This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft File: PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft (raw, json) Hash identifier: tCulNX09R5c9RX9VVfy3KF5DKyviVvppB4qan8a5qcE= Subject key identifier: FB:18:D3:26:29:34:B6:B7:B9:66:25:77:B1:31:D9:99:FD:FC:B8:A8 Authority key identifier: 3C:CA:84:9B:37:50:15:F4:33:E9:A2:40:EC:AB:F0:3C:F1:52:C7:81 Certificate issuer: /CN=3cca849b375015f433e9a240ecabf03cf152c781 Certificate serial: 019B514E3F95571057F07E1A85D0AF913587 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft Manifest number: 1790 Signing time: Wed 24 Dec 2025 17:00:40 +0000 Manifest this update: Wed 24 Dec 2025 17:00:40 +0000 Manifest next update: Thu 25 Dec 2025 17:00:40 +0000 Files and hashes: 1: PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl (hash: DqbQNLV1kE+J1g7Iwz62JvqDNai8erY7AVcQEA1VXDs=) 2: tJh122419FX7oJQGYtZtkXOvqn0.roa (hash: 80WcSAxcwtJA+++UZrQ3DpOoXBp5rklUr6m+pRMbNZo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 17:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:4e:3f:95:57:10:57:f0:7e:1a:85:d0:af:91:35:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cca849b375015f433e9a240ecabf03cf152c781 Validity Not Before: Dec 24 17:00:40 2025 GMT Not After : Dec 25 17:00:40 2025 GMT Subject: CN=fb18d3262934b6b7b9662577b131d999fdfcb8a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:29:75:92:be:63:ce:2c:d4:87:a4:f8:0a:e5: 9c:53:74:1d:78:c9:33:20:cd:8e:dc:53:66:6b:18: 1e:0b:2d:c0:2a:59:57:1f:a8:9e:67:b7:24:24:ca: 9e:57:d2:98:cb:4d:46:e1:41:da:83:f7:b3:34:18: 83:fd:6f:f9:7d:4e:0f:99:20:3b:6e:25:30:cf:21: 95:a2:c7:f2:6d:a2:2b:56:86:a1:2d:96:cc:6a:4d: e8:9a:d9:e5:37:65:4d:72:5f:68:6c:3e:33:6b:4c: 41:30:a9:4a:8b:47:6d:ce:55:a9:35:73:1c:c1:c9: 64:1f:04:6d:0b:67:4d:38:41:25:95:d8:69:b3:72: 5b:ce:8e:92:f1:77:53:03:9a:df:cc:9c:6f:ca:ec: 55:46:63:6c:93:e1:70:8d:5c:f3:22:52:44:49:c3: a8:cc:d4:a3:5a:2b:7c:2e:84:20:14:d7:ad:8c:13: a3:0e:41:da:12:52:1e:9c:e2:8a:c5:a7:40:a5:a6: fc:51:ec:9d:4c:55:35:b2:c7:ba:d1:a0:68:9f:08: 2d:e9:42:89:4b:b1:ed:ac:bb:6f:56:63:2a:ce:08: 54:2f:83:16:c1:1a:ee:ff:07:ee:2d:ac:59:a5:08: 3c:5a:70:fc:98:c9:66:9b:6a:e8:fb:8e:61:f7:4c: 80:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:18:D3:26:29:34:B6:B7:B9:66:25:77:B1:31:D9:99:FD:FC:B8:A8 X509v3 Authority Key Identifier: keyid:3C:CA:84:9B:37:50:15:F4:33:E9:A2:40:EC:AB:F0:3C:F1:52:C7:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:e4:91:6f:b6:2b:29:c0:63:20:3b:2f:52:a3:5b:69:9c:97: 1d:45:3b:f2:f4:e1:63:00:1b:91:cb:46:c5:02:f2:99:e1:2d: df:1e:33:e9:bf:2b:d3:3a:05:e0:83:fe:12:31:4a:2f:04:80: 57:f6:66:25:6a:91:17:d4:9f:ce:90:38:63:3d:df:ce:19:28: 70:2d:e2:c4:75:a6:ca:79:67:b6:aa:cc:88:71:c4:4b:9e:b7: d3:f2:70:93:ed:8b:68:d4:18:9f:68:e9:39:5b:71:f1:86:c2: e6:29:10:03:87:2a:2d:cb:ab:d5:07:34:39:9a:2b:b8:aa:47: 6f:8b:af:8e:4f:14:8f:9f:93:91:80:2a:89:a8:91:59:ce:da: c2:e5:2e:65:f1:e8:79:70:2d:94:a4:24:11:7e:17:a1:67:7d: 8a:cc:92:62:0d:23:7e:62:fd:e1:ea:e8:1e:eb:64:e9:95:85: 91:78:ab:c7:7f:91:18:dc:4b:da:94:72:5e:02:3f:10:c0:27: 2c:24:7a:1c:c9:fb:86:5b:8e:fb:39:26:d9:36:c9:9e:1a:ed: af:d7:ab:e6:c8:a8:3f:30:81:80:bd:06:49:ec:11:c6:dc:39: db:72:e3:bd:f3:71:68:04:14:35:d7:bf:14:d3:2a:b3:22:60: 61:ab:cb:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRTj+VVxBX8H4ahdCvkTWHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjY2E4NDliMzc1MDE1ZjQzM2U5YTI0MGVjYWJmMDNjZjE1 MmM3ODEwHhcNMjUxMjI0MTcwMDQwWhcNMjUxMjI1MTcwMDQwWjAzMTEwLwYDVQQD EyhmYjE4ZDMyNjI5MzRiNmI3Yjk2NjI1NzdiMTMxZDk5OWZkZmNiOGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCl1kr5jzizUh6T4CuWcU3QdeMkz IM2O3FNmaxgeCy3AKllXH6ieZ7ckJMqeV9KYy01G4UHag/ezNBiD/W/5fU4PmSA7 biUwzyGVosfybaIrVoahLZbMak3omtnlN2VNcl9obD4za0xBMKlKi0dtzlWpNXMc wclkHwRtC2dNOEElldhps3Jbzo6S8XdTA5rfzJxvyuxVRmNsk+FwjVzzIlJEScOo zNSjWit8LoQgFNetjBOjDkHaElIenOKKxadApab8UeydTFU1sse60aBonwgt6UKJ S7HtrLtvVmMqzghUL4MWwRru/wfuLaxZpQg8WnD8mMlmm2ro+45h90yALwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPsY0yYpNLa3uWYld7Ex2Zn9/LioMB8GA1UdIwQY MBaAFDzKhJs3UBX0M+miQOyr8DzxUseBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUE1xRW16ZFFGZlF6NmFKQTdLdndQUEZTeDRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yNzU2MzYtZmUzZi00NTI4LWJkN2Ut ZDYyNTVmMjUyN2RhLzEvUE1xRW16ZFFGZlF6NmFKQTdLdndQUEZTeDRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8yNzU2MzYtZmUzZi00NTI4LWJkN2UtZDYyNTVmMjUyN2Rh LzEvUE1xRW16ZFFGZlF6NmFKQTdLdndQUEZTeDRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmOSRb7Yr KcBjIDsvUqNbaZyXHUU78vThYwAbkctGxQLymeEt3x4z6b8r0zoF4IP+EjFKLwSA V/ZmJWqRF9SfzpA4Yz3fzhkocC3ixHWmynlntqrMiHHES5630/Jwk+2LaNQYn2jp OVtx8YbC5ikQA4cqLcur1Qc0OZoruKpHb4uvjk8Uj5+TkYAqiaiRWc7awuUuZfHo eXAtlKQkEX4XoWd9isySYg0jfmL94eroHutk6ZWFkXirx3+RGNxL2pRyXgI/EMAn LCR6HMn7hluO+zkm2TbJnhrtr9er5sioPzCBgL0GSewRxtw523LjvfNxaAQUNde/ FNMqsyJgYavLqg== -----END CERTIFICATE-----Generated at Thu Dec 25 01:23:09 2025 by rpki-client