This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft File: d-PCkAtZl1QoPyfztOjX9sRRCXI.mft (raw, json) Hash identifier: J4B1u/0b/YhE/vOEy9IgTUwSiA6yU5Zy0g+N8JGmqd4= Subject key identifier: B7:EE:7A:1B:36:4F:48:E5:1F:FF:2F:70:EE:4C:78:F6:50:22:35:F7 Authority key identifier: 77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72 Certificate issuer: /CN=77e3c2900b599754283f27f3b4e8d7f6c4510972 Certificate serial: 019B3E6C7DFD4172F13D5EA0B379E2B7E06D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft Manifest number: 0EDB Signing time: Sun 21 Dec 2025 01:00:56 +0000 Manifest this update: Sun 21 Dec 2025 01:00:56 +0000 Manifest next update: Mon 22 Dec 2025 01:00:56 +0000 Files and hashes: 1: 6FBdm52HrIwxns50lJrMCqThYUM.roa (hash: Fb4owa3jjdnAYqjY2HP/KocZ2u55DXUdS4g1VNhxtCk=) 2: 8V29SLLHHHPak0CW_pb1i9F5mpI.roa (hash: hNuKjceR9DAU4JupE05WFNYQ/cRQ1qbfm397GXwMfeU=) 3: NuaYdI8PAUdP5rZIDe_aHIxvDG0.roa (hash: 9p6cAT0+JvuwI2Q0k7hF6wK1Ly//dC0ShsZ9CdG4PCA=) 4: d-PCkAtZl1QoPyfztOjX9sRRCXI.crl (hash: aKz8/z7pkhcLN7vi2wZM0uhP2YMfufgKVTU27kA3Qp0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:7d:fd:41:72:f1:3d:5e:a0:b3:79:e2:b7:e0:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77e3c2900b599754283f27f3b4e8d7f6c4510972 Validity Not Before: Dec 21 01:00:56 2025 GMT Not After : Dec 22 01:00:56 2025 GMT Subject: CN=b7ee7a1b364f48e51fff2f70ee4c78f6502235f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:77:61:78:61:e2:05:e6:23:53:16:e5:09:34: 8f:16:db:db:78:4a:d7:90:90:a0:63:01:c6:57:ca: 47:33:b3:94:c9:d7:2f:b3:86:30:24:5a:17:fe:b0: be:bb:26:58:dc:83:d5:00:81:9d:b0:70:6a:6f:10: 2a:fd:66:c9:24:95:b3:18:87:d7:91:81:db:11:53: 78:9d:1f:74:68:4a:f7:78:c1:6d:d2:7c:5a:7c:26: 0a:9e:4c:55:53:67:6f:9f:23:3a:8a:a0:d2:a8:05: c2:76:15:93:f1:c4:d5:a9:a6:27:50:c4:aa:34:d2: 96:65:d0:19:ae:90:fa:96:ee:5e:61:5d:06:01:85: 5f:91:5f:cb:56:8f:d2:00:30:7f:c6:2c:d5:62:1c: f7:26:d6:b3:10:a3:b5:96:25:29:ad:7f:8a:6b:4b: 16:8b:c1:73:b2:dc:6f:41:5d:90:e5:6e:69:28:b1: 68:ea:fc:46:50:15:62:6c:81:2c:59:59:7a:18:9e: 53:01:61:76:17:44:c5:18:e8:b1:d9:36:c0:1a:eb: 25:cd:71:ec:4f:46:9e:81:a6:1d:ed:b9:21:5d:ae: 71:08:ef:04:ab:b9:67:df:53:81:ca:fe:4a:9d:d7: b4:ca:c1:6b:6c:af:a1:8d:3d:90:eb:e0:ab:76:8c: 18:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:EE:7A:1B:36:4F:48:E5:1F:FF:2F:70:EE:4C:78:F6:50:22:35:F7 X509v3 Authority Key Identifier: keyid:77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:51:28:df:65:3e:18:84:af:2f:af:c4:4c:40:09:ef:fe:cd: d3:79:d6:12:68:86:68:2e:3f:b1:29:0d:bb:02:81:7a:d4:4b: 20:5f:ab:4b:cc:9a:34:4c:c8:37:df:d0:1b:17:33:de:41:26: 19:c7:cb:e6:79:37:1a:52:7c:38:ba:90:7f:5a:19:fc:e3:dd: bd:76:cb:37:33:5f:43:97:fc:29:1c:37:a3:34:96:e2:a9:2b: bd:73:53:4c:a5:97:97:8a:13:3e:e6:6b:22:de:44:61:ef:a5: 2a:4f:c8:59:6c:ac:6a:9a:02:7b:58:b5:48:ee:ac:ec:0e:58: 5b:7f:b1:8f:b5:e9:d3:2a:39:06:ac:fb:49:ca:43:c8:ea:d1: f2:71:41:f8:9d:03:f6:cf:d8:3e:ef:a0:03:e8:e9:b4:6a:68: 1f:9b:f5:d1:50:26:da:74:5d:8f:69:92:f0:3d:36:12:34:a7: 76:ac:50:8b:df:f1:1b:88:0d:64:c7:07:d5:85:7d:3f:46:e5: 1b:ea:7a:75:cf:c8:75:c9:e0:b4:00:0e:1d:8c:f2:cb:ae:d1: cb:98:a9:c8:04:95:e5:54:9e:1b:0d:db:c6:cf:82:9c:0f:6d: 57:a8:a4:5b:5e:a5:d9:e5:56:41:44:d5:24:d3:be:61:b4:11: db:42:f0:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bH39QXLxPV6gs3nit+BtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3ZTNjMjkwMGI1OTk3NTQyODNmMjdmM2I0ZThkN2Y2YzQ1 MTA5NzIwHhcNMjUxMjIxMDEwMDU2WhcNMjUxMjIyMDEwMDU2WjAzMTEwLwYDVQQD EyhiN2VlN2ExYjM2NGY0OGU1MWZmZjJmNzBlZTRjNzhmNjUwMjIzNWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3dheGHiBeYjUxblCTSPFtvbeErX kJCgYwHGV8pHM7OUydcvs4YwJFoX/rC+uyZY3IPVAIGdsHBqbxAq/WbJJJWzGIfX kYHbEVN4nR90aEr3eMFt0nxafCYKnkxVU2dvnyM6iqDSqAXCdhWT8cTVqaYnUMSq NNKWZdAZrpD6lu5eYV0GAYVfkV/LVo/SADB/xizVYhz3JtazEKO1liUprX+Ka0sW i8FzstxvQV2Q5W5pKLFo6vxGUBVibIEsWVl6GJ5TAWF2F0TFGOix2TbAGuslzXHs T0aegaYd7bkhXa5xCO8Eq7ln31OByv5Knde0ysFrbK+hjT2Q6+CrdowYXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLfuehs2T0jlH/8vcO5MePZQIjX3MB8GA1UdIwQY MBaAFHfjwpALWZdUKD8n87To1/bEUQlyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZC1QQ2tBdFpsMVFvUHlmenRPalg5c1JSQ1hJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9lZjJiNDktMDM1Zi00MGE0LWFlNTEt ZDNjNTVkNGZkYTlkLzEvZC1QQ2tBdFpsMVFvUHlmenRPalg5c1JSQ1hJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9lZjJiNDktMDM1Zi00MGE0LWFlNTEtZDNjNTVkNGZkYTlk LzEvZC1QQ2tBdFpsMVFvUHlmenRPalg5c1JSQ1hJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOlEo32U+ GISvL6/ETEAJ7/7N03nWEmiGaC4/sSkNuwKBetRLIF+rS8yaNEzIN9/QGxcz3kEm GcfL5nk3GlJ8OLqQf1oZ/OPdvXbLNzNfQ5f8KRw3ozSW4qkrvXNTTKWXl4oTPuZr It5EYe+lKk/IWWysapoCe1i1SO6s7A5YW3+xj7Xp0yo5Bqz7ScpDyOrR8nFB+J0D 9s/YPu+gA+jptGpoH5v10VAm2nRdj2mS8D02EjSndqxQi9/xG4gNZMcH1YV9P0bl G+p6dc/IdcngtAAOHYzyy67Ry5ipyASV5VSeGw3bxs+CnA9tV6ikW16l2eVWQUTV JNO+YbQR20Lwow== -----END CERTIFICATE-----Generated at Sun Dec 21 09:12:02 2025 by rpki-client