This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft File: PQG9lJxV7QfnAkLhUDPQqEdKnho.mft (raw, json) Hash identifier: QlV2JoDuLBCzqdE5QGRJi1i7jPgZnmFe4U6vq+1mLqk= Subject key identifier: A1:FB:36:D7:D6:8F:17:CB:F7:59:50:5C:E4:5A:C1:07:B5:08:B2:2C Authority key identifier: 3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A Certificate issuer: /CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a Certificate serial: 019B6BEA407FD374C6606100F0B6C3780E27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft Manifest number: 067F Signing time: Mon 29 Dec 2025 21:01:12 +0000 Manifest this update: Mon 29 Dec 2025 21:01:12 +0000 Manifest next update: Tue 30 Dec 2025 21:01:12 +0000 Files and hashes: 1: PQG9lJxV7QfnAkLhUDPQqEdKnho.crl (hash: l7T85SQClhhUIJQNbV3BmZtxo7IjxQvRWx2BnQvppmQ=) 2: wTHnefFYASN9t7OgaDJP2pTz5W4.roa (hash: 9oC2Jer2cW2AbqdUqYgPoU7bU/Jm0xDFHVun+XWYaKg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 21:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:ea:40:7f:d3:74:c6:60:61:00:f0:b6:c3:78:0e:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a Validity Not Before: Dec 29 21:01:12 2025 GMT Not After : Dec 30 21:01:12 2025 GMT Subject: CN=a1fb36d7d68f17cbf759505ce45ac107b508b22c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:af:ad:d0:3e:5b:e8:b5:8b:a9:11:5f:01:f1: e1:8e:2f:b1:94:9b:04:50:82:ab:12:5a:17:c7:6e: 29:fe:e5:cf:35:95:3b:2d:6e:10:74:ae:42:6b:ca: 1d:43:8c:ea:cc:29:85:11:a9:25:1d:5e:b5:97:79: 48:ef:ee:a4:4b:5e:78:9a:19:42:8e:37:2b:06:31: 1f:87:53:bf:1b:4a:35:94:eb:ed:9a:4e:32:e0:ad: f4:65:83:2c:20:e6:3b:11:77:b4:44:3a:a7:51:12: 53:ca:4f:b1:84:61:61:0f:fa:d7:52:e1:cf:a2:79: 9d:9a:c5:50:f6:91:13:08:37:d6:a1:58:2f:d0:08: 96:0f:6d:de:e2:d0:ed:f0:7d:5c:45:a2:4a:58:1f: 0e:ca:26:dd:fb:29:1f:f7:39:00:dc:c5:3d:e0:8d: dc:4e:87:f4:58:7b:1d:b3:85:79:19:15:34:a1:4b: 11:91:e8:87:36:fb:70:12:2a:7d:8f:32:b6:eb:78: 19:4b:a3:48:29:5d:81:2c:04:51:07:90:50:b2:54: a9:a3:a8:0f:c3:4e:f9:c4:b1:f7:68:cc:11:58:b6: 57:ff:e4:eb:3f:ab:62:9e:8c:57:d8:da:14:fa:34: e0:d9:b7:0a:f0:58:cc:82:ae:0b:e6:d7:9c:0e:19: e6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:FB:36:D7:D6:8F:17:CB:F7:59:50:5C:E4:5A:C1:07:B5:08:B2:2C X509v3 Authority Key Identifier: keyid:3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:1a:a2:22:f4:a5:b0:b7:a2:a2:52:c6:72:df:17:37:de:82: 16:40:e0:f8:b9:ad:56:f6:28:78:ba:4c:1a:3b:b3:ca:c2:cb: 97:59:c6:ff:99:a9:84:78:68:fe:58:49:79:a4:ba:2d:92:0e: 32:44:0a:e9:da:56:b4:47:c2:fa:ed:4f:2c:a0:3c:86:fd:fd: 4a:37:60:98:62:7c:16:72:aa:ca:67:90:da:52:a5:12:5c:18: c2:4f:d5:02:b8:97:1d:54:ae:58:cc:ad:ca:b7:0d:76:86:84: 6e:4c:0c:4c:30:f8:58:d1:c7:fa:2c:56:94:81:07:5b:6d:5b: c4:4b:2b:06:40:9a:59:51:51:55:b1:45:f4:c6:96:7a:d2:fc: 18:d9:3f:be:12:1d:b0:d0:1a:db:1f:6f:7d:04:30:fc:4d:09: a1:ef:58:54:a4:6c:11:88:fc:f0:10:e7:17:f9:93:b2:09:16: a7:92:9c:d0:e6:68:c6:98:c4:5f:be:9c:ad:65:f7:2f:b7:93: 15:a5:7b:a5:71:2f:52:4f:6d:67:4f:76:2b:4f:72:ed:29:a5: 1f:4b:c9:14:30:94:36:55:c9:f6:7e:8a:f7:f0:13:bf:85:35: af:c5:22:de:d6:e4:17:da:b9:00:87:86:e5:c6:52:23:55:1a: 18:c0:8a:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtr6kB/03TGYGEA8LbDeA4nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkMDFiZDk0OWM1NWVkMDdlNzAyNDJlMTUwMzNkMGE4NDc0 YTllMWEwHhcNMjUxMjI5MjEwMTEyWhcNMjUxMjMwMjEwMTEyWjAzMTEwLwYDVQQD EyhhMWZiMzZkN2Q2OGYxN2NiZjc1OTUwNWNlNDVhYzEwN2I1MDhiMjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxq+t0D5b6LWLqRFfAfHhji+xlJsE UIKrEloXx24p/uXPNZU7LW4QdK5Ca8odQ4zqzCmFEaklHV61l3lI7+6kS154mhlC jjcrBjEfh1O/G0o1lOvtmk4y4K30ZYMsIOY7EXe0RDqnURJTyk+xhGFhD/rXUuHP onmdmsVQ9pETCDfWoVgv0AiWD23e4tDt8H1cRaJKWB8Oyibd+ykf9zkA3MU94I3c Tof0WHsds4V5GRU0oUsRkeiHNvtwEip9jzK263gZS6NIKV2BLARRB5BQslSpo6gP w075xLH3aMwRWLZX/+TrP6tinoxX2NoU+jTg2bcK8FjMgq4L5tecDhnmHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKH7NtfWjxfL91lQXORawQe1CLIsMB8GA1UdIwQY MBaAFD0BvZScVe0H5wJC4VAz0KhHSp4aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFFHOWxKeFY3UWZuQWtMaFVEUFFxRWRLbmhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMTUwMDMtZWQ1My00MmQzLWFmMDkt ZTRlMGI1NTVhZDU5LzEvUFFHOWxKeFY3UWZuQWtMaFVEUFFxRWRLbmhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9jMTUwMDMtZWQ1My00MmQzLWFmMDktZTRlMGI1NTVhZDU5 LzEvUFFHOWxKeFY3UWZuQWtMaFVEUFFxRWRLbmhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnxqiIvSl sLeiolLGct8XN96CFkDg+LmtVvYoeLpMGjuzysLLl1nG/5mphHho/lhJeaS6LZIO MkQK6dpWtEfC+u1PLKA8hv39SjdgmGJ8FnKqymeQ2lKlElwYwk/VAriXHVSuWMyt yrcNdoaEbkwMTDD4WNHH+ixWlIEHW21bxEsrBkCaWVFRVbFF9MaWetL8GNk/vhId sNAa2x9vfQQw/E0Joe9YVKRsEYj88BDnF/mTsgkWp5Kc0OZoxpjEX76crWX3L7eT FaV7pXEvUk9tZ092K09y7SmlH0vJFDCUNlXJ9n6K9/ATv4U1r8Ui3tbkF9q5AIeG 5cZSI1UaGMCKzw== -----END CERTIFICATE-----Generated at Tue Dec 30 01:31:14 2025 by rpki-client