This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft File: pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft (raw, json) Hash identifier: ChtGt+xqo8OyXQV1fQrgwooppNRPEwsxD/RwqoLW1z8= Subject key identifier: C0:B6:64:25:C3:3F:AE:6D:1A:F3:61:B2:8E:EE:35:EE:67:57:BE:99 Authority key identifier: A4:F5:53:3A:52:7B:26:4C:A2:E8:37:32:85:D7:80:D3:3A:2B:D0:A1 Certificate issuer: /CN=a4f5533a527b264ca2e8373285d780d33a2bd0a1 Certificate serial: 019B50A9914B49E05E461697BFF2AEF366F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft Manifest number: 0426 Signing time: Wed 24 Dec 2025 14:00:48 +0000 Manifest this update: Wed 24 Dec 2025 14:00:48 +0000 Manifest next update: Thu 25 Dec 2025 14:00:48 +0000 Files and hashes: 1: aU9nU6J43VKML7pOttC9ZY6jQ98.roa (hash: FbRy0Mzafv2hiOEuNsxPoMw70K3GoSJZXHuz7LnmQeE=) 2: pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl (hash: MQRZLyF9J1mPjUH7W1t1M8FxB6EPd9Im5VGeHKiIMCw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:a9:91:4b:49:e0:5e:46:16:97:bf:f2:ae:f3:66:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4f5533a527b264ca2e8373285d780d33a2bd0a1 Validity Not Before: Dec 24 14:00:48 2025 GMT Not After : Dec 25 14:00:48 2025 GMT Subject: CN=c0b66425c33fae6d1af361b28eee35ee6757be99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:35:a5:e3:c7:30:66:34:90:ff:95:0b:62:e5: da:ab:1a:09:89:c5:0b:8c:1b:fc:57:38:d6:6a:9c: a1:05:b7:d1:11:70:f9:01:b8:e9:9b:72:eb:32:72: ff:c1:05:a6:aa:e5:e1:ed:b1:8b:4a:39:3c:c0:57: 2a:c4:33:93:fc:a6:84:54:26:69:8c:2f:6a:ab:f8: 11:99:61:01:74:f0:ee:c5:7a:99:d5:7c:1a:4c:6a: 7d:48:ef:a1:6e:7a:50:9d:c8:83:1f:b9:16:9d:10: 78:a6:85:29:5e:50:0a:ba:55:30:b7:32:3d:0e:b2: 17:56:d9:51:16:4d:d5:3a:69:c8:58:16:37:f6:d3: aa:7c:4b:11:2b:32:dc:6d:ad:d4:93:ab:83:42:f4: 08:bf:3c:1a:0a:ec:68:29:5d:ed:dd:ba:c7:06:2e: 09:26:97:44:0c:75:8b:db:88:64:cb:32:dc:6d:0a: d3:0b:ec:2c:3e:50:0e:0b:68:32:64:55:3b:39:e2: b5:c5:7f:64:9c:51:50:75:5e:99:d5:67:7b:26:36: b0:d2:c8:c3:fd:0d:ab:10:5f:74:55:96:7d:2f:99: 90:74:fc:15:cd:45:b5:21:31:37:87:0d:bc:78:65: 3e:f0:71:0c:68:6a:aa:f4:78:71:00:92:a6:6a:3e: 03:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:B6:64:25:C3:3F:AE:6D:1A:F3:61:B2:8E:EE:35:EE:67:57:BE:99 X509v3 Authority Key Identifier: keyid:A4:F5:53:3A:52:7B:26:4C:A2:E8:37:32:85:D7:80:D3:3A:2B:D0:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:c5:f0:93:b7:4e:e4:72:bf:f1:76:de:89:a6:19:cf:6b:29: 35:aa:e7:1d:ce:ce:51:d6:c0:86:24:91:c0:70:f7:d2:08:51: ea:3e:87:7b:54:6d:e2:e0:6d:32:00:11:82:15:ee:e7:fc:8e: 32:32:7d:48:8f:7b:65:7e:e7:ef:40:02:9b:76:70:3d:8d:a2: 3a:b8:86:da:6a:7e:ea:38:5b:9e:33:24:d1:a0:6e:93:44:3d: bc:9b:6a:b8:1c:b8:f6:3f:f9:a7:a4:a5:ad:13:19:4b:21:af: ab:b1:a3:71:c0:90:2f:58:b1:9f:21:dc:aa:2e:40:89:16:65: 7b:8e:33:e9:f0:ea:fb:b1:1c:d0:43:f9:95:98:62:32:9c:a2: 68:f0:59:2c:4a:73:d0:fb:63:1a:6a:7c:cb:b3:1d:7c:dc:25: 82:98:56:8a:fa:1d:ad:c6:0c:6b:ba:a1:f1:5c:f0:9b:6e:d5: 65:ff:3f:0b:c9:ee:f9:e0:b9:d2:37:93:ee:1a:ac:73:89:60: 70:1e:d6:55:fc:81:88:e4:b8:da:f1:8d:26:14:a7:05:c4:a1: 13:21:97:32:5d:8c:16:91:9c:a6:35:f4:1c:11:28:ff:c2:0f: 35:0c:ce:33:02:21:a5:79:2e:b9:32:dc:77:0f:f1:38:87:23: 73:8f:d5:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQqZFLSeBeRhaXv/Ku82b2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZjU1MzNhNTI3YjI2NGNhMmU4MzczMjg1ZDc4MGQzM2Ey YmQwYTEwHhcNMjUxMjI0MTQwMDQ4WhcNMjUxMjI1MTQwMDQ4WjAzMTEwLwYDVQQD EyhjMGI2NjQyNWMzM2ZhZTZkMWFmMzYxYjI4ZWVlMzVlZTY3NTdiZTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDWl48cwZjSQ/5ULYuXaqxoJicUL jBv8VzjWapyhBbfREXD5Abjpm3LrMnL/wQWmquXh7bGLSjk8wFcqxDOT/KaEVCZp jC9qq/gRmWEBdPDuxXqZ1XwaTGp9SO+hbnpQnciDH7kWnRB4poUpXlAKulUwtzI9 DrIXVtlRFk3VOmnIWBY39tOqfEsRKzLcba3Uk6uDQvQIvzwaCuxoKV3t3brHBi4J JpdEDHWL24hkyzLcbQrTC+wsPlAOC2gyZFU7OeK1xX9knFFQdV6Z1Wd7Jjaw0sjD /Q2rEF90VZZ9L5mQdPwVzUW1ITE3hw28eGU+8HEMaGqq9HhxAJKmaj4DWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMC2ZCXDP65tGvNhso7uNe5nV76ZMB8GA1UdIwQY MBaAFKT1UzpSeyZMoug3MoXXgNM6K9ChMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFBWVE9sSjdKa3lpNkRjeWhkZUEwem9yMEtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9hZmMzYzgtZTk1Mi00MDcwLWE1NDYt NDI0NDYyYmM5NDliLzEvcFBWVE9sSjdKa3lpNkRjeWhkZUEwem9yMEtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9hZmMzYzgtZTk1Mi00MDcwLWE1NDYtNDI0NDYyYmM5NDli LzEvcFBWVE9sSjdKa3lpNkRjeWhkZUEwem9yMEtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS8Xwk7dO 5HK/8XbeiaYZz2spNarnHc7OUdbAhiSRwHD30ghR6j6He1Rt4uBtMgARghXu5/yO MjJ9SI97ZX7n70ACm3ZwPY2iOriG2mp+6jhbnjMk0aBuk0Q9vJtquBy49j/5p6Sl rRMZSyGvq7GjccCQL1ixnyHcqi5AiRZle44z6fDq+7Ec0EP5lZhiMpyiaPBZLEpz 0PtjGmp8y7MdfNwlgphWivodrcYMa7qh8Vzwm27VZf8/C8nu+eC50jeT7hqsc4lg cB7WVfyBiOS42vGNJhSnBcShEyGXMl2MFpGcpjX0HBEo/8IPNQzOMwIhpXkuuTLc dw/xOIcjc4/VlQ== -----END CERTIFICATE-----Generated at Wed Dec 24 18:06:46 2025 by rpki-client