This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft File: PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft (raw, json) Hash identifier: 1zHTJY1idgW+VEIhm3fXKJXMhnEFvfKOzvRgzqNJ2ts= Subject key identifier: E0:47:73:AE:15:5D:0B:DB:71:80:86:00:3D:88:66:A3:A1:69:FE:BE Authority key identifier: 3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4 Certificate issuer: /CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4 Certificate serial: 019B71B570E96165CC21A0F24AA88B65601D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft Manifest number: 113F Signing time: Wed 31 Dec 2025 00:01:14 +0000 Manifest this update: Wed 31 Dec 2025 00:01:14 +0000 Manifest next update: Thu 01 Jan 2026 00:01:14 +0000 Files and hashes: 1: 9fywOGNsk6OIfuzuy-reOW9V4kc.roa (hash: b/vhaQiKQhhebnkpqZc4spciDDH3KeMp+AUrKHHSWv4=) 2: PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl (hash: JIjRI/RmXsZfvGTwTQXNLmr+e4a7BqUWeT73Cu7ikaM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:b5:70:e9:61:65:cc:21:a0:f2:4a:a8:8b:65:60:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4 Validity Not Before: Dec 31 00:01:14 2025 GMT Not After : Jan 1 00:01:14 2026 GMT Subject: CN=e04773ae155d0bdb718086003d8866a3a169febe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1a:98:27:7c:86:42:de:29:9a:08:bc:04:b4: 63:54:6f:67:d2:c9:7f:da:40:5b:ea:7f:99:1d:b8: a2:5c:7b:62:6b:d4:86:34:13:54:aa:2c:32:c0:9e: 5e:16:c0:63:96:4d:0e:9b:68:08:be:b4:8f:da:d3: 2f:b2:74:99:cb:5c:4b:d3:81:da:85:a4:c2:18:46: 08:19:23:f2:b3:bd:8f:0f:9c:5b:f6:41:28:67:a8: dc:54:69:fe:20:e8:50:7b:43:b9:44:80:93:b6:7b: 40:79:6c:55:b7:08:7c:49:4e:6d:67:43:07:87:96: 37:09:bd:46:f4:91:e9:39:22:93:bd:5a:1e:fa:96: 1c:a2:61:71:12:0b:3b:64:fb:6d:ad:59:e6:b2:a9: c1:5c:c6:f6:58:71:a5:ae:0d:dc:4f:ad:41:d8:da: fe:ba:3f:b9:a5:7c:b1:2a:c5:37:1b:04:1c:84:6a: 8a:e6:ec:cf:c5:fb:e4:7d:44:74:09:14:73:00:97: 47:30:8d:7c:fe:08:51:34:18:95:6f:bd:41:da:7c: 7f:98:5f:bd:e7:7f:a0:f7:b2:c5:55:a4:e0:ad:a1: ec:23:7a:6a:64:14:c3:d7:50:29:0d:5f:7d:12:ba: 1c:e0:4e:f6:8b:f7:ef:98:f3:08:b9:78:7c:db:93: ef:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:47:73:AE:15:5D:0B:DB:71:80:86:00:3D:88:66:A3:A1:69:FE:BE X509v3 Authority Key Identifier: keyid:3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:43:a4:01:af:10:55:f9:0e:16:e7:2f:13:43:7d:ff:5b:79: d3:ad:24:16:31:32:ba:18:5a:5a:1e:5d:b0:b8:45:eb:d6:68: 97:2d:a6:92:f6:9d:d8:5a:78:87:0e:1f:7f:24:53:37:a0:18: d5:9d:58:04:46:42:38:a9:5a:dd:8a:a7:de:f6:bc:2a:a4:9c: 84:1f:9b:69:15:53:9b:2e:c1:37:de:d9:f2:6d:21:dc:b8:30: 1e:af:62:fa:e3:8d:93:85:67:ef:f2:53:54:98:c8:7a:e7:2f: 5b:86:28:a4:ba:b1:f0:29:e0:c4:c5:9c:92:cb:23:44:ec:d3: 58:5d:e3:25:5b:07:a3:aa:18:16:b8:25:91:9d:d9:46:98:36: b2:76:0d:78:02:55:0f:1e:98:57:2d:7f:d4:b9:5c:53:1e:fc: 3c:e9:5b:f0:aa:a3:4c:81:3e:84:74:c5:7a:a0:a5:3a:20:92: fd:32:b5:ab:7a:72:83:5b:2c:87:69:86:04:2b:d3:c8:6b:c6: a4:38:98:8c:46:e3:81:3c:a8:9f:70:2c:4b:25:a4:82:72:77: ad:94:c6:bd:74:a4:09:04:2e:9d:79:da:0f:47:18:59:52:b8: 6a:50:4a:ee:c9:78:48:de:ca:3f:ad:b9:60:43:f1:53:9f:cf: 90:b9:9d:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxtXDpYWXMIaDySqiLZWAdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYTU1NDA5OGM3YTg4YWEzNDI2NGI5MmQ4YmYyMjU3ZWMw YmNkYTQwHhcNMjUxMjMxMDAwMTE0WhcNMjYwMTAxMDAwMTE0WjAzMTEwLwYDVQQD EyhlMDQ3NzNhZTE1NWQwYmRiNzE4MDg2MDAzZDg4NjZhM2ExNjlmZWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBqYJ3yGQt4pmgi8BLRjVG9n0sl/ 2kBb6n+ZHbiiXHtia9SGNBNUqiwywJ5eFsBjlk0Om2gIvrSP2tMvsnSZy1xL04Ha haTCGEYIGSPys72PD5xb9kEoZ6jcVGn+IOhQe0O5RICTtntAeWxVtwh8SU5tZ0MH h5Y3Cb1G9JHpOSKTvVoe+pYcomFxEgs7ZPttrVnmsqnBXMb2WHGlrg3cT61B2Nr+ uj+5pXyxKsU3GwQchGqK5uzPxfvkfUR0CRRzAJdHMI18/ghRNBiVb71B2nx/mF+9 53+g97LFVaTgraHsI3pqZBTD11ApDV99Eroc4E72i/fvmPMIuXh825PvYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOBHc64VXQvbcYCGAD2IZqOhaf6+MB8GA1UdIwQY MBaAFD6lVAmMeoiqNCZLkti/IlfsC82kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHFWVUNZeDZpS28wSmt1UzJMOGlWLXdMemFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy80NzY3Y2UtNDQ0OC00MzZiLWE5MTAt NjZkZTk4NjVkYmFjLzEvUHFWVUNZeDZpS28wSmt1UzJMOGlWLXdMemFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy80NzY3Y2UtNDQ0OC00MzZiLWE5MTAtNjZkZTk4NjVkYmFj LzEvUHFWVUNZeDZpS28wSmt1UzJMOGlWLXdMemFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKUOkAa8Q VfkOFucvE0N9/1t5060kFjEyuhhaWh5dsLhF69Zoly2mkvad2Fp4hw4ffyRTN6AY 1Z1YBEZCOKla3Yqn3va8KqSchB+baRVTmy7BN97Z8m0h3LgwHq9i+uONk4Vn7/JT VJjIeucvW4YopLqx8CngxMWckssjROzTWF3jJVsHo6oYFrglkZ3ZRpg2snYNeAJV Dx6YVy1/1LlcUx78POlb8KqjTIE+hHTFeqClOiCS/TK1q3pyg1ssh2mGBCvTyGvG pDiYjEbjgTyon3AsSyWkgnJ3rZTGvXSkCQQunXnaD0cYWVK4alBK7sl4SN7KP625 YEPxU5/PkLmdDA== -----END CERTIFICATE-----Generated at Wed Dec 31 05:21:45 2025 by rpki-client