This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft File: pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft (raw, json) Hash identifier: ixblpB9z9pudVyk5TAYpxXdkZJeNrAlxRGvJF2FboVg= Subject key identifier: FC:9E:7F:AC:0F:5A:E6:1B:4C:35:D3:76:44:91:CA:61:83:4F:3C:08 Authority key identifier: A5:EC:7F:FD:60:3D:A1:48:92:28:0B:18:37:C3:A0:37:76:35:2D:54 Certificate issuer: /CN=a5ec7ffd603da14892280b1837c3a03776352d54 Certificate serial: 019B5F410CFD6C18F02A37F9CE7A73C4E48E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft Manifest number: 1798 Signing time: Sat 27 Dec 2025 10:00:57 +0000 Manifest this update: Sat 27 Dec 2025 10:00:57 +0000 Manifest next update: Sun 28 Dec 2025 10:00:57 +0000 Files and hashes: 1: pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl (hash: fupLJWyibi+7Ik1ZgYTGgKROPnp6OfWXODEnfbBOk1o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:41:0c:fd:6c:18:f0:2a:37:f9:ce:7a:73:c4:e4:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5ec7ffd603da14892280b1837c3a03776352d54 Validity Not Before: Dec 27 10:00:57 2025 GMT Not After : Dec 28 10:00:57 2025 GMT Subject: CN=fc9e7fac0f5ae61b4c35d3764491ca61834f3c08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e2:84:99:9c:30:51:27:8d:62:d6:68:1f:bf: f1:38:a8:a9:13:49:26:c6:06:06:a1:0a:09:24:f4: b2:33:1b:00:b9:22:38:75:dd:bf:34:f1:ea:04:06: 59:20:4c:ee:82:7e:f0:9c:99:97:32:b3:9d:29:58: ff:fb:b6:80:8b:7d:f1:24:25:c4:03:30:5a:5c:72: cd:be:4f:bd:ff:cd:51:9d:d7:0b:eb:f3:f3:8b:26: 06:f5:4a:f2:b4:00:63:97:14:98:0d:a4:56:5c:e7: 0c:64:81:a5:eb:bb:25:cb:70:9a:0a:2f:af:0c:15: b2:10:66:98:89:4f:ff:ea:77:f2:86:69:05:d0:b7: 5c:ec:87:fb:c4:b2:ef:69:4a:24:ce:69:2e:74:05: 26:35:6d:de:f5:76:38:21:18:ff:ad:c5:67:27:f8: b8:55:7f:97:fc:0d:80:20:af:c3:95:c6:c3:2d:9d: 4d:2d:d7:07:9c:49:a7:1b:ab:96:df:a0:46:2f:3d: 5b:6f:64:33:98:1c:c2:ba:e8:e1:f8:e2:60:ef:b1: 3d:44:f6:82:09:3f:50:f7:e2:a4:57:1b:6a:d5:8c: f7:0d:7a:3f:12:3f:4e:d2:43:9c:7e:be:a2:af:98: ac:1c:75:ba:e0:9a:5b:e3:00:1b:1f:b7:5b:44:65: 5b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:9E:7F:AC:0F:5A:E6:1B:4C:35:D3:76:44:91:CA:61:83:4F:3C:08 X509v3 Authority Key Identifier: keyid:A5:EC:7F:FD:60:3D:A1:48:92:28:0B:18:37:C3:A0:37:76:35:2D:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:e3:36:6f:d4:bc:ca:43:30:07:72:a2:4a:58:71:93:28:a7: 61:fc:28:fc:14:14:ba:ef:48:fc:d6:cf:27:1a:d7:79:7c:0f: c4:a0:99:eb:c1:23:53:c8:45:01:f9:2e:94:ca:ec:6e:a2:e9: 93:df:79:7d:8f:2a:fb:df:6a:3d:ac:9a:ae:94:a4:f5:ed:2a: 98:62:af:61:50:9c:18:b4:99:8f:ba:15:8c:dc:03:38:05:15: cc:ef:9e:02:32:bc:df:7d:3c:e0:5f:66:53:d8:96:71:5c:f6: e6:82:2f:4d:c6:79:ba:d6:68:c3:d0:c7:78:05:f6:6e:b1:c0: d3:a9:02:9e:cd:22:52:a5:70:09:58:70:54:e1:84:cc:6b:c0: 8f:b9:8e:80:77:6d:4d:25:4d:c2:8f:b4:ec:e2:cd:03:13:a2: 6a:6e:8e:d6:69:d1:11:11:d0:17:3e:4f:82:ed:fc:09:7b:3e: 4c:6d:ee:8b:a0:4e:37:74:b4:6c:ce:a8:c2:c7:f3:f7:77:86: 44:41:81:5b:5c:c7:29:3e:d6:5e:60:a2:aa:15:6a:7a:81:ec: f7:9e:18:28:64:09:f3:7d:95:ed:51:22:35:aa:64:00:92:f5: 57:dd:03:26:dd:10:e4:fb:0e:d9:50:cf:44:0c:7f:39:d7:77: eb:d0:f8:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfQQz9bBjwKjf5znpzxOSOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1ZWM3ZmZkNjAzZGExNDg5MjI4MGIxODM3YzNhMDM3NzYz NTJkNTQwHhcNMjUxMjI3MTAwMDU3WhcNMjUxMjI4MTAwMDU3WjAzMTEwLwYDVQQD EyhmYzllN2ZhYzBmNWFlNjFiNGMzNWQzNzY0NDkxY2E2MTgzNGYzYzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOKEmZwwUSeNYtZoH7/xOKipE0km xgYGoQoJJPSyMxsAuSI4dd2/NPHqBAZZIEzugn7wnJmXMrOdKVj/+7aAi33xJCXE AzBaXHLNvk+9/81RndcL6/PziyYG9UrytABjlxSYDaRWXOcMZIGl67sly3CaCi+v DBWyEGaYiU//6nfyhmkF0Ldc7If7xLLvaUokzmkudAUmNW3e9XY4IRj/rcVnJ/i4 VX+X/A2AIK/DlcbDLZ1NLdcHnEmnG6uW36BGLz1bb2QzmBzCuujh+OJg77E9RPaC CT9Q9+KkVxtq1Yz3DXo/Ej9O0kOcfr6ir5isHHW64Jpb4wAbH7dbRGVb9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPyef6wPWuYbTDXTdkSRymGDTzwIMB8GA1UdIwQY MBaAFKXsf/1gPaFIkigLGDfDoDd2NS1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGV4X19XQTlvVWlTS0FzWU44T2dOM1kxTFZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS82MjIzNTMtMmJjZi00NTYwLTljYWUt N2RiMjBlNmZjMTFkLzEvcGV4X19XQTlvVWlTS0FzWU44T2dOM1kxTFZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS82MjIzNTMtMmJjZi00NTYwLTljYWUtN2RiMjBlNmZjMTFk LzEvcGV4X19XQTlvVWlTS0FzWU44T2dOM1kxTFZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhOM2b9S8 ykMwB3KiSlhxkyinYfwo/BQUuu9I/NbPJxrXeXwPxKCZ68EjU8hFAfkulMrsbqLp k995fY8q+99qPayarpSk9e0qmGKvYVCcGLSZj7oVjNwDOAUVzO+eAjK833084F9m U9iWcVz25oIvTcZ5utZow9DHeAX2brHA06kCns0iUqVwCVhwVOGEzGvAj7mOgHdt TSVNwo+07OLNAxOiam6O1mnRERHQFz5Pgu38CXs+TG3ui6BON3S0bM6owsfz93eG REGBW1zHKT7WXmCiqhVqeoHs954YKGQJ832V7VEiNapkAJL1V90DJt0Q5PsO2VDP RAx/Odd369D4mw== -----END CERTIFICATE-----Generated at Sat Dec 27 17:46:08 2025 by rpki-client