This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft File: Ps1TxmQkw_Npyojuevdq2yXhhFE.mft (raw, json) Hash identifier: hKuJ4G/Xyjl+fNO816ieHFj7qcCN2/X90t17kfbDq4Y= Subject key identifier: AD:AD:6A:4C:32:06:92:DE:42:9B:DB:00:28:80:9E:1D:B7:75:DD:CC Authority key identifier: 3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51 Certificate issuer: /CN=3ecd53c66424c3f369ca88ee7af76adb25e18451 Certificate serial: 019B3F480FCC456D8B33EB9875C522D6640D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft Manifest number: 1151 Signing time: Sun 21 Dec 2025 05:00:45 +0000 Manifest this update: Sun 21 Dec 2025 05:00:45 +0000 Manifest next update: Mon 22 Dec 2025 05:00:45 +0000 Files and hashes: 1: NFHPImufF3uRqUgALoiOKsyNAWY.roa (hash: P38WvGerxAQEhXHw97XFuU4GA9ZzpqGUq811jnutzZs=) 2: Ps1TxmQkw_Npyojuevdq2yXhhFE.crl (hash: Y5RwtXJebNs7WyGx451VRU0xA2pVW508qVHt+NmH+XI=) 3: mI6j4UadWN59Ry8sBr4KvB0K8Yc.roa (hash: OgHmwZEN5FVoA8wv5XCNl8ngdl4mQaBcOydLvBf7mUc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:0f:cc:45:6d:8b:33:eb:98:75:c5:22:d6:64:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ecd53c66424c3f369ca88ee7af76adb25e18451 Validity Not Before: Dec 21 05:00:45 2025 GMT Not After : Dec 22 05:00:45 2025 GMT Subject: CN=adad6a4c320692de429bdb0028809e1db775ddcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:56:6b:a5:f7:9f:27:0c:b3:bf:5c:3e:97:b8: 7b:35:aa:8d:07:4a:ee:2f:a9:f9:6b:f5:f0:b4:fb: 5c:b0:8f:b5:85:21:46:d1:c6:41:13:fb:64:d0:86: ad:f8:95:e4:66:ed:92:e1:aa:63:c4:20:06:c5:d8: 48:59:96:c8:97:51:da:d0:69:c2:64:f8:bf:8b:91: 94:46:35:c2:4c:19:02:58:5f:70:12:f8:ad:1c:20: 78:b7:2d:58:07:9b:38:67:26:c6:30:79:83:3c:17: 96:b1:e2:ae:f3:97:21:c5:da:30:39:0a:db:e0:7e: 14:bd:d2:53:ef:30:7d:9b:bd:ca:5c:15:da:cb:bc: 24:9b:b3:14:8f:ca:1d:03:20:1e:95:c7:82:04:6a: a0:13:d4:5b:b8:e0:b9:a4:9d:e8:c5:48:93:0a:de: b3:03:d0:54:5c:a0:c8:3c:30:45:9f:9d:63:16:97: db:00:a6:6f:00:5a:ca:a5:e1:c0:0d:44:31:46:79: e6:85:d9:85:49:f3:ad:2f:f2:83:4c:59:4d:72:91: 87:da:6e:1d:cd:be:1e:c3:aa:1a:06:11:4e:61:28: 59:c5:c7:d4:be:82:c9:29:d7:df:3b:29:16:8f:d2: 2f:51:46:90:8a:38:e2:cf:1c:21:25:94:b2:6f:f9: ef:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:AD:6A:4C:32:06:92:DE:42:9B:DB:00:28:80:9E:1D:B7:75:DD:CC X509v3 Authority Key Identifier: keyid:3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:9b:2b:f8:6c:03:6c:b5:de:47:0c:bf:a4:5c:2c:bd:9a:80: 96:94:06:76:53:d1:27:80:4f:41:c6:00:21:73:29:90:a1:cc: 56:d0:92:95:0c:4e:9f:6f:b1:5b:f7:06:a7:03:14:14:34:de: 5d:f5:2f:70:cf:25:79:01:ac:46:00:b3:76:8a:5b:49:19:a4: 0a:a3:46:a6:77:1a:96:00:12:cc:25:d5:b6:82:31:a4:bf:82: 27:e7:e1:10:92:e9:df:d6:95:7f:94:36:ca:7a:1d:e4:9b:5a: 85:1d:e3:b5:47:43:1e:0d:83:32:a7:46:d4:41:7d:2c:5a:8b: d0:44:5d:38:3a:6d:fe:37:7b:d8:7a:60:da:74:8d:df:33:f6: 62:4d:40:c8:24:70:11:37:42:b9:1c:b7:61:9a:c8:31:64:d7: 3f:5b:d4:76:48:6c:9e:8b:3f:44:cb:46:1a:91:f3:e7:0a:b8: da:f5:9e:af:e6:45:1a:38:03:43:9f:af:36:e3:98:f5:5e:0e: 3d:68:67:b0:ad:a9:11:92:02:ba:76:3e:7a:c0:4e:76:20:61: 51:ba:83:16:7a:11:de:69:35:3f:2a:e6:d7:02:ff:f4:72:a0: 9d:a0:14:cd:86:77:48:45:c3:91:2b:f5:3b:13:19:13:78:fa: 20:7d:bd:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SA/MRW2LM+uYdcUi1mQNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlY2Q1M2M2NjQyNGMzZjM2OWNhODhlZTdhZjc2YWRiMjVl MTg0NTEwHhcNMjUxMjIxMDUwMDQ1WhcNMjUxMjIyMDUwMDQ1WjAzMTEwLwYDVQQD EyhhZGFkNmE0YzMyMDY5MmRlNDI5YmRiMDAyODgwOWUxZGI3NzVkZGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1ZrpfefJwyzv1w+l7h7NaqNB0ru L6n5a/XwtPtcsI+1hSFG0cZBE/tk0Iat+JXkZu2S4apjxCAGxdhIWZbIl1Ha0GnC ZPi/i5GURjXCTBkCWF9wEvitHCB4ty1YB5s4ZybGMHmDPBeWseKu85chxdowOQrb 4H4UvdJT7zB9m73KXBXay7wkm7MUj8odAyAelceCBGqgE9RbuOC5pJ3oxUiTCt6z A9BUXKDIPDBFn51jFpfbAKZvAFrKpeHADUQxRnnmhdmFSfOtL/KDTFlNcpGH2m4d zb4ew6oaBhFOYShZxcfUvoLJKdffOykWj9IvUUaQijjizxwhJZSyb/nvOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK2takwyBpLeQpvbACiAnh23dd3MMB8GA1UdIwQY MBaAFD7NU8ZkJMPzacqI7nr3atsl4YRRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHMxVHhtUWt3X05weW9qdWV2ZHEyeVhoaEZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lNjVhZGEtNGQ0YS00MDRkLTg3MDAt YzIyNTY4MDRlOTIyLzEvUHMxVHhtUWt3X05weW9qdWV2ZHEyeVhoaEZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9lNjVhZGEtNGQ0YS00MDRkLTg3MDAtYzIyNTY4MDRlOTIy LzEvUHMxVHhtUWt3X05weW9qdWV2ZHEyeVhoaEZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP5sr+GwD bLXeRwy/pFwsvZqAlpQGdlPRJ4BPQcYAIXMpkKHMVtCSlQxOn2+xW/cGpwMUFDTe XfUvcM8leQGsRgCzdopbSRmkCqNGpncalgASzCXVtoIxpL+CJ+fhEJLp39aVf5Q2 ynod5JtahR3jtUdDHg2DMqdG1EF9LFqL0ERdODpt/jd72Hpg2nSN3zP2Yk1AyCRw ETdCuRy3YZrIMWTXP1vUdkhsnos/RMtGGpHz5wq42vWer+ZFGjgDQ5+vNuOY9V4O PWhnsK2pEZICunY+esBOdiBhUbqDFnoR3mk1Pyrm1wL/9HKgnaAUzYZ3SEXDkSv1 OxMZE3j6IH29Qg== -----END CERTIFICATE-----Generated at Sun Dec 21 08:14:18 2025 by rpki-client