This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft File: PxnYdtwluWxdxZi-Lb9uywZal18.mft (raw, json) Hash identifier: cGa8R6gW7Opm0PK5/k87156Vx0BKWB+o6IGVlRKSdT8= Subject key identifier: C5:4C:71:0D:04:62:E1:3E:05:5E:A8:C6:4C:78:77:08:0F:7C:47:C1 Authority key identifier: 3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F Certificate issuer: /CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f Certificate serial: 019B3CB55EE5CC4D2A3A44E6A3824F95358B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft Manifest number: 05B5 Signing time: Sat 20 Dec 2025 17:01:17 +0000 Manifest this update: Sat 20 Dec 2025 17:01:17 +0000 Manifest next update: Sun 21 Dec 2025 17:01:17 +0000 Files and hashes: 1: PxnYdtwluWxdxZi-Lb9uywZal18.crl (hash: 2Pvc4Cybtst1sc6EjHQTRPIR+oDP2a7nHWYRMRAtNMc=) 2: x8ghvFiQy8y7__Pm7K2GUSehU3A.roa (hash: 97TGydFeZ3RUDp9TsIz5UQ8MNV819kJP2yTvYQ+TbKU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:5e:e5:cc:4d:2a:3a:44:e6:a3:82:4f:95:35:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f Validity Not Before: Dec 20 17:01:17 2025 GMT Not After : Dec 21 17:01:17 2025 GMT Subject: CN=c54c710d0462e13e055ea8c64c7877080f7c47c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e8:11:8c:d5:4e:44:97:88:9e:10:8f:55:06: 46:48:d7:92:d4:60:11:4c:ab:bc:22:b8:3d:01:7c: f1:60:8a:3f:b7:50:29:a0:0b:c3:16:b3:35:18:b8: 98:ce:bd:59:2a:52:e1:34:94:23:c7:c9:47:78:6f: 32:7d:d5:c2:f1:6f:4d:79:39:84:03:ae:73:46:40: 2c:11:29:c9:4d:cc:5d:48:8e:a3:9d:df:15:98:11: b7:8e:1a:f7:d7:77:9f:cb:4e:c2:ff:af:bd:ca:74: a2:9c:aa:24:cb:17:a6:fd:4d:28:cc:40:4e:09:9e: 85:08:a2:c4:87:22:6d:15:92:6e:8c:00:1c:c0:d7: bf:6a:1c:2e:f7:b7:ea:5d:fa:ac:14:d1:f6:fa:af: 48:79:d9:01:64:76:02:6e:e7:02:0c:2f:10:0d:f2: b7:33:65:f5:03:7b:82:a0:84:18:96:a3:37:f6:5a: a0:f3:7b:3d:82:2a:cb:8c:3a:cd:2d:04:1f:7f:20: f0:8b:0f:3b:8a:cf:95:81:a9:03:1f:fe:28:23:37: 49:5a:6c:a4:bf:1d:32:16:15:9c:78:3c:3e:19:d8: cd:f9:e9:20:a8:f0:e3:d8:84:53:d2:04:f8:31:ce: ab:99:3a:5b:94:e7:ad:bb:d9:b3:74:83:f5:8d:54: e1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:4C:71:0D:04:62:E1:3E:05:5E:A8:C6:4C:78:77:08:0F:7C:47:C1 X509v3 Authority Key Identifier: keyid:3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:e8:86:3c:ba:0f:89:1d:74:b9:ed:82:34:73:a8:b6:54:21: ea:2a:f5:b7:72:32:8d:8e:d8:06:aa:ef:18:4d:7a:33:b1:11: 97:2e:17:15:94:dd:a3:1a:5f:24:82:f6:1c:5b:31:35:e9:95: 19:76:dc:ff:97:12:36:38:f0:42:9f:fc:ec:bd:24:e0:b4:e3: a2:dc:d7:da:92:d8:f3:54:26:ed:44:44:39:31:d2:6c:d3:95: e7:09:bd:d7:84:76:3b:a5:9d:d8:b2:6d:79:51:e1:4a:91:50: 29:22:04:8e:59:e6:53:ff:50:38:8b:fa:55:fc:04:0b:d2:6d: 96:3a:cf:0d:80:5b:67:51:32:74:29:1b:98:70:a5:17:a5:36: c2:0a:57:17:c7:2a:c5:84:8d:72:90:b5:5c:d0:b7:2a:1d:f0: ea:9b:6c:a8:28:7f:2a:e5:ba:3b:cc:a3:4c:70:5b:6e:87:7f: 97:23:0f:ce:19:52:27:13:33:ec:49:96:d4:3d:70:b3:3c:dc: 58:b1:a8:26:83:4a:cb:e2:74:75:13:39:8d:bd:8b:a2:a2:f8: 89:2a:c3:4f:7a:85:be:54:a2:aa:e4:ba:05:8b:20:88:71:f4: 78:17:d2:9f:01:84:89:97:6c:6e:6e:e9:90:18:7f:37:2e:e2: cb:80:0b:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tV7lzE0qOkTmo4JPlTWLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmMTlkODc2ZGMyNWI5NmM1ZGM1OThiZTJkYmY2ZWNiMDY1 YTk3NWYwHhcNMjUxMjIwMTcwMTE3WhcNMjUxMjIxMTcwMTE3WjAzMTEwLwYDVQQD EyhjNTRjNzEwZDA0NjJlMTNlMDU1ZWE4YzY0Yzc4NzcwODBmN2M0N2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOgRjNVORJeInhCPVQZGSNeS1GAR TKu8Irg9AXzxYIo/t1ApoAvDFrM1GLiYzr1ZKlLhNJQjx8lHeG8yfdXC8W9NeTmE A65zRkAsESnJTcxdSI6jnd8VmBG3jhr313efy07C/6+9ynSinKokyxem/U0ozEBO CZ6FCKLEhyJtFZJujAAcwNe/ahwu97fqXfqsFNH2+q9IedkBZHYCbucCDC8QDfK3 M2X1A3uCoIQYlqM39lqg83s9girLjDrNLQQffyDwiw87is+VgakDH/4oIzdJWmyk vx0yFhWceDw+GdjN+ekgqPDj2IRT0gT4Mc6rmTpblOetu9mzdIP1jVThLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMVMcQ0EYuE+BV6oxkx4dwgPfEfBMB8GA1UdIwQY MBaAFD8Z2HbcJblsXcWYvi2/bssGWpdfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHhuWWR0d2x1V3hkeFppLUxiOXV5d1phbDE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yMjY0NTUtMTdhMC00NjNjLTg5NTkt MGZiMTM5MWI1NGViLzEvUHhuWWR0d2x1V3hkeFppLUxiOXV5d1phbDE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8yMjY0NTUtMTdhMC00NjNjLTg5NTktMGZiMTM5MWI1NGVi LzEvUHhuWWR0d2x1V3hkeFppLUxiOXV5d1phbDE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd+iGPLoP iR10ue2CNHOotlQh6ir1t3IyjY7YBqrvGE16M7ERly4XFZTdoxpfJIL2HFsxNemV GXbc/5cSNjjwQp/87L0k4LTjotzX2pLY81Qm7UREOTHSbNOV5wm914R2O6Wd2LJt eVHhSpFQKSIEjlnmU/9QOIv6VfwEC9JtljrPDYBbZ1EydCkbmHClF6U2wgpXF8cq xYSNcpC1XNC3Kh3w6ptsqCh/KuW6O8yjTHBbbod/lyMPzhlSJxMz7EmW1D1wszzc WLGoJoNKy+J0dRM5jb2LoqL4iSrDT3qFvlSiquS6BYsgiHH0eBfSnwGEiZdsbm7p kBh/Ny7iy4ALsg== -----END CERTIFICATE-----Generated at Sat Dec 20 19:50:58 2025 by rpki-client