This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft File: PetYF7vn5aHF-xMFUbhKtIgBb5I.mft (raw, json) Hash identifier: 2iZm5bwi1Yfz8TK2SD6XBWJUslkzcSMeIQDp/ZH3zuk= Subject key identifier: B5:8A:2E:33:63:8A:3D:72:9B:FA:24:59:7D:71:4F:59:98:4D:EE:4D Authority key identifier: 3D:EB:58:17:BB:E7:E5:A1:C5:FB:13:05:51:B8:4A:B4:88:01:6F:92 Certificate issuer: /CN=3deb5817bbe7e5a1c5fb130551b84ab488016f92 Certificate serial: 019B4249203C2FEFCE230679F41C571FFB65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PetYF7vn5aHF-xMFUbhKtIgBb5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft Manifest number: 03EC Signing time: Sun 21 Dec 2025 19:00:47 +0000 Manifest this update: Sun 21 Dec 2025 19:00:47 +0000 Manifest next update: Mon 22 Dec 2025 19:00:47 +0000 Files and hashes: 1: KWPAsF0vFOD6kPsFU3LMV-L0lSI.roa (hash: VQvFUbsDDfVrBdoP9kicGC0pG5uJaNDDod3tQ4qnm70=) 2: PetYF7vn5aHF-xMFUbhKtIgBb5I.crl (hash: KG8hrKgOCb63Gug8t/RQMGumucT6OxvKN9uzUXT2bE0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft rsync://rpki.ripe.net/repository/DEFAULT/PetYF7vn5aHF-xMFUbhKtIgBb5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:20:3c:2f:ef:ce:23:06:79:f4:1c:57:1f:fb:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3deb5817bbe7e5a1c5fb130551b84ab488016f92 Validity Not Before: Dec 21 19:00:47 2025 GMT Not After : Dec 22 19:00:47 2025 GMT Subject: CN=b58a2e33638a3d729bfa24597d714f59984dee4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:15:2f:c9:e4:5d:a9:d7:df:d7:cd:db:4c:4a: bf:d5:0d:48:e2:0a:fe:98:f3:2d:59:6a:32:73:80: a1:ec:e3:a8:7a:fc:d1:16:93:b5:9e:c2:d5:a6:d1: ff:26:3a:b0:9e:a3:0a:4a:d3:e8:c9:68:4d:e6:f3: 4c:76:b2:4c:f3:31:aa:07:57:56:71:2f:f7:f6:9f: 20:c0:0d:cd:52:4f:0d:a6:21:ed:c3:99:66:7e:50: 1c:5e:0e:64:35:3a:15:01:92:01:68:94:3b:23:ff: a7:fe:18:bb:eb:bb:16:f4:8f:66:9c:8b:7c:03:c1: a3:dd:db:49:2f:d2:c0:42:18:15:5b:4a:53:ab:95: d5:ba:ea:fe:39:5d:a4:f4:0f:2e:38:60:35:03:e4: 7d:54:d5:6a:eb:47:9d:66:65:ec:bd:a4:32:97:1e: 89:a8:9e:fe:37:c5:5e:40:01:d9:1d:83:4d:2c:55: 55:a0:cd:04:ee:bf:01:4e:38:5c:5d:45:73:2c:b8: 97:ec:75:45:74:6f:e6:e4:bc:df:e3:1c:c4:8b:94: ee:14:87:72:7f:1d:11:bc:7a:4b:0a:d3:92:88:b3: c3:fe:dd:28:ea:33:f6:93:2b:80:fe:68:68:ce:0b: 46:0e:0e:7d:27:d2:9b:a3:bb:eb:c9:6a:0e:6b:02: 4f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:8A:2E:33:63:8A:3D:72:9B:FA:24:59:7D:71:4F:59:98:4D:EE:4D X509v3 Authority Key Identifier: keyid:3D:EB:58:17:BB:E7:E5:A1:C5:FB:13:05:51:B8:4A:B4:88:01:6F:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PetYF7vn5aHF-xMFUbhKtIgBb5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:97:6c:ce:e8:e4:ce:3b:f7:7c:4c:df:03:94:a5:33:18:1b: d9:f6:16:dc:7a:eb:f1:31:60:24:98:1a:e6:2b:55:35:40:fe: c9:7c:08:04:2f:47:a0:bf:e7:78:66:12:30:84:4c:0b:6b:a9: be:42:44:54:5d:05:d2:38:12:b3:5d:f4:8b:20:5e:3a:08:a6: 84:d0:65:37:60:01:a4:b1:99:02:e6:cd:97:60:d1:2c:d3:24: 74:ef:6c:24:e1:9f:26:17:51:3e:b6:c1:62:78:7c:15:0a:28: 21:28:74:11:23:a0:49:1c:ba:9b:d1:ac:94:fc:34:58:7c:ca: dc:83:86:a3:fe:5e:c9:0b:3b:14:e7:df:05:67:56:60:09:5f: e6:c2:7c:f5:5f:24:60:d7:59:d4:d3:20:8d:a0:63:4d:b9:e7: 39:4a:a5:93:50:7a:7a:5d:e5:87:7f:2e:f8:d9:94:0d:bf:05: 81:e9:7e:80:cd:b7:83:ba:90:af:5b:05:48:e0:d8:04:b2:6c: 4e:74:6d:b7:3f:fb:e4:03:10:be:b9:7f:d1:70:87:7a:e3:77: e9:09:4f:0e:5e:08:9c:9b:94:be:f2:89:38:02:de:6e:da:c2: a3:67:ab:51:05:c1:ce:16:1b:1e:9f:76:e4:3f:39:17:a1:96: 13:e6:b8:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSSA8L+/OIwZ59BxXH/tlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkZWI1ODE3YmJlN2U1YTFjNWZiMTMwNTUxYjg0YWI0ODgw MTZmOTIwHhcNMjUxMjIxMTkwMDQ3WhcNMjUxMjIyMTkwMDQ3WjAzMTEwLwYDVQQD EyhiNThhMmUzMzYzOGEzZDcyOWJmYTI0NTk3ZDcxNGY1OTk4NGRlZTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBUvyeRdqdff183bTEq/1Q1I4gr+ mPMtWWoyc4Ch7OOoevzRFpO1nsLVptH/JjqwnqMKStPoyWhN5vNMdrJM8zGqB1dW cS/39p8gwA3NUk8NpiHtw5lmflAcXg5kNToVAZIBaJQ7I/+n/hi767sW9I9mnIt8 A8Gj3dtJL9LAQhgVW0pTq5XVuur+OV2k9A8uOGA1A+R9VNVq60edZmXsvaQylx6J qJ7+N8VeQAHZHYNNLFVVoM0E7r8BTjhcXUVzLLiX7HVFdG/m5Lzf4xzEi5TuFIdy fx0RvHpLCtOSiLPD/t0o6jP2kyuA/mhozgtGDg59J9Kbo7vryWoOawJPKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLWKLjNjij1ym/okWX1xT1mYTe5NMB8GA1UdIwQY MBaAFD3rWBe75+WhxfsTBVG4SrSIAW+SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGV0WUY3dm41YUhGLXhNRlViaEt0SWdCYjVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wZTQ5YTEtNzNhOS00NTgxLWI4OGMt ZjEwNDg2ZTYwYTUzLzEvUGV0WUY3dm41YUhGLXhNRlViaEt0SWdCYjVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8wZTQ5YTEtNzNhOS00NTgxLWI4OGMtZjEwNDg2ZTYwYTUz LzEvUGV0WUY3dm41YUhGLXhNRlViaEt0SWdCYjVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbZdszujk zjv3fEzfA5SlMxgb2fYW3Hrr8TFgJJga5itVNUD+yXwIBC9HoL/neGYSMIRMC2up vkJEVF0F0jgSs130iyBeOgimhNBlN2ABpLGZAubNl2DRLNMkdO9sJOGfJhdRPrbB Ynh8FQooISh0ESOgSRy6m9GslPw0WHzK3IOGo/5eyQs7FOffBWdWYAlf5sJ89V8k YNdZ1NMgjaBjTbnnOUqlk1B6el3lh38u+NmUDb8Fgel+gM23g7qQr1sFSODYBLJs TnRttz/75AMQvrl/0XCHeuN36QlPDl4InJuUvvKJOALebtrCo2erUQXBzhYbHp92 5D85F6GWE+a4ww== -----END CERTIFICATE-----Generated at Mon Dec 22 03:30:42 2025 by rpki-client