This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft File: PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft (raw, json) Hash identifier: aFesjOM7e7M+RuP+AnvNAcCZ5shKfYBJjOWTukHcVt0= Subject key identifier: 95:DC:17:C8:EA:0A:CF:B4:1C:D8:47:D0:03:D3:72:FE:82:A3:AE:4F Authority key identifier: 3D:E2:68:1D:DA:00:70:2A:75:97:A7:12:57:E1:4F:7A:72:5E:89:0E Certificate issuer: /CN=3de2681dda00702a7597a71257e14f7a725e890e Certificate serial: 019B3C0FED5FA45B988A7BC9AE885C1FA18F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft Manifest number: 0C3F Signing time: Sat 20 Dec 2025 14:00:35 +0000 Manifest this update: Sat 20 Dec 2025 14:00:35 +0000 Manifest next update: Sun 21 Dec 2025 14:00:35 +0000 Files and hashes: 1: 3bt8Km81z8fgEHaLeSOeYgfebxU.roa (hash: pKoz7jrxy/U6s9br1hGRmLBPhCh8rgMf271vqsN5GJk=) 2: 4Mdmn6MaRoFLUycUXlZaFSGboEs.roa (hash: C9ut+tYKUryPFgIx2+ThOOLJz+YjKuj147RuRXfxtis=) 3: H7RDadMRjVcvma8PhFugcKUdoT0.roa (hash: 6sD2c8/NrghCekThtfpslB8AAW0einNgCY8Rjyouu9I=) 4: Oioxvop9FV5K4rtOSvh02jeAj-g.roa (hash: 1Oax9rdfDuKch357rIzJmOSBUOYvQbkuoDRF8in9c8A=) 5: P0-q-BdDXYrwKYDCUC5gegtCTZE.roa (hash: oO/hx6p/KCHt0e0eW15T8NOjsXnklfDaMDxz69ADiuE=) 6: PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl (hash: ISXWBCFfrhCQsEn93ZJCBcpsEHNiVJQQ6evKPi2vsXI=) 7: ceFPC_Zj6p3cuB8qXQeMqvZfZa4.roa (hash: 01KlZ4a2kJZ4Ly4Y7K5EQ5UlAiINB2ZUF09ye0hG3lc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:0f:ed:5f:a4:5b:98:8a:7b:c9:ae:88:5c:1f:a1:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3de2681dda00702a7597a71257e14f7a725e890e Validity Not Before: Dec 20 14:00:35 2025 GMT Not After : Dec 21 14:00:35 2025 GMT Subject: CN=95dc17c8ea0acfb41cd847d003d372fe82a3ae4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0d:a2:48:d4:e5:ca:74:fb:8f:60:53:cc:ce: 72:b6:9c:51:8a:1a:60:85:e2:d8:ac:f6:2a:a0:fc: 48:00:59:ca:8b:89:12:61:f1:06:3f:67:22:5f:31: cd:28:9e:99:2e:fc:6a:94:e5:20:93:31:8b:71:10: b0:41:74:92:c1:63:64:77:b5:d3:8b:a4:dc:3a:91: 0f:b0:25:b8:d4:48:b4:a2:3a:de:c6:b7:e3:4b:16: 30:3b:02:16:cf:13:60:67:1d:bb:bf:ad:28:e0:c6: c8:6b:f0:aa:6d:d7:7a:59:5f:dc:47:0e:a9:0a:fe: af:63:d4:9b:38:ba:f0:d9:f2:0c:eb:15:e7:f1:f5: 48:58:69:bf:54:a7:99:9c:b9:c7:58:91:b9:05:ac: 88:50:47:5a:a1:0a:10:95:e4:ad:08:fc:48:d1:ff: 13:8d:a4:66:cb:e1:44:32:af:35:18:a7:cf:ba:4b: 58:9a:8b:f0:3d:29:d2:b2:10:f2:4b:09:a1:39:9d: 48:94:1b:ae:37:58:85:28:5a:01:94:2d:4a:48:20: 98:61:d7:a3:95:a3:03:63:df:b0:73:8a:10:bb:2c: 4a:dc:99:27:c5:31:d7:2b:0f:5e:6c:cc:db:6c:32: f6:55:d8:e3:a7:cc:77:05:df:2a:c6:35:44:73:f1: 4c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:DC:17:C8:EA:0A:CF:B4:1C:D8:47:D0:03:D3:72:FE:82:A3:AE:4F X509v3 Authority Key Identifier: keyid:3D:E2:68:1D:DA:00:70:2A:75:97:A7:12:57:E1:4F:7A:72:5E:89:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:3e:68:e4:81:0a:97:f2:ce:6c:8e:ee:97:bc:74:61:3e:d5: dd:87:ae:ed:c0:c3:3c:bb:24:2f:ce:d9:d8:4f:79:df:6c:1b: 0c:24:e3:60:04:91:55:82:a1:c8:ee:a4:8c:af:64:ba:8c:5b: dd:02:aa:72:2d:6a:e5:b3:c2:1c:7b:0b:f1:be:3b:f7:25:4e: 63:85:96:ed:61:8b:cb:bf:0a:2e:86:d0:ac:37:64:a5:d1:33: d6:ae:75:10:96:ea:65:c9:0c:7a:00:92:d5:79:a6:9d:aa:d4: 28:9b:38:81:56:4f:9b:47:79:1b:79:97:9f:f7:fb:7e:85:17: 22:6e:68:08:0a:2d:f7:e9:eb:25:15:9d:8a:c5:9e:06:8c:6e: af:95:fe:ab:b1:f4:fd:a7:81:e5:60:de:61:f8:c8:9e:66:29: f4:5e:2d:10:bf:df:60:29:46:9f:41:12:11:fc:0d:b7:d9:09: 85:3d:0e:16:11:11:53:32:b2:0c:2f:29:f7:88:2b:22:d3:96: 13:7f:e9:32:4e:b1:c0:0e:80:b5:0a:30:83:e3:6f:2c:11:62: 07:75:ff:1b:51:2c:ae:be:6d:e6:67:1f:ed:2b:75:7b:f2:3a: af:49:45:67:79:29:b4:7b:78:8a:75:3b:6a:f4:70:5a:69:68: e3:2f:42:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8D+1fpFuYinvJrohcH6GPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkZTI2ODFkZGEwMDcwMmE3NTk3YTcxMjU3ZTE0ZjdhNzI1 ZTg5MGUwHhcNMjUxMjIwMTQwMDM1WhcNMjUxMjIxMTQwMDM1WjAzMTEwLwYDVQQD Eyg5NWRjMTdjOGVhMGFjZmI0MWNkODQ3ZDAwM2QzNzJmZTgyYTNhZTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsA2iSNTlynT7j2BTzM5ytpxRihpg heLYrPYqoPxIAFnKi4kSYfEGP2ciXzHNKJ6ZLvxqlOUgkzGLcRCwQXSSwWNkd7XT i6TcOpEPsCW41Ei0ojrexrfjSxYwOwIWzxNgZx27v60o4MbIa/Cqbdd6WV/cRw6p Cv6vY9SbOLrw2fIM6xXn8fVIWGm/VKeZnLnHWJG5BayIUEdaoQoQleStCPxI0f8T jaRmy+FEMq81GKfPuktYmovwPSnSshDySwmhOZ1IlBuuN1iFKFoBlC1KSCCYYdej laMDY9+wc4oQuyxK3JknxTHXKw9ebMzbbDL2Vdjjp8x3Bd8qxjVEc/FM4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJXcF8jqCs+0HNhH0APTcv6Co65PMB8GA1UdIwQY MBaAFD3iaB3aAHAqdZenElfhT3pyXokOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGVKb0hkb0FjQ3AxbDZjU1YtRlBlbkplaVE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8zNmQ2ZTQtOGQ3Ny00OGQ1LWFmYjYt ZTBhYzcyNjNkYjEyLzEvUGVKb0hkb0FjQ3AxbDZjU1YtRlBlbkplaVE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8zNmQ2ZTQtOGQ3Ny00OGQ1LWFmYjYtZTBhYzcyNjNkYjEy LzEvUGVKb0hkb0FjQ3AxbDZjU1YtRlBlbkplaVE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAT5o5IEK l/LObI7ul7x0YT7V3Yeu7cDDPLskL87Z2E9532wbDCTjYASRVYKhyO6kjK9kuoxb 3QKqci1q5bPCHHsL8b479yVOY4WW7WGLy78KLobQrDdkpdEz1q51EJbqZckMegCS 1XmmnarUKJs4gVZPm0d5G3mXn/f7foUXIm5oCAot9+nrJRWdisWeBoxur5X+q7H0 /aeB5WDeYfjInmYp9F4tEL/fYClGn0ESEfwNt9kJhT0OFhERUzKyDC8p94grItOW E3/pMk6xwA6AtQowg+NvLBFiB3X/G1Esrr5t5mcf7St1e/I6r0lFZ3kptHt4inU7 avRwWmlo4y9Cew== -----END CERTIFICATE-----Generated at Sat Dec 20 20:47:14 2025 by rpki-client