This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft File: PXud_6rjPsLPGbWtTknB6esdnWQ.mft (raw, json) Hash identifier: LI26Fd8PrIhOQPwlfHpFw1qmTdA1Vl5Y4uZD7xzUFoY= Subject key identifier: 24:0D:CE:1F:B4:B6:43:7B:2B:79:16:1D:AF:DF:C9:C0:B0:CD:3B:08 Authority key identifier: 3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64 Certificate issuer: /CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64 Certificate serial: 019B3B34625E9A58658F4262EBA06C81BA8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft Manifest number: 03D2 Signing time: Sat 20 Dec 2025 10:00:47 +0000 Manifest this update: Sat 20 Dec 2025 10:00:47 +0000 Manifest next update: Sun 21 Dec 2025 10:00:47 +0000 Files and hashes: 1: 7MAR8ldskj16F5kzBhniowMVmU4.roa (hash: mAbacv2iYcdMB2GMEDPPh1FDDClOu0PIdLu6x7Tl3MY=) 2: FmkKEcHCN4SKkKjvm4wbiP2rqGc.roa (hash: BxDXl5Xd1DRGy1evvpUKKCLNhtBpKlkHYmd1XWHZ6n8=) 3: LXf5lLnTSduTm8Y4-ZFOkzEWaRE.roa (hash: eOFvk5CuTujGAeTIr7JdTBGuzY2jhTziJfw9wzb3/Po=) 4: PXud_6rjPsLPGbWtTknB6esdnWQ.crl (hash: jdT5FgoepxPnXbv2Thz7bu805Fq1bthVDajr9aCnRWo=) 5: k4yKqIR7cQItxrDu_gDWC-myYX0.roa (hash: xhdvsy13/3L8cbu2Dvi5ab7FoTe57YZRZZmouEau4sA=) 6: lThuEEXjbOk9kIBiQn4XNJSri60.roa (hash: saUcIO3Pzwx9suP3W1g5k4dgT0dO1lpuD0PTK3qh6JE=) 7: pWtbtMqs_9aJQ0KT8UAl4XExZLI.roa (hash: WNvv2z5ka9H0FOvY11NFaV4Er6oN7s2ejAsfJawgadw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:62:5e:9a:58:65:8f:42:62:eb:a0:6c:81:ba:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64 Validity Not Before: Dec 20 10:00:47 2025 GMT Not After : Dec 21 10:00:47 2025 GMT Subject: CN=240dce1fb4b6437b2b79161dafdfc9c0b0cd3b08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:39:6d:9a:60:19:b9:ae:9b:a5:de:52:b0:d8: 09:f8:79:e0:17:ae:0a:1d:ba:1a:22:c1:ab:f9:56: 37:92:c5:7e:a6:1b:7a:94:66:94:97:db:e6:33:58: e4:8e:ce:95:30:e2:c9:ad:bd:51:e9:06:88:bd:73: 53:5b:20:3d:8b:0a:02:d6:d0:d3:29:57:3d:d6:67: 80:5a:cd:20:3a:c0:0f:7d:f3:df:50:57:e6:b5:4a: e1:b3:0d:4b:31:30:49:5b:b9:13:6e:b7:6b:10:78: 6d:94:2b:3c:03:a8:53:cb:3e:14:d8:6a:5c:bd:1d: 41:03:b8:f1:5b:2c:46:ce:81:d0:d5:50:da:7c:06: e3:2f:aa:36:00:d2:86:eb:16:16:92:d3:1e:8a:a2: 97:31:47:a1:39:c6:c3:f4:6d:84:3f:4f:ec:31:62: 4d:b9:04:19:02:bc:96:7c:81:94:af:e8:56:45:c4: 3a:d7:df:b7:5d:c3:03:23:9b:eb:8e:99:88:a9:cc: a3:99:b2:60:b0:1a:4b:82:17:c9:52:b6:16:1e:50: 85:9f:1f:59:a6:a1:15:02:d3:f4:25:5c:29:87:b4: 21:37:7c:22:35:d8:e6:7e:62:57:80:ec:ad:58:ff: 2c:a6:92:25:fe:df:47:0d:7e:18:3e:c3:98:cd:a7: 2d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:0D:CE:1F:B4:B6:43:7B:2B:79:16:1D:AF:DF:C9:C0:B0:CD:3B:08 X509v3 Authority Key Identifier: keyid:3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:e5:7a:5f:21:32:ce:da:d5:e5:66:ad:7d:35:62:ed:e4:32: 0c:0b:04:05:fb:74:ff:9f:55:c3:82:55:9e:eb:c6:89:26:5f: 59:59:3c:ff:6d:46:2d:c3:6f:77:22:9f:5f:2a:ee:1b:bf:e3: 2d:35:5c:63:6c:d8:80:0c:9d:b6:6a:1d:c3:58:f4:cd:7a:7f: c1:0d:aa:c7:a5:da:f5:fb:6f:d0:3a:50:09:86:c6:4a:ea:1c: 26:71:8c:31:93:50:97:28:94:11:b3:e5:c3:85:77:0f:b5:dc: 52:ea:e3:f5:ae:b8:6d:15:6f:39:f2:69:8d:2e:9a:c6:e5:01: eb:8d:5e:cf:7f:79:b0:4b:56:49:19:ad:d2:dc:2b:ed:e4:c7: aa:c8:9c:c8:8e:6b:1d:e3:8c:cb:4b:62:33:22:97:fa:66:c6: 7a:9d:61:ef:3b:d7:9e:e4:19:ba:bb:a5:82:6c:d8:d2:8f:e0: 4c:a7:17:40:85:b2:46:0f:5b:b8:3e:f0:ce:80:6f:fd:b7:ca: 37:9a:3c:b1:57:00:fb:85:42:0e:d5:b5:96:bc:27:b9:39:b8: 4d:a0:00:b0:fd:aa:bd:7e:de:f7:10:3e:e0:92:f6:5a:c8:1c: a0:9d:cd:c3:89:6e:bb:35:0d:cb:6b:91:94:27:7b:65:9a:cf: 5d:48:3b:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NGJemlhlj0Ji66BsgbqOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkN2I5ZGZmYWFlMzNlYzJjZjE5YjVhZDRlNDljMWU5ZWIx ZDlkNjQwHhcNMjUxMjIwMTAwMDQ3WhcNMjUxMjIxMTAwMDQ3WjAzMTEwLwYDVQQD EygyNDBkY2UxZmI0YjY0MzdiMmI3OTE2MWRhZmRmYzljMGIwY2QzYjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzltmmAZua6bpd5SsNgJ+HngF64K HboaIsGr+VY3ksV+pht6lGaUl9vmM1jkjs6VMOLJrb1R6QaIvXNTWyA9iwoC1tDT KVc91meAWs0gOsAPffPfUFfmtUrhsw1LMTBJW7kTbrdrEHhtlCs8A6hTyz4U2Gpc vR1BA7jxWyxGzoHQ1VDafAbjL6o2ANKG6xYWktMeiqKXMUehOcbD9G2EP0/sMWJN uQQZAryWfIGUr+hWRcQ619+3XcMDI5vrjpmIqcyjmbJgsBpLghfJUrYWHlCFnx9Z pqEVAtP0JVwph7QhN3wiNdjmfmJXgOytWP8sppIl/t9HDX4YPsOYzactUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCQNzh+0tkN7K3kWHa/fycCwzTsIMB8GA1UdIwQY MBaAFD17nf+q4z7Czxm1rU5JwenrHZ1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFh1ZF82cmpQc0xQR2JXdFRrbkI2ZXNkbldRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80OTE5NWItMjkwOS00NmUwLWFiY2Ut NDIyNTIzYzRlNjhiLzEvUFh1ZF82cmpQc0xQR2JXdFRrbkI2ZXNkbldRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS80OTE5NWItMjkwOS00NmUwLWFiY2UtNDIyNTIzYzRlNjhi LzEvUFh1ZF82cmpQc0xQR2JXdFRrbkI2ZXNkbldRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdOV6XyEy ztrV5WatfTVi7eQyDAsEBft0/59Vw4JVnuvGiSZfWVk8/21GLcNvdyKfXyruG7/j LTVcY2zYgAydtmodw1j0zXp/wQ2qx6Xa9ftv0DpQCYbGSuocJnGMMZNQlyiUEbPl w4V3D7XcUurj9a64bRVvOfJpjS6axuUB641ez395sEtWSRmt0twr7eTHqsicyI5r HeOMy0tiMyKX+mbGep1h7zvXnuQZurulgmzY0o/gTKcXQIWyRg9buD7wzoBv/bfK N5o8sVcA+4VCDtW1lrwnuTm4TaAAsP2qvX7e9xA+4JL2WsgcoJ3Nw4luuzUNy2uR lCd7ZZrPXUg7XA== -----END CERTIFICATE-----Generated at Sat Dec 20 12:23:40 2025 by rpki-client