This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.mft File: Pn1HTATkiliTr3HDWnfN1oJv0zk.mft (raw, json) Hash identifier: u05DElAGTSnZUx4enpA6C7LPOqp8fMO6GVKe5BvCOqw= Subject key identifier: C5:E4:A5:3E:2B:F6:A7:D3:68:E5:AE:A0:0A:9D:61:C6:A8:7B:7A:E0 Authority key identifier: 3E:7D:47:4C:04:E4:8A:58:93:AF:71:C3:5A:77:CD:D6:82:6F:D3:39 Certificate issuer: /CN=3e7d474c04e48a5893af71c35a77cdd6826fd339 Certificate serial: 019B367BCD950E7B7FFBA9867CDF87AFBC8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pn1HTATkiliTr3HDWnfN1oJv0zk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.mft Manifest number: 0632 Signing time: Fri 19 Dec 2025 12:00:41 +0000 Manifest this update: Fri 19 Dec 2025 12:00:41 +0000 Manifest next update: Sat 20 Dec 2025 12:00:41 +0000 Files and hashes: 1: Pn1HTATkiliTr3HDWnfN1oJv0zk.crl (hash: qMBYXpfYg/ablKa574+pM0aTTpeKdMmw1WFqmXvBH/Y=) 2: kq527hgVr7ukC92yfbPMdR4xku4.asa (hash: LvIhj4F/rl2CGQnbgEZFLJhN4x8R+m0+ZkR3noVX8AQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.crl rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.mft rsync://rpki.ripe.net/repository/DEFAULT/Pn1HTATkiliTr3HDWnfN1oJv0zk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:7b:cd:95:0e:7b:7f:fb:a9:86:7c:df:87:af:bc:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e7d474c04e48a5893af71c35a77cdd6826fd339 Validity Not Before: Dec 19 12:00:41 2025 GMT Not After : Dec 20 12:00:41 2025 GMT Subject: CN=c5e4a53e2bf6a7d368e5aea00a9d61c6a87b7ae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:95:ae:92:ad:47:14:88:b1:5f:a2:bb:88:2c: 69:64:2c:8c:b2:82:b3:fe:41:d9:cb:e9:87:36:1e: f1:f1:76:65:1f:23:ab:f7:46:16:04:6b:f5:8e:e3: 21:eb:a7:b9:4b:e0:38:62:bf:e0:06:f5:80:a9:d1: 4b:d1:06:c9:b5:ff:6f:a5:51:e4:68:c0:30:bc:bc: bf:03:2b:16:45:61:cb:cf:5d:76:bb:d1:f3:5a:f9: 1a:5b:ff:ba:5b:05:c4:1a:b8:8f:8c:97:37:d3:0e: d8:9e:cb:8f:11:68:11:23:03:0f:d1:c1:62:8d:f6: 07:e9:5b:3d:58:bd:b8:ae:1e:be:61:c0:45:38:ac: ba:6b:e0:89:0f:a9:57:73:87:5a:39:fe:88:2d:9f: 6c:95:39:12:7f:c6:2a:4f:5d:2b:fa:ae:3c:ac:27: b3:a9:85:53:34:6b:cd:32:2b:87:ee:cd:00:3a:99: 10:54:a0:20:76:d8:b5:63:30:b3:38:a9:1a:52:77: 5c:33:e2:58:96:3b:df:60:38:c9:95:e5:7d:a4:35: 06:a6:1f:db:73:04:79:04:87:67:9e:3f:87:fb:a2: de:9a:c7:5f:a9:62:fd:31:5b:71:2c:58:2e:ec:87: 49:76:54:61:0b:1f:23:a4:4d:ce:63:7f:2c:ca:1e: 7c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E4:A5:3E:2B:F6:A7:D3:68:E5:AE:A0:0A:9D:61:C6:A8:7B:7A:E0 X509v3 Authority Key Identifier: keyid:3E:7D:47:4C:04:E4:8A:58:93:AF:71:C3:5A:77:CD:D6:82:6F:D3:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pn1HTATkiliTr3HDWnfN1oJv0zk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:f1:8d:51:f2:57:73:35:6b:19:7e:0d:4e:0d:cd:05:65:9f: ca:dd:a3:e2:2d:c2:31:51:cd:dc:d9:6f:97:61:c2:16:75:ec: 09:0a:bb:b5:f9:db:ed:e8:f2:17:38:c5:83:ae:f4:26:e5:88: db:e9:46:a7:ef:4f:50:69:ac:51:79:e5:52:5d:44:85:a6:3a: 70:43:5c:9a:0d:e4:67:32:b5:30:ea:c6:1e:8e:35:d7:6c:32: 83:b2:61:0d:ad:d1:eb:35:87:ea:19:4b:db:19:69:bb:c9:3f: 5b:3b:b1:9a:c1:ac:f4:50:b2:bf:a0:3b:5f:e7:b9:96:64:4a: 2f:8d:a5:6f:78:e5:9f:92:29:0e:41:b9:2f:b7:10:4e:9a:49: 04:6d:27:cc:90:ef:0c:b9:74:64:9f:b3:39:4c:46:53:5a:d7: 85:e2:37:6b:34:35:50:43:f5:a5:91:ed:86:38:34:ee:ed:db: 7b:02:53:d2:39:01:87:44:24:a4:d8:a8:d4:13:20:ab:e8:5f: 47:98:11:08:28:74:98:6f:ce:b7:c8:4b:72:b1:1a:9a:ec:93: ae:89:63:56:2b:19:25:f6:f1:cd:f1:69:af:17:cd:fe:55:b9: d7:e0:5b:57:fd:18:43:c5:e7:8b:32:b3:1a:36:ba:7f:d5:a1: 8b:11:b2:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2e82VDnt/+6mGfN+Hr7yMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlN2Q0NzRjMDRlNDhhNTg5M2FmNzFjMzVhNzdjZGQ2ODI2 ZmQzMzkwHhcNMjUxMjE5MTIwMDQxWhcNMjUxMjIwMTIwMDQxWjAzMTEwLwYDVQQD EyhjNWU0YTUzZTJiZjZhN2QzNjhlNWFlYTAwYTlkNjFjNmE4N2I3YWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7JWukq1HFIixX6K7iCxpZCyMsoKz /kHZy+mHNh7x8XZlHyOr90YWBGv1juMh66e5S+A4Yr/gBvWAqdFL0QbJtf9vpVHk aMAwvLy/AysWRWHLz112u9HzWvkaW/+6WwXEGriPjJc30w7YnsuPEWgRIwMP0cFi jfYH6Vs9WL24rh6+YcBFOKy6a+CJD6lXc4daOf6ILZ9slTkSf8YqT10r+q48rCez qYVTNGvNMiuH7s0AOpkQVKAgdti1YzCzOKkaUndcM+JYljvfYDjJleV9pDUGph/b cwR5BIdnnj+H+6LemsdfqWL9MVtxLFgu7IdJdlRhCx8jpE3OY38syh58RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMXkpT4r9qfTaOWuoAqdYcaoe3rgMB8GA1UdIwQY MBaAFD59R0wE5IpYk69xw1p3zdaCb9M5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG4xSFRBVGtpbGlUcjNIRFduZk4xb0p2MHprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi83ZTMwZTgtYjgzNS00NGFmLWE0NGIt OTAzZTRmNWUxMjI1LzEvUG4xSFRBVGtpbGlUcjNIRFduZk4xb0p2MHprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi83ZTMwZTgtYjgzNS00NGFmLWE0NGItOTAzZTRmNWUxMjI1 LzEvUG4xSFRBVGtpbGlUcjNIRFduZk4xb0p2MHprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV/GNUfJX czVrGX4NTg3NBWWfyt2j4i3CMVHN3Nlvl2HCFnXsCQq7tfnb7ejyFzjFg670JuWI 2+lGp+9PUGmsUXnlUl1EhaY6cENcmg3kZzK1MOrGHo4112wyg7JhDa3R6zWH6hlL 2xlpu8k/WzuxmsGs9FCyv6A7X+e5lmRKL42lb3jln5IpDkG5L7cQTppJBG0nzJDv DLl0ZJ+zOUxGU1rXheI3azQ1UEP1pZHthjg07u3bewJT0jkBh0QkpNio1BMgq+hf R5gRCCh0mG/Ot8hLcrEamuyTroljVisZJfbxzfFprxfN/lW51+BbV/0YQ8XnizKz Gja6f9WhixGy8Q== -----END CERTIFICATE-----Generated at Fri Dec 19 14:32:19 2025 by rpki-client