This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft File: PcI-io7JOWsbVM_7JxxVdm2UkZk.mft (raw, json) Hash identifier: Fez2srFFvIVWfOOMUz8mlJs8i6Gh6Gva5v13M5emzSQ= Subject key identifier: F6:E0:AF:CE:D6:B9:2E:48:6B:36:C7:42:AE:C8:67:84:FB:00:A2:96 Authority key identifier: 3D:C2:3E:8A:8E:C9:39:6B:1B:54:CF:FB:27:1C:55:76:6D:94:91:99 Certificate issuer: /CN=3dc23e8a8ec9396b1b54cffb271c55766d949199 Certificate serial: 019B3D90D4E78BFC1C90A98838F4F2130C9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft Manifest number: 12F1 Signing time: Sat 20 Dec 2025 21:01:00 +0000 Manifest this update: Sat 20 Dec 2025 21:01:00 +0000 Manifest next update: Sun 21 Dec 2025 21:01:00 +0000 Files and hashes: 1: 1-dSijOlomtrsqkND-2jGvkzEh1s.roa (hash: vAMtZ2jKMP2IiV0cN+Yk3wrsh8M5v/wTw365APu16Sc=) 2: PcI-io7JOWsbVM_7JxxVdm2UkZk.crl (hash: De79bE3NbZOh4sKWRNZ6/uF7UdwHJDbu43jcVJd7VvE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 21:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:d4:e7:8b:fc:1c:90:a9:88:38:f4:f2:13:0c:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3dc23e8a8ec9396b1b54cffb271c55766d949199 Validity Not Before: Dec 20 21:01:00 2025 GMT Not After : Dec 21 21:01:00 2025 GMT Subject: CN=f6e0afced6b92e486b36c742aec86784fb00a296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:5d:e5:de:1f:d5:ac:a8:da:46:e0:37:c3:78: 29:88:5e:55:20:9b:14:79:45:1d:b2:7b:1d:7d:f8: 73:c0:05:34:34:04:9f:bb:bc:5d:15:9b:8d:d3:d4: 22:f6:08:97:b9:6d:97:50:45:2f:ae:79:d1:38:f4: 24:68:f8:37:67:fb:4c:63:f9:eb:38:35:cf:e8:af: 9a:db:49:29:2d:7a:89:11:da:2f:25:24:55:7c:d0: ab:73:e4:40:09:33:02:11:6f:85:0a:83:29:19:a2: 31:94:7c:55:99:a9:b1:71:28:8e:88:83:f8:dc:bf: cd:76:f1:3c:15:c8:a3:53:b9:cc:db:c5:d3:62:61: f5:3d:65:a9:ce:c4:2a:ad:3a:01:f2:41:4f:76:86: 54:46:bd:95:ae:63:c2:a0:c8:c9:b0:70:db:83:d6: 34:6c:3c:2a:0b:b9:c6:2d:78:a4:8f:ab:00:db:d8: b4:e3:34:1c:47:91:a1:e8:b0:d9:a8:e9:b8:c7:f6: 12:71:5b:99:0d:c0:47:2f:d9:87:8e:91:c6:d0:e4: ff:77:2b:75:5e:0f:ed:93:6a:67:60:9d:0e:30:d4: a5:81:4a:b1:1a:26:65:65:4c:fc:1c:e3:d0:10:28: 5b:c4:0f:42:e0:55:0c:27:e4:44:93:b0:d3:5a:75: b0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:E0:AF:CE:D6:B9:2E:48:6B:36:C7:42:AE:C8:67:84:FB:00:A2:96 X509v3 Authority Key Identifier: keyid:3D:C2:3E:8A:8E:C9:39:6B:1B:54:CF:FB:27:1C:55:76:6D:94:91:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:e6:bf:cf:a9:99:bf:ac:60:24:9f:02:6e:8d:b8:ab:3e:38: 1a:d9:49:94:66:e0:0e:76:80:09:d0:57:a9:1b:25:99:98:05: 1b:74:93:5a:db:30:9c:a6:7b:60:b4:dc:76:ae:f2:fc:46:0e: 74:eb:c1:69:80:46:b5:17:c7:df:2b:2c:26:f7:28:f8:76:24: 1c:19:de:07:88:1c:96:0c:88:a0:bd:38:ee:45:3d:74:12:ae: 76:56:29:11:58:9c:e1:4b:68:56:de:a4:7e:42:07:b3:11:30: 28:f0:20:17:d6:cc:43:d7:12:bb:b9:04:f8:aa:3c:c2:af:15: 6b:4c:97:0f:5e:e4:51:d6:10:ba:fc:fa:a4:6c:43:28:12:9f: e1:5a:e7:42:e4:51:99:e1:c7:ca:af:c7:2b:58:be:5a:3a:dd: 6d:40:91:45:0e:a7:49:11:3a:18:be:eb:4b:62:c0:e1:bb:2b: 27:f7:0a:49:f7:10:5b:b3:96:c1:4a:ad:4b:36:d5:94:7c:7b: d0:9f:e9:de:8f:e6:49:6a:11:97:3a:29:ae:cc:27:bc:61:cc: 5a:2e:cb:54:46:49:62:28:ef:af:95:2c:e5:46:e9:43:68:59: ff:0c:d6:a7:6d:16:89:1d:4c:5a:85:57:66:a8:e1:89:cf:fe: 3d:39:2c:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kNTni/wckKmIOPTyEwybMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkYzIzZThhOGVjOTM5NmIxYjU0Y2ZmYjI3MWM1NTc2NmQ5 NDkxOTkwHhcNMjUxMjIwMjEwMTAwWhcNMjUxMjIxMjEwMTAwWjAzMTEwLwYDVQQD EyhmNmUwYWZjZWQ2YjkyZTQ4NmIzNmM3NDJhZWM4Njc4NGZiMDBhMjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkV3l3h/VrKjaRuA3w3gpiF5VIJsU eUUdsnsdffhzwAU0NASfu7xdFZuN09Qi9giXuW2XUEUvrnnROPQkaPg3Z/tMY/nr ODXP6K+a20kpLXqJEdovJSRVfNCrc+RACTMCEW+FCoMpGaIxlHxVmamxcSiOiIP4 3L/NdvE8FcijU7nM28XTYmH1PWWpzsQqrToB8kFPdoZURr2VrmPCoMjJsHDbg9Y0 bDwqC7nGLXikj6sA29i04zQcR5Gh6LDZqOm4x/YScVuZDcBHL9mHjpHG0OT/dyt1 Xg/tk2pnYJ0OMNSlgUqxGiZlZUz8HOPQEChbxA9C4FUMJ+REk7DTWnWw+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPbgr87WuS5IazbHQq7IZ4T7AKKWMB8GA1UdIwQY MBaAFD3CPoqOyTlrG1TP+yccVXZtlJGZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGNJLWlvN0pPV3NiVk1fN0p4eFZkbTJVa1prLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9kMWNmZDctOThkMy00M2I5LTk4MWUt YzBkZDQ3NzFjMmFhLzEvUGNJLWlvN0pPV3NiVk1fN0p4eFZkbTJVa1prLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9kMWNmZDctOThkMy00M2I5LTk4MWUtYzBkZDQ3NzFjMmFh LzEvUGNJLWlvN0pPV3NiVk1fN0p4eFZkbTJVa1prLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXua/z6mZ v6xgJJ8Cbo24qz44GtlJlGbgDnaACdBXqRslmZgFG3STWtswnKZ7YLTcdq7y/EYO dOvBaYBGtRfH3yssJvco+HYkHBneB4gclgyIoL047kU9dBKudlYpEVic4UtoVt6k fkIHsxEwKPAgF9bMQ9cSu7kE+Ko8wq8Va0yXD17kUdYQuvz6pGxDKBKf4VrnQuRR meHHyq/HK1i+WjrdbUCRRQ6nSRE6GL7rS2LA4bsrJ/cKSfcQW7OWwUqtSzbVlHx7 0J/p3o/mSWoRlzoprswnvGHMWi7LVEZJYijvr5Us5UbpQ2hZ/wzWp20WiR1MWoVX Zqjhic/+PTksmg== -----END CERTIFICATE-----Generated at Sun Dec 21 05:40:11 2025 by rpki-client