This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft File: PComfc4HIjjpwEUV5n65kmcuNRs.mft (raw, json) Hash identifier: EPkPeA6KCNcm3fXTyp3fx/exkiIaGxqFBxF1tQyMQXQ= Subject key identifier: 68:63:D4:F9:76:20:A5:C9:92:1A:D7:AC:FE:BE:CF:9F:D7:5E:8A:BD Authority key identifier: 3C:2A:26:7D:CE:07:22:38:E9:C0:45:15:E6:7E:B9:92:67:2E:35:1B Certificate issuer: /CN=3c2a267dce072238e9c04515e67eb992672e351b Certificate serial: 019B390FBF5188FF3EEA2DFA7CD71E478F74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PComfc4HIjjpwEUV5n65kmcuNRs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 00:01:31 +0000 Manifest this update: Sat 20 Dec 2025 00:01:31 +0000 Manifest next update: Sun 21 Dec 2025 00:01:31 +0000 Files and hashes: 1: PComfc4HIjjpwEUV5n65kmcuNRs.crl (hash: FKd89mSB4IqcWlfnOZhHBGSxw/3ip0qHoec1PFZhR2A=) 2: ZGY0lWkEYWemqocgFCB9t9qlPGA.roa (hash: fiVljxbXsWOkY42tbBEX2UBc5QCY0m1ysP8nQ4McSh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.crl rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft rsync://rpki.ripe.net/repository/DEFAULT/PComfc4HIjjpwEUV5n65kmcuNRs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:bf:51:88:ff:3e:ea:2d:fa:7c:d7:1e:47:8f:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c2a267dce072238e9c04515e67eb992672e351b Validity Not Before: Dec 20 00:01:31 2025 GMT Not After : Dec 21 00:01:31 2025 GMT Subject: CN=6863d4f97620a5c9921ad7acfebecf9fd75e8abd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6b:0e:f4:43:92:a0:6f:fd:7e:ad:62:82:5b: 0f:d2:d8:21:47:18:13:c7:cf:9e:64:27:7e:6d:d8: b7:2c:05:85:a0:77:db:95:ea:b7:5a:b0:19:87:12: 5f:32:cb:f9:97:c1:a6:6f:5a:32:b9:b4:a4:27:90: 1a:e1:51:af:6d:c4:55:4c:b0:dc:bd:36:a5:10:72: 9d:6b:e0:7c:5a:c7:53:ce:34:e4:ca:35:a7:5d:20: 80:0d:a0:50:7b:54:78:c9:44:32:d7:bd:37:9b:a9: 00:a9:7a:36:21:4c:42:ac:a8:24:e3:c3:41:09:7f: 81:70:26:c0:c5:82:87:7b:3e:4a:eb:a7:99:53:bf: e7:6f:2e:bc:e4:d8:4e:e8:7c:e5:f0:4e:e3:9c:0f: f7:ae:a6:73:1b:63:91:68:f7:8b:d1:dc:82:e7:d5: ba:a7:7d:ce:8a:ca:a5:7c:cb:c1:77:e2:e4:b6:79: ad:c8:fd:ae:59:13:ac:fa:0f:96:69:86:10:ef:df: cc:be:90:99:8e:49:5a:b9:91:50:c9:43:c0:ca:98: f4:bc:5c:20:3e:1d:3f:4e:ff:df:bd:77:c3:78:0f: 6e:b7:a0:4f:e7:c1:f3:12:0a:ad:15:34:40:df:6a: 4c:7d:bb:b2:89:7b:eb:85:c7:20:ac:db:d3:45:00: cc:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:63:D4:F9:76:20:A5:C9:92:1A:D7:AC:FE:BE:CF:9F:D7:5E:8A:BD X509v3 Authority Key Identifier: keyid:3C:2A:26:7D:CE:07:22:38:E9:C0:45:15:E6:7E:B9:92:67:2E:35:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PComfc4HIjjpwEUV5n65kmcuNRs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:7f:93:d3:83:d1:95:13:2b:fa:d1:61:e4:26:ed:45:8e:bf: 6a:d2:6f:88:5a:b9:cb:38:35:37:06:89:ff:b6:f8:17:b6:13: 6f:63:bd:9f:e2:18:42:72:63:71:42:26:f7:50:70:ae:0b:fc: c2:3a:db:18:bc:11:1f:08:d6:89:23:93:ce:dc:c4:43:60:b2: cb:72:ec:34:cc:14:0d:8d:0c:cc:59:e6:36:5b:5d:c8:e7:f3: f2:90:95:63:d9:c7:7d:90:83:08:32:01:f0:bc:24:42:f7:f7: 32:e0:4a:98:7a:7d:d5:23:a1:82:00:a3:f2:fb:dc:e7:4d:43: 53:81:12:f3:de:aa:a7:a5:af:f7:9b:d5:fa:c0:c9:d9:73:fd: ee:a8:64:95:d2:fa:af:22:72:ff:a3:dd:6d:78:83:2d:7d:4e: 6f:bb:b5:c1:da:18:13:31:61:83:c0:fe:78:76:30:55:66:66: fe:e5:7c:72:09:c2:d3:be:7c:a0:8a:79:a2:13:ab:ea:c0:6e: 8c:ac:62:28:e3:ac:db:c3:84:9a:40:f7:f3:43:68:46:5a:f0: 44:19:9f:ec:ea:e3:91:83:fe:07:cb:7d:96:d6:1c:3f:fb:2c: 4d:86:49:ef:d6:ee:78:c4:4c:52:b5:6a:d8:cb:e3:fd:08:1c: 99:7a:1a:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D79RiP8+6i36fNceR490MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMmEyNjdkY2UwNzIyMzhlOWMwNDUxNWU2N2ViOTkyNjcy ZTM1MWIwHhcNMjUxMjIwMDAwMTMxWhcNMjUxMjIxMDAwMTMxWjAzMTEwLwYDVQQD Eyg2ODYzZDRmOTc2MjBhNWM5OTIxYWQ3YWNmZWJlY2Y5ZmQ3NWU4YWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmsO9EOSoG/9fq1iglsP0tghRxgT x8+eZCd+bdi3LAWFoHfbleq3WrAZhxJfMsv5l8Gmb1oyubSkJ5Aa4VGvbcRVTLDc vTalEHKda+B8WsdTzjTkyjWnXSCADaBQe1R4yUQy1703m6kAqXo2IUxCrKgk48NB CX+BcCbAxYKHez5K66eZU7/nby685NhO6Hzl8E7jnA/3rqZzG2ORaPeL0dyC59W6 p33OisqlfMvBd+LktnmtyP2uWROs+g+WaYYQ79/MvpCZjklauZFQyUPAypj0vFwg Ph0/Tv/fvXfDeA9ut6BP58HzEgqtFTRA32pMfbuyiXvrhccgrNvTRQDMDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGhj1Pl2IKXJkhrXrP6+z5/XXoq9MB8GA1UdIwQY MBaAFDwqJn3OByI46cBFFeZ+uZJnLjUbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUENvbWZjNEhJampwd0VVVjVuNjVrbWN1TlJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jZDZhN2ItMTU4MC00MTAyLTlhYTYt YTRiNmUzZDBkODMwLzEvUENvbWZjNEhJampwd0VVVjVuNjVrbWN1TlJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9jZDZhN2ItMTU4MC00MTAyLTlhYTYtYTRiNmUzZDBkODMw LzEvUENvbWZjNEhJampwd0VVVjVuNjVrbWN1TlJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbn+T04PR lRMr+tFh5CbtRY6/atJviFq5yzg1NwaJ/7b4F7YTb2O9n+IYQnJjcUIm91Bwrgv8 wjrbGLwRHwjWiSOTztzEQ2Cyy3LsNMwUDY0MzFnmNltdyOfz8pCVY9nHfZCDCDIB 8LwkQvf3MuBKmHp91SOhggCj8vvc501DU4ES896qp6Wv95vV+sDJ2XP97qhkldL6 ryJy/6PdbXiDLX1Ob7u1wdoYEzFhg8D+eHYwVWZm/uV8cgnC0758oIp5ohOr6sBu jKxiKOOs28OEmkD380NoRlrwRBmf7OrjkYP+B8t9ltYcP/ssTYZJ79bueMRMUrVq 2Mvj/QgcmXoaFw== -----END CERTIFICATE-----Generated at Sat Dec 20 09:04:55 2025 by rpki-client