This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft File: PcOGJxwOCo0B-xkNaNhf92TRatQ.mft (raw, json) Hash identifier: tuRaOtsI+aIoMeiRfDGlcWe/5cfqmuWyOCxNlYbhlSo= Subject key identifier: 88:6D:5F:AA:C1:10:19:7D:70:54:56:3C:41:DB:AC:69:FE:C5:4E:C0 Authority key identifier: 3D:C3:86:27:1C:0E:0A:8D:01:FB:19:0D:68:D8:5F:F7:64:D1:6A:D4 Certificate issuer: /CN=3dc386271c0e0a8d01fb190d68d85ff764d16ad4 Certificate serial: 019B3F7EEBB2514F8E5CFA1478DC2E04C5EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft Manifest number: 0566 Signing time: Sun 21 Dec 2025 06:00:41 +0000 Manifest this update: Sun 21 Dec 2025 06:00:41 +0000 Manifest next update: Mon 22 Dec 2025 06:00:41 +0000 Files and hashes: 1: PcOGJxwOCo0B-xkNaNhf92TRatQ.crl (hash: nN4Zx4Q+HmVx0F5ups+FW7asS7cgKFqKPLLBBhP+jcc=) 2: dA9mnK7u8SrMJvStuVXROxjQcrs.roa (hash: JKT3V8fX4yHMnqh46H6Ra4xfMdM8EBf4akbaDFvA95s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7e:eb:b2:51:4f:8e:5c:fa:14:78:dc:2e:04:c5:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3dc386271c0e0a8d01fb190d68d85ff764d16ad4 Validity Not Before: Dec 21 06:00:41 2025 GMT Not After : Dec 22 06:00:41 2025 GMT Subject: CN=886d5faac110197d7054563c41dbac69fec54ec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:20:fc:a1:ae:b4:1d:26:9f:2a:a6:3f:d0:85: 8a:df:d7:51:9e:bf:70:c3:64:b3:e4:3b:30:96:04: 19:b0:1e:62:78:10:aa:4f:7f:0a:d0:2b:08:76:63: d3:b4:e6:08:2e:1c:02:df:b0:a2:b4:45:11:82:c0: 7d:6f:d5:7d:95:bd:65:2a:58:65:90:5a:35:bf:51: e0:63:ef:75:73:ab:dc:f6:78:a9:91:75:a3:a0:c5: d0:34:bc:04:ed:cf:82:fd:8f:f7:ce:38:c6:b4:ca: 6e:34:29:eb:49:06:44:0a:94:43:5b:51:12:77:f4: df:46:0d:2c:20:a5:95:5c:92:7b:cd:43:5c:37:da: a5:af:65:7e:b3:2d:ca:c8:70:95:ce:69:a7:26:5a: ef:bf:db:8c:63:3e:0f:94:d0:90:64:6d:18:09:14: 79:85:59:07:83:29:b3:fe:d0:60:09:89:8f:c2:c1: 43:4f:e5:3a:90:2a:33:48:f8:39:c6:9a:52:71:ca: 61:77:3f:c9:34:6e:b2:79:3a:a6:b3:0d:a2:9c:6b: b0:16:f2:1e:b3:1a:34:e6:af:e0:d1:32:9f:59:32: f6:ee:cf:fd:b3:24:eb:fe:f1:c1:43:1e:1c:4e:55: cf:06:58:76:c9:6f:68:5e:45:5c:31:20:88:db:b4: 1b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:6D:5F:AA:C1:10:19:7D:70:54:56:3C:41:DB:AC:69:FE:C5:4E:C0 X509v3 Authority Key Identifier: keyid:3D:C3:86:27:1C:0E:0A:8D:01:FB:19:0D:68:D8:5F:F7:64:D1:6A:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:db:fb:61:7c:21:ba:f0:f0:5c:a5:d2:4f:53:bb:ab:dc:a2: f5:99:64:25:74:d2:62:77:9e:cc:22:fa:26:55:e9:65:6d:81: 14:58:cc:38:2f:93:17:01:8e:82:14:bf:d2:56:3d:cc:89:78: f0:77:37:c5:d0:c9:d3:d0:d8:9a:a9:d5:f8:c1:f8:c3:5f:ea: a1:6e:ee:94:36:b4:42:13:50:23:ff:2e:90:6f:e9:e7:99:ba: a6:c8:db:b2:d6:15:0f:45:17:4b:f3:af:fb:3a:f9:a0:a5:6f: bd:a5:29:cc:07:67:bb:2e:9e:86:47:4e:3a:5e:08:57:3f:d1: f0:a4:88:3c:02:b0:29:6e:42:3a:d5:c2:66:04:cd:40:8d:9c: ee:70:dc:9b:b2:2c:1d:5c:84:1c:74:96:1d:8f:16:6e:f4:be: 06:5d:4b:b6:d2:ae:97:6b:74:18:14:c7:0e:cb:b8:69:92:7b: 1b:6e:2d:a2:46:3b:90:be:4e:63:a4:3b:7f:0e:9e:08:0a:b9: a7:27:03:39:f4:35:44:0c:db:68:f4:39:5a:e1:93:c6:71:a2: 48:3a:d5:67:32:a2:5e:09:d1:f3:9c:4c:cd:b3:3b:0b:aa:c3: cb:2d:5b:ad:d4:b3:da:a5:df:fe:e9:7d:a0:32:b9:7e:b6:2b: dc:08:5a:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fuuyUU+OXPoUeNwuBMXvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkYzM4NjI3MWMwZTBhOGQwMWZiMTkwZDY4ZDg1ZmY3NjRk MTZhZDQwHhcNMjUxMjIxMDYwMDQxWhcNMjUxMjIyMDYwMDQxWjAzMTEwLwYDVQQD Eyg4ODZkNWZhYWMxMTAxOTdkNzA1NDU2M2M0MWRiYWM2OWZlYzU0ZWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiD8oa60HSafKqY/0IWK39dRnr9w w2Sz5DswlgQZsB5ieBCqT38K0CsIdmPTtOYILhwC37CitEURgsB9b9V9lb1lKlhl kFo1v1HgY+91c6vc9nipkXWjoMXQNLwE7c+C/Y/3zjjGtMpuNCnrSQZECpRDW1ES d/TfRg0sIKWVXJJ7zUNcN9qlr2V+sy3KyHCVzmmnJlrvv9uMYz4PlNCQZG0YCRR5 hVkHgymz/tBgCYmPwsFDT+U6kCozSPg5xppSccphdz/JNG6yeTqmsw2inGuwFvIe sxo05q/g0TKfWTL27s/9syTr/vHBQx4cTlXPBlh2yW9oXkVcMSCI27QbkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIhtX6rBEBl9cFRWPEHbrGn+xU7AMB8GA1UdIwQY MBaAFD3DhiccDgqNAfsZDWjYX/dk0WrUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGNPR0p4d09DbzBCLXhrTmFOaGY5MlRSYXRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9mMjY0YmItZWZkZC00NDk3LWJjMTAt ZGRmZWYzYzZhZDllLzEvUGNPR0p4d09DbzBCLXhrTmFOaGY5MlRSYXRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9mMjY0YmItZWZkZC00NDk3LWJjMTAtZGRmZWYzYzZhZDll LzEvUGNPR0p4d09DbzBCLXhrTmFOaGY5MlRSYXRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFdv7YXwh uvDwXKXST1O7q9yi9ZlkJXTSYneezCL6JlXpZW2BFFjMOC+TFwGOghS/0lY9zIl4 8Hc3xdDJ09DYmqnV+MH4w1/qoW7ulDa0QhNQI/8ukG/p55m6psjbstYVD0UXS/Ov +zr5oKVvvaUpzAdnuy6ehkdOOl4IVz/R8KSIPAKwKW5COtXCZgTNQI2c7nDcm7Is HVyEHHSWHY8WbvS+Bl1LttKul2t0GBTHDsu4aZJ7G24tokY7kL5OY6Q7fw6eCAq5 pycDOfQ1RAzbaPQ5WuGTxnGiSDrVZzKiXgnR85xMzbM7C6rDyy1brdSz2qXf/ul9 oDK5frYr3AhaAQ== -----END CERTIFICATE-----Generated at Sun Dec 21 09:54:14 2025 by rpki-client