This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft File: PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft (raw, json) Hash identifier: JHDk0u3ZaI6mmhVpJnpSXqbOzJ7W5d1ja2ISVtpav1g= Subject key identifier: 2E:C3:9E:78:F3:9A:BC:CB:34:C6:1A:9E:CA:B4:1C:17:BB:22:A7:B3 Authority key identifier: 3E:E0:21:4C:60:9C:6C:D6:78:03:AC:7C:73:6E:F8:DA:51:7C:A5:9D Certificate issuer: /CN=3ee0214c609c6cd67803ac7c736ef8da517ca59d Certificate serial: 019B40C8BDB861DC8F11F6F199D70620CAF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft Manifest number: 0203 Signing time: Sun 21 Dec 2025 12:00:56 +0000 Manifest this update: Sun 21 Dec 2025 12:00:56 +0000 Manifest next update: Mon 22 Dec 2025 12:00:56 +0000 Files and hashes: 1: PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl (hash: 7JAm/8za0w25wedXQ20yEHOpzjrR/iBgmfbht+Yo9xM=) 2: mTUK0_cMYs_FlNXkmrwcNZ-A9WU.roa (hash: vFAKDgKtbcMdQ9fcPL7goyOKxpH3iASXmuoUDIoP9TQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:bd:b8:61:dc:8f:11:f6:f1:99:d7:06:20:ca:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee0214c609c6cd67803ac7c736ef8da517ca59d Validity Not Before: Dec 21 12:00:56 2025 GMT Not After : Dec 22 12:00:56 2025 GMT Subject: CN=2ec39e78f39abccb34c61a9ecab41c17bb22a7b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:06:bb:1d:8c:78:44:61:a6:8e:e7:a7:9d:b4: 93:2b:e4:5b:9d:0c:0b:d2:4c:dc:65:f0:6e:33:89: d6:a0:8b:ae:c6:6c:2d:47:26:ae:ab:d2:87:08:fd: fd:c3:eb:82:84:f9:ea:b0:a1:c9:30:a6:e5:78:7f: 1d:cd:8f:e8:48:d5:e3:80:48:3f:37:74:ae:6d:09: 53:f7:42:8c:cb:fe:65:89:59:74:a6:96:25:80:5a: c1:75:56:24:25:1b:5d:d9:3a:01:f0:46:51:80:13: 02:ad:70:21:79:7f:a8:3f:27:c0:c5:aa:01:7a:eb: cf:1c:16:48:17:04:d5:16:d8:5d:9b:94:89:1b:c6: 85:1d:5f:9a:84:14:c2:46:39:6f:14:ac:db:4f:fe: 23:cb:7a:02:fd:9b:84:bf:66:a5:0a:ff:88:88:42: 29:be:57:21:cd:af:e8:03:a4:70:09:90:b1:b3:26: 30:8b:c5:ef:bc:47:91:21:3b:8e:1e:2b:82:db:92: 06:9d:fc:ac:2c:91:7c:2b:da:3e:8a:ce:ba:0a:65: bc:48:93:fd:9d:9f:4c:ab:21:f0:9c:7e:89:7f:68: b4:6b:c1:3b:90:70:28:b6:b9:d5:05:33:7e:3e:e6: 09:c4:7a:3a:f9:1b:50:c0:15:2f:74:12:f6:69:36: 58:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:C3:9E:78:F3:9A:BC:CB:34:C6:1A:9E:CA:B4:1C:17:BB:22:A7:B3 X509v3 Authority Key Identifier: keyid:3E:E0:21:4C:60:9C:6C:D6:78:03:AC:7C:73:6E:F8:DA:51:7C:A5:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:9f:f4:a9:18:75:eb:ba:7f:7e:84:e9:a3:51:ea:89:db:5d: 1e:a7:ea:12:64:37:93:1f:b8:ce:ca:ad:28:ce:e8:3e:2d:d4: 69:36:b9:04:b4:98:7d:0c:a9:2b:57:49:5d:3d:a1:63:4a:cf: ce:53:92:9c:94:e9:d3:ec:ea:2a:f1:c4:01:8b:af:05:bc:fc: 87:a3:ad:ac:87:97:e3:9c:85:6c:67:20:92:eb:b0:13:94:0d: b0:b0:06:8d:9e:af:d5:97:75:02:09:1d:ce:91:df:f2:62:18: 9f:87:97:7d:00:5b:a9:d5:6b:86:ba:29:98:47:7e:f0:73:4f: 1d:6d:c1:b1:22:d4:79:d7:69:9f:bb:8b:6c:09:03:39:0f:ad: 91:f1:78:f2:93:74:21:7f:ea:93:e2:17:10:a6:64:4d:00:6b: 8e:ee:99:78:d7:38:fb:0c:50:d7:49:7b:74:92:70:40:a6:19: b5:fe:a5:3c:2b:37:93:89:64:1f:8d:f7:06:26:44:96:2c:e7: dd:dd:ca:54:be:e2:59:ba:2b:c3:38:1d:f3:dc:b8:a2:07:b8: 1f:6b:c4:a5:86:ef:cc:c8:8b:ee:7e:c5:d2:c4:b9:1b:63:99: e6:79:3b:5d:01:67:f9:0e:2c:44:ba:4d:aa:31:6a:b6:b1:b9: 8b:83:7d:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyL24YdyPEfbxmdcGIMrxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZTAyMTRjNjA5YzZjZDY3ODAzYWM3YzczNmVmOGRhNTE3 Y2E1OWQwHhcNMjUxMjIxMTIwMDU2WhcNMjUxMjIyMTIwMDU2WjAzMTEwLwYDVQQD EygyZWMzOWU3OGYzOWFiY2NiMzRjNjFhOWVjYWI0MWMxN2JiMjJhN2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsga7HYx4RGGmjuennbSTK+RbnQwL 0kzcZfBuM4nWoIuuxmwtRyauq9KHCP39w+uChPnqsKHJMKbleH8dzY/oSNXjgEg/ N3SubQlT90KMy/5liVl0ppYlgFrBdVYkJRtd2ToB8EZRgBMCrXAheX+oPyfAxaoB euvPHBZIFwTVFthdm5SJG8aFHV+ahBTCRjlvFKzbT/4jy3oC/ZuEv2alCv+IiEIp vlchza/oA6RwCZCxsyYwi8XvvEeRITuOHiuC25IGnfysLJF8K9o+is66CmW8SJP9 nZ9MqyHwnH6Jf2i0a8E7kHAotrnVBTN+PuYJxHo6+RtQwBUvdBL2aTZYCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC7DnnjzmrzLNMYansq0HBe7IqezMB8GA1UdIwQY MBaAFD7gIUxgnGzWeAOsfHNu+NpRfKWdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHVBaFRHQ2NiTlo0QTZ4OGMyNzQybEY4cFowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8yZTZlZTMtODE1OC00NThlLWEwYWMt YWU4MWVkYzZmYmQ3LzEvUHVBaFRHQ2NiTlo0QTZ4OGMyNzQybEY4cFowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS8yZTZlZTMtODE1OC00NThlLWEwYWMtYWU4MWVkYzZmYmQ3 LzEvUHVBaFRHQ2NiTlo0QTZ4OGMyNzQybEY4cFowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYp/0qRh1 67p/foTpo1HqidtdHqfqEmQ3kx+4zsqtKM7oPi3UaTa5BLSYfQypK1dJXT2hY0rP zlOSnJTp0+zqKvHEAYuvBbz8h6OtrIeX45yFbGcgkuuwE5QNsLAGjZ6v1Zd1Agkd zpHf8mIYn4eXfQBbqdVrhropmEd+8HNPHW3BsSLUeddpn7uLbAkDOQ+tkfF48pN0 IX/qk+IXEKZkTQBrju6ZeNc4+wxQ10l7dJJwQKYZtf6lPCs3k4lkH433BiZElizn 3d3KVL7iWborwzgd89y4oge4H2vEpYbvzMiL7n7F0sS5G2OZ5nk7XQFn+Q4sRLpN qjFqtrG5i4N9Dw== -----END CERTIFICATE-----Generated at Sun Dec 21 19:17:34 2025 by rpki-client