This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft File: Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft (raw, json) Hash identifier: bLrW9zXPH3NrYVuzByCIwL0K4uJFwH+3ANvbkxoS9yc= Subject key identifier: 9D:F2:8D:DF:CC:AB:19:E3:FB:6E:58:B2:0F:BB:C8:80:21:85:59:A7 Authority key identifier: 3D:EA:ED:ED:A1:05:D7:E9:12:9A:9B:0C:E5:6B:9B:FC:B9:C6:73:94 Certificate issuer: /CN=3deaededa105d7e9129a9b0ce56b9bfcb9c67394 Certificate serial: 019B3DFEB11FC48DFF9770D8A5E27AE2F72B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft Manifest number: 1031 Signing time: Sat 20 Dec 2025 23:01:00 +0000 Manifest this update: Sat 20 Dec 2025 23:01:00 +0000 Manifest next update: Sun 21 Dec 2025 23:01:00 +0000 Files and hashes: 1: FcNY2ovl7yF-URMS0Ey2NMjx_wo.roa (hash: u+b9OZLTWgc4ylA+6a19u9K+8czzP5mhCM7NuK4dmF4=) 2: Pert7aEF1-kSmpsM5Wub_LnGc5Q.crl (hash: k4KYws8izQzNdOz3oYXbEHOm0a2fiVt7lVPQQsBC4Is=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:b1:1f:c4:8d:ff:97:70:d8:a5:e2:7a:e2:f7:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3deaededa105d7e9129a9b0ce56b9bfcb9c67394 Validity Not Before: Dec 20 23:01:00 2025 GMT Not After : Dec 21 23:01:00 2025 GMT Subject: CN=9df28ddfccab19e3fb6e58b20fbbc880218559a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a7:42:e3:4a:06:a7:e7:7a:e6:2e:c3:4a:3d: 8c:f5:0c:a7:1d:f8:d3:dc:8a:9d:50:ff:66:50:20: 91:ea:dd:a2:2e:ea:c4:e7:e3:23:8e:5f:b6:13:69: 1e:3f:4c:f6:49:42:de:30:98:3b:3f:e2:02:f3:2d: b4:d0:dc:99:34:6b:e5:3d:be:e8:3a:ac:6d:c5:b4: d3:52:34:37:7f:d8:69:ce:93:68:0b:c7:03:d2:49: 59:c6:ed:2c:3d:36:b6:85:8b:99:75:d6:45:9e:f0: 08:d5:ea:e4:a6:c9:4b:4b:c1:a0:20:d4:01:d2:b0: f9:71:74:69:51:91:6c:0f:b1:eb:54:b4:af:fe:95: de:f2:c0:e9:3e:e3:46:23:70:39:9b:4d:af:38:d9: 20:e7:4d:ae:30:43:0a:b1:5a:38:f2:88:97:a2:c6: 19:c9:44:23:98:c6:f5:5b:ee:ca:2e:b8:47:0a:15: de:3a:f6:03:94:5a:c2:66:aa:91:39:c4:03:d2:04: 86:32:e3:a2:d3:37:f7:e4:8c:58:d3:56:12:83:4d: 69:bd:55:3c:11:a9:61:0e:b2:ee:c6:9a:45:85:ba: 72:f0:ad:30:d6:be:29:7b:dc:85:a9:84:b3:9b:04: 5a:8d:ab:44:a9:b5:48:01:91:e5:da:c6:77:04:22: eb:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:F2:8D:DF:CC:AB:19:E3:FB:6E:58:B2:0F:BB:C8:80:21:85:59:A7 X509v3 Authority Key Identifier: keyid:3D:EA:ED:ED:A1:05:D7:E9:12:9A:9B:0C:E5:6B:9B:FC:B9:C6:73:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:24:1a:81:03:31:33:41:14:3c:ad:6e:8f:17:8a:00:2b:1e: ea:11:95:1f:64:88:5c:dc:15:0a:0a:38:f4:c1:01:ba:89:f4: 2d:da:cb:21:e6:ed:d7:ae:46:5f:cc:0c:e5:37:06:ca:26:65: b8:88:53:31:95:39:5d:68:b0:1e:b3:15:c8:10:44:78:3c:1b: bf:a4:c3:a2:29:5b:0d:e0:38:ce:e1:92:3a:c6:24:6d:24:2e: e1:73:53:55:8e:ed:7e:a2:ac:1d:4c:8f:76:85:16:59:b8:a7: 4e:82:cd:74:b4:54:18:db:43:6b:6b:e2:0e:ef:d1:47:75:86: 86:4e:2b:7c:d8:70:3b:5d:2f:f7:ff:2d:a4:c6:b9:0e:d2:a0: b7:cb:8b:3d:d6:bb:b5:c1:fd:c9:e7:08:ed:9c:ac:37:61:27: 95:31:72:16:1b:b6:7b:0c:b7:9f:1a:8a:c0:94:a8:db:f9:21: a1:ef:fe:8b:cf:56:e3:3b:53:11:ef:a3:4d:88:b1:66:dc:5a: d7:01:78:a2:63:72:38:b4:50:97:07:05:c4:13:db:62:a9:e7: f5:0b:11:74:21:2c:2d:05:18:40:0c:24:c6:f3:cf:32:97:8b: a3:3d:77:97:fe:60:09:78:81:66:30:5e:f7:8d:a0:2a:12:6a: 89:64:ad:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/rEfxI3/l3DYpeJ64vcrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkZWFlZGVkYTEwNWQ3ZTkxMjlhOWIwY2U1NmI5YmZjYjlj NjczOTQwHhcNMjUxMjIwMjMwMTAwWhcNMjUxMjIxMjMwMTAwWjAzMTEwLwYDVQQD Eyg5ZGYyOGRkZmNjYWIxOWUzZmI2ZTU4YjIwZmJiYzg4MDIxODU1OWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqdC40oGp+d65i7DSj2M9QynHfjT 3IqdUP9mUCCR6t2iLurE5+Mjjl+2E2keP0z2SULeMJg7P+IC8y200NyZNGvlPb7o OqxtxbTTUjQ3f9hpzpNoC8cD0klZxu0sPTa2hYuZddZFnvAI1erkpslLS8GgINQB 0rD5cXRpUZFsD7HrVLSv/pXe8sDpPuNGI3A5m02vONkg502uMEMKsVo48oiXosYZ yUQjmMb1W+7KLrhHChXeOvYDlFrCZqqROcQD0gSGMuOi0zf35IxY01YSg01pvVU8 EalhDrLuxppFhbpy8K0w1r4pe9yFqYSzmwRajatEqbVIAZHl2sZ3BCLruQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ3yjd/Mqxnj+25Ysg+7yIAhhVmnMB8GA1UdIwQY MBaAFD3q7e2hBdfpEpqbDOVrm/y5xnOUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGVydDdhRUYxLWtTbXBzTTVXdWJfTG5HYzVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9jYzRlYjMtNzY4YS00ZjkxLTg4MmMt MGRiMTA4NTBjNzk0LzEvUGVydDdhRUYxLWtTbXBzTTVXdWJfTG5HYzVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9jYzRlYjMtNzY4YS00ZjkxLTg4MmMtMGRiMTA4NTBjNzk0 LzEvUGVydDdhRUYxLWtTbXBzTTVXdWJfTG5HYzVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWCQagQMx M0EUPK1ujxeKACse6hGVH2SIXNwVCgo49MEBuon0LdrLIebt165GX8wM5TcGyiZl uIhTMZU5XWiwHrMVyBBEeDwbv6TDoilbDeA4zuGSOsYkbSQu4XNTVY7tfqKsHUyP doUWWbinToLNdLRUGNtDa2viDu/RR3WGhk4rfNhwO10v9/8tpMa5DtKgt8uLPda7 tcH9yecI7ZysN2EnlTFyFhu2ewy3nxqKwJSo2/khoe/+i89W4ztTEe+jTYixZtxa 1wF4omNyOLRQlwcFxBPbYqnn9QsRdCEsLQUYQAwkxvPPMpeLoz13l/5gCXiBZjBe 942gKhJqiWSt2g== -----END CERTIFICATE-----Generated at Sun Dec 21 01:18:45 2025 by rpki-client