This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft File: PCr6XHBtPrCpLaibXUG5NutJzLg.mft (raw, json) Hash identifier: Z7Pvx4JiYiXtBXk7XUMv4QMcfRbKKTTVm3ZsP6qvm6Y= Subject key identifier: 37:88:A8:B5:06:97:87:8E:84:42:61:BE:09:AE:F6:72:5E:B1:95:2C Authority key identifier: 3C:2A:FA:5C:70:6D:3E:B0:A9:2D:A8:9B:5D:41:B9:36:EB:49:CC:B8 Certificate issuer: /CN=3c2afa5c706d3eb0a92da89b5d41b936eb49ccb8 Certificate serial: 019B1FF45E486D65AEDDF73612C25E6B5AA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft Manifest number: 1231 Signing time: Mon 15 Dec 2025 03:01:07 +0000 Manifest this update: Mon 15 Dec 2025 03:01:07 +0000 Manifest next update: Tue 16 Dec 2025 03:01:07 +0000 Files and hashes: 1: PCr6XHBtPrCpLaibXUG5NutJzLg.crl (hash: x0RfPpMbFWO6pK9fqJL4WGEy0CeMLQ3tJkr5zoUBZGs=) 2: gS9qTUkzusPVnwIVsvZEcIJfkGw.roa (hash: vAfS5SaRlx1aspB2qU2R3kxZGRQKFuwGAmKIB/uyw98=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 03:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:f4:5e:48:6d:65:ae:dd:f7:36:12:c2:5e:6b:5a:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c2afa5c706d3eb0a92da89b5d41b936eb49ccb8 Validity Not Before: Dec 15 03:01:07 2025 GMT Not After : Dec 16 03:01:07 2025 GMT Subject: CN=3788a8b50697878e844261be09aef6725eb1952c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a3:f0:4f:2f:05:55:76:b2:a8:02:2b:62:2a: 2f:c5:a7:2d:a2:2b:c9:16:d9:3f:62:03:52:c9:22: da:a8:c6:a7:68:9d:d2:2a:90:85:32:9d:55:84:68: 8e:73:1a:6e:e3:08:55:a2:60:ce:bb:52:63:c8:51: cf:75:1e:2d:7a:03:e5:94:94:8b:d5:d8:4c:b7:9a: d3:1f:b2:ad:1a:ca:c1:64:15:61:e1:2d:78:1d:06: fa:83:01:87:45:71:a3:38:c6:d7:d3:fe:3f:df:b1: 05:22:de:c9:72:0a:24:16:25:d0:a1:25:71:11:06: 01:f4:8f:7f:fd:69:6b:9b:63:d5:d6:1b:05:c6:aa: 3b:9b:71:63:e8:c7:ff:44:fd:26:fd:01:d1:16:82: fa:1f:fa:e3:61:17:05:c4:85:94:3d:b7:53:bb:95: 54:51:08:9a:90:6a:3f:8c:a0:f4:59:75:f9:ff:ca: 55:df:47:08:f2:d0:bd:30:45:df:a3:d2:ab:74:f8: 81:b1:5c:7b:f5:57:dc:12:2b:e0:06:a7:58:ea:a0: e1:a2:f0:19:23:42:b7:de:23:b0:6b:ce:58:cc:53: 3e:84:1f:70:73:4c:0e:1e:28:4f:b8:80:a7:cd:d2: 6c:2e:88:7a:08:df:2b:92:77:f6:1f:ed:d5:09:67: 77:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:88:A8:B5:06:97:87:8E:84:42:61:BE:09:AE:F6:72:5E:B1:95:2C X509v3 Authority Key Identifier: keyid:3C:2A:FA:5C:70:6D:3E:B0:A9:2D:A8:9B:5D:41:B9:36:EB:49:CC:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:a6:7c:b8:78:6b:27:ab:7a:70:b8:4f:fb:8e:52:f3:b3:de: 08:57:2e:b2:4f:75:a4:e5:6c:87:ab:f3:fb:ac:32:c6:f5:7f: 9e:ad:e3:6f:a6:a8:52:34:a5:68:0e:b4:1c:94:27:95:e1:3e: cd:1d:1f:95:ee:29:a1:96:78:2b:40:31:da:eb:6a:62:15:b9: 55:be:07:88:34:3a:cf:97:78:1c:fb:29:ca:24:7b:b4:69:f4: 95:6a:61:f1:4f:61:05:8f:20:59:4f:0f:b9:cd:71:3d:f3:89: 6f:5b:38:b4:cf:51:3b:22:dd:95:4b:a0:db:55:98:f6:d5:6e: 18:b6:dc:09:73:78:f2:65:8c:a4:31:88:1f:0f:a7:df:8f:6b: 69:74:82:12:c8:67:31:74:b2:78:06:af:1a:1b:72:4d:ba:b9: bc:3b:a7:bf:94:61:6f:18:0d:85:18:92:b3:d5:0f:26:25:fe: 57:cf:52:26:b1:ec:25:7f:82:84:60:22:c8:a7:93:25:8b:c4: d7:eb:fc:8c:4a:be:a9:cf:3f:da:3d:db:ca:90:f5:b8:02:ff: a9:26:5c:ef:d9:da:da:b3:ea:9e:e1:5b:1a:5d:48:fb:27:e2: 4a:78:f2:fe:48:dd:16:63:0e:b0:4f:b9:b8:2b:f4:45:b9:28: d4:db:8e:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsf9F5IbWWu3fc2EsJea1qhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMmFmYTVjNzA2ZDNlYjBhOTJkYTg5YjVkNDFiOTM2ZWI0 OWNjYjgwHhcNMjUxMjE1MDMwMTA3WhcNMjUxMjE2MDMwMTA3WjAzMTEwLwYDVQQD EygzNzg4YThiNTA2OTc4NzhlODQ0MjYxYmUwOWFlZjY3MjVlYjE5NTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6PwTy8FVXayqAIrYiovxactoivJ Ftk/YgNSySLaqManaJ3SKpCFMp1VhGiOcxpu4whVomDOu1JjyFHPdR4tegPllJSL 1dhMt5rTH7KtGsrBZBVh4S14HQb6gwGHRXGjOMbX0/4/37EFIt7JcgokFiXQoSVx EQYB9I9//Wlrm2PV1hsFxqo7m3Fj6Mf/RP0m/QHRFoL6H/rjYRcFxIWUPbdTu5VU UQiakGo/jKD0WXX5/8pV30cI8tC9MEXfo9KrdPiBsVx79VfcEivgBqdY6qDhovAZ I0K33iOwa85YzFM+hB9wc0wOHihPuICnzdJsLoh6CN8rknf2H+3VCWd3rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDeIqLUGl4eOhEJhvgmu9nJesZUsMB8GA1UdIwQY MBaAFDwq+lxwbT6wqS2om11BuTbrScy4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUENyNlhIQnRQckNwTGFpYlhVRzVOdXRKekxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9lYjFjNGYtZmQ4MC00OTE5LWIxODUt Zjc4MzNhM2YyNDg1LzEvUENyNlhIQnRQckNwTGFpYlhVRzVOdXRKekxnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9lYjFjNGYtZmQ4MC00OTE5LWIxODUtZjc4MzNhM2YyNDg1 LzEvUENyNlhIQnRQckNwTGFpYlhVRzVOdXRKekxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbKZ8uHhr J6t6cLhP+45S87PeCFcusk91pOVsh6vz+6wyxvV/nq3jb6aoUjSlaA60HJQnleE+ zR0fle4poZZ4K0Ax2utqYhW5Vb4HiDQ6z5d4HPspyiR7tGn0lWph8U9hBY8gWU8P uc1xPfOJb1s4tM9ROyLdlUug21WY9tVuGLbcCXN48mWMpDGIHw+n349raXSCEshn MXSyeAavGhtyTbq5vDunv5RhbxgNhRiSs9UPJiX+V89SJrHsJX+ChGAiyKeTJYvE 1+v8jEq+qc8/2j3bypD1uAL/qSZc79na2rPqnuFbGl1I+yfiSnjy/kjdFmMOsE+5 uCv0Rbko1NuOIQ== -----END CERTIFICATE-----Generated at Mon Dec 15 13:18:46 2025 by rpki-client