This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft File: Psb9kdKkNl09wWch_t9pIXK7MHM.mft (raw, json) Hash identifier: R9UnPxTjG4Qp6W00BZ37m4pqwMCkhVNtETpO73p6kTg= Subject key identifier: 2D:4C:E0:92:66:FA:43:A7:41:25:DA:DB:F8:38:C6:E4:22:45:DA:39 Authority key identifier: 3E:C6:FD:91:D2:A4:36:5D:3D:C1:67:21:FE:DF:69:21:72:BB:30:73 Certificate issuer: /CN=3ec6fd91d2a4365d3dc16721fedf692172bb3073 Certificate serial: 019B3A9034FE115FEEF0441EF9EC3EB68E4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft Manifest number: 14CB Signing time: Sat 20 Dec 2025 07:01:27 +0000 Manifest this update: Sat 20 Dec 2025 07:01:27 +0000 Manifest next update: Sun 21 Dec 2025 07:01:27 +0000 Files and hashes: 1: 0OYfvohoTXtpi59LO0J22cI1s3U.roa (hash: s7dK6PK+eP+XDZZ2HKEucZtuMEm89+4+6MLOTTKFjE0=) 2: Psb9kdKkNl09wWch_t9pIXK7MHM.crl (hash: uy9dQWw79TeChNMWGdfXcbvESOAyBBiimjvcBmcypBM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.crl rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:34:fe:11:5f:ee:f0:44:1e:f9:ec:3e:b6:8e:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ec6fd91d2a4365d3dc16721fedf692172bb3073 Validity Not Before: Dec 20 07:01:27 2025 GMT Not After : Dec 21 07:01:27 2025 GMT Subject: CN=2d4ce09266fa43a74125dadbf838c6e42245da39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:54:5f:dc:31:74:0d:1f:b9:94:85:86:c0:24: b6:0d:26:8a:e0:b6:39:ab:7b:15:4b:d6:33:04:71: 18:43:e4:c2:a1:84:7e:0f:db:fc:0a:88:50:62:d7: be:f5:9c:42:75:ab:f7:75:e7:21:a5:11:65:8b:fc: 0e:b9:c0:ac:db:56:e7:7b:59:5f:48:38:fa:28:f5: 22:73:8b:17:4c:c2:e9:ac:84:6b:7e:4f:78:3c:37: 7b:10:9f:a2:e1:1e:ca:65:fe:f7:2d:60:e4:7c:a7: 03:e6:7b:bb:31:b6:98:fa:2f:8c:44:a0:7d:e2:76: f9:13:b7:c4:f8:5f:af:89:7c:5b:86:f3:d2:b0:25: 86:24:ab:1d:a8:21:6b:f5:d4:fc:54:8f:75:58:74: 95:97:63:f4:9a:86:be:75:f3:5c:d2:d6:0c:9a:34: 3a:80:57:8f:23:40:40:e5:76:de:af:8d:0e:ab:bf: 92:39:25:3f:ca:37:19:ce:bb:f8:0b:f1:83:84:03: cf:e4:4b:8d:15:84:4d:4f:78:ff:c7:70:9c:64:1b: 92:ef:6c:ff:cc:24:1a:22:eb:f4:ab:54:e2:f6:7d: 70:ca:29:b6:78:8c:99:27:54:9a:6b:c6:3e:55:f8: 98:ba:ef:34:54:29:32:3d:c8:98:7b:da:e8:1d:93: f0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:4C:E0:92:66:FA:43:A7:41:25:DA:DB:F8:38:C6:E4:22:45:DA:39 X509v3 Authority Key Identifier: keyid:3E:C6:FD:91:D2:A4:36:5D:3D:C1:67:21:FE:DF:69:21:72:BB:30:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:ea:ad:a5:81:fa:bd:65:f0:02:71:c4:ae:5b:dd:bf:77:08: ea:53:1b:3c:b0:18:f4:fb:cf:c3:74:1d:bf:49:99:04:c6:bd: 8b:72:7a:c1:44:ff:06:18:94:67:29:73:a6:53:8c:00:a3:a2: 86:8b:98:39:01:7c:17:77:5d:ec:b4:11:e9:10:d1:4a:9c:b1: e9:ec:88:4e:fc:e6:aa:26:3b:3f:2e:9c:9f:99:2a:6d:61:0b: 4b:28:23:e0:f9:89:0f:ad:b2:ca:35:3d:c8:90:e9:3f:8f:54: 16:27:65:53:cf:5d:0f:23:8b:ec:ea:23:15:2b:ef:82:c5:41: 95:40:d4:5b:77:90:fa:86:c4:20:b0:4b:db:f7:a1:dc:71:a9: 57:bc:18:c5:7c:3d:8a:13:d3:63:ef:f8:84:eb:8c:1b:80:c4: 41:e1:e7:68:d6:38:30:09:9d:32:81:f8:75:fa:b8:96:dc:bd: 02:4c:e0:1c:7e:45:41:65:37:cb:46:1d:28:b5:fa:4a:07:4a: 68:23:c6:f5:3b:5b:df:5f:ae:c7:39:60:a1:a3:56:2f:6b:d7: 81:ca:e6:60:70:82:16:62:e7:37:0c:0a:ca:8c:10:dc:1f:bd: 44:45:e4:a9:96:d0:11:32:5a:0e:73:3b:ec:5f:d9:56:b6:e8: e0:85:08:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kDT+EV/u8EQe+ew+to5MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYzZmZDkxZDJhNDM2NWQzZGMxNjcyMWZlZGY2OTIxNzJi YjMwNzMwHhcNMjUxMjIwMDcwMTI3WhcNMjUxMjIxMDcwMTI3WjAzMTEwLwYDVQQD EygyZDRjZTA5MjY2ZmE0M2E3NDEyNWRhZGJmODM4YzZlNDIyNDVkYTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVRf3DF0DR+5lIWGwCS2DSaK4LY5 q3sVS9YzBHEYQ+TCoYR+D9v8CohQYte+9ZxCdav3dechpRFli/wOucCs21bne1lf SDj6KPUic4sXTMLprIRrfk94PDd7EJ+i4R7KZf73LWDkfKcD5nu7MbaY+i+MRKB9 4nb5E7fE+F+viXxbhvPSsCWGJKsdqCFr9dT8VI91WHSVl2P0moa+dfNc0tYMmjQ6 gFePI0BA5Xber40Oq7+SOSU/yjcZzrv4C/GDhAPP5EuNFYRNT3j/x3CcZBuS72z/ zCQaIuv0q1Ti9n1wyim2eIyZJ1Saa8Y+VfiYuu80VCkyPciYe9roHZPwvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC1M4JJm+kOnQSXa2/g4xuQiRdo5MB8GA1UdIwQY MBaAFD7G/ZHSpDZdPcFnIf7faSFyuzBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHNiOWtkS2tObDA5d1djaF90OXBJWEs3TUhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC80Y2RhNDctMzg0YS00MzU0LWJjYjQt YmVmMzU2MDViY2Q0LzEvUHNiOWtkS2tObDA5d1djaF90OXBJWEs3TUhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC80Y2RhNDctMzg0YS00MzU0LWJjYjQtYmVmMzU2MDViY2Q0 LzEvUHNiOWtkS2tObDA5d1djaF90OXBJWEs3TUhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMuqtpYH6 vWXwAnHErlvdv3cI6lMbPLAY9PvPw3Qdv0mZBMa9i3J6wUT/BhiUZylzplOMAKOi houYOQF8F3dd7LQR6RDRSpyx6eyITvzmqiY7Py6cn5kqbWELSygj4PmJD62yyjU9 yJDpP49UFidlU89dDyOL7OojFSvvgsVBlUDUW3eQ+obEILBL2/eh3HGpV7wYxXw9 ihPTY+/4hOuMG4DEQeHnaNY4MAmdMoH4dfq4lty9AkzgHH5FQWU3y0YdKLX6SgdK aCPG9Ttb31+uxzlgoaNWL2vXgcrmYHCCFmLnNwwKyowQ3B+9REXkqZbQETJaDnM7 7F/ZVrbo4IUIBw== -----END CERTIFICATE-----Generated at Sat Dec 20 12:38:09 2025 by rpki-client