This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft File: pmnxwhNwxE39EOKvaIyMTg6hKVU.mft (raw, json) Hash identifier: kc2Hr5elGz/0SvJEkL8XbIsj7QpfkLXfo2JuiMB489I= Subject key identifier: 2D:36:87:C4:46:66:EE:77:0A:28:99:31:D5:5D:8D:BB:FC:0C:74:49 Authority key identifier: A6:69:F1:C2:13:70:C4:4D:FD:10:E2:AF:68:8C:8C:4E:0E:A1:29:55 Certificate issuer: /CN=a669f1c21370c44dfd10e2af688c8c4e0ea12955 Certificate serial: 019B34FB5AE251F174ED6886BB75FB1969DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmnxwhNwxE39EOKvaIyMTg6hKVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft Manifest number: 0FCC Signing time: Fri 19 Dec 2025 05:00:46 +0000 Manifest this update: Fri 19 Dec 2025 05:00:46 +0000 Manifest next update: Sat 20 Dec 2025 05:00:46 +0000 Files and hashes: 1: pmnxwhNwxE39EOKvaIyMTg6hKVU.crl (hash: SF6N8N65Vr9bHHE7lLOkz1YlETLdaoYFp9SNzHE3++Q=) 2: vdy1MmzFMK60AlIdpOXD1htDYPg.roa (hash: 0u0pMl1wwd/at2uaTP4vwjKf36kzodMgLoxEXn0lwwY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft rsync://rpki.ripe.net/repository/DEFAULT/pmnxwhNwxE39EOKvaIyMTg6hKVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:5a:e2:51:f1:74:ed:68:86:bb:75:fb:19:69:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a669f1c21370c44dfd10e2af688c8c4e0ea12955 Validity Not Before: Dec 19 05:00:46 2025 GMT Not After : Dec 20 05:00:46 2025 GMT Subject: CN=2d3687c44666ee770a289931d55d8dbbfc0c7449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0e:63:e2:33:2b:b2:ca:04:48:9b:4d:e7:1e: b7:e1:31:66:97:14:11:b4:66:5d:bf:a2:67:3c:38: 63:4f:75:dd:87:ae:64:e2:55:3b:5a:e2:43:94:bb: 81:a2:50:52:6a:28:f6:fb:cf:ae:a4:6b:24:6d:13: 88:05:7f:78:99:7e:40:d6:e7:60:15:ce:68:bd:a8: 46:15:85:bf:5e:ec:bb:86:fb:5b:31:fa:69:69:43: c6:d6:dc:c3:94:c6:f1:bd:c0:a0:de:46:9d:6c:0b: 46:9f:2b:30:c8:ed:a4:e0:ac:15:2d:ce:37:61:1a: 0b:7b:ad:31:1a:70:e4:54:c9:1b:36:7c:f7:c9:57: 65:b1:8f:42:cf:01:b5:f5:b5:d4:54:f8:07:14:73: ee:46:18:e1:57:ca:5a:bd:9c:13:e1:1b:13:9d:5e: e7:50:89:b8:a2:09:7a:07:45:1b:4b:9e:62:5e:0d: a9:d3:2d:bf:a9:5a:60:a7:00:27:8c:82:f0:00:19: 40:aa:41:86:9c:98:c0:cf:41:53:19:9e:d5:99:35: 0b:c7:6d:f2:7d:21:bc:23:a6:d4:3e:3c:f0:a2:19: ab:48:25:cc:2d:13:4c:60:d3:69:82:5c:c5:b3:54: 33:7d:c3:5e:a0:f6:2f:9c:4d:da:22:8f:64:43:3c: 60:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:36:87:C4:46:66:EE:77:0A:28:99:31:D5:5D:8D:BB:FC:0C:74:49 X509v3 Authority Key Identifier: keyid:A6:69:F1:C2:13:70:C4:4D:FD:10:E2:AF:68:8C:8C:4E:0E:A1:29:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmnxwhNwxE39EOKvaIyMTg6hKVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:3b:11:26:d9:c4:78:13:09:61:b0:9e:e5:73:aa:94:23:da: c0:42:ea:6d:ea:e1:13:8f:cf:bb:dc:8a:36:3e:7e:9c:0e:af: ef:9f:d1:55:af:35:84:e2:51:8a:14:21:8a:b9:39:f1:5c:ab: a7:90:68:c9:74:84:88:71:56:5d:73:c5:5a:01:8b:30:5a:9a: 50:59:a0:53:a7:ad:83:b6:90:cd:da:36:8e:1e:9a:6e:2d:b5: b0:36:cd:ed:b2:78:e3:5a:b1:c7:d0:a0:4d:20:bc:af:1d:22: 46:b6:82:f3:c7:f4:3d:93:08:9e:1e:0d:40:6b:b0:ef:a4:a3: 83:c7:bd:ff:4b:e2:2b:5c:bb:a4:be:62:52:f3:3a:49:06:50: 19:04:d3:5d:cb:d4:73:b8:10:e1:42:9d:86:f3:99:2f:d2:29: 22:db:c5:31:27:12:4f:6a:7c:04:8d:3d:7d:97:82:0e:6d:13: d9:6b:4a:30:7b:f5:4a:a2:ec:50:42:16:cf:1e:12:6f:11:8e: ad:74:c1:55:05:c2:03:3d:a5:f6:23:c7:ff:05:ba:ca:53:0f: 3d:af:29:8d:0f:80:7e:c5:7f:48:65:ea:3e:4c:24:b2:46:82: 68:d5:af:7e:c5:1c:0d:6a:3c:b4:4d:de:97:25:37:f9:db:7f: 4e:d7:3b:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+1riUfF07WiGu3X7GWncMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NjlmMWMyMTM3MGM0NGRmZDEwZTJhZjY4OGM4YzRlMGVh MTI5NTUwHhcNMjUxMjE5MDUwMDQ2WhcNMjUxMjIwMDUwMDQ2WjAzMTEwLwYDVQQD EygyZDM2ODdjNDQ2NjZlZTc3MGEyODk5MzFkNTVkOGRiYmZjMGM3NDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw5j4jMrssoESJtN5x634TFmlxQR tGZdv6JnPDhjT3Xdh65k4lU7WuJDlLuBolBSaij2+8+upGskbROIBX94mX5A1udg Fc5ovahGFYW/Xuy7hvtbMfppaUPG1tzDlMbxvcCg3kadbAtGnyswyO2k4KwVLc43 YRoLe60xGnDkVMkbNnz3yVdlsY9CzwG19bXUVPgHFHPuRhjhV8pavZwT4RsTnV7n UIm4ogl6B0UbS55iXg2p0y2/qVpgpwAnjILwABlAqkGGnJjAz0FTGZ7VmTULx23y fSG8I6bUPjzwohmrSCXMLRNMYNNpglzFs1QzfcNeoPYvnE3aIo9kQzxgZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC02h8RGZu53CiiZMdVdjbv8DHRJMB8GA1UdIwQY MBaAFKZp8cITcMRN/RDir2iMjE4OoSlVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcG1ueHdoTnd4RTM5RU9LdmFJeU1UZzZoS1ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lN2I0MGMtNDE0Yi00NzNhLWI4Yzct YjdiMTQ4MTYyNWIxLzEvcG1ueHdoTnd4RTM5RU9LdmFJeU1UZzZoS1ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9lN2I0MGMtNDE0Yi00NzNhLWI4YzctYjdiMTQ4MTYyNWIx LzEvcG1ueHdoTnd4RTM5RU9LdmFJeU1UZzZoS1ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjDsRJtnE eBMJYbCe5XOqlCPawELqberhE4/Pu9yKNj5+nA6v75/RVa81hOJRihQhirk58Vyr p5BoyXSEiHFWXXPFWgGLMFqaUFmgU6etg7aQzdo2jh6abi21sDbN7bJ441qxx9Cg TSC8rx0iRraC88f0PZMInh4NQGuw76Sjg8e9/0viK1y7pL5iUvM6SQZQGQTTXcvU c7gQ4UKdhvOZL9IpItvFMScST2p8BI09fZeCDm0T2WtKMHv1SqLsUEIWzx4SbxGO rXTBVQXCAz2l9iPH/wW6ylMPPa8pjQ+AfsV/SGXqPkwkskaCaNWvfsUcDWo8tE3e lyU3+dt/Ttc7+g== -----END CERTIFICATE-----Generated at Fri Dec 19 08:24:09 2025 by rpki-client