This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft File: Ps1TxmQkw_Npyojuevdq2yXhhFE.mft (raw, json) Hash identifier: sjMMesv2Zm0SIzGz3dnEMQdCL1E7M3iFcTR4a286Iw4= Subject key identifier: 28:02:2C:64:3A:2E:40:8E:DE:ED:CF:83:E3:57:07:35:7C:96:D3:9B Authority key identifier: 3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51 Certificate issuer: /CN=3ecd53c66424c3f369ca88ee7af76adb25e18451 Certificate serial: 019B529815C72952C48D2E8002544EA52A56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft Manifest number: 115B Signing time: Wed 24 Dec 2025 23:00:57 +0000 Manifest this update: Wed 24 Dec 2025 23:00:57 +0000 Manifest next update: Thu 25 Dec 2025 23:00:57 +0000 Files and hashes: 1: NFHPImufF3uRqUgALoiOKsyNAWY.roa (hash: P38WvGerxAQEhXHw97XFuU4GA9ZzpqGUq811jnutzZs=) 2: Ps1TxmQkw_Npyojuevdq2yXhhFE.crl (hash: IpZTiNuMoKciuYZAkrGMR9x4X6Q4i7d5VUrTlm+8bfg=) 3: mI6j4UadWN59Ry8sBr4KvB0K8Yc.roa (hash: OgHmwZEN5FVoA8wv5XCNl8ngdl4mQaBcOydLvBf7mUc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:98:15:c7:29:52:c4:8d:2e:80:02:54:4e:a5:2a:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ecd53c66424c3f369ca88ee7af76adb25e18451 Validity Not Before: Dec 24 23:00:57 2025 GMT Not After : Dec 25 23:00:57 2025 GMT Subject: CN=28022c643a2e408edeedcf83e35707357c96d39b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:fa:b4:4b:b1:99:f5:9c:a2:af:5f:c4:c3:3a: 54:40:c3:87:aa:ab:76:3f:72:f9:5f:6b:24:ce:15: 5d:b3:9e:6e:c6:8f:5d:9e:4a:71:2f:37:a9:d5:fb: 89:a4:bf:16:bf:c3:78:5a:8a:34:4e:71:89:2c:6d: 88:6c:8c:99:e1:70:0c:51:02:d5:d0:78:09:72:66: 32:cd:d5:a5:d5:0b:22:7f:06:d6:d7:7f:60:c1:5e: a1:06:37:1a:64:5d:3e:c5:d1:44:cd:55:d6:d9:a8: 3c:e9:9c:f2:87:98:c1:c3:7b:1f:81:24:2a:e8:fb: 14:33:e5:96:30:14:af:fb:31:33:09:97:0c:f8:84: 0f:51:27:92:36:17:16:97:a1:0d:a3:08:1a:05:15: bd:99:fe:ab:4d:0a:52:20:7e:7f:24:33:70:a9:02: 25:26:3f:fd:97:dd:71:bd:03:a4:2f:bb:b0:64:00: 37:ac:c8:1a:e1:f6:2e:f6:63:7d:59:f2:f9:60:62: b9:5d:a7:5d:dc:83:da:ca:e1:df:f0:04:d2:a8:75: 2a:f1:e4:ce:4c:8a:a7:d5:a1:12:2f:0a:c5:b2:3f: b4:23:36:d4:81:fc:fa:89:06:73:ec:8f:7b:8a:06: 5c:03:c9:89:49:db:e8:a3:a0:ab:79:05:f8:97:e5: fa:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:02:2C:64:3A:2E:40:8E:DE:ED:CF:83:E3:57:07:35:7C:96:D3:9B X509v3 Authority Key Identifier: keyid:3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:bd:37:ac:f6:40:59:50:6c:33:1c:aa:12:b1:e4:d3:00:f2: db:a3:4f:79:0d:31:8f:98:67:05:75:51:af:5c:96:a1:3d:9d: 11:2c:c4:56:0a:20:f5:34:41:48:be:c7:df:22:4c:38:7d:41: 7a:b8:f7:ce:06:fe:e0:b9:82:0d:4b:21:4a:59:8f:ed:27:51: 29:e9:be:e0:75:32:7c:d9:61:e2:0b:69:5f:cd:f5:09:c7:37: 45:b8:9f:af:fe:54:49:80:90:96:04:7c:d5:01:4e:e5:94:66: 64:c5:bf:43:e3:fc:ba:e7:d8:6b:46:73:67:68:9a:ef:1f:39: ae:89:8f:be:9a:ee:52:07:b6:82:3c:d1:40:83:c7:3b:17:b4: b4:6d:76:15:bd:5c:bc:f8:c3:76:07:ce:9b:a3:19:d3:8d:9a: 62:24:8c:6e:07:26:b1:5d:01:00:14:cd:9a:1a:3a:11:de:ee: fb:95:0c:d8:96:0a:19:5a:5e:6e:2d:48:40:4e:a1:bf:02:8c: 8d:e1:05:bc:37:2b:62:1e:95:ed:b5:6e:9a:d7:d5:69:39:7e: 96:d4:b2:9e:ad:fe:e9:cd:4b:99:9c:f5:6f:01:b3:86:ab:e5: f1:6b:96:d8:43:ec:c8:e4:ac:84:54:e4:97:32:9c:72:28:66: 64:28:fa:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSmBXHKVLEjS6AAlROpSpWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlY2Q1M2M2NjQyNGMzZjM2OWNhODhlZTdhZjc2YWRiMjVl MTg0NTEwHhcNMjUxMjI0MjMwMDU3WhcNMjUxMjI1MjMwMDU3WjAzMTEwLwYDVQQD EygyODAyMmM2NDNhMmU0MDhlZGVlZGNmODNlMzU3MDczNTdjOTZkMzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPq0S7GZ9Zyir1/EwzpUQMOHqqt2 P3L5X2skzhVds55uxo9dnkpxLzep1fuJpL8Wv8N4Woo0TnGJLG2IbIyZ4XAMUQLV 0HgJcmYyzdWl1QsifwbW139gwV6hBjcaZF0+xdFEzVXW2ag86Zzyh5jBw3sfgSQq 6PsUM+WWMBSv+zEzCZcM+IQPUSeSNhcWl6ENowgaBRW9mf6rTQpSIH5/JDNwqQIl Jj/9l91xvQOkL7uwZAA3rMga4fYu9mN9WfL5YGK5Xadd3IPayuHf8ATSqHUq8eTO TIqn1aESLwrFsj+0IzbUgfz6iQZz7I97igZcA8mJSdvoo6CreQX4l+X6+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCgCLGQ6LkCO3u3Pg+NXBzV8ltObMB8GA1UdIwQY MBaAFD7NU8ZkJMPzacqI7nr3atsl4YRRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHMxVHhtUWt3X05weW9qdWV2ZHEyeVhoaEZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lNjVhZGEtNGQ0YS00MDRkLTg3MDAt YzIyNTY4MDRlOTIyLzEvUHMxVHhtUWt3X05weW9qdWV2ZHEyeVhoaEZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9lNjVhZGEtNGQ0YS00MDRkLTg3MDAtYzIyNTY4MDRlOTIy LzEvUHMxVHhtUWt3X05weW9qdWV2ZHEyeVhoaEZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkL03rPZA WVBsMxyqErHk0wDy26NPeQ0xj5hnBXVRr1yWoT2dESzEVgog9TRBSL7H3yJMOH1B erj3zgb+4LmCDUshSlmP7SdRKem+4HUyfNlh4gtpX831Ccc3Rbifr/5USYCQlgR8 1QFO5ZRmZMW/Q+P8uufYa0ZzZ2ia7x85romPvpruUge2gjzRQIPHOxe0tG12Fb1c vPjDdgfOm6MZ042aYiSMbgcmsV0BABTNmho6Ed7u+5UM2JYKGVpebi1IQE6hvwKM jeEFvDcrYh6V7bVumtfVaTl+ltSynq3+6c1LmZz1bwGzhqvl8WuW2EPsyOSshFTk lzKccihmZCj6lg== -----END CERTIFICATE-----Generated at Thu Dec 25 04:35:38 2025 by rpki-client