This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft File: PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft (raw, json) Hash identifier: MZI+dapRSeyGcdoNp2N33liaLodOQejWC8XkhPy2shI= Subject key identifier: 12:FE:DF:70:3C:4C:2A:D0:3E:8E:5F:B7:C3:98:BF:AF:52:83:3D:09 Authority key identifier: 3C:22:64:3B:A6:A0:EA:EF:57:32:9B:F5:BD:C9:0B:31:C3:86:F8:A7 Certificate issuer: /CN=3c22643ba6a0eaef57329bf5bdc90b31c386f8a7 Certificate serial: 019B390FE8C9C2F1E242BB8CFA80C37FF805 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft Manifest number: 021B Signing time: Sat 20 Dec 2025 00:01:42 +0000 Manifest this update: Sat 20 Dec 2025 00:01:42 +0000 Manifest next update: Sun 21 Dec 2025 00:01:42 +0000 Files and hashes: 1: 1-AcyZzR_rYiM2ehdDTTg0kr4UTw.roa (hash: qHmoXJmRx4dkuxN3uy5t1kjSUTwhuDfIP867Nh4f5Ts=) 2: LbGHBzwRAfceRmxwP2ccsuOGwGU.roa (hash: ZwRIC8Resn0brXABJWxiiw1dDspM+fWK1hVb1pb6YYQ=) 3: PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl (hash: XCZUdmoa3Vo7HKAA/wJV5DrzBiVE8b2AXnff2mgkff4=) 4: VjUF6mkOxxkGBT69SzLniaN5UYw.roa (hash: JTMUgsA+g5cqMZGbs8rgNYEsQMEwv0Fop5cCQWjZZZ0=) 5: dUEg2uHl_mzH4Gc59hF0SQlEOPk.roa (hash: FAec0jGTBdqWnGcu6aY23AJJHb4v1uDZ1rxzpmt/9ug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:e8:c9:c2:f1:e2:42:bb:8c:fa:80:c3:7f:f8:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c22643ba6a0eaef57329bf5bdc90b31c386f8a7 Validity Not Before: Dec 20 00:01:42 2025 GMT Not After : Dec 21 00:01:42 2025 GMT Subject: CN=12fedf703c4c2ad03e8e5fb7c398bfaf52833d09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:88:b6:56:28:a3:74:69:45:f8:23:62:7b:36: b9:7e:65:51:8f:45:2f:fa:3b:92:27:42:f0:7a:1c: 28:54:d9:1d:3d:73:72:74:f3:1c:ad:54:75:72:01: 99:5e:62:33:1d:37:e4:7b:34:10:ac:cc:55:fb:67: 77:1a:5c:57:81:48:4c:7a:0f:ca:63:dc:88:38:d6: e4:ab:ce:50:00:06:07:bc:06:08:54:b8:31:ce:70: 4a:7f:70:57:dc:2c:82:e2:30:40:97:db:dc:6d:f5: f8:2a:9b:36:86:d4:a8:69:0b:fa:9a:55:5a:d4:91: c1:40:0b:44:73:98:1b:96:b7:47:5a:57:df:95:c9: 55:c8:24:a2:b1:1d:8b:3c:c5:37:e4:1e:98:b8:64: 5f:c4:4f:c2:3c:f3:ec:19:6a:2c:9d:cd:f0:8e:a5: 74:08:e6:2c:8b:66:49:f9:a6:80:37:d6:29:67:a7: 64:f0:c8:29:3e:7d:49:9b:bc:14:76:13:94:1b:af: 89:a7:14:d6:95:ad:3e:3f:3a:45:3f:28:6a:cf:79: 7c:c7:0e:3d:95:6a:eb:81:91:d1:01:c6:1b:dc:e6: 24:27:d4:5e:b5:73:42:31:45:b6:11:30:50:83:46: aa:da:d0:5e:b8:41:58:55:97:f3:f8:38:e7:5e:86: b5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:FE:DF:70:3C:4C:2A:D0:3E:8E:5F:B7:C3:98:BF:AF:52:83:3D:09 X509v3 Authority Key Identifier: keyid:3C:22:64:3B:A6:A0:EA:EF:57:32:9B:F5:BD:C9:0B:31:C3:86:F8:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:ff:5b:29:46:99:ef:b7:29:45:3e:d7:81:c0:92:b4:f3:1d: 31:84:3e:07:02:2c:d7:74:31:00:df:cb:bc:08:fc:60:e8:f1: f7:48:a3:34:60:ab:ce:cc:b9:cf:58:c2:15:65:aa:e5:83:2a: 89:a5:a1:a5:fb:a3:88:71:3d:01:ab:50:03:0f:95:17:10:3f: 53:c7:6d:63:87:67:fa:89:91:4d:9f:c2:d3:3f:ea:f8:9c:43: dd:e8:d5:93:78:d8:f4:fd:1a:5a:d0:8d:01:47:93:99:57:e9: 5a:b6:af:30:34:fe:cd:d4:2a:87:66:fb:4b:5f:d3:e3:40:f0: a8:04:21:cd:56:08:f9:2a:48:12:76:13:09:2f:f7:d4:cb:44: 23:1f:fe:96:7d:1c:c9:5d:31:26:71:b8:2d:ce:c9:6d:78:d4: c2:cd:38:af:0f:2a:d3:bf:c8:e3:bd:d7:e0:0d:b4:ef:b2:8c: ca:27:05:f8:56:36:22:f3:5b:f2:87:f4:71:19:19:28:2f:2d: 7a:50:78:eb:6b:4e:6e:17:4d:2f:17:02:c8:c2:2b:48:41:a8: ca:e7:cb:df:75:da:c8:95:2e:b3:42:91:10:0a:88:f7:7d:2c: a6:b1:e0:56:7e:96:1e:37:43:b7:78:91:15:17:49:d9:de:7b: a7:e8:86:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D+jJwvHiQruM+oDDf/gFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMjI2NDNiYTZhMGVhZWY1NzMyOWJmNWJkYzkwYjMxYzM4 NmY4YTcwHhcNMjUxMjIwMDAwMTQyWhcNMjUxMjIxMDAwMTQyWjAzMTEwLwYDVQQD EygxMmZlZGY3MDNjNGMyYWQwM2U4ZTVmYjdjMzk4YmZhZjUyODMzZDA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYi2ViijdGlF+CNieza5fmVRj0Uv +juSJ0LwehwoVNkdPXNydPMcrVR1cgGZXmIzHTfkezQQrMxV+2d3GlxXgUhMeg/K Y9yIONbkq85QAAYHvAYIVLgxznBKf3BX3CyC4jBAl9vcbfX4Kps2htSoaQv6mlVa 1JHBQAtEc5gblrdHWlfflclVyCSisR2LPMU35B6YuGRfxE/CPPPsGWosnc3wjqV0 COYsi2ZJ+aaAN9YpZ6dk8MgpPn1Jm7wUdhOUG6+JpxTWla0+PzpFPyhqz3l8xw49 lWrrgZHRAcYb3OYkJ9RetXNCMUW2ETBQg0aq2tBeuEFYVZfz+DjnXoa1owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBL+33A8TCrQPo5ft8OYv69Sgz0JMB8GA1UdIwQY MBaAFDwiZDumoOrvVzKb9b3JCzHDhvinMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUENKa082YWc2dTlYTXB2MXZja0xNY09HLUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83YWVkOTktYTQ3ZC00ZWM3LWI0YzUt ZmExNDg2ZWE3OThjLzEvUENKa082YWc2dTlYTXB2MXZja0xNY09HLUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny83YWVkOTktYTQ3ZC00ZWM3LWI0YzUtZmExNDg2ZWE3OThj LzEvUENKa082YWc2dTlYTXB2MXZja0xNY09HLUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIf9bKUaZ 77cpRT7XgcCStPMdMYQ+BwIs13QxAN/LvAj8YOjx90ijNGCrzsy5z1jCFWWq5YMq iaWhpfujiHE9AatQAw+VFxA/U8dtY4dn+omRTZ/C0z/q+JxD3ejVk3jY9P0aWtCN AUeTmVfpWravMDT+zdQqh2b7S1/T40DwqAQhzVYI+SpIEnYTCS/31MtEIx/+ln0c yV0xJnG4Lc7JbXjUws04rw8q07/I473X4A2077KMyicF+FY2IvNb8of0cRkZKC8t elB462tObhdNLxcCyMIrSEGoyufL33XayJUus0KREAqI930sprHgVn6WHjdDt3iR FRdJ2d57p+iGyQ== -----END CERTIFICATE-----Generated at Sat Dec 20 08:40:12 2025 by rpki-client