This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.mft File: PxyTi7IGo4ltBkwIUvqYhf8s69k.mft (raw, json) Hash identifier: wQ/bhiE0JlxCHuWUO7J6ZC0GUWo1I6H2Uznb5nRQLdY= Subject key identifier: 2A:8C:7B:DD:89:31:7E:31:50:B0:C7:5B:FE:2F:48:21:93:90:66:95 Authority key identifier: 3F:1C:93:8B:B2:06:A3:89:6D:06:4C:08:52:FA:98:85:FF:2C:EB:D9 Certificate issuer: /CN=3f1c938bb206a3896d064c0852fa9885ff2cebd9 Certificate serial: 019B3E6C49E5FA28273E5688502262D91565 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxyTi7IGo4ltBkwIUvqYhf8s69k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.mft Manifest number: 04B8 Signing time: Sun 21 Dec 2025 01:00:42 +0000 Manifest this update: Sun 21 Dec 2025 01:00:42 +0000 Manifest next update: Mon 22 Dec 2025 01:00:42 +0000 Files and hashes: 1: PxyTi7IGo4ltBkwIUvqYhf8s69k.crl (hash: sP2OMmHefkOEPC8U4/CnwnI67p2mzJ33SJ6t74BX9Vg=) 2: Qtry2kaoKZp9d0kAKEVlWC9a8yA.roa (hash: 4P/5LEPA+7GLBNpRQSC8l1dlaoBUTtizVxJtdSJCc5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.crl rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.mft rsync://rpki.ripe.net/repository/DEFAULT/PxyTi7IGo4ltBkwIUvqYhf8s69k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:49:e5:fa:28:27:3e:56:88:50:22:62:d9:15:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f1c938bb206a3896d064c0852fa9885ff2cebd9 Validity Not Before: Dec 21 01:00:42 2025 GMT Not After : Dec 22 01:00:42 2025 GMT Subject: CN=2a8c7bdd89317e3150b0c75bfe2f482193906695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:74:68:86:37:a8:95:43:26:81:d9:40:1d:c5: 9c:87:0f:5d:07:4f:d2:c9:5b:6c:96:f6:a9:95:71: e6:04:c7:a1:48:6e:49:a2:f2:57:6c:7e:97:3d:63: bf:8b:48:f2:61:e1:3d:b4:ce:c6:f6:5a:11:5a:3d: 6d:d5:f5:d4:0e:cc:cc:17:23:1a:e9:7f:bc:80:8e: 23:77:65:57:ec:39:78:b8:f6:33:81:fa:5d:c1:66: 13:3b:95:70:b9:5b:e5:4e:b8:59:98:a6:d1:3d:1a: 46:14:f3:00:cd:f9:44:3b:4e:52:a4:2d:07:a1:42: 16:30:7f:0a:a7:fc:03:e7:48:f2:79:20:4c:51:27: 9e:10:db:33:d5:8e:ae:6e:39:42:17:5b:b1:44:94: 96:01:b3:16:94:f1:2b:48:b2:b1:a5:5c:34:80:ce: 89:bd:90:81:0e:1b:97:85:15:16:07:53:2d:95:5f: 21:ed:31:8e:e5:96:32:18:9f:98:db:b9:e2:ac:70: be:0a:18:e3:aa:2c:d2:a0:b3:13:8e:84:9a:e0:17: 8f:84:d0:30:30:5d:ab:54:1a:36:a6:2d:b4:39:c0: e9:61:ce:73:5c:17:95:93:f3:7c:9c:2d:08:49:c6: 45:61:2e:88:a1:57:49:4e:78:f7:80:f6:e3:4e:36: 5d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:8C:7B:DD:89:31:7E:31:50:B0:C7:5B:FE:2F:48:21:93:90:66:95 X509v3 Authority Key Identifier: keyid:3F:1C:93:8B:B2:06:A3:89:6D:06:4C:08:52:FA:98:85:FF:2C:EB:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxyTi7IGo4ltBkwIUvqYhf8s69k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:bf:12:4c:cc:e4:ad:8a:67:0b:78:e5:85:e2:9d:21:8d:33: aa:26:bf:0d:e2:c6:bc:6b:44:f1:31:14:fd:44:99:62:20:cc: 5f:f1:37:22:0a:73:f2:3c:0d:8f:50:3f:f8:28:80:ea:c2:a4: 7a:a7:38:84:7a:d0:c7:6f:71:6b:4e:f0:20:80:75:58:57:0e: 17:9c:6a:e3:e1:7d:50:62:11:4d:ac:b4:0c:5f:a2:27:6e:97: 17:2c:2a:7d:8a:83:73:a8:ad:af:0d:95:b3:13:af:e5:72:03: 8c:c0:30:1c:1a:50:8f:35:ab:6b:d1:b6:12:a6:ab:9b:5c:b1: 16:9a:39:dc:a8:90:3a:26:8d:6f:20:1e:6c:d5:89:c3:9e:41: 52:62:2e:ec:c1:36:99:77:70:00:e1:4f:c5:c7:14:23:74:a4: ed:12:26:cb:3f:0e:5f:e5:b0:b3:5c:32:b0:98:c0:9e:50:8c: cd:0d:e8:ca:49:73:03:41:4f:af:82:7e:54:63:93:47:96:3f: ac:7d:95:bb:fb:52:2f:27:6e:57:b0:27:82:e8:94:47:5d:6c: ef:a1:e9:d1:f6:1c:90:b9:b1:61:5a:16:3c:88:49:85:46:4a: 74:ee:83:63:7a:93:e1:6e:3d:53:8d:87:8f:31:b1:97:14:36: 45:bb:3c:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bEnl+ignPlaIUCJi2RVlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmMWM5MzhiYjIwNmEzODk2ZDA2NGMwODUyZmE5ODg1ZmYy Y2ViZDkwHhcNMjUxMjIxMDEwMDQyWhcNMjUxMjIyMDEwMDQyWjAzMTEwLwYDVQQD EygyYThjN2JkZDg5MzE3ZTMxNTBiMGM3NWJmZTJmNDgyMTkzOTA2Njk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXRohjeolUMmgdlAHcWchw9dB0/S yVtslvaplXHmBMehSG5JovJXbH6XPWO/i0jyYeE9tM7G9loRWj1t1fXUDszMFyMa 6X+8gI4jd2VX7Dl4uPYzgfpdwWYTO5VwuVvlTrhZmKbRPRpGFPMAzflEO05SpC0H oUIWMH8Kp/wD50jyeSBMUSeeENsz1Y6ubjlCF1uxRJSWAbMWlPErSLKxpVw0gM6J vZCBDhuXhRUWB1MtlV8h7TGO5ZYyGJ+Y27nirHC+ChjjqizSoLMTjoSa4BePhNAw MF2rVBo2pi20OcDpYc5zXBeVk/N8nC0IScZFYS6IoVdJTnj3gPbjTjZdFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCqMe92JMX4xULDHW/4vSCGTkGaVMB8GA1UdIwQY MBaAFD8ck4uyBqOJbQZMCFL6mIX/LOvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHh5VGk3SUdvNGx0Qmt3SVV2cVloZjhzNjlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zYjI0OWMtYjQwZS00ZmI5LThmZjQt ZTA1MjYwMzNhNDg0LzEvUHh5VGk3SUdvNGx0Qmt3SVV2cVloZjhzNjlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8zYjI0OWMtYjQwZS00ZmI5LThmZjQtZTA1MjYwMzNhNDg0 LzEvUHh5VGk3SUdvNGx0Qmt3SVV2cVloZjhzNjlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIb8STMzk rYpnC3jlheKdIY0zqia/DeLGvGtE8TEU/USZYiDMX/E3Igpz8jwNj1A/+CiA6sKk eqc4hHrQx29xa07wIIB1WFcOF5xq4+F9UGIRTay0DF+iJ26XFywqfYqDc6itrw2V sxOv5XIDjMAwHBpQjzWra9G2Eqarm1yxFpo53KiQOiaNbyAebNWJw55BUmIu7ME2 mXdwAOFPxccUI3Sk7RImyz8OX+Wws1wysJjAnlCMzQ3oyklzA0FPr4J+VGOTR5Y/ rH2Vu/tSLyduV7AnguiUR11s76Hp0fYckLmxYVoWPIhJhUZKdO6DY3qT4W49U42H jzGxlxQ2Rbs8Tg== -----END CERTIFICATE-----Generated at Sun Dec 21 05:49:36 2025 by rpki-client