This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft File: PvMl70y6pmzHH_zGiAh3524Umv0.mft (raw, json) Hash identifier: B+A2w9Jk/lCIzVhpU+zivHdFYZEEJkR00EfCtvJcG9A= Subject key identifier: BC:AF:0E:34:E6:26:84:91:56:9B:8B:DE:00:7A:74:57:02:1B:82:7B Authority key identifier: 3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD Certificate issuer: /CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd Certificate serial: 019B3B345A2FD6C6644DD448A78DB1707BE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft Manifest number: 178C Signing time: Sat 20 Dec 2025 10:00:45 +0000 Manifest this update: Sat 20 Dec 2025 10:00:45 +0000 Manifest next update: Sun 21 Dec 2025 10:00:45 +0000 Files and hashes: 1: 2dLH0vNFJnWg2lZelybNLzc06cc.roa (hash: r/Z+8xB7CHc6LECAv+vBuRY+QqUaeEKJ5DtFzihx2Zs=) 2: PvMl70y6pmzHH_zGiAh3524Umv0.crl (hash: F7YrvOhNx2CcZK9h6fdMKVjKxs+x8b7yjcXrlmqsP/U=) 3: THythJBp9HlvhR4Ucra3aB5a1rw.roa (hash: s/hqAL5pfO/TIJ20hhiLhrBaWL37u8uzz5dP4J4SZhw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:5a:2f:d6:c6:64:4d:d4:48:a7:8d:b1:70:7b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd Validity Not Before: Dec 20 10:00:45 2025 GMT Not After : Dec 21 10:00:45 2025 GMT Subject: CN=bcaf0e34e6268491569b8bde007a7457021b827b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bd:5c:fb:89:b5:6e:3b:ee:7a:70:d1:75:71: a0:a5:19:7f:e8:28:ee:f8:42:76:31:9d:c6:b2:77: 74:e5:18:8b:b6:9d:6f:ad:c7:e0:c8:21:15:0b:22: 81:2f:39:71:72:e6:45:31:17:f2:32:2f:2c:2b:3b: b3:77:58:76:79:2b:ea:41:3d:7c:ce:32:20:23:54: cf:6a:53:83:d4:40:e5:da:47:fa:af:71:a1:2b:f2: fe:71:36:ff:11:82:b9:21:5f:d6:f7:a0:63:b7:51: d0:b2:ac:c9:49:53:7e:88:3f:9e:35:61:3a:57:7b: 07:b8:c4:48:b7:50:78:0b:e6:66:94:97:38:c5:13: 19:64:c5:1e:22:2a:bc:76:c0:1a:ff:dd:0d:42:85: d3:da:f0:0c:b7:90:14:3e:df:20:b4:25:0a:f0:80: 98:df:b5:03:3b:c6:c5:c2:0a:0e:77:e1:99:42:00: 60:85:77:dc:61:59:95:26:44:8c:bb:86:ad:58:eb: 04:6a:71:70:90:3f:05:78:b6:4a:37:af:24:b0:2a: ed:1d:27:33:bc:57:d8:b0:66:fc:fe:66:4e:54:06: 46:6d:d4:31:a6:93:07:d3:fd:5d:02:c6:3f:b1:6a: ff:d5:40:a8:f8:f4:1f:1a:76:8c:6f:0f:01:19:a1: 02:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:AF:0E:34:E6:26:84:91:56:9B:8B:DE:00:7A:74:57:02:1B:82:7B X509v3 Authority Key Identifier: keyid:3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:d1:f0:19:06:6c:d8:78:68:2e:59:3f:62:03:ee:d1:db:45: 14:a7:03:97:47:33:2a:ce:36:9d:c5:a3:aa:5f:42:8c:31:46: 3d:73:fd:6d:3d:23:2e:1e:20:3c:0c:81:51:c2:7c:50:0b:51: 9e:a9:e3:d3:bb:77:cb:ab:4c:4c:dc:54:cb:26:d5:2c:f9:8a: bd:b8:06:75:8c:5d:07:9d:ee:c4:37:0b:94:85:25:0f:8d:22: 2d:a4:a2:82:40:cf:f0:72:9e:47:d6:12:36:c5:cb:07:86:b4: 9d:b3:8d:e3:09:43:12:78:33:6c:29:8a:fe:76:4e:05:72:12: a6:0b:88:9d:a4:82:61:5f:16:49:a3:bf:c7:18:9d:e3:8a:09: ee:69:93:5e:ed:f5:09:f9:a0:56:58:f1:52:f0:f2:6d:47:bd: de:58:36:8b:1b:9d:5b:d1:aa:9e:06:e6:e1:dd:fe:2d:f7:6e: d9:10:aa:48:7f:62:7f:8b:35:cc:e9:3d:ae:23:a0:8c:e0:b5: ca:5e:08:19:7c:d5:85:56:d4:f5:44:4b:94:9c:7e:3c:fe:7b: da:40:23:d1:3d:a4:a6:e4:ce:e0:0e:04:73:a7:26:4c:4d:89: 53:2c:b1:58:32:51:ba:68:e3:94:8a:1e:56:c1:43:9c:8a:83: d3:28:4e:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NFov1sZkTdRIp42xcHvgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZjMyNWVmNGNiYWE2NmNjNzFmZmNjNjg4MDg3N2U3NmUx NDlhZmQwHhcNMjUxMjIwMTAwMDQ1WhcNMjUxMjIxMTAwMDQ1WjAzMTEwLwYDVQQD EyhiY2FmMGUzNGU2MjY4NDkxNTY5YjhiZGUwMDdhNzQ1NzAyMWI4MjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvr1c+4m1bjvuenDRdXGgpRl/6Cju +EJ2MZ3Gsnd05RiLtp1vrcfgyCEVCyKBLzlxcuZFMRfyMi8sKzuzd1h2eSvqQT18 zjIgI1TPalOD1EDl2kf6r3GhK/L+cTb/EYK5IV/W96Bjt1HQsqzJSVN+iD+eNWE6 V3sHuMRIt1B4C+ZmlJc4xRMZZMUeIiq8dsAa/90NQoXT2vAMt5AUPt8gtCUK8ICY 37UDO8bFwgoOd+GZQgBghXfcYVmVJkSMu4atWOsEanFwkD8FeLZKN68ksCrtHScz vFfYsGb8/mZOVAZGbdQxppMH0/1dAsY/sWr/1UCo+PQfGnaMbw8BGaECyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLyvDjTmJoSRVpuL3gB6dFcCG4J7MB8GA1UdIwQY MBaAFD7zJe9MuqZsxx/8xogId+duFJr9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHZNbDcweTZwbXpISF96R2lBaDM1MjRVbXYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80ZmQwOTAtNmZhZS00YTZhLThmOWUt MzRkNzE0ODVjNTQ3LzEvUHZNbDcweTZwbXpISF96R2lBaDM1MjRVbXYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS80ZmQwOTAtNmZhZS00YTZhLThmOWUtMzRkNzE0ODVjNTQ3 LzEvUHZNbDcweTZwbXpISF96R2lBaDM1MjRVbXYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd9HwGQZs 2HhoLlk/YgPu0dtFFKcDl0czKs42ncWjql9CjDFGPXP9bT0jLh4gPAyBUcJ8UAtR nqnj07t3y6tMTNxUyybVLPmKvbgGdYxdB53uxDcLlIUlD40iLaSigkDP8HKeR9YS NsXLB4a0nbON4wlDEngzbCmK/nZOBXISpguInaSCYV8WSaO/xxid44oJ7mmTXu31 CfmgVljxUvDybUe93lg2ixudW9Gqngbm4d3+Lfdu2RCqSH9if4s1zOk9riOgjOC1 yl4IGXzVhVbU9URLlJx+PP572kAj0T2kpuTO4A4Ec6cmTE2JUyyxWDJRumjjlIoe VsFDnIqD0yhO7w== -----END CERTIFICATE-----Generated at Sat Dec 20 17:50:53 2025 by rpki-client