This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft File: pqxtBp2PtzL0_pK04TzX3E05OkI.mft (raw, json) Hash identifier: O3xw6PQzCGbtDlwn/nwagUvoA6qeXePJksvOqK13LXA= Subject key identifier: 3D:AD:26:75:2C:A0:18:C5:D3:A5:61:EE:AA:4B:85:FD:CC:E8:F9:0E Authority key identifier: A6:AC:6D:06:9D:8F:B7:32:F4:FE:92:B4:E1:3C:D7:DC:4D:39:3A:42 Certificate issuer: /CN=a6ac6d069d8fb732f4fe92b4e13cd7dc4d393a42 Certificate serial: 019B3CEC72C9E742456C8E4B05E922F983C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft Manifest number: 0CFB Signing time: Sat 20 Dec 2025 18:01:27 +0000 Manifest this update: Sat 20 Dec 2025 18:01:27 +0000 Manifest next update: Sun 21 Dec 2025 18:01:27 +0000 Files and hashes: 1: kORzGbUwfQz_reUfKxE-VKML1Ko.roa (hash: LJNSK27C7NQtNI1BCy3DsB/OzJxofkAzOY3Bw0ai+Lk=) 2: pqxtBp2PtzL0_pK04TzX3E05OkI.crl (hash: mEVtmqDv/s1h0JbB6XnWTCuLilrXUXdjAHwEr5ixAG4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:72:c9:e7:42:45:6c:8e:4b:05:e9:22:f9:83:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6ac6d069d8fb732f4fe92b4e13cd7dc4d393a42 Validity Not Before: Dec 20 18:01:27 2025 GMT Not After : Dec 21 18:01:27 2025 GMT Subject: CN=3dad26752ca018c5d3a561eeaa4b85fdcce8f90e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7e:19:6b:9d:b2:83:8e:47:dc:6c:4e:88:e7: d4:d5:5a:00:bd:75:98:9f:b9:f6:11:c5:ce:ba:7d: 1a:b1:0f:40:84:13:76:fe:40:80:07:39:fe:91:4d: f9:3f:ca:ea:dc:d6:7c:d3:60:fe:9c:21:c6:8f:25: 55:64:bc:f5:4d:10:81:ee:ba:11:2c:24:8b:84:43: 98:97:fa:a3:ac:3a:6d:43:3d:43:30:2d:36:6b:bb: 9c:8d:d1:1c:23:53:a3:92:25:19:fc:1b:04:fe:8b: fa:04:e7:40:3c:bd:d7:3d:fa:a7:36:05:37:94:6d: 6b:5e:c8:dc:4d:21:51:8b:d6:8a:e9:80:f1:30:e8: 2b:0e:a2:dd:c5:20:6f:d4:4b:38:ff:43:10:d9:d0: b9:00:ad:b2:ea:a9:33:31:6f:54:84:9b:da:81:24: 64:0f:a0:6f:0a:b0:2f:08:1f:81:50:4c:74:9e:15: 39:98:90:7c:26:c6:26:16:07:45:7a:5a:46:06:d5: 52:67:f9:06:57:59:29:db:32:62:a9:d7:93:a8:11: ec:04:ca:9e:45:5d:02:7e:cb:e0:66:88:8e:79:ed: 9b:a2:d7:35:ca:90:c1:55:45:f6:54:3c:ce:5d:74: 82:9b:47:3c:df:74:1f:9b:96:6d:f6:5a:9c:88:80: 1d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:AD:26:75:2C:A0:18:C5:D3:A5:61:EE:AA:4B:85:FD:CC:E8:F9:0E X509v3 Authority Key Identifier: keyid:A6:AC:6D:06:9D:8F:B7:32:F4:FE:92:B4:E1:3C:D7:DC:4D:39:3A:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:08:aa:5a:8a:7b:7a:12:cf:7e:33:01:77:70:43:ad:5d:c0: 22:6c:78:00:7d:18:a4:9d:12:5a:8e:0c:00:c6:30:8a:66:e5: ac:10:be:64:c3:6d:39:12:c7:ae:b6:9e:09:d7:42:89:c8:3e: da:a0:d5:ed:3a:c1:1e:fd:a8:21:06:40:fd:f2:4e:eb:4e:0e: 78:a4:57:be:4a:33:c8:dd:f3:ca:eb:ef:1d:d6:1d:86:fa:45: da:f2:93:cf:16:dd:a1:05:1a:cd:82:be:91:0e:aa:69:23:01: e6:28:b6:55:14:9b:2b:df:3f:43:c7:e6:c6:93:54:94:9d:fc: 38:54:61:f7:7f:6e:91:2d:a8:fe:93:4d:d6:0f:35:34:2c:7f: 71:bf:6e:2f:d5:28:3d:d2:70:bf:27:40:f0:6c:2c:8f:76:84: a3:ad:0e:c8:35:98:df:58:3b:1f:af:ea:65:54:6a:3d:e1:7c: a6:71:b9:1c:e3:70:ec:b0:d3:e2:33:99:5d:ad:8c:f8:fc:4a: a6:2c:83:d5:7f:da:31:9b:8e:86:f8:81:e5:d4:f4:ab:ff:88: 45:e6:3a:21:2d:f3:bc:b0:b9:c5:d0:9a:66:6a:30:78:e3:fe: e9:b5:1e:6c:c5:d4:ef:dd:ed:0c:1c:12:25:38:1a:92:2b:80: 4d:04:f9:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87HLJ50JFbI5LBeki+YPIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2YWM2ZDA2OWQ4ZmI3MzJmNGZlOTJiNGUxM2NkN2RjNGQz OTNhNDIwHhcNMjUxMjIwMTgwMTI3WhcNMjUxMjIxMTgwMTI3WjAzMTEwLwYDVQQD EygzZGFkMjY3NTJjYTAxOGM1ZDNhNTYxZWVhYTRiODVmZGNjZThmOTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw34Za52yg45H3GxOiOfU1VoAvXWY n7n2EcXOun0asQ9AhBN2/kCABzn+kU35P8rq3NZ802D+nCHGjyVVZLz1TRCB7roR LCSLhEOYl/qjrDptQz1DMC02a7ucjdEcI1OjkiUZ/BsE/ov6BOdAPL3XPfqnNgU3 lG1rXsjcTSFRi9aK6YDxMOgrDqLdxSBv1Es4/0MQ2dC5AK2y6qkzMW9UhJvagSRk D6BvCrAvCB+BUEx0nhU5mJB8JsYmFgdFelpGBtVSZ/kGV1kp2zJiqdeTqBHsBMqe RV0CfsvgZoiOee2botc1ypDBVUX2VDzOXXSCm0c833Qfm5Zt9lqciIAdTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD2tJnUsoBjF06Vh7qpLhf3M6PkOMB8GA1UdIwQY MBaAFKasbQadj7cy9P6StOE819xNOTpCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHF4dEJwMlB0ekwwX3BLMDRUelgzRTA1T2tJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9jMDlmMDItNzUxMC00MmVhLWIyODEt YmZhMDNhNjY4NTc3LzEvcHF4dEJwMlB0ekwwX3BLMDRUelgzRTA1T2tJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9jMDlmMDItNzUxMC00MmVhLWIyODEtYmZhMDNhNjY4NTc3 LzEvcHF4dEJwMlB0ekwwX3BLMDRUelgzRTA1T2tJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnAiqWop7 ehLPfjMBd3BDrV3AImx4AH0YpJ0SWo4MAMYwimblrBC+ZMNtORLHrraeCddCicg+ 2qDV7TrBHv2oIQZA/fJO604OeKRXvkozyN3zyuvvHdYdhvpF2vKTzxbdoQUazYK+ kQ6qaSMB5ii2VRSbK98/Q8fmxpNUlJ38OFRh939ukS2o/pNN1g81NCx/cb9uL9Uo PdJwvydA8Gwsj3aEo60OyDWY31g7H6/qZVRqPeF8pnG5HONw7LDT4jOZXa2M+PxK piyD1X/aMZuOhviB5dT0q/+IReY6IS3zvLC5xdCaZmoweOP+6bUebMXU793tDBwS JTgakiuATQT5/g== -----END CERTIFICATE-----Generated at Sat Dec 20 21:47:49 2025 by rpki-client