This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.mft File: pTJy83vudp-iPqZUueOPsCNGjZI.mft (raw, json) Hash identifier: jYQ6+BKO7JrosUQizkPLHoPIW/eBBhpR+5NyIdwHy48= Subject key identifier: FD:34:39:6C:04:7E:CE:48:88:DD:49:55:EF:DF:EA:BF:75:C8:08:D4 Authority key identifier: A5:32:72:F3:7B:EE:76:9F:A2:3E:A6:54:B9:E3:8F:B0:23:46:8D:92 Certificate issuer: /CN=a53272f37bee769fa23ea654b9e38fb023468d92 Certificate serial: 019B62422758B39D1F54483C904C79DBFC5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTJy83vudp-iPqZUueOPsCNGjZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.mft Manifest number: 0351 Signing time: Sun 28 Dec 2025 00:01:01 +0000 Manifest this update: Sun 28 Dec 2025 00:01:01 +0000 Manifest next update: Mon 29 Dec 2025 00:01:01 +0000 Files and hashes: 1: kl_zb47rnd8AaAP4vBoCuK61hPA.roa (hash: e2T6+pFfv8tCYwWL0QcrJLWjz1NsTR4Qy2fxVQvCN8Q=) 2: pTJy83vudp-iPqZUueOPsCNGjZI.crl (hash: IBE/LNWGySPk8zhcv5r5l8Q1wC/pGmJ3K2WPsBJN/Lo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.crl rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.mft rsync://rpki.ripe.net/repository/DEFAULT/pTJy83vudp-iPqZUueOPsCNGjZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:42:27:58:b3:9d:1f:54:48:3c:90:4c:79:db:fc:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53272f37bee769fa23ea654b9e38fb023468d92 Validity Not Before: Dec 28 00:01:01 2025 GMT Not After : Dec 29 00:01:01 2025 GMT Subject: CN=fd34396c047ece4888dd4955efdfeabf75c808d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:94:0d:d8:52:a1:0c:da:22:49:8d:b5:4f:71: 52:94:d0:03:d8:13:48:68:af:4f:c0:1a:79:8b:8c: 64:99:92:bd:72:2a:cb:90:37:33:8f:7c:8e:68:e9: 28:ba:ee:2c:11:2d:bc:eb:f3:c8:0e:e7:d3:61:aa: d5:e2:db:a9:37:78:b6:75:fb:07:c9:a9:a5:46:d1: c7:30:72:cc:2e:2d:26:67:05:8a:cd:7d:e1:6e:f3: e0:7c:c1:6c:f7:93:85:82:3e:e1:a2:83:2f:6d:56: fa:f5:6c:a5:ae:62:0d:50:5e:fb:bf:31:56:83:e7: fa:86:5f:f1:c1:ef:27:9a:54:5c:6d:f0:7b:33:e3: 37:5d:49:46:e4:c1:77:a3:d0:84:30:4f:79:5e:94: ba:b9:3c:bf:4c:23:52:79:42:64:ac:72:03:c8:b7: fd:c1:cf:b1:be:e2:fe:32:69:19:c1:4a:a0:91:de: ed:71:62:f9:c2:d9:b4:76:d5:cd:10:c6:9c:8e:26: ce:98:be:bc:3c:51:25:6a:2e:25:e6:56:31:45:66: 8a:1a:e9:3b:80:9c:dc:f2:c1:fe:70:30:2a:d8:4b: 09:e8:dd:ff:c1:6b:92:35:b9:b0:86:f0:ed:74:0a: 9f:3c:70:e6:2f:8f:ea:ca:30:3c:12:8a:09:f3:a2: 81:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:34:39:6C:04:7E:CE:48:88:DD:49:55:EF:DF:EA:BF:75:C8:08:D4 X509v3 Authority Key Identifier: keyid:A5:32:72:F3:7B:EE:76:9F:A2:3E:A6:54:B9:E3:8F:B0:23:46:8D:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTJy83vudp-iPqZUueOPsCNGjZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:1e:cc:60:57:7a:1c:ef:ab:ef:3a:d0:48:93:c0:c1:10:47: db:11:19:46:03:ca:8e:8a:52:59:2d:73:8b:97:1a:81:0e:84: d8:cb:9e:65:1f:a0:84:5b:90:97:87:30:c4:8c:e2:5a:13:5e: ab:85:81:c1:54:fd:fa:a0:0a:80:76:37:a0:9e:61:42:76:ef: d3:bc:e0:df:ca:cc:5b:7c:ea:fc:42:e4:84:2c:95:fe:5d:0a: 7d:14:73:f8:e6:71:1b:6a:91:e1:3a:38:35:1c:49:73:b8:ce: 30:77:ba:d8:cd:5b:c9:36:5c:22:ea:54:ab:4a:df:59:12:4f: a1:01:2b:c2:fc:0e:20:22:d3:99:72:a8:79:01:a6:b7:0d:39: 61:41:93:a7:da:29:67:ad:12:30:ad:68:3c:69:27:28:4e:99: 9d:cd:5a:f8:70:d0:0b:ef:b3:33:32:a4:9f:ef:85:fd:80:47: 58:c4:5c:ec:39:4e:6d:8a:52:cf:02:a4:a0:49:59:26:86:e0: 0f:ad:cd:b9:75:ab:cf:fc:db:c1:84:8b:4c:a8:22:7c:47:f2: 60:fb:9d:7b:1a:f5:9b:69:43:ff:74:38:f3:87:58:b1:57:b7: 64:7b:ff:b6:ee:20:04:e9:09:a2:a4:1d:a5:a8:bc:0f:ab:d7: 52:a5:a7:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtiQidYs50fVEg8kEx52/xaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MzI3MmYzN2JlZTc2OWZhMjNlYTY1NGI5ZTM4ZmIwMjM0 NjhkOTIwHhcNMjUxMjI4MDAwMTAxWhcNMjUxMjI5MDAwMTAxWjAzMTEwLwYDVQQD EyhmZDM0Mzk2YzA0N2VjZTQ4ODhkZDQ5NTVlZmRmZWFiZjc1YzgwOGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpQN2FKhDNoiSY21T3FSlNAD2BNI aK9PwBp5i4xkmZK9cirLkDczj3yOaOkouu4sES286/PIDufTYarV4tupN3i2dfsH yamlRtHHMHLMLi0mZwWKzX3hbvPgfMFs95OFgj7hooMvbVb69WylrmINUF77vzFW g+f6hl/xwe8nmlRcbfB7M+M3XUlG5MF3o9CEME95XpS6uTy/TCNSeUJkrHIDyLf9 wc+xvuL+MmkZwUqgkd7tcWL5wtm0dtXNEMacjibOmL68PFElai4l5lYxRWaKGuk7 gJzc8sH+cDAq2EsJ6N3/wWuSNbmwhvDtdAqfPHDmL4/qyjA8EooJ86KBFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP00OWwEfs5IiN1JVe/f6r91yAjUMB8GA1UdIwQY MBaAFKUycvN77nafoj6mVLnjj7AjRo2SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFRKeTgzdnVkcC1pUHFaVXVlT1BzQ05HalpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9mM2YwNmQtNGIyNy00OTgxLTk1YzYt MmY1NmE1YTlhNzU2LzEvcFRKeTgzdnVkcC1pUHFaVXVlT1BzQ05HalpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9mM2YwNmQtNGIyNy00OTgxLTk1YzYtMmY1NmE1YTlhNzU2 LzEvcFRKeTgzdnVkcC1pUHFaVXVlT1BzQ05HalpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACB7MYFd6 HO+r7zrQSJPAwRBH2xEZRgPKjopSWS1zi5cagQ6E2MueZR+ghFuQl4cwxIziWhNe q4WBwVT9+qAKgHY3oJ5hQnbv07zg38rMW3zq/ELkhCyV/l0KfRRz+OZxG2qR4To4 NRxJc7jOMHe62M1byTZcIupUq0rfWRJPoQErwvwOICLTmXKoeQGmtw05YUGTp9op Z60SMK1oPGknKE6Znc1a+HDQC++zMzKkn++F/YBHWMRc7DlObYpSzwKkoElZJobg D63NuXWrz/zbwYSLTKgifEfyYPudexr1m2lD/3Q484dYsVe3ZHv/tu4gBOkJoqQd pai8D6vXUqWnXw== -----END CERTIFICATE-----Generated at Sun Dec 28 07:31:28 2025 by rpki-client