This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft File: PDULqC8_61ruKJOPvxsJweL9GbQ.mft (raw, json) Hash identifier: mf/YmS5/tMwJVfsR9ayNo3vfispRAsPQkRlqmviUsKg= Subject key identifier: 51:5B:92:36:29:CA:F7:95:FE:44:61:9C:B9:EF:47:7D:74:71:81:A0 Authority key identifier: 3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4 Certificate issuer: /CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4 Certificate serial: 019B3DC79278240CAD6BFB50F61C73038D45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 22:00:47 +0000 Manifest this update: Sat 20 Dec 2025 22:00:47 +0000 Manifest next update: Sun 21 Dec 2025 22:00:47 +0000 Files and hashes: 1: 1-Csr3W7RFkTtbpc5vegpM0x3SJg.roa (hash: OEps/3ayuoO5bERjIwyI74TPDpt1ijmiHI+Ru4dOW1I=) 2: PDULqC8_61ruKJOPvxsJweL9GbQ.crl (hash: iqPI32AeE4pjCxlM7ZKq3vA4r2BmreaOWMkGS8vCSaA=) 3: aI9PtDrL1wGCUURcBpHMKfTf4hE.roa (hash: 4oSaxJpQHFX+hBtLYICwFPgrE4wCzYMHUMuoAxfYBXE=) 4: j6dQ2cjzXA3192uDTyOAiZGLE8Q.roa (hash: b9/CxQNUb4cLntaVBU/KEYsxwEObm97HgDwZmznQiH0=) 5: jyPlSfMwE97ShJiNEree4W-YnKc.roa (hash: RPRkI69AUdx22PSRgMKu/d39p+trzoeOCprFB1jyo6s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:92:78:24:0c:ad:6b:fb:50:f6:1c:73:03:8d:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4 Validity Not Before: Dec 20 22:00:47 2025 GMT Not After : Dec 21 22:00:47 2025 GMT Subject: CN=515b923629caf795fe44619cb9ef477d747181a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a8:a7:66:37:d1:17:2c:8f:67:c7:2c:43:a4: 07:b7:8a:3e:f1:49:b5:5c:6f:3c:d5:0a:5c:76:e8: 99:6f:fa:aa:3a:84:87:44:d0:e2:0b:f4:5d:12:27: 62:8c:e0:ea:76:63:dc:32:1c:87:a6:2c:50:18:5e: 13:c9:b7:e3:94:50:92:63:c6:d3:6e:d9:8d:1f:e1: 05:37:91:fd:b6:f8:32:ab:83:a6:25:7c:01:d7:d2: d0:b0:23:a4:5c:ef:b3:87:c5:bc:a3:29:0d:1d:e8: 93:dd:96:9e:32:0e:a4:cc:b5:b7:3c:2b:2e:50:f3: aa:65:69:22:8f:94:00:30:ad:db:86:05:70:c9:1a: 6c:76:7f:de:7c:ef:ba:91:e2:c2:bf:3f:3f:3a:fb: b9:9c:1f:83:1e:c5:30:58:f7:2c:0f:f3:0b:2b:4d: 67:2a:70:7e:38:72:2f:81:e1:70:8c:15:b1:9c:ad: 05:82:c4:c7:fe:eb:be:99:57:fa:a3:b0:55:d2:4e: a7:71:a0:e8:1b:e8:ba:c5:d9:4e:70:6f:ef:f5:33: 60:eb:00:2e:2e:3a:ec:88:b4:10:33:d5:f7:ee:59: 90:2d:ef:72:b7:0f:c8:70:ed:ce:f6:eb:ce:08:3a: d6:d7:ca:ff:4f:c5:0a:2c:90:4c:17:43:9e:1a:61: 37:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:5B:92:36:29:CA:F7:95:FE:44:61:9C:B9:EF:47:7D:74:71:81:A0 X509v3 Authority Key Identifier: keyid:3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:69:58:22:fe:62:e7:d7:4e:4e:91:fe:f8:77:38:f0:f6:27: 2c:53:03:e4:7f:46:22:cd:b7:78:37:96:b2:d6:b4:bb:80:cc: 06:3a:80:59:02:24:4c:37:ca:5b:d1:e2:01:1c:db:0e:0b:ac: 2d:90:bd:ec:12:bb:d6:e9:d1:6a:dc:12:5f:c8:70:1c:96:12: 57:88:0a:28:55:90:d4:08:81:c0:aa:c7:48:ed:7a:7d:8a:79: 48:ed:64:d6:7b:b1:c2:ce:af:63:64:7b:a4:9b:5d:c5:ae:ff: b5:6e:7b:14:82:86:fe:1c:68:76:24:14:84:0c:8a:42:a7:c6: f8:eb:aa:60:ad:7b:ce:04:20:50:99:99:d6:d4:2c:a0:57:17: 61:60:3a:ed:4c:9a:56:2c:f9:75:ba:24:a5:9a:8b:58:0c:64: aa:78:cc:54:61:6d:bd:a8:05:0f:7b:c7:88:3b:5a:27:b8:90: 30:9d:14:da:bc:dd:af:8e:90:a2:0a:aa:ce:b4:6b:7c:9a:8d: ca:44:34:c8:23:09:03:36:cf:5e:41:26:41:0d:69:17:99:3a: 98:f2:c7:1e:0e:47:66:63:81:91:3e:96:7f:89:b1:a5:b0:5a: 49:84:54:fd:38:ab:0b:fb:fc:6e:61:33:1c:b8:d4:bf:2b:59: 9a:ac:2a:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x5J4JAyta/tQ9hxzA41FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMzUwYmE4MmYzZmViNWFlZTI4OTM4ZmJmMWIwOWMxZTJm ZDE5YjQwHhcNMjUxMjIwMjIwMDQ3WhcNMjUxMjIxMjIwMDQ3WjAzMTEwLwYDVQQD Eyg1MTViOTIzNjI5Y2FmNzk1ZmU0NDYxOWNiOWVmNDc3ZDc0NzE4MWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46inZjfRFyyPZ8csQ6QHt4o+8Um1 XG881QpcduiZb/qqOoSHRNDiC/RdEidijODqdmPcMhyHpixQGF4TybfjlFCSY8bT btmNH+EFN5H9tvgyq4OmJXwB19LQsCOkXO+zh8W8oykNHeiT3ZaeMg6kzLW3PCsu UPOqZWkij5QAMK3bhgVwyRpsdn/efO+6keLCvz8/Ovu5nB+DHsUwWPcsD/MLK01n KnB+OHIvgeFwjBWxnK0FgsTH/uu+mVf6o7BV0k6ncaDoG+i6xdlOcG/v9TNg6wAu LjrsiLQQM9X37lmQLe9ytw/IcO3O9uvOCDrW18r/T8UKLJBMF0OeGmE35QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFFbkjYpyveV/kRhnLnvR310cYGgMB8GA1UdIwQY MBaAFDw1C6gvP+ta7iiTj78bCcHi/Rm0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUERVTHFDOF82MXJ1S0pPUHZ4c0p3ZUw5R2JRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82NGQ3YTktY2FjMy00NTQ5LWE3YWEt NjFiNzkwMmVlMjA0LzEvUERVTHFDOF82MXJ1S0pPUHZ4c0p3ZUw5R2JRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS82NGQ3YTktY2FjMy00NTQ5LWE3YWEtNjFiNzkwMmVlMjA0 LzEvUERVTHFDOF82MXJ1S0pPUHZ4c0p3ZUw5R2JRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf2lYIv5i 59dOTpH++Hc48PYnLFMD5H9GIs23eDeWsta0u4DMBjqAWQIkTDfKW9HiARzbDgus LZC97BK71unRatwSX8hwHJYSV4gKKFWQ1AiBwKrHSO16fYp5SO1k1nuxws6vY2R7 pJtdxa7/tW57FIKG/hxodiQUhAyKQqfG+OuqYK17zgQgUJmZ1tQsoFcXYWA67Uya Viz5dbokpZqLWAxkqnjMVGFtvagFD3vHiDtaJ7iQMJ0U2rzdr46QogqqzrRrfJqN ykQ0yCMJAzbPXkEmQQ1pF5k6mPLHHg5HZmOBkT6Wf4mxpbBaSYRU/TirC/v8bmEz HLjUvytZmqwq6g== -----END CERTIFICATE-----Generated at Sun Dec 21 03:00:40 2025 by rpki-client