This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.mft File: PQJjyVdcvQESY66Ig5p4iLdPoHY.mft (raw, json) Hash identifier: VaGkblx8aHwPbwEYxruKIT40GuRvNInqNj2LppH7RSM= Subject key identifier: 16:A0:1D:36:EB:BB:03:1A:40:7E:17:60:6A:2D:7B:FD:67:A0:AB:B2 Authority key identifier: 3D:02:63:C9:57:5C:BD:01:12:63:AE:88:83:9A:78:88:B7:4F:A0:76 Certificate issuer: /CN=3d0263c9575cbd011263ae88839a7888b74fa076 Certificate serial: 019B53AC215806D2EC91D8E2CB59002D321B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQJjyVdcvQESY66Ig5p4iLdPoHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.mft Manifest number: 12BF Signing time: Thu 25 Dec 2025 04:02:28 +0000 Manifest this update: Thu 25 Dec 2025 04:02:28 +0000 Manifest next update: Fri 26 Dec 2025 04:02:28 +0000 Files and hashes: 1: PQJjyVdcvQESY66Ig5p4iLdPoHY.crl (hash: AEbnf56n+L2lX33gLo1R2D7h7PE7be5vCTFZCa/09XQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.mft rsync://rpki.ripe.net/repository/DEFAULT/PQJjyVdcvQESY66Ig5p4iLdPoHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ac:21:58:06:d2:ec:91:d8:e2:cb:59:00:2d:32:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d0263c9575cbd011263ae88839a7888b74fa076 Validity Not Before: Dec 25 04:02:28 2025 GMT Not After : Dec 26 04:02:28 2025 GMT Subject: CN=16a01d36ebbb031a407e17606a2d7bfd67a0abb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a0:10:0e:54:be:a8:0f:7c:d4:8b:ed:5c:10: fd:e7:94:87:3a:36:4d:1e:56:56:de:c6:bb:d2:bc: 2a:2a:0b:fe:ad:ad:bb:7c:e7:43:64:2a:a9:e4:ad: f6:48:9b:31:16:d1:8b:02:e6:1f:d9:42:b8:2f:ed: 70:7d:8f:1d:27:cb:5c:c4:84:40:44:39:03:a1:11: 0b:4b:2c:07:11:eb:cb:aa:1e:72:a0:8a:c2:d7:f2: f7:e5:8a:4e:45:17:cb:e0:c8:1a:ea:b6:2d:fc:d8: 51:ef:28:b7:7e:27:50:4d:68:3d:75:a6:92:44:d6: 42:54:6a:38:44:09:85:3c:8b:5d:e3:e3:ce:cd:43: b4:a4:c9:d2:44:26:f4:e5:f3:ae:95:43:06:b4:35: b3:00:f0:76:02:ce:d2:e9:d5:4c:29:df:f4:25:5f: 04:14:7d:a6:56:a3:d3:c0:30:e7:ba:9a:01:1a:ca: 14:63:fd:7f:65:5b:8c:38:51:0d:d3:ff:c3:61:2f: aa:c6:2f:46:79:d3:b7:7b:c2:66:2d:a7:8a:73:fc: 3d:26:23:6e:d6:ac:2a:35:05:a5:d2:4a:3f:f1:57: 89:a3:c9:ef:9c:d3:4b:dd:2e:92:71:8a:c9:7e:27: 27:3c:7b:05:7d:9d:ee:04:77:6a:14:11:41:73:c7: 58:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A0:1D:36:EB:BB:03:1A:40:7E:17:60:6A:2D:7B:FD:67:A0:AB:B2 X509v3 Authority Key Identifier: keyid:3D:02:63:C9:57:5C:BD:01:12:63:AE:88:83:9A:78:88:B7:4F:A0:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQJjyVdcvQESY66Ig5p4iLdPoHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:4b:20:aa:79:e0:56:7a:06:95:a8:bb:f0:f5:3c:fc:2d:23: e4:9f:9a:78:f8:36:cf:41:31:ea:4c:63:66:1e:60:c6:35:4f: 7e:d1:1f:c0:70:3c:1f:80:c6:a3:62:f0:1a:69:a3:17:57:b7: 45:54:56:b9:6a:9f:cb:26:fd:4d:de:58:f5:b3:f0:8c:95:50: ff:1d:ef:b7:a8:6a:e0:2e:f0:7d:82:29:f3:f3:6b:0e:75:ca: ed:35:b2:ec:e5:ca:3d:56:35:a9:97:ee:c5:8c:24:19:df:be: 3d:75:8c:c9:17:e0:f5:42:ac:13:4f:08:a4:f4:ef:69:51:65: 80:82:7a:16:6d:d5:47:a2:66:39:83:31:2a:f5:2c:47:f2:ea: ac:e1:8f:cd:1b:db:81:5d:f9:99:de:ad:d1:51:ad:dd:c8:35: 27:c4:a1:57:62:25:26:42:2b:d1:bd:07:5b:a5:9c:58:40:dd: 5a:28:cf:ae:61:28:21:16:bb:ab:6c:24:76:11:16:a5:0e:b9: f9:d3:06:98:d3:2e:aa:7d:25:79:9f:c0:de:83:f5:a4:a0:f2: 29:9f:62:c6:26:59:ad:2c:c2:d1:62:37:dd:c8:f1:22:5a:90: 33:29:3c:48:0a:c8:f2:d2:b7:d3:98:ac:08:c0:be:22:d3:5c: 63:6c:6d:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTrCFYBtLskdjiy1kALTIbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkMDI2M2M5NTc1Y2JkMDExMjYzYWU4ODgzOWE3ODg4Yjc0 ZmEwNzYwHhcNMjUxMjI1MDQwMjI4WhcNMjUxMjI2MDQwMjI4WjAzMTEwLwYDVQQD EygxNmEwMWQzNmViYmIwMzFhNDA3ZTE3NjA2YTJkN2JmZDY3YTBhYmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqAQDlS+qA981IvtXBD955SHOjZN HlZW3sa70rwqKgv+ra27fOdDZCqp5K32SJsxFtGLAuYf2UK4L+1wfY8dJ8tcxIRA RDkDoRELSywHEevLqh5yoIrC1/L35YpORRfL4Mga6rYt/NhR7yi3fidQTWg9daaS RNZCVGo4RAmFPItd4+POzUO0pMnSRCb05fOulUMGtDWzAPB2As7S6dVMKd/0JV8E FH2mVqPTwDDnupoBGsoUY/1/ZVuMOFEN0//DYS+qxi9GedO3e8JmLaeKc/w9JiNu 1qwqNQWl0ko/8VeJo8nvnNNL3S6ScYrJficnPHsFfZ3uBHdqFBFBc8dY+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBagHTbruwMaQH4XYGote/1noKuyMB8GA1UdIwQY MBaAFD0CY8lXXL0BEmOuiIOaeIi3T6B2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFFKanlWZGN2UUVTWTY2SWc1cDRpTGRQb0hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8zNzQyM2EtMDUzNy00NWY0LTk5MTUt MTJmNGU2MjczODc3LzEvUFFKanlWZGN2UUVTWTY2SWc1cDRpTGRQb0hZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8zNzQyM2EtMDUzNy00NWY0LTk5MTUtMTJmNGU2MjczODc3 LzEvUFFKanlWZGN2UUVTWTY2SWc1cDRpTGRQb0hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeUsgqnng VnoGlai78PU8/C0j5J+aePg2z0Ex6kxjZh5gxjVPftEfwHA8H4DGo2LwGmmjF1e3 RVRWuWqfyyb9Td5Y9bPwjJVQ/x3vt6hq4C7wfYIp8/NrDnXK7TWy7OXKPVY1qZfu xYwkGd++PXWMyRfg9UKsE08IpPTvaVFlgIJ6Fm3VR6JmOYMxKvUsR/LqrOGPzRvb gV35md6t0VGt3cg1J8ShV2IlJkIr0b0HW6WcWEDdWijPrmEoIRa7q2wkdhEWpQ65 +dMGmNMuqn0leZ/A3oP1pKDyKZ9ixiZZrSzC0WI33cjxIlqQMyk8SArI8tK305is CMC+ItNcY2xt9Q== -----END CERTIFICATE-----Generated at Thu Dec 25 07:10:24 2025 by rpki-client