This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft File: PsfSv8P6eOcQChuJNZBa_3pJa8k.mft (raw, json) Hash identifier: RnLN9yjzpDnrSVxuqB7RnwGFHGrr7V+8gecJskx1ciA= Subject key identifier: 86:90:56:2E:8C:C1:B2:51:60:5B:3A:A2:5A:1B:0B:89:26:D2:57:27 Authority key identifier: 3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9 Certificate issuer: /CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9 Certificate serial: 019B424A7420B3256205B60445F5C769A7F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft Manifest number: 0E38 Signing time: Sun 21 Dec 2025 19:02:14 +0000 Manifest this update: Sun 21 Dec 2025 19:02:14 +0000 Manifest next update: Mon 22 Dec 2025 19:02:14 +0000 Files and hashes: 1: PsfSv8P6eOcQChuJNZBa_3pJa8k.crl (hash: c/48sEWSOhXwrh3fXoEMU7rGY24TlbHaGORY+dljMvc=) 2: RPdruY8oCYU-NG_cdmDTyaYXs9w.roa (hash: i9rNw7/5XltvLVBXot4AXkRNS8YKs+TQnC29q/66MR8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:74:20:b3:25:62:05:b6:04:45:f5:c7:69:a7:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9 Validity Not Before: Dec 21 19:02:14 2025 GMT Not After : Dec 22 19:02:14 2025 GMT Subject: CN=8690562e8cc1b251605b3aa25a1b0b8926d25727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2b:3f:c6:8e:ac:36:27:80:e7:8f:47:38:c9: fb:8c:07:72:0a:f7:b7:ec:f2:1d:09:fc:19:4f:e7: 41:b8:4b:f4:11:0a:57:ff:a6:b1:16:ed:6a:b6:b3: b9:1a:dd:10:b4:9f:af:23:5b:cb:fe:b0:8c:e4:2d: a6:55:ad:de:47:ca:08:ed:b8:8d:45:3e:7a:11:c5: 9c:0d:98:47:6c:2f:ff:9e:dc:a2:ad:1a:2c:41:cd: 98:87:b3:e7:1d:e0:85:c5:d5:70:e7:14:ef:1e:c2: fb:ac:6c:4f:0c:f1:49:8d:04:6d:b7:c7:9d:d6:ac: 39:66:44:6e:9b:85:be:f2:e8:c8:95:59:95:67:95: 66:7d:87:0a:f9:d4:1c:fa:2f:bb:18:55:6e:35:77: 48:98:f1:3c:74:90:44:c9:64:b8:3f:79:01:f8:35: 5a:1c:f5:35:b8:9a:8a:16:4b:59:1e:25:fc:b7:92: c5:40:2f:9e:77:91:38:61:42:d0:c4:67:78:fe:72: 5e:6b:28:06:e7:26:fb:08:74:9b:1d:82:61:d8:9e: 3c:91:f4:bf:12:dc:5a:d9:5b:c4:4e:42:f3:a3:bb: 19:02:d0:7e:1d:19:8c:5d:03:cd:56:53:c7:fb:fa: 22:5f:be:58:b1:f8:18:d8:8a:f9:ca:e2:71:b0:d6: e6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:90:56:2E:8C:C1:B2:51:60:5B:3A:A2:5A:1B:0B:89:26:D2:57:27 X509v3 Authority Key Identifier: keyid:3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:20:3d:29:dc:fa:4d:85:51:b0:cd:fe:77:3d:5f:bf:b8:65: c5:22:1b:d7:21:28:4e:ba:fd:ea:62:5e:ad:fb:49:e4:32:f1: f9:3d:ef:12:a4:68:dc:0f:73:7e:85:8d:97:78:76:25:b0:ec: c2:e1:23:68:12:cb:d1:83:9c:26:0f:af:95:97:72:df:2a:ba: bf:81:0e:3b:7a:08:1d:15:be:1a:cc:e5:80:b7:e4:c5:5c:87: 41:d3:64:f7:76:48:47:fe:ab:31:b7:8e:c4:2b:81:d7:a9:f3: 28:6f:3c:dc:25:04:f0:72:9e:46:5b:75:cb:82:c8:44:00:c7: c9:82:83:37:ea:02:45:66:c6:a7:de:76:d8:c9:da:7e:8a:fc: 19:5c:2d:15:8e:94:e3:a8:32:86:07:64:00:be:c7:1b:b1:ab: 3e:c3:17:71:45:c5:80:8b:d9:4f:76:07:f5:d4:20:1f:49:ab: 23:28:a6:58:43:01:93:3a:c8:c6:41:d7:f0:5d:1c:f0:e9:89: 7e:3d:90:75:22:1d:46:8e:1b:d6:5e:94:e6:c7:7f:3e:a8:f4: 8b:42:af:08:2c:27:d7:b4:40:2f:71:dc:51:72:9e:50:7f:e5: 4f:8a:12:d6:2c:3a:23:31:25:7d:11:f1:07:55:69:d0:c3:43: 4d:1a:e9:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSnQgsyViBbYERfXHaaf0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYzdkMmJmYzNmYTc4ZTcxMDBhMWI4OTM1OTA1YWZmN2E0 OTZiYzkwHhcNMjUxMjIxMTkwMjE0WhcNMjUxMjIyMTkwMjE0WjAzMTEwLwYDVQQD Eyg4NjkwNTYyZThjYzFiMjUxNjA1YjNhYTI1YTFiMGI4OTI2ZDI1NzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxys/xo6sNieA549HOMn7jAdyCve3 7PIdCfwZT+dBuEv0EQpX/6axFu1qtrO5Gt0QtJ+vI1vL/rCM5C2mVa3eR8oI7biN RT56EcWcDZhHbC//ntyirRosQc2Yh7PnHeCFxdVw5xTvHsL7rGxPDPFJjQRtt8ed 1qw5ZkRum4W+8ujIlVmVZ5VmfYcK+dQc+i+7GFVuNXdImPE8dJBEyWS4P3kB+DVa HPU1uJqKFktZHiX8t5LFQC+ed5E4YULQxGd4/nJeaygG5yb7CHSbHYJh2J48kfS/ Etxa2VvETkLzo7sZAtB+HRmMXQPNVlPH+/oiX75YsfgY2Ir5yuJxsNbmxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIaQVi6MwbJRYFs6olobC4km0lcnMB8GA1UdIwQY MBaAFD7H0r/D+njnEAobiTWQWv96SWvJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHNmU3Y4UDZlT2NRQ2h1Sk5aQmFfM3BKYThrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8zOWJiNzItZjZhZi00YTY3LTljNDQt YmE4ODExMjJjYTYzLzEvUHNmU3Y4UDZlT2NRQ2h1Sk5aQmFfM3BKYThrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8zOWJiNzItZjZhZi00YTY3LTljNDQtYmE4ODExMjJjYTYz LzEvUHNmU3Y4UDZlT2NRQ2h1Sk5aQmFfM3BKYThrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGyA9Kdz6 TYVRsM3+dz1fv7hlxSIb1yEoTrr96mJerftJ5DLx+T3vEqRo3A9zfoWNl3h2JbDs wuEjaBLL0YOcJg+vlZdy3yq6v4EOO3oIHRW+GszlgLfkxVyHQdNk93ZIR/6rMbeO xCuB16nzKG883CUE8HKeRlt1y4LIRADHyYKDN+oCRWbGp9522Mnafor8GVwtFY6U 46gyhgdkAL7HG7GrPsMXcUXFgIvZT3YH9dQgH0mrIyimWEMBkzrIxkHX8F0c8OmJ fj2QdSIdRo4b1l6U5sd/Pqj0i0KvCCwn17RAL3HcUXKeUH/lT4oS1iw6IzElfRHx B1Vp0MNDTRrpiw== -----END CERTIFICATE-----Generated at Sun Dec 21 20:56:38 2025 by rpki-client