This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/b3b106-774a-4690-a03c-35c1c79aa1dc/1/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.mft File: PmoAuz7ZB8Umrdtaq9mtdkssPZ4.mft (raw, json) Hash identifier: VYcT/Y2uUlye5UYjX/oq7CE0Wg6NcIyVj3M2JUtl59I= Subject key identifier: 81:26:13:D1:96:EB:EB:CB:DF:8A:F0:24:6B:39:52:85:B1:2F:C7:37 Authority key identifier: 3E:6A:00:BB:3E:D9:07:C5:26:AD:DB:5A:AB:D9:AD:76:4B:2C:3D:9E Certificate issuer: /CN=3e6a00bb3ed907c526addb5aabd9ad764b2c3d9e Certificate serial: 019B6278C80CFE7CC71D269D2A7645FC7573 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/b3b106-774a-4690-a03c-35c1c79aa1dc/1/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.mft Manifest number: 0469 Signing time: Sun 28 Dec 2025 01:00:41 +0000 Manifest this update: Sun 28 Dec 2025 01:00:41 +0000 Manifest next update: Mon 29 Dec 2025 01:00:41 +0000 Files and hashes: 1: PmoAuz7ZB8Umrdtaq9mtdkssPZ4.crl (hash: J1cj9R8WiY22lfmuT8wwhYA3H3+LiQnlirowkazjRVI=) 2: vEaUcgTOmvxT4RwiTozd0tA5mdY.roa (hash: NlBiID9/yPQCEPkEu0Pfr8aESCT+/QAEDOmwYhde0qs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/b3b106-774a-4690-a03c-35c1c79aa1dc/1/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/b3b106-774a-4690-a03c-35c1c79aa1dc/1/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:78:c8:0c:fe:7c:c7:1d:26:9d:2a:76:45:fc:75:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6a00bb3ed907c526addb5aabd9ad764b2c3d9e Validity Not Before: Dec 28 01:00:41 2025 GMT Not After : Dec 29 01:00:41 2025 GMT Subject: CN=812613d196ebebcbdf8af0246b395285b12fc737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6a:1e:f9:c1:e7:23:77:ea:ff:85:f9:e4:73: d1:a6:ef:e0:93:7f:98:ec:f4:8b:ec:2b:58:1d:26: 0e:55:fe:e7:e8:df:b1:74:b4:4a:1c:90:00:c4:90: f6:83:bb:b6:29:86:98:3c:a0:ff:78:c2:3d:64:6d: 31:d5:67:f0:e6:70:22:e2:b3:90:ee:2c:65:3b:dc: cf:13:fc:38:88:d5:67:db:32:b6:eb:bd:db:c3:fb: a4:07:ae:97:61:26:bd:9f:27:b2:99:78:55:a8:ca: 17:83:12:6f:3d:98:d6:c0:79:8c:07:6b:48:bd:9b: 4e:15:81:3d:1c:7f:7b:f9:aa:ca:f4:69:60:3b:31: cf:9b:e3:8c:2a:e7:5d:76:45:2c:1c:89:00:be:a6: d3:05:a3:97:74:53:35:56:7b:86:57:6c:23:3d:01: e9:ae:ce:3b:4c:08:32:6b:57:b9:8e:be:65:a8:2a: b9:b9:a9:04:b1:fd:ff:d5:34:4e:e3:05:8d:ae:cd: 82:ed:df:a6:02:90:40:6a:0f:05:3d:b7:b5:9e:00: ab:25:49:22:56:29:4b:44:1a:58:5b:7e:90:a0:8d: b0:37:58:ca:64:5d:79:0a:15:67:a7:1d:8a:c1:7c: 2b:1a:cd:58:75:7f:c5:48:4e:65:fb:b7:01:80:37: b2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:26:13:D1:96:EB:EB:CB:DF:8A:F0:24:6B:39:52:85:B1:2F:C7:37 X509v3 Authority Key Identifier: keyid:3E:6A:00:BB:3E:D9:07:C5:26:AD:DB:5A:AB:D9:AD:76:4B:2C:3D:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b3b106-774a-4690-a03c-35c1c79aa1dc/1/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b3b106-774a-4690-a03c-35c1c79aa1dc/1/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:67:ad:69:1b:d3:36:2b:62:be:cf:a6:ad:68:d9:dc:87:c6: 90:54:60:94:e0:d6:e5:6b:10:76:cb:9c:43:43:75:15:a6:19: 49:53:e1:92:0e:8f:77:c8:b7:1a:55:8b:eb:cf:04:e7:42:96: 69:62:51:04:8b:04:58:54:ad:11:29:e2:b9:9e:c8:0a:f3:f1: 6e:0c:f8:1b:9d:32:c9:4e:a8:c1:1b:63:e4:3f:de:bc:d5:72: 2a:f0:83:3d:40:81:b6:5b:ff:4b:5c:f9:c2:ce:d1:7c:13:36: 19:5d:1d:73:e2:1e:16:3d:6e:e8:bc:64:75:6f:b5:59:bc:ea: ad:18:1a:cc:d1:0f:5a:1d:db:8e:c2:57:e9:31:0e:d6:65:25: 7e:03:03:0f:bc:54:67:b6:56:6f:a8:eb:3c:a3:87:66:fc:7b: af:76:77:10:b3:c7:17:90:e1:8b:2e:a5:e1:52:a9:a7:cd:4e: 45:97:ed:87:75:68:d2:15:e2:7d:b5:dc:b8:b9:36:64:85:94: 59:e4:c3:28:3e:e2:36:b6:3e:0e:8f:12:52:ed:26:11:ac:8b: 6b:fe:8b:1c:af:b7:af:8e:49:d8:5a:57:8e:22:74:6d:35:88: 8d:ef:22:b8:3c:89:14:34:f9:4a:71:9b:88:74:57:8e:6f:df: c6:03:23:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtieMgM/nzHHSadKnZF/HVzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNmEwMGJiM2VkOTA3YzUyNmFkZGI1YWFiZDlhZDc2NGIy YzNkOWUwHhcNMjUxMjI4MDEwMDQxWhcNMjUxMjI5MDEwMDQxWjAzMTEwLwYDVQQD Eyg4MTI2MTNkMTk2ZWJlYmNiZGY4YWYwMjQ2YjM5NTI4NWIxMmZjNzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWoe+cHnI3fq/4X55HPRpu/gk3+Y 7PSL7CtYHSYOVf7n6N+xdLRKHJAAxJD2g7u2KYaYPKD/eMI9ZG0x1Wfw5nAi4rOQ 7ixlO9zPE/w4iNVn2zK2673bw/ukB66XYSa9nyeymXhVqMoXgxJvPZjWwHmMB2tI vZtOFYE9HH97+arK9GlgOzHPm+OMKudddkUsHIkAvqbTBaOXdFM1VnuGV2wjPQHp rs47TAgya1e5jr5lqCq5uakEsf3/1TRO4wWNrs2C7d+mApBAag8FPbe1ngCrJUki VilLRBpYW36QoI2wN1jKZF15ChVnpx2KwXwrGs1YdX/FSE5l+7cBgDeycQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIEmE9GW6+vL34rwJGs5UoWxL8c3MB8GA1UdIwQY MBaAFD5qALs+2QfFJq3bWqvZrXZLLD2eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1vQXV6N1pCOFVtcmR0YXE5bXRka3NzUFo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9iM2IxMDYtNzc0YS00NjkwLWEwM2Mt MzVjMWM3OWFhMWRjLzEvUG1vQXV6N1pCOFVtcmR0YXE5bXRka3NzUFo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9iM2IxMDYtNzc0YS00NjkwLWEwM2MtMzVjMWM3OWFhMWRj LzEvUG1vQXV6N1pCOFVtcmR0YXE5bXRka3NzUFo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFWetaRvT Nitivs+mrWjZ3IfGkFRglODW5WsQdsucQ0N1FaYZSVPhkg6Pd8i3GlWL688E50KW aWJRBIsEWFStESniuZ7ICvPxbgz4G50yyU6owRtj5D/evNVyKvCDPUCBtlv/S1z5 ws7RfBM2GV0dc+IeFj1u6LxkdW+1WbzqrRgazNEPWh3bjsJX6TEO1mUlfgMDD7xU Z7ZWb6jrPKOHZvx7r3Z3ELPHF5Dhiy6l4VKpp81ORZfth3Vo0hXifbXcuLk2ZIWU WeTDKD7iNrY+Do8SUu0mEayLa/6LHK+3r45J2FpXjiJ0bTWIje8iuDyJFDT5SnGb iHRXjm/fxgMj3Q== -----END CERTIFICATE-----Generated at Sun Dec 28 07:29:18 2025 by rpki-client