This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft File: PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft (raw, json) Hash identifier: BXlOGX7tPDtjgEeLvAx0l7/B+t5YiLb+vmGZkv7JbeY= Subject key identifier: CB:44:AC:48:02:6E:5F:EE:FE:B5:3E:48:84:99:92:57:75:A0:8D:73 Authority key identifier: 3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3 Certificate issuer: /CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3 Certificate serial: 019B657A3DA86738ECB4C572A6325EC30B05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft Manifest number: 0953 Signing time: Sun 28 Dec 2025 15:01:08 +0000 Manifest this update: Sun 28 Dec 2025 15:01:08 +0000 Manifest next update: Mon 29 Dec 2025 15:01:08 +0000 Files and hashes: 1: PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl (hash: BqK2LhDD0M1+CTQqnEf+Cd7gaHrBN+gbH5O6aRMV704=) 2: WrzesfgAIkReChvkvHbeme9Obyo.roa (hash: sSRQkO+9/oNieGkByWGhrbGGDkaRr1cGKseQKtOM7es=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:7a:3d:a8:67:38:ec:b4:c5:72:a6:32:5e:c3:0b:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3 Validity Not Before: Dec 28 15:01:08 2025 GMT Not After : Dec 29 15:01:08 2025 GMT Subject: CN=cb44ac48026e5feefeb53e488499925775a08d73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9c:fd:cf:d3:ab:d1:e0:42:27:47:6a:c2:70: 36:05:1c:39:11:f2:f8:c7:a1:e7:1a:27:ed:39:81: 94:06:c3:c0:8d:e5:8e:55:9d:67:cb:f0:e6:c6:72: 72:0c:8e:32:a2:55:7d:06:74:d5:7e:dd:9c:67:88: da:f8:e1:b8:2d:3b:49:a9:51:cb:66:09:a5:b3:72: 0b:46:46:de:1a:8d:36:35:47:b1:2c:9b:fa:b4:d5: 21:8f:4d:6d:6f:da:d5:c0:62:4a:9d:c8:55:10:fe: 63:3f:7a:73:b6:0b:51:a1:a3:b3:86:4b:ba:f4:d6: 7d:19:eb:66:e1:9c:91:8d:40:43:eb:de:d6:0c:7c: 72:37:e5:d7:70:88:68:38:79:a5:9e:df:6a:71:ca: 47:8c:a6:84:d1:eb:64:c3:69:af:8a:23:23:0e:62: c1:e2:ad:5d:1d:db:2f:b1:fe:86:6d:c9:d5:40:cf: 4c:1a:59:6c:fc:2c:90:37:10:e5:d9:63:47:1a:04: b3:8b:42:43:ca:21:65:c4:2a:1e:ff:4e:eb:c3:ed: 60:4f:44:57:bb:ba:3f:11:83:98:b2:02:5b:db:32: 23:2d:e4:2a:94:6c:f7:72:1d:0e:c1:71:99:a1:05: 0a:26:a6:11:38:63:18:7a:6d:f1:92:7c:10:6c:54: 8a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:44:AC:48:02:6E:5F:EE:FE:B5:3E:48:84:99:92:57:75:A0:8D:73 X509v3 Authority Key Identifier: keyid:3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:9a:69:d5:c7:e9:4f:94:99:c3:22:39:1a:62:f9:a8:d7:4b: 9b:2f:94:ff:d9:ac:36:74:02:c7:58:d7:b8:5a:c0:e0:45:cc: 26:7c:36:8e:0a:35:c8:fe:ff:60:49:8c:9f:2f:90:4e:61:91: 78:d6:d8:16:9f:c8:52:2e:69:1d:cb:8e:6f:c1:1a:66:0a:0c: a9:2a:03:af:67:27:b6:6b:8d:b3:29:0e:3b:e4:e5:78:95:3c: 24:a9:7c:56:3e:4e:f0:aa:3a:ea:18:e2:25:36:71:13:fb:37: f8:58:9a:23:40:52:e1:3c:5d:f9:85:0b:e7:05:e3:a0:e1:c8: 1e:96:34:ca:5d:71:8b:98:8e:68:e2:a9:40:9b:03:87:8f:66: 51:66:31:71:09:a7:2f:a8:3c:6c:c0:91:ff:b8:2f:4c:4b:75: e9:e9:ab:de:21:56:8f:9e:59:1e:28:2b:37:56:7d:a8:7e:e1: 0d:d4:64:66:bf:dc:8c:e6:96:82:7a:e2:ab:a2:9f:77:8a:25: d6:54:e7:d7:d5:8e:69:49:01:02:4a:20:c5:24:02:98:25:66: 4c:0e:4a:88:8e:05:c8:14:a1:cc:f3:7c:1b:53:fb:de:6a:53: 09:6a:8f:ad:fc:ca:15:e2:76:da:f9:93:4f:b8:5b:12:7c:74: f8:ca:c2:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlej2oZzjstMVypjJewwsFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNDMyNzdiN2NhNzlkMGU5ZTA3ZmM0YTRiMzE4MDQxZGY0 MTVjYjMwHhcNMjUxMjI4MTUwMTA4WhcNMjUxMjI5MTUwMTA4WjAzMTEwLwYDVQQD EyhjYjQ0YWM0ODAyNmU1ZmVlZmViNTNlNDg4NDk5OTI1Nzc1YTA4ZDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5z9z9Or0eBCJ0dqwnA2BRw5EfL4 x6HnGiftOYGUBsPAjeWOVZ1ny/DmxnJyDI4yolV9BnTVft2cZ4ja+OG4LTtJqVHL Zgmls3ILRkbeGo02NUexLJv6tNUhj01tb9rVwGJKnchVEP5jP3pztgtRoaOzhku6 9NZ9Getm4ZyRjUBD697WDHxyN+XXcIhoOHmlnt9qccpHjKaE0etkw2mviiMjDmLB 4q1dHdsvsf6GbcnVQM9MGlls/CyQNxDl2WNHGgSzi0JDyiFlxCoe/07rw+1gT0RX u7o/EYOYsgJb2zIjLeQqlGz3ch0OwXGZoQUKJqYROGMYem3xknwQbFSKxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMtErEgCbl/u/rU+SISZkld1oI1zMB8GA1UdIwQY MBaAFD5DJ3t8p50Ongf8SksxgEHfQVyzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGtNbmUzeW5uUTZlQl94S1N6R0FRZDlCWExNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yMjE5NDUtYTc0ZS00Nzc1LWFlYTUt M2NmMmE0NjIyZmJjLzEvUGtNbmUzeW5uUTZlQl94S1N6R0FRZDlCWExNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8yMjE5NDUtYTc0ZS00Nzc1LWFlYTUtM2NmMmE0NjIyZmJj LzEvUGtNbmUzeW5uUTZlQl94S1N6R0FRZDlCWExNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAppp1cfp T5SZwyI5GmL5qNdLmy+U/9msNnQCx1jXuFrA4EXMJnw2jgo1yP7/YEmMny+QTmGR eNbYFp/IUi5pHcuOb8EaZgoMqSoDr2cntmuNsykOO+TleJU8JKl8Vj5O8Ko66hji JTZxE/s3+FiaI0BS4Txd+YUL5wXjoOHIHpY0yl1xi5iOaOKpQJsDh49mUWYxcQmn L6g8bMCR/7gvTEt16emr3iFWj55ZHigrN1Z9qH7hDdRkZr/cjOaWgnriq6Kfd4ol 1lTn19WOaUkBAkogxSQCmCVmTA5KiI4FyBShzPN8G1P73mpTCWqPrfzKFeJ22vmT T7hbEnx0+MrCUg== -----END CERTIFICATE-----Generated at Sun Dec 28 20:14:09 2025 by rpki-client