This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft File: PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft (raw, json) Hash identifier: VxdRI94qdVSG5Ogt9mpQHV86eRMOT9pfjofsEGa+rXs= Subject key identifier: 39:6F:4B:11:0B:D2:9B:B5:CC:3E:C8:57:33:2E:EF:D0:74:C6:4E:A5 Authority key identifier: 3E:D2:39:45:FF:75:61:EE:99:D2:E2:78:E7:38:8D:04:5F:AD:D3:14 Certificate issuer: /CN=3ed23945ff7561ee99d2e278e7388d045fadd314 Certificate serial: 019B4A0339B6EC13888136BEDC39FFF035F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft Manifest number: 0C94 Signing time: Tue 23 Dec 2025 07:01:23 +0000 Manifest this update: Tue 23 Dec 2025 07:01:23 +0000 Manifest next update: Wed 24 Dec 2025 07:01:23 +0000 Files and hashes: 1: 1-QJRvD_s23t8EY5xEdDTuC908Sc.roa (hash: lC8dpaKtg1+1rVuBlbmqllxIuGpvRJft4kKrK9r2MOs=) 2: PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.crl (hash: 295PkqLixwtD90091FUm3ygXD6kEgNtsELSz2/xKZk0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:03:39:b6:ec:13:88:81:36:be:dc:39:ff:f0:35:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ed23945ff7561ee99d2e278e7388d045fadd314 Validity Not Before: Dec 23 07:01:23 2025 GMT Not After : Dec 24 07:01:23 2025 GMT Subject: CN=396f4b110bd29bb5cc3ec857332eefd074c64ea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:99:dc:c7:f3:30:b5:65:09:9a:95:46:cc:e9: 77:9b:90:cb:68:0a:fc:c5:da:90:e7:60:71:e0:96: 20:a1:88:0d:5b:d9:fa:da:0d:4b:24:da:e0:5a:da: 0a:29:91:39:58:3d:03:da:d7:29:d3:ed:7b:d3:71: 60:9a:0b:4e:84:ce:0d:49:c2:01:a5:50:00:28:91: 7b:3b:f0:65:66:33:84:c9:31:98:6a:cd:f3:cd:45: 78:cb:a2:f0:4e:ac:22:4d:1b:de:03:2f:df:04:5e: 5f:a6:30:1b:9b:7b:de:f9:b1:02:f0:0f:12:b0:ae: 09:d4:41:94:bd:bc:7b:82:84:8b:21:21:89:22:0c: ed:56:34:e4:ca:8f:25:d7:ef:4a:e3:e6:f5:e1:d9: 16:89:24:a1:39:da:e1:4e:60:76:54:5b:df:53:82: 48:51:d3:d3:8a:3b:5c:84:53:ff:e1:a1:e7:eb:9d: 3a:b0:c9:df:dd:5a:3c:dc:25:f3:6d:47:95:6b:45: a9:aa:51:28:61:34:a5:22:19:cf:bb:39:af:a9:e6: ee:fe:b0:45:6d:97:ab:c6:34:6f:77:94:c4:e7:f5: 70:db:76:9b:87:6f:9a:35:87:a2:98:87:3e:43:20: 3e:6b:57:87:9d:f5:e2:5c:1c:69:88:5b:f7:e4:77: b9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:6F:4B:11:0B:D2:9B:B5:CC:3E:C8:57:33:2E:EF:D0:74:C6:4E:A5 X509v3 Authority Key Identifier: keyid:3E:D2:39:45:FF:75:61:EE:99:D2:E2:78:E7:38:8D:04:5F:AD:D3:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:71:43:54:c4:48:31:71:17:1d:cb:4f:4a:d7:ab:dc:f8:8d: b4:99:0e:9e:11:0a:3a:6c:40:29:8b:ee:0f:8c:b6:dd:44:5f: 9a:57:77:6e:db:85:d6:d8:2a:29:f2:55:0c:ce:21:51:ec:dd: d0:57:86:d4:bb:76:fa:ef:52:1a:b2:c7:fa:85:10:d8:82:58: 0c:03:52:c7:a4:2d:6d:19:05:8a:4b:d0:56:44:3f:95:b9:aa: ce:b0:7c:2c:5e:b3:c9:f2:70:3f:91:83:d7:09:e7:f8:13:ec: 9a:32:4c:68:45:4c:b5:5c:7f:87:83:8c:83:a7:45:9a:09:2c: 81:d3:2c:75:b3:3b:04:58:33:c6:af:08:cc:53:53:aa:b5:c5: 63:f8:96:5c:b8:eb:78:7f:0e:3e:bc:fc:91:fb:50:8f:6f:45: 66:5f:72:2f:3a:16:68:da:82:43:ad:a8:ea:86:7b:25:aa:44: 82:33:ae:0c:8d:f4:bd:7d:1d:41:fd:8a:f9:f5:c6:9d:d0:2f: bd:d2:1d:44:87:e2:a6:66:19:1f:5d:cf:15:1e:26:a8:f2:cb: 1e:e3:42:7e:49:ed:26:e6:a6:3f:f6:1a:bd:34:01:ed:d5:c9: 9d:e1:25:e9:d9:31:49:6f:e6:9b:0f:02:92:be:dc:47:77:2a: 3f:10:3d:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKAzm27BOIgTa+3Dn/8DX1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZDIzOTQ1ZmY3NTYxZWU5OWQyZTI3OGU3Mzg4ZDA0NWZh ZGQzMTQwHhcNMjUxMjIzMDcwMTIzWhcNMjUxMjI0MDcwMTIzWjAzMTEwLwYDVQQD EygzOTZmNGIxMTBiZDI5YmI1Y2MzZWM4NTczMzJlZWZkMDc0YzY0ZWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpncx/MwtWUJmpVGzOl3m5DLaAr8 xdqQ52Bx4JYgoYgNW9n62g1LJNrgWtoKKZE5WD0D2tcp0+1703FgmgtOhM4NScIB pVAAKJF7O/BlZjOEyTGYas3zzUV4y6LwTqwiTRveAy/fBF5fpjAbm3ve+bEC8A8S sK4J1EGUvbx7goSLISGJIgztVjTkyo8l1+9K4+b14dkWiSShOdrhTmB2VFvfU4JI UdPTijtchFP/4aHn6506sMnf3Vo83CXzbUeVa0WpqlEoYTSlIhnPuzmvqebu/rBF bZerxjRvd5TE5/Vw23abh2+aNYeimIc+QyA+a1eHnfXiXBxpiFv35He5VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDlvSxEL0pu1zD7IVzMu79B0xk6lMB8GA1UdIwQY MBaAFD7SOUX/dWHumdLieOc4jQRfrdMUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHRJNVJmOTFZZTZaMHVKNDV6aU5CRi10MHhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9jZTc2MmItZGNlYi00ZDVmLWIxZmIt NzczMjlhN2U3ZGZlLzEvUHRJNVJmOTFZZTZaMHVKNDV6aU5CRi10MHhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9jZTc2MmItZGNlYi00ZDVmLWIxZmItNzczMjlhN2U3ZGZl LzEvUHRJNVJmOTFZZTZaMHVKNDV6aU5CRi10MHhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM3FDVMRI MXEXHctPSter3PiNtJkOnhEKOmxAKYvuD4y23URfmld3btuF1tgqKfJVDM4hUezd 0FeG1Lt2+u9SGrLH+oUQ2IJYDANSx6QtbRkFikvQVkQ/lbmqzrB8LF6zyfJwP5GD 1wnn+BPsmjJMaEVMtVx/h4OMg6dFmgksgdMsdbM7BFgzxq8IzFNTqrXFY/iWXLjr eH8OPrz8kftQj29FZl9yLzoWaNqCQ62o6oZ7JapEgjOuDI30vX0dQf2K+fXGndAv vdIdRIfipmYZH13PFR4mqPLLHuNCfkntJuamP/YavTQB7dXJneEl6dkxSW/mmw8C kr7cR3cqPxA9PA== -----END CERTIFICATE-----Generated at Tue Dec 23 09:23:51 2025 by rpki-client