This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft File: PCyFQBEUChCUfae1O7s1DzxUsz4.mft (raw, json) Hash identifier: WpMcuEoxh63AEiAqBONYH7h/mJ8QsJh+fr8VtI7Ls7o= Subject key identifier: 72:25:85:BA:A7:C9:51:43:28:75:F0:C5:AE:DF:E4:74:D5:B1:4D:60 Authority key identifier: 3C:2C:85:40:11:14:0A:10:94:7D:A7:B5:3B:BB:35:0F:3C:54:B3:3E Certificate issuer: /CN=3c2c854011140a10947da7b53bbb350f3c54b33e Certificate serial: 019B2EF9B0A716C8E62AE94E49DB0A9B29F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft Manifest number: 0781 Signing time: Thu 18 Dec 2025 01:01:14 +0000 Manifest this update: Thu 18 Dec 2025 01:01:14 +0000 Manifest next update: Fri 19 Dec 2025 01:01:14 +0000 Files and hashes: 1: NtKyDgbGesEe8awF15SqP0_3q5E.roa (hash: 5/QwTKhvWnKsc5Bc5M0m9rQLZKRH4InU93sknSCwHzs=) 2: PCyFQBEUChCUfae1O7s1DzxUsz4.crl (hash: /L/pFD8oeOrO4ruVC8SetmDhYr/HM5eHYfHKHLIJO5U=) 3: WNJuWEXBIip_f5G2ObX5HLas-6I.roa (hash: boUS884QFMK9V7SQvxUAnalpgEFhwVVzKbrcjkzFqDQ=) 4: hUje3HFTF6f1DLkrPmJro0BJv84.roa (hash: kR65nTDvmrqvVF+VEljMTGu7vMzX0EU8UFNtyZDk3w8=) 5: i63lT8gZ80ZQnoxkIIq3_XH-qGo.roa (hash: u7r5j40jao9jpdMvyg5KQYNAFcKXMkC3d+QE0v1EduY=) 6: ibMRX0UskUZ1fKV63OderSyFGp4.roa (hash: eA4MV5O6XQVzVYEe9jvmxnmU146aKwd4Gt1iGOJqAdY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:b0:a7:16:c8:e6:2a:e9:4e:49:db:0a:9b:29:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c2c854011140a10947da7b53bbb350f3c54b33e Validity Not Before: Dec 18 01:01:14 2025 GMT Not After : Dec 19 01:01:14 2025 GMT Subject: CN=722585baa7c951432875f0c5aedfe474d5b14d60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b3:26:76:2b:1d:4c:8d:29:5d:44:f4:d3:87: 61:29:16:5e:bf:67:15:fb:3c:b9:3b:a9:63:6d:18: bb:62:16:45:fd:0b:d9:49:b5:ab:8a:53:d9:95:2d: 79:17:b9:51:11:7e:e7:16:41:d2:b4:37:0d:d0:f3: 0e:9a:20:31:cd:b0:c4:7c:b1:0c:77:a7:b5:29:ae: 7b:02:b0:1a:d1:89:ee:f4:b3:f0:c2:d7:da:03:67: 02:f0:ea:9b:1e:78:67:e9:72:cc:4e:cf:88:67:93: 4b:01:2d:93:7d:b4:25:9d:0e:03:7c:56:25:b1:2d: f4:53:e2:09:77:b4:0f:54:f6:f0:50:ce:3a:1e:d4: 56:50:c7:82:b4:9e:0c:8f:83:e2:e5:e8:23:71:e9: 97:bb:3e:b6:14:f8:ae:5a:b5:b9:59:d7:be:e4:b5: bb:59:76:c3:01:31:b7:f1:84:2a:8d:05:24:19:23: 57:88:1c:73:8d:18:b3:db:13:f3:89:0c:ea:a5:5d: c9:85:f1:61:7c:5d:4e:ee:49:67:c3:b9:b1:ac:68: 29:bf:23:52:79:28:03:b1:1a:d0:22:b9:79:86:49: c5:4a:53:87:61:66:24:54:7a:d0:3b:5a:79:c7:a1: 82:91:77:05:56:c2:58:50:7f:d6:c9:00:76:50:4e: 75:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:25:85:BA:A7:C9:51:43:28:75:F0:C5:AE:DF:E4:74:D5:B1:4D:60 X509v3 Authority Key Identifier: keyid:3C:2C:85:40:11:14:0A:10:94:7D:A7:B5:3B:BB:35:0F:3C:54:B3:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:54:04:3c:88:fa:1f:54:15:9f:b0:07:a2:8c:5d:01:d6:69: 46:bc:25:60:79:96:a3:f5:21:d0:2d:d6:2e:53:3a:37:e5:35: 8d:4d:14:10:18:c0:f8:26:56:2c:18:5d:9f:1c:84:72:07:a4: a2:29:13:ff:89:b8:b5:ae:15:94:d8:85:68:35:d0:d1:6d:86: 98:f2:57:4d:c7:47:91:78:7e:ad:8a:0d:e8:37:9b:be:c0:bd: 3b:8b:bd:5c:e4:d0:b8:79:f7:5f:30:cc:4a:f7:19:ec:ad:2d: db:64:f0:f8:b7:01:3a:20:a9:68:39:8d:16:d6:04:fc:9f:f2: 72:dc:9e:b9:0c:ed:30:92:08:a5:6a:5f:7e:9a:9c:ff:c1:b2: 7f:f2:c7:12:11:22:b6:31:61:43:51:3b:73:21:21:ae:bf:d4: 0b:36:f9:b0:10:72:70:9a:d6:95:90:9f:43:8e:a4:29:3e:7f: 3c:f8:ff:02:a7:e2:4e:4e:02:72:55:3f:1e:40:fc:b2:ce:2e: 85:65:74:b0:62:79:44:9b:ee:85:b8:17:e7:7a:23:50:14:d0: 0b:2d:64:fa:28:f6:db:f8:1f:2a:0d:98:61:ea:f8:6e:3b:67: b9:78:eb:e7:80:6c:2d:e4:b2:bc:c8:ee:a4:9e:41:15:0a:ab: d5:29:fe:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+bCnFsjmKulOSdsKmyn4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMmM4NTQwMTExNDBhMTA5NDdkYTdiNTNiYmIzNTBmM2M1 NGIzM2UwHhcNMjUxMjE4MDEwMTE0WhcNMjUxMjE5MDEwMTE0WjAzMTEwLwYDVQQD Eyg3MjI1ODViYWE3Yzk1MTQzMjg3NWYwYzVhZWRmZTQ3NGQ1YjE0ZDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07MmdisdTI0pXUT004dhKRZev2cV +zy5O6ljbRi7YhZF/QvZSbWrilPZlS15F7lREX7nFkHStDcN0PMOmiAxzbDEfLEM d6e1Ka57ArAa0Ynu9LPwwtfaA2cC8OqbHnhn6XLMTs+IZ5NLAS2TfbQlnQ4DfFYl sS30U+IJd7QPVPbwUM46HtRWUMeCtJ4Mj4Pi5egjcemXuz62FPiuWrW5Wde+5LW7 WXbDATG38YQqjQUkGSNXiBxzjRiz2xPziQzqpV3JhfFhfF1O7klnw7mxrGgpvyNS eSgDsRrQIrl5hknFSlOHYWYkVHrQO1p5x6GCkXcFVsJYUH/WyQB2UE51pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHIlhbqnyVFDKHXwxa7f5HTVsU1gMB8GA1UdIwQY MBaAFDwshUARFAoQlH2ntTu7NQ88VLM+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEN5RlFCRVVDaENVZmFlMU83czFEenhVc3o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9lMDU4MGQtMDQ4YS00ZTZkLWJlYzYt YjViYmQwYjVlMGFhLzEvUEN5RlFCRVVDaENVZmFlMU83czFEenhVc3o0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9lMDU4MGQtMDQ4YS00ZTZkLWJlYzYtYjViYmQwYjVlMGFh LzEvUEN5RlFCRVVDaENVZmFlMU83czFEenhVc3o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb1QEPIj6 H1QVn7AHooxdAdZpRrwlYHmWo/Uh0C3WLlM6N+U1jU0UEBjA+CZWLBhdnxyEcgek oikT/4m4ta4VlNiFaDXQ0W2GmPJXTcdHkXh+rYoN6DebvsC9O4u9XOTQuHn3XzDM SvcZ7K0t22Tw+LcBOiCpaDmNFtYE/J/yctyeuQztMJIIpWpffpqc/8Gyf/LHEhEi tjFhQ1E7cyEhrr/UCzb5sBBycJrWlZCfQ46kKT5/PPj/AqfiTk4CclU/HkD8ss4u hWV0sGJ5RJvuhbgX53ojUBTQCy1k+ij22/gfKg2YYer4bjtnuXjr54BsLeSyvMju pJ5BFQqr1Sn+lA== -----END CERTIFICATE-----Generated at Thu Dec 18 11:11:32 2025 by rpki-client