This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.mft File: PSN1jftvHUPc1k0PCrJ-9xUTWVI.mft (raw, json) Hash identifier: 9tapgTLy/5vKTUhuO+uXa8/IvdVJ2l71OJr2w+RnrmM= Subject key identifier: D9:ED:E0:B2:5C:97:31:85:FD:B6:BB:8C:10:14:FF:27:5D:78:22:8C Authority key identifier: 3D:23:75:8D:FB:6F:1D:43:DC:D6:4D:0F:0A:B2:7E:F7:15:13:59:52 Certificate issuer: /CN=3d23758dfb6f1d43dcd64d0f0ab27ef715135952 Certificate serial: 019B27E470A68EF777DC00FFBBFC4D512C09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PSN1jftvHUPc1k0PCrJ-9xUTWVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.mft Manifest number: 065D Signing time: Tue 16 Dec 2025 16:00:40 +0000 Manifest this update: Tue 16 Dec 2025 16:00:40 +0000 Manifest next update: Wed 17 Dec 2025 16:00:40 +0000 Files and hashes: 1: PSN1jftvHUPc1k0PCrJ-9xUTWVI.crl (hash: 01j8rjDqAuVlGYONmsmPKuIJgP1WkWXusuiEC/wxtf8=) 2: cNQzFblAKvFr8hGK7lwE2E-QroQ.roa (hash: 6L0JpdKsg5wIV7DiGvLclmuCfLf4+RgtvQ0jAlVXODk=) 3: sq8t5TnYeFbLwzKDRurrhu8TSwI.roa (hash: BEQOlbgnZNiMmu4zSM6xloAN2ehefN/KrPp5K3vJnWw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.crl rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.mft rsync://rpki.ripe.net/repository/DEFAULT/PSN1jftvHUPc1k0PCrJ-9xUTWVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:e4:70:a6:8e:f7:77:dc:00:ff:bb:fc:4d:51:2c:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d23758dfb6f1d43dcd64d0f0ab27ef715135952 Validity Not Before: Dec 16 16:00:40 2025 GMT Not After : Dec 17 16:00:40 2025 GMT Subject: CN=d9ede0b25c973185fdb6bb8c1014ff275d78228c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:20:57:a0:9c:27:6f:6d:00:b6:f4:e6:98:58: 94:57:8d:f1:68:cf:0a:01:bc:02:8f:e8:95:01:ad: 1e:03:af:ef:3a:fe:ca:66:0b:26:32:60:ca:86:bf: 51:60:15:93:c9:59:4c:6d:ef:70:0a:0d:2f:de:d4: fb:91:b8:d5:46:be:ca:0b:ae:70:a1:62:8e:3b:46: 67:8c:b0:a7:2f:b9:0f:8c:50:7d:c5:7d:29:b9:38: 47:6b:7a:13:ca:b2:3b:a7:be:6e:a7:c7:25:09:b5: 38:56:17:e1:88:19:0e:93:b7:07:d2:fb:a8:83:fc: 59:15:7d:df:9b:41:0f:94:30:4f:bf:6f:91:1b:85: 1d:cd:80:16:48:78:fd:9d:be:b7:da:c2:d7:7b:f4: b2:1c:0f:6a:28:98:f9:ce:8b:59:01:f3:0b:04:ba: 99:0b:19:ce:28:41:8d:45:45:ae:ed:2f:48:cb:b6: d0:c4:bf:ae:fe:c4:08:bb:b3:b4:7d:03:47:14:e7: 93:69:eb:33:9a:3c:63:24:d4:a8:e8:e4:da:70:d8: 8d:90:01:ed:93:42:78:4e:ff:94:d8:80:30:46:5e: d2:c6:f6:cf:e9:97:84:18:60:43:9a:bb:17:a6:fc: 45:c7:27:e8:ba:75:e1:fb:cd:86:65:47:27:56:d7: fb:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:ED:E0:B2:5C:97:31:85:FD:B6:BB:8C:10:14:FF:27:5D:78:22:8C X509v3 Authority Key Identifier: keyid:3D:23:75:8D:FB:6F:1D:43:DC:D6:4D:0F:0A:B2:7E:F7:15:13:59:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSN1jftvHUPc1k0PCrJ-9xUTWVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:5f:44:dd:24:c2:90:3f:85:d0:ce:c2:53:b0:cb:c2:25:95: 56:f2:4b:35:fa:9c:92:f4:13:e1:6f:bd:67:56:3d:12:42:78: 9c:ed:27:de:d9:34:60:16:28:30:00:18:ba:43:f8:d2:6b:f8: 0e:f4:bb:4d:0c:70:12:f8:d8:54:cb:97:87:a6:3c:dc:24:ce: d8:ab:cb:80:ed:f6:94:d8:0e:13:d3:92:ed:9d:8a:b9:5c:0e: 3f:03:aa:1d:8b:de:48:0f:0d:9e:22:01:ec:01:e1:cc:66:d2: c6:ba:5e:46:35:5e:d9:35:1f:7a:a7:58:6e:fe:31:5c:05:44: 82:83:de:65:b3:fb:16:ba:40:e4:8b:a0:aa:6d:33:41:4d:20: bc:1d:32:40:c4:08:95:cf:96:70:f5:aa:d2:51:3f:b5:90:11: 31:a1:89:88:b3:77:1d:ed:b8:82:ed:0f:aa:b6:9a:9d:ce:34: 60:24:95:db:f7:2d:28:67:8e:ee:dc:78:1b:81:0b:cb:a6:8e: 66:6b:82:ee:cb:18:d2:00:2f:fd:d1:7e:ee:ba:19:68:f8:b4: 65:64:6c:c2:07:58:1c:cf:ce:10:a7:e8:76:bf:ac:27:6d:e5: 7e:1b:90:c6:9d:3e:4a:71:79:c5:2f:52:dc:8f:d6:50:29:00: aa:98:4a:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsn5HCmjvd33AD/u/xNUSwJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkMjM3NThkZmI2ZjFkNDNkY2Q2NGQwZjBhYjI3ZWY3MTUx MzU5NTIwHhcNMjUxMjE2MTYwMDQwWhcNMjUxMjE3MTYwMDQwWjAzMTEwLwYDVQQD EyhkOWVkZTBiMjVjOTczMTg1ZmRiNmJiOGMxMDE0ZmYyNzVkNzgyMjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCBXoJwnb20AtvTmmFiUV43xaM8K AbwCj+iVAa0eA6/vOv7KZgsmMmDKhr9RYBWTyVlMbe9wCg0v3tT7kbjVRr7KC65w oWKOO0ZnjLCnL7kPjFB9xX0puThHa3oTyrI7p75up8clCbU4VhfhiBkOk7cH0vuo g/xZFX3fm0EPlDBPv2+RG4UdzYAWSHj9nb632sLXe/SyHA9qKJj5zotZAfMLBLqZ CxnOKEGNRUWu7S9Iy7bQxL+u/sQIu7O0fQNHFOeTaeszmjxjJNSo6OTacNiNkAHt k0J4Tv+U2IAwRl7SxvbP6ZeEGGBDmrsXpvxFxyfounXh+82GZUcnVtf7rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNnt4LJclzGF/ba7jBAU/yddeCKMMB8GA1UdIwQY MBaAFD0jdY37bx1D3NZNDwqyfvcVE1lSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFNOMWpmdHZIVVBjMWswUENySi05eFVUV1ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82NmVmYjQtZDJlYy00MGQ2LTlhM2Ut Nzk5MGU4N2JiZDVmLzEvUFNOMWpmdHZIVVBjMWswUENySi05eFVUV1ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC82NmVmYjQtZDJlYy00MGQ2LTlhM2UtNzk5MGU4N2JiZDVm LzEvUFNOMWpmdHZIVVBjMWswUENySi05eFVUV1ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACF9E3STC kD+F0M7CU7DLwiWVVvJLNfqckvQT4W+9Z1Y9EkJ4nO0n3tk0YBYoMAAYukP40mv4 DvS7TQxwEvjYVMuXh6Y83CTO2KvLgO32lNgOE9OS7Z2KuVwOPwOqHYveSA8NniIB 7AHhzGbSxrpeRjVe2TUfeqdYbv4xXAVEgoPeZbP7FrpA5Iugqm0zQU0gvB0yQMQI lc+WcPWq0lE/tZARMaGJiLN3He24gu0Pqraanc40YCSV2/ctKGeO7tx4G4ELy6aO ZmuC7ssY0gAv/dF+7roZaPi0ZWRswgdYHM/OEKfodr+sJ23lfhuQxp0+SnF5xS9S 3I/WUCkAqphKVQ== -----END CERTIFICATE-----Generated at Tue Dec 16 23:21:15 2025 by rpki-client