This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft File: Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft (raw, json) Hash identifier: V5zLTxgIrWbilTbLwHveSi1ZFIXpNuqLXqbmh8/NBzw= Subject key identifier: F2:CF:B9:1F:CD:9E:8A:65:D2:65:AF:E7:20:C6:EA:64:73:1C:EA:21 Authority key identifier: 3E:AD:19:09:6B:0E:E0:80:FE:43:81:05:00:B7:18:A9:47:FE:D2:29 Certificate issuer: /CN=3ead19096b0ee080fe43810500b718a947fed229 Certificate serial: 019B3CEC2BC384DC1463D3A3DA1D201B2433 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft Manifest number: 0BB1 Signing time: Sat 20 Dec 2025 18:01:09 +0000 Manifest this update: Sat 20 Dec 2025 18:01:09 +0000 Manifest next update: Sun 21 Dec 2025 18:01:09 +0000 Files and hashes: 1: Bk8zYlSKqLYVsGMH3YEvHnLSsEU.roa (hash: LyRPaqVEcdiw5E3uBmgAAh9/7xweVS475crHOVmwvK8=) 2: Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl (hash: A9dYi92tIsc2Pdy0dlgvHsTRGQEDLMbL5ngKcko6NPs=) 3: gwj9P8ZuERM-SCTzjIoGfn0Rln0.roa (hash: 9JU5L0oKqu22gCI9ibec6Elcvk/4kJnQuHkzo4ps1r4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:2b:c3:84:dc:14:63:d3:a3:da:1d:20:1b:24:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ead19096b0ee080fe43810500b718a947fed229 Validity Not Before: Dec 20 18:01:09 2025 GMT Not After : Dec 21 18:01:09 2025 GMT Subject: CN=f2cfb91fcd9e8a65d265afe720c6ea64731cea21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:4b:d1:ae:70:67:e1:28:fa:fc:da:08:70:6b: e2:fa:f1:83:fd:62:91:2e:94:c9:6f:a3:84:39:2d: 00:17:a6:5e:1f:8d:88:c4:b3:4d:11:39:b4:c4:2c: 1d:e1:7f:aa:37:74:48:ab:b6:87:e7:9e:5b:0e:c7: e4:06:d4:02:de:54:fd:25:1f:89:eb:c2:09:18:2e: eb:68:91:7f:ca:70:cc:ed:93:1a:20:b7:4b:69:fe: 76:d2:08:61:8e:89:8a:8c:a5:cd:16:59:a0:bc:cd: f1:88:20:94:27:b4:9a:f7:77:fe:a7:0b:c0:74:88: ca:2c:4c:73:35:78:ca:78:fa:f5:23:64:76:34:2b: 04:73:9c:e0:91:2f:4f:2c:e2:04:c6:c9:59:47:7e: b4:70:31:39:57:e4:e6:1d:75:30:89:a1:28:35:85: 87:08:c0:da:e5:5a:e0:48:19:ab:b3:89:2a:89:84: 8c:ce:b2:dc:5a:85:ce:11:6e:b4:b7:29:c6:5c:25: 51:be:60:2c:b0:1f:76:32:5a:1a:0c:dd:46:6d:e2: f2:29:08:f2:e8:5a:da:d2:d2:f6:e3:6f:7d:14:5f: 8d:96:09:65:ac:8d:96:73:23:53:c2:47:c0:e7:12: cd:25:01:13:88:24:7e:ff:0a:a7:b5:22:6c:2c:01: 76:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:CF:B9:1F:CD:9E:8A:65:D2:65:AF:E7:20:C6:EA:64:73:1C:EA:21 X509v3 Authority Key Identifier: keyid:3E:AD:19:09:6B:0E:E0:80:FE:43:81:05:00:B7:18:A9:47:FE:D2:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:33:97:88:cb:f3:07:ba:e9:60:de:88:ac:b5:ce:0f:f8:66: 0b:a0:6e:a5:2d:a1:b5:30:fc:71:e4:7f:02:71:80:2f:79:7d: 39:10:8e:da:77:49:7f:2d:7b:2e:ed:12:ad:cd:fb:b9:4d:47: 2e:4f:6c:c7:82:49:c4:26:ed:5d:19:d9:23:83:e0:e7:34:27: ba:b1:9e:2a:24:0e:2a:5d:3b:8e:81:d0:76:e0:42:33:54:52: 62:4a:15:c9:78:64:48:b5:f7:a9:b8:98:27:49:8d:29:a9:a9: 10:27:ea:09:6a:e4:9a:65:83:91:ae:0e:da:5c:9a:a2:b1:c3: eb:7c:ca:40:88:c8:a4:44:04:58:ed:08:95:59:02:19:74:9c: e9:24:4d:83:c5:89:9d:95:68:ed:ae:63:47:1a:2c:8f:50:e7: 09:4e:6a:2f:ec:1c:6e:4c:93:f8:55:50:db:70:3d:74:92:47: b4:30:8d:50:86:d0:aa:01:f6:1b:75:8b:eb:c7:d7:b8:f1:da: 78:99:93:c3:f7:b6:07:0f:5c:28:44:b1:72:2c:c4:e8:00:2a: 8d:49:c4:33:2f:ef:23:0f:6e:d2:42:74:65:a9:1f:65:8c:14: 5c:09:45:95:82:9b:74:88:e5:28:c6:02:0f:7f:63:56:40:4c: e5:b4:b0:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87CvDhNwUY9Oj2h0gGyQzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYWQxOTA5NmIwZWUwODBmZTQzODEwNTAwYjcxOGE5NDdm ZWQyMjkwHhcNMjUxMjIwMTgwMTA5WhcNMjUxMjIxMTgwMTA5WjAzMTEwLwYDVQQD EyhmMmNmYjkxZmNkOWU4YTY1ZDI2NWFmZTcyMGM2ZWE2NDczMWNlYTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6UvRrnBn4Sj6/NoIcGvi+vGD/WKR LpTJb6OEOS0AF6ZeH42IxLNNETm0xCwd4X+qN3RIq7aH555bDsfkBtQC3lT9JR+J 68IJGC7raJF/ynDM7ZMaILdLaf520ghhjomKjKXNFlmgvM3xiCCUJ7Sa93f+pwvA dIjKLExzNXjKePr1I2R2NCsEc5zgkS9PLOIExslZR360cDE5V+TmHXUwiaEoNYWH CMDa5VrgSBmrs4kqiYSMzrLcWoXOEW60tynGXCVRvmAssB92MloaDN1GbeLyKQjy 6Fra0tL24299FF+NlgllrI2WcyNTwkfA5xLNJQETiCR+/wqntSJsLAF2UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPLPuR/Nnopl0mWv5yDG6mRzHOohMB8GA1UdIwQY MBaAFD6tGQlrDuCA/kOBBQC3GKlH/tIpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHEwWkNXc080SUQtUTRFRkFMY1lxVWYtMGlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy82M2JiNzktOTNiMC00OTlmLTk3OGQt MTBmZTQ0NzI2OTA4LzEvUHEwWkNXc080SUQtUTRFRkFMY1lxVWYtMGlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy82M2JiNzktOTNiMC00OTlmLTk3OGQtMTBmZTQ0NzI2OTA4 LzEvUHEwWkNXc080SUQtUTRFRkFMY1lxVWYtMGlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsjOXiMvz B7rpYN6IrLXOD/hmC6BupS2htTD8ceR/AnGAL3l9ORCO2ndJfy17Lu0Src37uU1H Lk9sx4JJxCbtXRnZI4Pg5zQnurGeKiQOKl07joHQduBCM1RSYkoVyXhkSLX3qbiY J0mNKampECfqCWrkmmWDka4O2lyaorHD63zKQIjIpEQEWO0IlVkCGXSc6SRNg8WJ nZVo7a5jRxosj1DnCU5qL+wcbkyT+FVQ23A9dJJHtDCNUIbQqgH2G3WL68fXuPHa eJmTw/e2Bw9cKESxcizE6AAqjUnEMy/vIw9u0kJ0ZakfZYwUXAlFlYKbdIjlKMYC D39jVkBM5bSwXg== -----END CERTIFICATE-----Generated at Sat Dec 20 23:54:23 2025 by rpki-client