dc:f4:b0:fa:fb:0f:55:01:48:a0:7b: be:47:ab:a8:e4:06:58:92:29:66:d8:f6:c1:60:4a: 1c:c0:d6:47:e6:71:93:1f:6b:93:d8:77:97:f2:bf: 86:2d:65:ce:3a:3f:35:c0:48:ab:35:c7:2c:99:6b: eb:84:60:de:ed:b9:54:32:86:09:9e:cb:aa:91:f4: 38:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:83:F1:40:73:C1:16:FA:E1:A1:3F:C2:20:C2:7D:F7:59:8A:0C:6E X509v3 Authority Key Identifier: keyid:3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:4c:d1:35:81:fe:c6:b9:ed:e5:a8:25:8a:51:a4:30:4c:91: ed:1f:b8:1d:14:56:a5:17:2d:15:c8:f6:44:eb:3a:e9:59:17: 2a:a2:eb:f4:b8:5a:8b:b7:f8:69:cf:c2:0b:16:ba:fc:69:6e: 53:f5:fb:ff:25:a4:f5:ec:45:b9:1a:35:b1:f7:a2:f7:58:c6: 1a:a5:85:a9:b6:1c:34:d1:34:6a:78:e5:f4:ab:7b:3d:fe:b2: 17:b3:95:d3:a3:e4:c4:64:79:67:32:7b:64:ef:16:9f:70:21: ed:74:b0:35:c0:62:ba:9e:fe:9d:7b:58:aa:04:2d:e5:12:43: 7f:9b:59:bd:3e:b7:7e:60:29:b2:d1:59:99:8a:8e:9f:cc:82: 32:89:e4:df:0b:03:3a:c3:92:62:ac:8b:dc:99:1a:98:0c:95: eb:19:ea:e2:43:8b:73:4d:f2:04:2d:b2:67:37:88:b9:bf:43: b6:52:2c:45:c5:59:57:3e:0c:5c:78:a7:ba:18:b5:ab:24:47: 12:b9:d3:2a:c9:74:f0:b6:2b:75:56:0a:10:f1:03:c5:77:99: eb:d0:b0:7b:ff:bd:7d:48:2d:0a:fa:a7:7c:cc:06:ff:97:f2: 4b:68:31:c3:a1:e0:5e:4d:fe:9b:55:17:09:af:81:ab:52:80: aa:8d:34:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5G6MAOw4gCfL7dYm57V5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjNTY4YzU5ZDdhODMxOTljM2E3OWVhMGU4Mzc1Yjk0NmVk ODg0ZTIwHhcNMjUxMjI2MDkwMTQxWhcNMjUxMjI3MDkwMTQxWjAzMTEwLwYDVQQD Eyg2MDgzZjE0MDczYzExNmZhZTFhMTNmYzIyMGMyN2RmNzU5OGEwYzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbtYLlR6urE/UoTPb70NFcAyrgKp lOSG9KlCDSkQoyLCscvfsS6dVyqaot8fQEAzSsIbXM4LcEQHkbv4pi01HBQTYCDm x08v4i9QDYqimt15nx7JgnTG/IAR8WdmaPJoZfgmTEVp5KQocjEcny5xg9uM19cM 0qJjBXe1aKCbHHZ7f8LoMUbtuiWQ6TKVvoJzo/zL5fs9q5Fdnu1Yma781iNNf9GQ MFUvFpLnl4jdD4+/ZjUcb1Xq3PSw+vsPVQFIoHu+R6uo5AZYkilm2PbBYEocwNZH 5nGTH2uT2HeX8r+GLWXOOj81wEirNccsmWvrhGDe7blUMoYJnsuqkfQ4jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGCD8UBzwRb64aE/wiDCffdZigxuMB8GA1UdIwQY MBaAFDxWjFnXqDGZw6eeoOg3W5Ru2ITiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEZhTVdkZW9NWm5EcDU2ZzZEZGJsRzdZaE9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82ZjM2YzItZDA1Yy00NDI1LWE5ZTQt NWUzN2U3ZjNmMTVkLzEvUEZhTVdkZW9NWm5EcDU2ZzZEZGJsRzdZaE9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi82ZjM2YzItZDA1Yy00NDI1LWE5ZTQtNWUzN2U3ZjNmMTVk LzEvUEZhTVdkZW9NWm5EcDU2ZzZEZGJsRzdZaE9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnEzRNYH+ xrnt5aglilGkMEyR7R+4HRRWpRctFcj2ROs66VkXKqLr9Lhai7f4ac/CCxa6/Glu U/X7/yWk9exFuRo1sfei91jGGqWFqbYcNNE0anjl9Kt7Pf6yF7OV06PkxGR5ZzJ7 ZO8Wn3Ah7XSwNcBiup7+nXtYqgQt5RJDf5tZvT63fmApstFZmYqOn8yCMonk3wsD OsOSYqyL3JkamAyV6xnq4kOLc03yBC2yZzeIub9DtlIsRcVZVz4MXHinuhi1qyRH ErnTKsl08LYrdVYKEPEDxXeZ69Cwe/+9fUgtCvqnfMwG/5fyS2gxw6HgXk3+m1UX Ca+Bq1KAqo00Lw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:59 2025 by rpki-client