This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft File: PsfSv8P6eOcQChuJNZBa_3pJa8k.mft (raw, json) Hash identifier: y4foJIurtJgiqRHGpV5PF6KzhWrrC6dnJkzQlPnxAnk= Subject key identifier: 4C:7B:E8:9C:0D:31:26:46:AB:C6:16:53:E2:9E:7A:88:A8:9D:DA:C6 Authority key identifier: 3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9 Certificate issuer: /CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9 Certificate serial: 019B68E8FECFC1216D209CABB49BCD03C083 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft Manifest number: 0E4C Signing time: Mon 29 Dec 2025 07:00:58 +0000 Manifest this update: Mon 29 Dec 2025 07:00:58 +0000 Manifest next update: Tue 30 Dec 2025 07:00:58 +0000 Files and hashes: 1: PsfSv8P6eOcQChuJNZBa_3pJa8k.crl (hash: Q6Vz21xoemHEq1yawFALyjAKQd4x54CM3o5eOAGBMY4=) 2: RPdruY8oCYU-NG_cdmDTyaYXs9w.roa (hash: i9rNw7/5XltvLVBXot4AXkRNS8YKs+TQnC29q/66MR8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:e8:fe:cf:c1:21:6d:20:9c:ab:b4:9b:cd:03:c0:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9 Validity Not Before: Dec 29 07:00:58 2025 GMT Not After : Dec 30 07:00:58 2025 GMT Subject: CN=4c7be89c0d312646abc61653e29e7a88a89ddac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9d:d1:4c:33:c7:af:9c:5a:94:cc:d8:55:98: ca:33:68:03:8c:70:2f:b8:63:b6:88:1c:24:76:83: 77:4b:9e:38:a8:9a:75:a9:cb:61:26:f8:0c:08:07: a5:af:0a:e5:6a:f7:7b:11:23:fe:94:90:30:2b:10: 0a:35:a7:d1:da:39:93:0c:49:1e:d1:7d:29:2c:53: b9:bb:a0:ac:c6:d8:bf:3b:ba:af:ab:df:1f:58:89: a7:3f:b2:43:91:17:6e:25:f1:86:21:bd:97:03:fa: b5:db:74:cd:b3:08:25:00:4c:c6:98:48:e3:b8:59: ac:81:c6:fc:62:09:53:65:de:ca:dc:f9:22:93:d9: 14:96:e8:cc:2f:3a:c8:fb:d9:13:10:c1:84:87:c1: 61:b1:b4:cc:7a:78:9a:5e:25:a4:36:e0:e6:ed:d8: 0e:7e:95:37:e9:39:65:93:05:29:c2:27:b1:93:a6: 0c:0a:7c:52:b2:e5:1e:b2:38:c4:b8:25:77:d7:1f: 1e:8a:57:e1:8b:50:60:71:2e:05:81:e6:9e:48:d1: 26:eb:55:f5:47:70:42:ae:de:9f:8f:49:d1:06:39: ab:6a:f9:b4:49:31:e8:4e:ce:ab:dd:10:56:3b:33: 9f:77:61:71:11:3a:c5:ef:2b:ef:7b:d8:a8:31:85: 4b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:7B:E8:9C:0D:31:26:46:AB:C6:16:53:E2:9E:7A:88:A8:9D:DA:C6 X509v3 Authority Key Identifier: keyid:3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:c3:db:a6:1a:16:91:88:4d:bd:18:ca:8d:9b:0e:2e:bf:6d: 20:91:98:04:13:5c:8e:c6:55:46:c0:9f:12:3c:5e:1d:e6:df: 07:89:18:d9:5b:83:ef:30:a9:04:d8:a3:bb:8e:4b:ad:25:dc: 1a:3d:f7:02:e8:96:04:06:b6:b6:8e:e2:11:be:59:83:fa:26: d2:77:c5:ab:d0:77:d3:bf:1b:e3:e5:7f:cd:52:41:9c:15:6f: 98:77:76:f3:5d:f7:0d:e0:2a:4f:46:6b:87:57:34:cc:34:ab: d0:d4:45:29:df:8b:61:04:98:e6:3f:aa:fb:b1:04:21:43:42: 51:94:8b:b2:71:63:e5:7c:e5:29:3e:4c:de:83:a4:2f:f6:56: 54:90:7c:b4:92:37:4f:1a:05:c2:4d:fb:d0:e3:d9:93:ad:43: 9b:01:35:7a:26:a6:76:85:63:d4:67:cd:34:4b:b5:b1:0f:3d: d3:64:39:cb:66:ab:d9:5a:24:ee:3b:05:b5:a1:e4:d3:62:c4: 58:3e:db:66:d9:ea:7a:f5:5f:f4:b4:ed:94:ac:20:1a:32:a0: cf:58:3b:d0:c6:ec:6e:98:41:d3:26:8c:58:13:7f:a6:c4:09: 74:38:1e:9c:85:ac:94:6b:22:c0:7c:7e:6c:e8:22:41:a9:dd: 43:33:5f:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZto6P7PwSFtIJyrtJvNA8CDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYzdkMmJmYzNmYTc4ZTcxMDBhMWI4OTM1OTA1YWZmN2E0 OTZiYzkwHhcNMjUxMjI5MDcwMDU4WhcNMjUxMjMwMDcwMDU4WjAzMTEwLwYDVQQD Eyg0YzdiZTg5YzBkMzEyNjQ2YWJjNjE2NTNlMjllN2E4OGE4OWRkYWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZ3RTDPHr5xalMzYVZjKM2gDjHAv uGO2iBwkdoN3S544qJp1qcthJvgMCAelrwrlavd7ESP+lJAwKxAKNafR2jmTDEke 0X0pLFO5u6Csxti/O7qvq98fWImnP7JDkRduJfGGIb2XA/q123TNswglAEzGmEjj uFmsgcb8YglTZd7K3Pkik9kUlujMLzrI+9kTEMGEh8FhsbTMeniaXiWkNuDm7dgO fpU36TllkwUpwiexk6YMCnxSsuUesjjEuCV31x8eilfhi1BgcS4FgeaeSNEm61X1 R3BCrt6fj0nRBjmravm0STHoTs6r3RBWOzOfd2FxETrF7yvve9ioMYVLiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEx76JwNMSZGq8YWU+KeeoiondrGMB8GA1UdIwQY MBaAFD7H0r/D+njnEAobiTWQWv96SWvJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHNmU3Y4UDZlT2NRQ2h1Sk5aQmFfM3BKYThrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8zOWJiNzItZjZhZi00YTY3LTljNDQt YmE4ODExMjJjYTYzLzEvUHNmU3Y4UDZlT2NRQ2h1Sk5aQmFfM3BKYThrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8zOWJiNzItZjZhZi00YTY3LTljNDQtYmE4ODExMjJjYTYz LzEvUHNmU3Y4UDZlT2NRQ2h1Sk5aQmFfM3BKYThrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJcPbphoW kYhNvRjKjZsOLr9tIJGYBBNcjsZVRsCfEjxeHebfB4kY2VuD7zCpBNiju45LrSXc Gj33AuiWBAa2to7iEb5Zg/om0nfFq9B3078b4+V/zVJBnBVvmHd28133DeAqT0Zr h1c0zDSr0NRFKd+LYQSY5j+q+7EEIUNCUZSLsnFj5XzlKT5M3oOkL/ZWVJB8tJI3 TxoFwk370OPZk61DmwE1eiamdoVj1GfNNEu1sQ8902Q5y2ar2Vok7jsFtaHk02LE WD7bZtnqevVf9LTtlKwgGjKgz1g70MbsbphB0yaMWBN/psQJdDgenIWslGsiwHx+ bOgiQandQzNf8g== -----END CERTIFICATE-----Generated at Mon Dec 29 08:26:27 2025 by rpki-client