This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft File: pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft (raw, json) Hash identifier: gJTNaVVKvYHPp/tMTd2W/komlaoYpQ4YsQu7r7sdqF4= Subject key identifier: 9F:EA:94:73:FA:A0:96:C5:45:D7:B5:1F:B3:F6:78:0C:83:9E:37:05 Authority key identifier: A5:C2:28:64:E3:92:0E:16:0A:D9:B8:4F:F0:1D:A8:66:AA:40:97:85 Certificate issuer: /CN=a5c22864e3920e160ad9b84ff01da866aa409785 Certificate serial: 019B4ADE8246F26222E6472B329CC364C899 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft Manifest number: 0663 Signing time: Tue 23 Dec 2025 11:00:54 +0000 Manifest this update: Tue 23 Dec 2025 11:00:54 +0000 Manifest next update: Wed 24 Dec 2025 11:00:54 +0000 Files and hashes: 1: pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl (hash: RR8uI7P3KouU8UcvfHBXzH1fKvbgdU31xHW0SFqj8CI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 11:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:de:82:46:f2:62:22:e6:47:2b:32:9c:c3:64:c8:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5c22864e3920e160ad9b84ff01da866aa409785 Validity Not Before: Dec 23 11:00:54 2025 GMT Not After : Dec 24 11:00:54 2025 GMT Subject: CN=9fea9473faa096c545d7b51fb3f6780c839e3705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:66:bd:c3:7f:23:ad:aa:27:48:ec:c6:82:d1: c0:8b:a3:53:19:9c:38:86:e6:ce:bf:46:67:cd:7c: 7f:78:99:c3:23:64:e9:1c:57:c0:ee:53:77:27:d9: c5:b9:b9:2d:12:6e:19:a6:fd:cb:45:a4:c1:bb:04: 99:e7:99:b8:4e:65:65:5e:50:ce:7e:a8:55:25:09: 1d:1d:f6:a5:af:7e:a7:1b:74:5b:ec:5c:39:87:c7: ee:3e:38:f6:c1:66:2b:38:95:68:ea:5a:3d:f5:e1: 6d:56:6d:78:1b:f2:03:bd:7a:eb:65:22:0a:60:03: 82:e5:66:e5:e3:9b:20:79:dd:4c:c3:da:73:5b:2b: f0:85:68:5b:e2:c6:00:d4:cc:ac:69:ff:ff:e6:34: 64:00:e2:d6:aa:d0:f7:92:8c:1c:ec:b0:30:7e:f7: de:b3:01:e6:03:9c:ad:36:a3:db:35:d1:95:3b:ad: 29:94:98:70:0c:47:86:e5:fc:43:df:73:5d:f5:a6: 83:94:d4:99:8a:19:c5:20:37:39:0e:16:7c:93:25: 95:72:18:d9:5d:73:7e:f6:d7:b3:39:a7:cd:34:62: ff:ea:e4:6f:5b:7a:49:4d:e9:a6:0e:8a:1a:ab:fc: 5e:bc:c3:35:9b:50:ce:1d:9d:54:53:28:ca:69:af: 20:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:EA:94:73:FA:A0:96:C5:45:D7:B5:1F:B3:F6:78:0C:83:9E:37:05 X509v3 Authority Key Identifier: keyid:A5:C2:28:64:E3:92:0E:16:0A:D9:B8:4F:F0:1D:A8:66:AA:40:97:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:f8:6c:d1:67:d4:62:52:a7:bd:6f:3a:11:f9:ca:9e:82:ea: f4:4d:aa:6b:0c:bf:c0:ef:64:06:4c:fd:5a:84:d3:fd:ea:27: 22:a8:9d:48:96:b6:58:30:9b:f1:9d:dc:c8:00:61:c1:fa:64: 7f:3d:d6:07:e5:9b:23:0f:86:09:1d:bc:06:9f:e7:49:b4:ad: 4a:aa:3a:38:41:92:fa:e9:61:d2:3f:60:8a:21:b5:bf:cd:f9: 62:02:17:08:f8:dd:5f:b6:f4:06:d6:9f:83:c2:ef:5b:38:55: 69:97:71:ac:21:d3:a3:8c:4a:65:d2:90:79:b3:fa:16:11:6e: b7:71:ee:18:1f:09:8e:3c:41:d1:04:dc:e8:bc:94:3d:aa:f9: 39:4e:18:a3:e8:a9:fa:a0:12:f4:78:1e:9e:53:be:63:ab:93: ad:88:e7:5f:df:ab:69:fa:c3:68:2b:98:b6:75:49:17:92:ef: d8:5d:be:6a:71:8c:a6:ef:36:f5:ea:e8:b8:6c:87:8e:c7:2e: 10:26:ba:6c:b1:e8:80:c6:10:0d:e8:23:aa:a7:00:75:8d:6e: a0:df:06:46:4b:4d:d0:3e:ef:cd:2c:2c:39:55:13:e0:a6:2f: 5b:50:03:a3:6c:8a:03:ae:af:d9:0b:8b:55:2c:9d:ce:52:fd: 17:de:32:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtK3oJG8mIi5kcrMpzDZMiZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YzIyODY0ZTM5MjBlMTYwYWQ5Yjg0ZmYwMWRhODY2YWE0 MDk3ODUwHhcNMjUxMjIzMTEwMDU0WhcNMjUxMjI0MTEwMDU0WjAzMTEwLwYDVQQD Eyg5ZmVhOTQ3M2ZhYTA5NmM1NDVkN2I1MWZiM2Y2NzgwYzgzOWUzNzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoma9w38jraonSOzGgtHAi6NTGZw4 hubOv0ZnzXx/eJnDI2TpHFfA7lN3J9nFubktEm4Zpv3LRaTBuwSZ55m4TmVlXlDO fqhVJQkdHfalr36nG3Rb7Fw5h8fuPjj2wWYrOJVo6lo99eFtVm14G/IDvXrrZSIK YAOC5Wbl45sged1Mw9pzWyvwhWhb4sYA1Mysaf//5jRkAOLWqtD3kowc7LAwfvfe swHmA5ytNqPbNdGVO60plJhwDEeG5fxD33Nd9aaDlNSZihnFIDc5DhZ8kyWVchjZ XXN+9tezOafNNGL/6uRvW3pJTemmDooaq/xevMM1m1DOHZ1UUyjKaa8gtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ/qlHP6oJbFRde1H7P2eAyDnjcFMB8GA1UdIwQY MBaAFKXCKGTjkg4WCtm4T/AdqGaqQJeFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGNJb1pPT1NEaFlLMmJoUDhCMm9acXBBbDRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9hZDk4NGEtOTlhYy00MTNhLWJkZGUt NTRjODg5MGRmZjJkLzEvcGNJb1pPT1NEaFlLMmJoUDhCMm9acXBBbDRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9hZDk4NGEtOTlhYy00MTNhLWJkZGUtNTRjODg5MGRmZjJk LzEvcGNJb1pPT1NEaFlLMmJoUDhCMm9acXBBbDRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAPhs0WfU YlKnvW86EfnKnoLq9E2qawy/wO9kBkz9WoTT/eonIqidSJa2WDCb8Z3cyABhwfpk fz3WB+WbIw+GCR28Bp/nSbStSqo6OEGS+ulh0j9giiG1v835YgIXCPjdX7b0Btaf g8LvWzhVaZdxrCHTo4xKZdKQebP6FhFut3HuGB8JjjxB0QTc6LyUPar5OU4Yo+ip +qAS9HgenlO+Y6uTrYjnX9+rafrDaCuYtnVJF5Lv2F2+anGMpu829erouGyHjscu ECa6bLHogMYQDegjqqcAdY1uoN8GRktN0D7vzSwsOVUT4KYvW1ADo2yKA66v2QuL VSydzlL9F94yfw== -----END CERTIFICATE-----Generated at Tue Dec 23 20:50:30 2025 by rpki-client