This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft File: PGu5kW2QqkR3ctA_Ce37or3PN5I.mft (raw, json) Hash identifier: lIoMTrS9t34EQDvL8uE45+RM6pNog5+CgSAK+rk/bQQ= Subject key identifier: 6D:53:6C:DF:A7:9D:91:92:BD:57:BC:0D:D9:D3:69:81:AD:33:D9:0F Authority key identifier: 3C:6B:B9:91:6D:90:AA:44:77:72:D0:3F:09:ED:FB:A2:BD:CF:37:92 Certificate issuer: /CN=3c6bb9916d90aa447772d03f09edfba2bdcf3792 Certificate serial: 019B6F8FED94B1D19078AA1DFB7EFDE7C544 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGu5kW2QqkR3ctA_Ce37or3PN5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft Manifest number: 0887 Signing time: Tue 30 Dec 2025 14:01:01 +0000 Manifest this update: Tue 30 Dec 2025 14:01:01 +0000 Manifest next update: Wed 31 Dec 2025 14:01:01 +0000 Files and hashes: 1: PGu5kW2QqkR3ctA_Ce37or3PN5I.crl (hash: wFS36bQ/2BpSzf3WuXxWhtB/i6q/X/nFxuKtOTBZTXY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft rsync://rpki.ripe.net/repository/DEFAULT/PGu5kW2QqkR3ctA_Ce37or3PN5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 14:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:8f:ed:94:b1:d1:90:78:aa:1d:fb:7e:fd:e7:c5:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c6bb9916d90aa447772d03f09edfba2bdcf3792 Validity Not Before: Dec 30 14:01:01 2025 GMT Not After : Dec 31 14:01:01 2025 GMT Subject: CN=6d536cdfa79d9192bd57bc0dd9d36981ad33d90f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:52:57:71:5c:b4:41:c7:33:1c:43:59:c8:1f: 65:f5:31:95:16:ba:b5:42:00:49:d8:82:4a:31:be: 6a:65:04:2f:d2:c5:fd:6c:c5:a6:9e:9c:a5:2c:40: 02:d9:b4:f2:c9:d8:45:98:6d:15:08:f1:cf:89:14: 9d:54:17:5a:21:40:da:35:2b:82:a7:66:e7:30:32: d6:66:f5:06:a6:6e:ca:65:b7:03:6a:51:49:f4:0e: 83:1d:1e:4b:b5:b8:dd:c1:1b:95:e4:d8:0f:79:42: 9f:8c:a9:dd:a7:16:1a:11:8c:f2:9b:a1:22:ba:b9: cf:1d:25:e2:bc:16:33:b7:cd:c6:a6:30:02:08:0e: 55:1e:16:de:a3:f6:17:61:0d:a8:10:35:98:b6:ee: ac:85:d5:5b:94:3b:c4:e7:95:5c:42:7d:a3:8d:3e: 9e:fa:16:f5:f5:bf:eb:a6:32:91:30:19:9d:a7:44: 27:3f:de:44:bc:32:6b:84:22:9c:b9:61:e5:7a:6c: 35:ab:c6:6f:a9:cd:42:c3:c7:61:9f:f7:8b:ff:76: 05:7f:96:ec:a0:35:06:a6:89:4a:59:9a:99:b7:e6: 50:9a:8c:65:1b:8e:04:98:6c:92:8c:65:5f:e1:cb: fd:2b:e2:e2:bc:cf:a7:1f:32:84:a4:61:93:ee:7f: f9:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:53:6C:DF:A7:9D:91:92:BD:57:BC:0D:D9:D3:69:81:AD:33:D9:0F X509v3 Authority Key Identifier: keyid:3C:6B:B9:91:6D:90:AA:44:77:72:D0:3F:09:ED:FB:A2:BD:CF:37:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGu5kW2QqkR3ctA_Ce37or3PN5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:fc:d7:ba:70:ce:26:76:7f:66:da:ed:e0:09:4c:ec:38:ac: 27:8d:79:fc:f2:99:95:49:36:7b:0e:0e:66:2d:46:ea:15:ad: 52:0a:54:9a:05:5f:34:00:65:2d:33:c4:1f:f3:c4:9d:ec:ba: 91:dd:74:7a:7e:92:76:e3:08:28:8e:65:41:20:fc:31:17:9e: e5:fb:9a:c8:90:7f:d2:72:23:ce:8f:73:a2:b0:89:89:cf:9c: 38:79:6f:3c:88:e2:a1:08:aa:94:44:20:cf:ac:38:72:7d:c1: 0d:04:4a:34:3c:af:74:70:c1:2f:4e:dd:9b:99:d4:6f:33:b2: 36:2f:13:3a:8e:1e:a3:70:b6:61:7f:3e:13:1c:63:1a:33:24: 27:5d:c3:87:ab:55:81:60:e1:ca:23:0c:d3:a6:5e:ba:17:38: 94:ac:09:64:e0:14:4d:b8:11:b2:5b:84:38:7b:1c:e5:ba:ba: 33:fe:0b:9a:cb:d6:6a:65:58:12:40:2d:27:6e:a0:ab:ca:3d: bf:2e:d0:0b:fe:fe:b3:9e:e9:19:8c:fb:53:5c:bb:ba:bd:b9: 87:88:63:08:e8:94:8b:c0:a3:55:24:71:5b:e9:f8:94:ff:1d: 16:4e:34:71:78:7f:b2:64:70:f7:e5:08:f2:f9:81:2a:80:08: 6e:cd:ad:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtvj+2UsdGQeKod+37958VEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjNmJiOTkxNmQ5MGFhNDQ3NzcyZDAzZjA5ZWRmYmEyYmRj ZjM3OTIwHhcNMjUxMjMwMTQwMTAxWhcNMjUxMjMxMTQwMTAxWjAzMTEwLwYDVQQD Eyg2ZDUzNmNkZmE3OWQ5MTkyYmQ1N2JjMGRkOWQzNjk4MWFkMzNkOTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFJXcVy0QcczHENZyB9l9TGVFrq1 QgBJ2IJKMb5qZQQv0sX9bMWmnpylLEAC2bTyydhFmG0VCPHPiRSdVBdaIUDaNSuC p2bnMDLWZvUGpm7KZbcDalFJ9A6DHR5LtbjdwRuV5NgPeUKfjKndpxYaEYzym6Ei urnPHSXivBYzt83GpjACCA5VHhbeo/YXYQ2oEDWYtu6shdVblDvE55VcQn2jjT6e +hb19b/rpjKRMBmdp0QnP95EvDJrhCKcuWHlemw1q8Zvqc1Cw8dhn/eL/3YFf5bs oDUGpolKWZqZt+ZQmoxlG44EmGySjGVf4cv9K+LivM+nHzKEpGGT7n/56wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG1TbN+nnZGSvVe8DdnTaYGtM9kPMB8GA1UdIwQY MBaAFDxruZFtkKpEd3LQPwnt+6K9zzeSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEd1NWtXMlFxa1IzY3RBX0NlMzdvcjNQTjVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8zY2Y5ZWUtODY3Zi00MjE0LWEzOTQt Y2JlOTIwN2NmNTRlLzEvUEd1NWtXMlFxa1IzY3RBX0NlMzdvcjNQTjVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8zY2Y5ZWUtODY3Zi00MjE0LWEzOTQtY2JlOTIwN2NmNTRl LzEvUEd1NWtXMlFxa1IzY3RBX0NlMzdvcjNQTjVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxPzXunDO JnZ/Ztrt4AlM7DisJ415/PKZlUk2ew4OZi1G6hWtUgpUmgVfNABlLTPEH/PEney6 kd10en6SduMIKI5lQSD8MRee5fuayJB/0nIjzo9zorCJic+cOHlvPIjioQiqlEQg z6w4cn3BDQRKNDyvdHDBL07dm5nUbzOyNi8TOo4eo3C2YX8+ExxjGjMkJ13Dh6tV gWDhyiMM06Zeuhc4lKwJZOAUTbgRsluEOHsc5bq6M/4LmsvWamVYEkAtJ26gq8o9 vy7QC/7+s57pGYz7U1y7ur25h4hjCOiUi8CjVSRxW+n4lP8dFk40cXh/smRw9+UI 8vmBKoAIbs2tsQ== -----END CERTIFICATE-----Generated at Tue Dec 30 21:59:52 2025 by rpki-client