This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft File: PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft (raw, json) Hash identifier: mjJmNpNnUHPymlnxdAssbRULq7clGcVoPlGEeO/vAGU= Subject key identifier: 96:82:96:AB:F7:48:00:26:E4:BF:F8:EE:8F:B6:E4:9C:B8:46:C0:18 Authority key identifier: 3C:45:CE:40:85:F0:2E:B8:A0:ED:1A:FD:2B:79:91:A8:AA:99:83:34 Certificate issuer: /CN=3c45ce4085f02eb8a0ed1afd2b7991a8aa998334 Certificate serial: 019B522AC6ED6AA7D939776ABBF5FBFC727D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft Manifest number: 1795 Signing time: Wed 24 Dec 2025 21:01:33 +0000 Manifest this update: Wed 24 Dec 2025 21:01:33 +0000 Manifest next update: Thu 25 Dec 2025 21:01:33 +0000 Files and hashes: 1: B29MvHY6zeEvGzG4mIu0G_C1t3k.roa (hash: 2w6PM7Xh404gJeZoq9hPqo7jK8P7Uk4U1TIQbaY+1sM=) 2: PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl (hash: 14uOvY1jDf0NugesJeb4MlJuRhl9ZyQzV8+pJolYdSU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:2a:c6:ed:6a:a7:d9:39:77:6a:bb:f5:fb:fc:72:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c45ce4085f02eb8a0ed1afd2b7991a8aa998334 Validity Not Before: Dec 24 21:01:33 2025 GMT Not After : Dec 25 21:01:33 2025 GMT Subject: CN=968296abf7480026e4bff8ee8fb6e49cb846c018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:46:8e:b4:2f:8f:5e:57:08:63:1e:78:20:ba: e0:33:f6:5d:ec:58:dc:90:f0:ee:a0:30:a3:3d:1e: 6c:40:4c:b6:2b:07:9f:c5:29:dc:b1:d9:fb:c1:a2: 67:4f:53:d8:38:9c:06:2d:7e:c0:20:dd:24:42:98: 13:24:e5:0c:08:83:76:8e:c7:8b:43:99:fb:4d:c1: 21:f3:49:71:e9:77:1d:aa:ba:29:95:e3:df:b4:1e: 46:8a:8a:fa:d6:ae:29:84:9a:23:c6:25:58:62:7f: b2:ed:cb:b4:82:26:9a:b8:85:a2:8e:c8:a5:96:f9: 3d:3f:e8:83:89:12:29:ae:eb:d8:5d:e2:30:53:47: af:6f:df:c1:a2:f6:08:e3:32:76:31:ff:19:cf:f4: dd:1a:04:8e:79:45:f3:e6:84:9e:a5:28:82:46:6c: b6:5e:e6:1e:07:10:de:3d:3d:56:e4:64:e3:4a:30: 4e:bc:68:39:5c:3b:40:a0:cc:b5:8c:25:44:27:51: d6:82:b2:fe:82:96:84:10:07:fd:f3:75:4f:f3:f1: 79:82:7c:5f:d0:73:43:26:f3:08:df:86:9b:bd:80: 96:40:93:51:6a:dd:41:6a:14:2f:ef:39:d6:e2:4a: 87:fe:49:b2:5b:59:d0:cb:dd:7f:f6:4e:07:71:a2: 3d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:82:96:AB:F7:48:00:26:E4:BF:F8:EE:8F:B6:E4:9C:B8:46:C0:18 X509v3 Authority Key Identifier: keyid:3C:45:CE:40:85:F0:2E:B8:A0:ED:1A:FD:2B:79:91:A8:AA:99:83:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:d4:e6:0c:76:1f:2b:c8:5b:74:04:55:fd:76:5a:1d:27:ed: d7:47:e7:4c:7f:38:bd:92:a2:49:71:3d:2a:4f:57:df:0b:8c: 2c:ee:94:80:13:e4:53:d2:79:49:1c:34:96:c0:81:e2:1f:a4: 6e:39:7b:d3:58:78:f0:13:82:0d:29:3e:8c:8f:a1:aa:10:92: f8:df:eb:59:f5:ff:c6:68:75:63:92:47:9a:0c:1c:7b:53:c3: 97:59:71:88:a5:34:16:bb:2e:7f:19:f6:d0:b1:e2:e5:14:0e: 6d:ce:20:90:8f:ac:db:4e:e8:45:bf:e3:50:36:22:03:11:65: ef:9d:7c:82:7e:57:11:e8:fb:09:cc:d9:53:48:6c:e7:e4:99: 9f:6e:19:8f:cd:37:20:f8:e1:d2:6e:f8:25:cd:59:90:2a:40: 5e:5b:10:be:83:09:25:95:b4:36:27:3d:8b:d9:96:fd:37:9b: ae:65:b4:70:60:30:7e:74:d8:2c:bd:03:6c:31:fd:77:42:4f: 0e:63:fb:27:36:dd:8d:c2:44:2e:75:09:77:53:0c:d1:57:e5: b3:ff:fe:a3:8f:47:98:a4:c6:c9:d6:ab:03:a5:91:a2:71:91: d7:4e:00:32:f0:c0:1c:7f:6b:29:fc:2d:ed:fc:ec:38:16:08: 01:3c:fc:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSKsbtaqfZOXdqu/X7/HJ9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjNDVjZTQwODVmMDJlYjhhMGVkMWFmZDJiNzk5MWE4YWE5 OTgzMzQwHhcNMjUxMjI0MjEwMTMzWhcNMjUxMjI1MjEwMTMzWjAzMTEwLwYDVQQD Eyg5NjgyOTZhYmY3NDgwMDI2ZTRiZmY4ZWU4ZmI2ZTQ5Y2I4NDZjMDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUaOtC+PXlcIYx54ILrgM/Zd7Fjc kPDuoDCjPR5sQEy2KwefxSncsdn7waJnT1PYOJwGLX7AIN0kQpgTJOUMCIN2jseL Q5n7TcEh80lx6XcdqroplePftB5Gior61q4phJojxiVYYn+y7cu0giaauIWijsil lvk9P+iDiRIpruvYXeIwU0evb9/BovYI4zJ2Mf8Zz/TdGgSOeUXz5oSepSiCRmy2 XuYeBxDePT1W5GTjSjBOvGg5XDtAoMy1jCVEJ1HWgrL+gpaEEAf983VP8/F5gnxf 0HNDJvMI34abvYCWQJNRat1BahQv7znW4kqH/kmyW1nQy91/9k4HcaI9aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJaClqv3SAAm5L/47o+25Jy4RsAYMB8GA1UdIwQY MBaAFDxFzkCF8C64oO0a/St5kaiqmYM0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEVYT1FJWHdMcmlnN1JyOUszbVJxS3FaZ3pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS85NzMzNGEtYzk3Zi00N2M0LTk5ODIt ZDg2NzZhODBjZmM3LzEvUEVYT1FJWHdMcmlnN1JyOUszbVJxS3FaZ3pRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS85NzMzNGEtYzk3Zi00N2M0LTk5ODItZDg2NzZhODBjZmM3 LzEvUEVYT1FJWHdMcmlnN1JyOUszbVJxS3FaZ3pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN9TmDHYf K8hbdARV/XZaHSft10fnTH84vZKiSXE9Kk9X3wuMLO6UgBPkU9J5SRw0lsCB4h+k bjl701h48BOCDSk+jI+hqhCS+N/rWfX/xmh1Y5JHmgwce1PDl1lxiKU0Frsufxn2 0LHi5RQObc4gkI+s207oRb/jUDYiAxFl7518gn5XEej7CczZU0hs5+SZn24Zj803 IPjh0m74Jc1ZkCpAXlsQvoMJJZW0Nic9i9mW/TebrmW0cGAwfnTYLL0DbDH9d0JP DmP7JzbdjcJELnUJd1MM0Vfls//+o49HmKTGydarA6WRonGR104AMvDAHH9rKfwt 7fzsOBYIATz81A== -----END CERTIFICATE-----Generated at Thu Dec 25 03:34:35 2025 by rpki-client