This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.mft File: Pr6uqg8H3D1UvBFcziAq2pggsdU.mft (raw, json) Hash identifier: UFtwIOid23YOGuGuLPTT3uuPY3lFbJ90IfjEQ/ahsvM= Subject key identifier: 18:CA:97:CB:35:96:63:7A:0C:3D:F0:23:06:09:65:04:A7:37:C9:13 Authority key identifier: 3E:BE:AE:AA:0F:07:DC:3D:54:BC:11:5C:CE:20:2A:DA:98:20:B1:D5 Certificate issuer: /CN=3ebeaeaa0f07dc3d54bc115cce202ada9820b1d5 Certificate serial: 019B6A6966AC51CE77DA18D8DCD0B1FD7DAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pr6uqg8H3D1UvBFcziAq2pggsdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.mft Manifest number: 0932 Signing time: Mon 29 Dec 2025 14:00:50 +0000 Manifest this update: Mon 29 Dec 2025 14:00:50 +0000 Manifest next update: Tue 30 Dec 2025 14:00:50 +0000 Files and hashes: 1: Pr6uqg8H3D1UvBFcziAq2pggsdU.crl (hash: tjLJlk1rtSuY4OIb9KuGmeC+7jInAzAGeYNLHXZ8xm0=) 2: nV3wzH_1I5VE4qLJ5nCrt9MPHjQ.roa (hash: db3hfBEW1jL4gbyVu0D2s50T0rgPqR4B0mvJEYFg7lA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.crl rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.mft rsync://rpki.ripe.net/repository/DEFAULT/Pr6uqg8H3D1UvBFcziAq2pggsdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 14:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:69:66:ac:51:ce:77:da:18:d8:dc:d0:b1:fd:7d:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ebeaeaa0f07dc3d54bc115cce202ada9820b1d5 Validity Not Before: Dec 29 14:00:50 2025 GMT Not After : Dec 30 14:00:50 2025 GMT Subject: CN=18ca97cb3596637a0c3df02306096504a737c913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ec:a2:41:09:f8:d3:7a:f8:16:f1:32:dd:9b: d4:31:f9:7a:0d:7e:d4:8a:d3:b2:79:6f:9f:77:b9: 82:bc:ec:14:24:b2:97:22:2b:62:f2:dc:ed:ec:fe: da:40:89:2d:d8:86:66:2e:12:2c:23:d8:36:77:c4: a3:07:b6:90:c5:c8:9a:52:aa:eb:fb:57:cf:df:07: 2e:ce:c1:7b:5b:96:5f:1d:06:6d:52:24:65:ad:38: fc:9a:45:6f:bf:b1:09:c7:14:ee:69:a2:b6:eb:57: 3f:d7:04:a7:23:9f:f2:4c:cf:9c:1f:ea:49:ac:89: 1d:11:7c:96:d3:f2:4a:b5:63:9e:57:7a:ff:ce:96: 4c:1c:56:dd:72:61:9d:40:0c:ba:46:ba:a7:b3:20: 5d:70:8a:4e:58:ab:3b:1a:4b:c0:b5:ab:a8:3a:32: 1d:f4:0f:2b:c3:34:f2:21:dd:0d:86:74:89:9d:6d: 43:64:f7:05:bd:72:cb:af:e2:9b:31:42:87:5f:60: 8b:23:bb:cf:09:22:06:cf:49:e2:ec:6a:69:4f:a5: 7a:35:0d:20:ee:06:e0:de:37:c3:6e:7c:0c:78:bf: 3c:1f:77:d4:ab:42:c6:a9:34:a5:63:a3:ba:04:ec: 65:5c:ef:66:66:85:22:3f:77:cc:d9:25:1e:05:54: b8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:CA:97:CB:35:96:63:7A:0C:3D:F0:23:06:09:65:04:A7:37:C9:13 X509v3 Authority Key Identifier: keyid:3E:BE:AE:AA:0F:07:DC:3D:54:BC:11:5C:CE:20:2A:DA:98:20:B1:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pr6uqg8H3D1UvBFcziAq2pggsdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:95:f6:85:a7:5c:de:e3:7d:e5:f1:04:b4:69:4a:54:00:ad: ec:ee:b0:f2:87:c7:28:8a:3e:8b:a0:91:9c:c9:00:18:e6:43: e7:db:02:91:92:4f:76:73:38:cf:98:4c:dd:fb:03:31:d1:ad: 96:85:c3:c4:2a:cc:10:4c:e1:11:c0:f4:9b:57:3b:23:16:c5: 8f:d0:00:09:bc:1e:55:84:b4:84:8d:6d:9e:10:c3:87:b5:b2: 06:95:f2:fc:4f:50:c5:36:ba:ba:75:c1:23:9c:f9:c9:9c:5d: 51:6f:75:fe:f1:b1:3e:13:13:3b:01:cc:5e:e2:71:7e:97:fa: a6:54:46:10:b1:39:9f:31:c9:c0:94:f6:06:17:5f:d7:76:fb: a2:02:5e:0a:86:e7:43:86:db:ef:0e:ca:35:bd:c6:38:bc:57: 5e:7e:12:b1:0b:15:2b:87:35:c1:eb:dd:a0:b9:d4:ea:4a:c8: 82:6d:a0:e0:88:8e:5e:ab:1a:ab:67:92:36:fb:e7:61:a6:00: 69:56:e5:7e:c6:da:12:67:ae:21:22:12:a5:8c:f5:25:ee:ad: e1:fd:32:aa:42:57:50:73:28:24:68:bf:28:32:c7:4e:78:01: 7e:d3:8a:9b:b3:d2:0d:86:bb:7d:2e:5b:4f:74:37:61:f5:56: 10:30:b3:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtqaWasUc532hjY3NCx/X2sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYmVhZWFhMGYwN2RjM2Q1NGJjMTE1Y2NlMjAyYWRhOTgy MGIxZDUwHhcNMjUxMjI5MTQwMDUwWhcNMjUxMjMwMTQwMDUwWjAzMTEwLwYDVQQD EygxOGNhOTdjYjM1OTY2MzdhMGMzZGYwMjMwNjA5NjUwNGE3MzdjOTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOyiQQn403r4FvEy3ZvUMfl6DX7U itOyeW+fd7mCvOwUJLKXIiti8tzt7P7aQIkt2IZmLhIsI9g2d8SjB7aQxciaUqrr +1fP3wcuzsF7W5ZfHQZtUiRlrTj8mkVvv7EJxxTuaaK261c/1wSnI5/yTM+cH+pJ rIkdEXyW0/JKtWOeV3r/zpZMHFbdcmGdQAy6RrqnsyBdcIpOWKs7GkvAtauoOjId 9A8rwzTyId0NhnSJnW1DZPcFvXLLr+KbMUKHX2CLI7vPCSIGz0ni7GppT6V6NQ0g 7gbg3jfDbnwMeL88H3fUq0LGqTSlY6O6BOxlXO9mZoUiP3fM2SUeBVS4CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBjKl8s1lmN6DD3wIwYJZQSnN8kTMB8GA1UdIwQY MBaAFD6+rqoPB9w9VLwRXM4gKtqYILHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHI2dXFnOEgzRDFVdkJGY3ppQXEycGdnc2RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8zYTAzNjgtNTcwYy00ODQ3LThkNGEt ZmY0YWQxZTNkYWY1LzEvUHI2dXFnOEgzRDFVdkJGY3ppQXEycGdnc2RVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS8zYTAzNjgtNTcwYy00ODQ3LThkNGEtZmY0YWQxZTNkYWY1 LzEvUHI2dXFnOEgzRDFVdkJGY3ppQXEycGdnc2RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUJX2hadc 3uN95fEEtGlKVACt7O6w8ofHKIo+i6CRnMkAGOZD59sCkZJPdnM4z5hM3fsDMdGt loXDxCrMEEzhEcD0m1c7IxbFj9AACbweVYS0hI1tnhDDh7WyBpXy/E9QxTa6unXB I5z5yZxdUW91/vGxPhMTOwHMXuJxfpf6plRGELE5nzHJwJT2Bhdf13b7ogJeCobn Q4bb7w7KNb3GOLxXXn4SsQsVK4c1wevdoLnU6krIgm2g4IiOXqsaq2eSNvvnYaYA aVblfsbaEmeuISISpYz1Je6t4f0yqkJXUHMoJGi/KDLHTngBftOKm7PSDYa7fS5b T3Q3YfVWEDCzaA== -----END CERTIFICATE-----Generated at Mon Dec 29 22:47:02 2025 by rpki-client