This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft File: PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft (raw, json) Hash identifier: W6b8jLtRpSbcxOOYd1KQw6AY9ZS58Ajuf7wDGjCHIqc= Subject key identifier: 11:D4:AE:FD:69:BE:C5:7E:9E:14:60:AC:A2:CD:24:EF:58:90:61:81 Authority key identifier: 3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3 Certificate issuer: /CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3 Certificate serial: 019B3EDAFB6B85FFAED3E885A927BEC629F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft Manifest number: 093F Signing time: Sun 21 Dec 2025 03:01:37 +0000 Manifest this update: Sun 21 Dec 2025 03:01:37 +0000 Manifest next update: Mon 22 Dec 2025 03:01:37 +0000 Files and hashes: 1: PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl (hash: rc+umCcTsnH7WC+U8scnUX93l9o544ewli2DHLtdKgo=) 2: WrzesfgAIkReChvkvHbeme9Obyo.roa (hash: sSRQkO+9/oNieGkByWGhrbGGDkaRr1cGKseQKtOM7es=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:fb:6b:85:ff:ae:d3:e8:85:a9:27:be:c6:29:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3 Validity Not Before: Dec 21 03:01:37 2025 GMT Not After : Dec 22 03:01:37 2025 GMT Subject: CN=11d4aefd69bec57e9e1460aca2cd24ef58906181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:28:e0:71:3f:b3:a8:44:a3:1f:8f:50:9a:8c: d3:e3:99:0c:18:5d:7b:89:c6:13:7e:bb:d5:75:ab: 1d:40:3c:b7:ac:d5:21:e6:00:13:6b:16:21:14:2a: c9:c1:3b:d5:05:ca:32:66:1f:57:4d:2a:da:28:01: 04:7a:fc:87:ee:22:d3:c5:c8:66:d7:04:54:52:9a: b7:19:5f:da:4a:af:ef:21:23:9d:28:b0:b8:70:20: d7:18:d0:27:0d:e5:eb:07:15:95:45:d4:7e:67:19: 88:1d:da:05:fc:b8:7e:59:da:bd:02:49:a6:cd:a2: b9:2d:0d:9c:4c:52:9d:ed:58:c8:1a:bb:81:1f:d9: e4:f0:77:cb:0a:52:da:f7:0a:f6:f9:8c:c4:46:e4: af:5b:eb:db:3d:19:23:c0:39:82:6b:9c:29:ca:38: 1e:ab:33:05:01:6a:de:05:8a:56:3e:b8:8a:41:44: d1:ed:4d:81:97:b7:91:91:34:81:87:ec:c5:bd:f0: 78:9d:fa:db:50:cb:25:17:c4:eb:65:39:9c:13:92: a8:b1:5c:1f:bf:e9:8c:2b:87:79:00:b2:12:39:d3: 58:ff:08:2f:e5:fd:c3:91:99:d7:aa:6f:01:e0:82: 84:c3:50:53:08:a2:51:94:eb:c7:dd:14:f4:57:2d: 80:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:D4:AE:FD:69:BE:C5:7E:9E:14:60:AC:A2:CD:24:EF:58:90:61:81 X509v3 Authority Key Identifier: keyid:3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:93:6e:e7:30:c2:f7:e9:99:21:c6:42:85:ca:ae:56:8f:2e: c4:a9:2d:9d:31:60:60:f7:f9:c9:76:da:ac:f8:f6:f9:0b:5c: 3c:20:ec:f5:31:59:70:88:71:a5:d0:b2:12:a9:ee:dc:22:49: 93:36:33:5e:f4:54:5c:dc:53:17:24:5e:54:dc:c0:f0:fb:9f: 3e:2b:ca:09:9e:fb:92:e8:23:1a:31:cf:10:13:bf:fa:38:e3: 5c:93:50:35:5d:02:6d:29:fb:63:ff:6a:92:8f:74:13:f7:1b: 4b:e7:50:6b:48:1e:93:4b:a6:aa:dd:84:79:12:b4:de:5a:93: 7c:f7:a1:7f:1e:c5:d5:00:45:cf:4f:58:65:18:dc:1f:70:f9: 41:35:ef:58:ad:6f:3b:7c:cc:2f:f2:8a:df:c0:84:95:70:3c: 19:87:e9:f5:c1:5e:1d:21:cd:d0:e7:97:bb:e5:aa:9d:91:52: 86:01:e5:14:a0:1e:4d:b0:e6:b1:31:1b:32:7d:dd:ec:c4:c9: 3a:1e:4d:b9:85:6c:80:9f:fd:e0:ad:33:a1:e3:76:16:80:22: 91:e6:07:d5:0f:64:94:96:34:c9:af:d8:05:fd:ce:e0:89:4d: 00:42:4f:3d:08:77:85:b5:db:18:b0:82:0b:6b:bc:bb:3b:67: f3:3d:53:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2vtrhf+u0+iFqSe+xin5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNDMyNzdiN2NhNzlkMGU5ZTA3ZmM0YTRiMzE4MDQxZGY0 MTVjYjMwHhcNMjUxMjIxMDMwMTM3WhcNMjUxMjIyMDMwMTM3WjAzMTEwLwYDVQQD EygxMWQ0YWVmZDY5YmVjNTdlOWUxNDYwYWNhMmNkMjRlZjU4OTA2MTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSjgcT+zqESjH49QmozT45kMGF17 icYTfrvVdasdQDy3rNUh5gATaxYhFCrJwTvVBcoyZh9XTSraKAEEevyH7iLTxchm 1wRUUpq3GV/aSq/vISOdKLC4cCDXGNAnDeXrBxWVRdR+ZxmIHdoF/Lh+Wdq9Akmm zaK5LQ2cTFKd7VjIGruBH9nk8HfLClLa9wr2+YzERuSvW+vbPRkjwDmCa5wpyjge qzMFAWreBYpWPriKQUTR7U2Bl7eRkTSBh+zFvfB4nfrbUMslF8TrZTmcE5KosVwf v+mMK4d5ALISOdNY/wgv5f3DkZnXqm8B4IKEw1BTCKJRlOvH3RT0Vy2AtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBHUrv1pvsV+nhRgrKLNJO9YkGGBMB8GA1UdIwQY MBaAFD5DJ3t8p50Ongf8SksxgEHfQVyzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGtNbmUzeW5uUTZlQl94S1N6R0FRZDlCWExNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yMjE5NDUtYTc0ZS00Nzc1LWFlYTUt M2NmMmE0NjIyZmJjLzEvUGtNbmUzeW5uUTZlQl94S1N6R0FRZDlCWExNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8yMjE5NDUtYTc0ZS00Nzc1LWFlYTUtM2NmMmE0NjIyZmJj LzEvUGtNbmUzeW5uUTZlQl94S1N6R0FRZDlCWExNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIpNu5zDC 9+mZIcZChcquVo8uxKktnTFgYPf5yXbarPj2+QtcPCDs9TFZcIhxpdCyEqnu3CJJ kzYzXvRUXNxTFyReVNzA8PufPivKCZ77kugjGjHPEBO/+jjjXJNQNV0CbSn7Y/9q ko90E/cbS+dQa0gek0umqt2EeRK03lqTfPehfx7F1QBFz09YZRjcH3D5QTXvWK1v O3zML/KK38CElXA8GYfp9cFeHSHN0OeXu+WqnZFShgHlFKAeTbDmsTEbMn3d7MTJ Oh5NuYVsgJ/94K0zoeN2FoAikeYH1Q9klJY0ya/YBf3O4IlNAEJPPQh3hbXbGLCC C2u8uztn8z1Tnw== -----END CERTIFICATE-----Generated at Sun Dec 21 09:32:15 2025 by rpki-client