This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft File: PnXUne0gVmynRcKPgM_ZqS9LfUc.mft (raw, json) Hash identifier: +VKT3HvhIBlGxblDvhh0f9e8kwPal657JNwjgYCTNYA= Subject key identifier: 27:6A:63:86:5C:25:34:D8:C5:69:82:06:87:56:B6:E8:E2:F9:8A:10 Authority key identifier: 3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47 Certificate issuer: /CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47 Certificate serial: 019B3A8F6CE3858DF5AAF8F9809143DFE98A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 07:00:36 +0000 Manifest this update: Sat 20 Dec 2025 07:00:36 +0000 Manifest next update: Sun 21 Dec 2025 07:00:36 +0000 Files and hashes: 1: LkCmib1EjnSWsmRLiJmBTaAWtdQ.roa (hash: Y+N1EbekCLAZeWo8X14udOZcT4v3arJrXQJbQzZ2aNM=) 2: PnXUne0gVmynRcKPgM_ZqS9LfUc.crl (hash: fR/cME5ZK31ZvVXcdanfAkJIQJeCrForS9CYrUbU65k=) 3: pXJDsaj0ZUCw_GiSDcUZAr3Eqys.roa (hash: jxE0YH1Sz5qp4TF2g6NLi4CtXpHMgBECSGalZs0qi4A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:6c:e3:85:8d:f5:aa:f8:f9:80:91:43:df:e9:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47 Validity Not Before: Dec 20 07:00:36 2025 GMT Not After : Dec 21 07:00:36 2025 GMT Subject: CN=276a63865c2534d8c56982068756b6e8e2f98a10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:fc:60:4d:11:78:68:bd:8f:40:3d:cd:80:8b: 5a:86:80:88:b5:15:35:15:4d:d0:5e:63:58:e9:f1: ff:80:c7:b5:d2:ef:39:e2:53:f0:38:2d:ec:9a:e4: 73:16:ce:5f:c9:04:a6:80:be:40:d2:57:d3:80:c6: a1:b8:ba:8b:14:94:04:11:0e:3b:49:62:9e:c0:15: 8f:09:68:6b:78:5f:e3:24:d4:0a:5e:66:f2:7f:53: 30:b0:f4:8b:b9:b0:4d:d7:d2:9a:1c:44:72:6d:b8: 92:04:77:60:79:0b:15:d3:40:7c:57:b1:31:e1:a7: d0:e2:80:c3:6b:a6:13:7e:d2:34:2b:07:76:d0:a6: 83:d4:48:e1:b1:e1:6d:9e:87:0b:76:27:3b:2e:83: 53:fd:fb:d6:84:9e:29:66:48:1f:50:21:6d:44:6e: 34:07:f7:0a:e8:ad:fc:cc:88:21:dc:ba:8e:07:e4: 90:68:4d:93:10:89:a2:56:01:f8:a6:b3:5b:40:3c: b0:e5:1d:7a:2d:30:f7:bf:11:93:3b:80:2f:45:71: 4f:84:d7:25:0d:1f:2f:ca:61:6e:f7:d4:a2:0f:8d: 27:22:65:37:b4:1d:60:bc:97:29:0d:dd:cf:bb:85: f3:c4:2f:1b:db:51:fc:9b:6d:23:c4:7c:1d:35:96: df:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:6A:63:86:5C:25:34:D8:C5:69:82:06:87:56:B6:E8:E2:F9:8A:10 X509v3 Authority Key Identifier: keyid:3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:f5:e4:c4:25:d8:d9:86:2a:78:94:d3:df:0e:18:b8:af:3e: 84:a3:ca:cd:b7:ce:65:5b:9b:47:62:26:cc:5b:77:1e:60:5e: ab:d9:17:22:39:34:82:50:a6:87:2a:da:76:44:cb:bf:54:f7: b4:76:1c:1e:69:dd:65:ed:6d:b3:b4:8f:4e:e8:6c:e8:09:75: 75:b1:af:fc:bd:5e:a9:64:c6:41:1a:69:4f:74:7e:b5:5d:6f: 0f:f8:1c:45:35:9d:c2:0b:b5:59:22:55:3f:61:ab:d9:9a:0f: d3:36:e3:31:5d:33:1b:29:f5:b2:d9:84:8c:84:12:a7:8a:ae: 49:89:3b:35:57:d4:e2:fc:3c:88:09:01:99:90:4a:99:21:3c: 8a:83:9d:ae:c7:1e:ef:10:64:7c:82:3e:e8:ec:b3:bc:40:b1: 62:61:73:72:69:7f:b3:72:ab:c8:54:04:8b:45:75:57:a2:29: d0:37:be:f8:e8:a9:f2:1c:cd:17:7b:44:b9:e1:64:63:2c:6a: 69:7b:5a:74:5c:f5:63:de:d0:0e:77:c9:47:50:4f:a0:5f:91: 9b:28:02:9b:33:51:f0:4b:90:12:54:bb:47:b3:90:57:a4:49: 77:f6:d1:4d:68:4f:12:22:97:49:5c:02:21:ea:b6:b4:9c:90: 8c:a2:be:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j2zjhY31qvj5gJFD3+mKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNzVkNDlkZWQyMDU2NmNhNzQ1YzI4ZjgwY2ZkOWE5MmY0 YjdkNDcwHhcNMjUxMjIwMDcwMDM2WhcNMjUxMjIxMDcwMDM2WjAzMTEwLwYDVQQD EygyNzZhNjM4NjVjMjUzNGQ4YzU2OTgyMDY4NzU2YjZlOGUyZjk4YTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fxgTRF4aL2PQD3NgItahoCItRU1 FU3QXmNY6fH/gMe10u854lPwOC3smuRzFs5fyQSmgL5A0lfTgMahuLqLFJQEEQ47 SWKewBWPCWhreF/jJNQKXmbyf1MwsPSLubBN19KaHERybbiSBHdgeQsV00B8V7Ex 4afQ4oDDa6YTftI0Kwd20KaD1EjhseFtnocLdic7LoNT/fvWhJ4pZkgfUCFtRG40 B/cK6K38zIgh3LqOB+SQaE2TEImiVgH4prNbQDyw5R16LTD3vxGTO4AvRXFPhNcl DR8vymFu99SiD40nImU3tB1gvJcpDd3Pu4XzxC8b21H8m20jxHwdNZbfsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCdqY4ZcJTTYxWmCBodWtuji+YoQMB8GA1UdIwQY MBaAFD511J3tIFZsp0XCj4DP2akvS31HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG5YVW5lMGdWbXluUmNLUGdNX1pxUzlMZlVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8xYzE1YTItZDBlYy00YzNhLTg2Y2Qt ODM2Mzg0NzVkOGFiLzEvUG5YVW5lMGdWbXluUmNLUGdNX1pxUzlMZlVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8xYzE1YTItZDBlYy00YzNhLTg2Y2QtODM2Mzg0NzVkOGFi LzEvUG5YVW5lMGdWbXluUmNLUGdNX1pxUzlMZlVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZfXkxCXY 2YYqeJTT3w4YuK8+hKPKzbfOZVubR2ImzFt3HmBeq9kXIjk0glCmhyradkTLv1T3 tHYcHmndZe1ts7SPTuhs6Al1dbGv/L1eqWTGQRppT3R+tV1vD/gcRTWdwgu1WSJV P2Gr2ZoP0zbjMV0zGyn1stmEjIQSp4quSYk7NVfU4vw8iAkBmZBKmSE8ioOdrsce 7xBkfII+6OyzvECxYmFzcml/s3KryFQEi0V1V6Ip0De++Oip8hzNF3tEueFkYyxq aXtadFz1Y97QDnfJR1BPoF+RmygCmzNR8EuQElS7R7OQV6RJd/bRTWhPEiKXSVwC Ieq2tJyQjKK+ew== -----END CERTIFICATE-----Generated at Sat Dec 20 11:40:14 2025 by rpki-client