This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft File: _PmtqbKLaZf9ocRoqNhpY4QHoLs.mft (raw, json) Hash identifier: c6GtTiaGpNqXsbfdtZS5ISuqnUSXk+sv7D0+O6hMrsU= Subject key identifier: 0E:2B:00:83:B9:F9:85:E3:92:28:76:E9:24:CC:6F:D4:19:AE:83:3A Authority key identifier: FC:F9:AD:A9:B2:8B:69:97:FD:A1:C4:68:A8:D8:69:63:84:07:A0:BB Certificate issuer: /CN=fcf9ada9b28b6997fda1c468a8d869638407a0bb Certificate serial: 019B3C7FB29ED1ACAA153B74F18DE8DB2CF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 16:02:40 +0000 Manifest this update: Sat 20 Dec 2025 16:02:40 +0000 Manifest next update: Sun 21 Dec 2025 16:02:40 +0000 Files and hashes: 1: Le3v2H0wAOnsDtbYpl9GWGKprW8.roa (hash: 3pH+MsH30Kao3JM7UhwFK9NiYfes8F3zq57Gt61L8AQ=) 2: _PmtqbKLaZf9ocRoqNhpY4QHoLs.crl (hash: 33/7NQUlkBJYB2JsYOkTaq+LRuqolyCvRVvHUhry//k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:b2:9e:d1:ac:aa:15:3b:74:f1:8d:e8:db:2c:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcf9ada9b28b6997fda1c468a8d869638407a0bb Validity Not Before: Dec 20 16:02:40 2025 GMT Not After : Dec 21 16:02:40 2025 GMT Subject: CN=0e2b0083b9f985e3922876e924cc6fd419ae833a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:42:b8:35:22:c7:ab:de:7e:4f:eb:be:8f:c8: f4:7a:78:c3:93:14:fc:21:50:09:42:ae:4d:52:79: a8:0a:42:77:e6:a5:66:e6:db:dc:68:03:fd:ee:af: ad:ea:2e:0b:df:b4:ef:5f:87:05:49:25:76:72:19: e0:ce:48:5e:bc:20:cf:d0:22:65:e6:08:ac:6f:cc: 00:e6:63:af:d9:32:81:38:36:75:77:28:a3:86:74: cb:60:af:52:f6:53:fc:0c:ba:cc:eb:a0:e9:df:45: a4:74:bd:eb:42:bb:14:16:67:0a:b2:8c:f4:20:51: 37:a3:a4:42:02:bb:db:24:f4:1c:64:0d:c9:cd:c0: 63:c1:6f:c3:92:69:f7:22:76:22:76:24:8a:21:2f: 72:46:f8:db:8b:0b:8c:66:6c:c5:0c:97:1a:bb:66: be:68:8d:6c:bb:2f:29:f1:5e:d6:3b:3f:92:32:75: ef:aa:73:be:99:0c:ac:e1:6e:6e:6d:6c:ef:08:c5: 3f:92:a9:51:2c:4c:29:83:d4:2f:82:cc:9d:19:b1: ac:74:10:54:96:77:1a:0b:39:6c:26:7d:a5:43:ad: 6f:95:af:ce:08:64:05:59:f7:a8:5d:f6:75:61:45: 6a:25:c6:b1:e1:cc:c5:bd:09:19:53:41:d0:29:25: da:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:2B:00:83:B9:F9:85:E3:92:28:76:E9:24:CC:6F:D4:19:AE:83:3A X509v3 Authority Key Identifier: keyid:FC:F9:AD:A9:B2:8B:69:97:FD:A1:C4:68:A8:D8:69:63:84:07:A0:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:dc:71:d7:cd:e0:b0:41:7e:5e:ac:b7:2e:8f:d6:d4:58:52: 1d:16:05:bc:25:5e:7e:d1:4f:17:56:4a:0a:31:7e:1f:13:7f: c6:f4:eb:aa:b1:94:31:b0:00:3b:eb:ad:2c:c4:6a:b0:16:ca: 94:05:0c:f8:ad:65:4c:8e:b0:e9:b3:c3:ce:74:1c:2c:90:cb: 26:6b:5e:67:26:4b:4b:d8:68:b9:7d:14:fc:eb:84:9c:2b:e6: 4b:d2:3f:17:9b:38:79:f1:d3:0e:bc:4e:4d:9e:ec:f2:61:60: 0f:3c:5e:05:80:c5:56:39:a9:37:20:39:8c:a0:cc:cd:0f:62: 9e:82:d0:54:a8:e4:3d:56:e7:a6:33:2d:88:3a:b2:76:6d:21: 07:f7:e3:23:8b:7e:af:af:66:0e:21:1b:4f:bb:5d:2e:0f:60: b2:77:36:e6:f3:6d:be:47:3c:eb:2d:e7:63:59:86:bc:b1:78: 19:c8:c0:e3:64:eb:18:1a:15:e0:90:ad:b8:90:ef:e9:e1:d7: fa:8d:33:94:bf:06:fe:95:6d:f4:7b:eb:e7:8f:d3:f6:bb:f2: d7:27:44:ea:07:04:ba:42:fc:87:98:3b:e8:05:13:c0:0f:ea: ea:70:e6:db:b5:fc:d8:7c:0b:24:8c:e2:f3:90:4c:45:13:bf: bb:e7:c4:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f7Ke0ayqFTt08Y3o2yz2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjZjlhZGE5YjI4YjY5OTdmZGExYzQ2OGE4ZDg2OTYzODQw N2EwYmIwHhcNMjUxMjIwMTYwMjQwWhcNMjUxMjIxMTYwMjQwWjAzMTEwLwYDVQQD EygwZTJiMDA4M2I5Zjk4NWUzOTIyODc2ZTkyNGNjNmZkNDE5YWU4MzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUK4NSLHq95+T+u+j8j0enjDkxT8 IVAJQq5NUnmoCkJ35qVm5tvcaAP97q+t6i4L37TvX4cFSSV2chngzkhevCDP0CJl 5gisb8wA5mOv2TKBODZ1dyijhnTLYK9S9lP8DLrM66Dp30WkdL3rQrsUFmcKsoz0 IFE3o6RCArvbJPQcZA3JzcBjwW/Dkmn3InYidiSKIS9yRvjbiwuMZmzFDJcau2a+ aI1suy8p8V7WOz+SMnXvqnO+mQys4W5ubWzvCMU/kqlRLEwpg9QvgsydGbGsdBBU lncaCzlsJn2lQ61vla/OCGQFWfeoXfZ1YUVqJcax4czFvQkZU0HQKSXa8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA4rAIO5+YXjkih26STMb9QZroM6MB8GA1UdIwQY MBaAFPz5ramyi2mX/aHEaKjYaWOEB6C7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1BtdHFiS0xhWmY5b2NSb3FOaHBZNFFIb0xzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS83YTk2ZDEtY2YxYi00ZjQ3LTkzZWUt MjU5ZmUxNzUwZWViLzEvX1BtdHFiS0xhWmY5b2NSb3FOaHBZNFFIb0xzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS83YTk2ZDEtY2YxYi00ZjQ3LTkzZWUtMjU5ZmUxNzUwZWVi LzEvX1BtdHFiS0xhWmY5b2NSb3FOaHBZNFFIb0xzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB9xx183g sEF+Xqy3Lo/W1FhSHRYFvCVeftFPF1ZKCjF+HxN/xvTrqrGUMbAAO+utLMRqsBbK lAUM+K1lTI6w6bPDznQcLJDLJmteZyZLS9houX0U/OuEnCvmS9I/F5s4efHTDrxO TZ7s8mFgDzxeBYDFVjmpNyA5jKDMzQ9inoLQVKjkPVbnpjMtiDqydm0hB/fjI4t+ r69mDiEbT7tdLg9gsnc25vNtvkc86y3nY1mGvLF4GcjA42TrGBoV4JCtuJDv6eHX +o0zlL8G/pVt9Hvr54/T9rvy1ydE6gcEukL8h5g76AUTwA/q6nDm27X82HwLJIzi 85BMRRO/u+fE7A== -----END CERTIFICATE-----Generated at Sat Dec 20 23:06:53 2025 by rpki-client