This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft File: PXud_6rjPsLPGbWtTknB6esdnWQ.mft (raw, json) Hash identifier: SmRByYqMCBHrsjnm6xycAuROi2Fqd/QAj/0X+I/FYgA= Subject key identifier: 3C:A8:6D:B5:68:C9:76:B7:F5:EB:76:6F:A2:79:B4:74:87:C3:67:3B Authority key identifier: 3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64 Certificate issuer: /CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64 Certificate serial: 019B7335955B083436609F1304CF6FC788F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft Manifest number: 03EF Signing time: Wed 31 Dec 2025 07:00:50 +0000 Manifest this update: Wed 31 Dec 2025 07:00:50 +0000 Manifest next update: Thu 01 Jan 2026 07:00:50 +0000 Files and hashes: 1: 7MAR8ldskj16F5kzBhniowMVmU4.roa (hash: mAbacv2iYcdMB2GMEDPPh1FDDClOu0PIdLu6x7Tl3MY=) 2: FmkKEcHCN4SKkKjvm4wbiP2rqGc.roa (hash: BxDXl5Xd1DRGy1evvpUKKCLNhtBpKlkHYmd1XWHZ6n8=) 3: LXf5lLnTSduTm8Y4-ZFOkzEWaRE.roa (hash: eOFvk5CuTujGAeTIr7JdTBGuzY2jhTziJfw9wzb3/Po=) 4: PXud_6rjPsLPGbWtTknB6esdnWQ.crl (hash: MMuZFeQ3Pwa/CnSKJdpxM+otZSTLDDej1TZjjOC245U=) 5: k4yKqIR7cQItxrDu_gDWC-myYX0.roa (hash: xhdvsy13/3L8cbu2Dvi5ab7FoTe57YZRZZmouEau4sA=) 6: lThuEEXjbOk9kIBiQn4XNJSri60.roa (hash: saUcIO3Pzwx9suP3W1g5k4dgT0dO1lpuD0PTK3qh6JE=) 7: pWtbtMqs_9aJQ0KT8UAl4XExZLI.roa (hash: WNvv2z5ka9H0FOvY11NFaV4Er6oN7s2ejAsfJawgadw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:73:35:95:5b:08:34:36:60:9f:13:04:cf:6f:c7:88:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64 Validity Not Before: Dec 31 07:00:50 2025 GMT Not After : Jan 1 07:00:50 2026 GMT Subject: CN=3ca86db568c976b7f5eb766fa279b47487c3673b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e3:a2:03:87:49:92:da:0a:62:d0:0f:6d:1c: 8a:d4:a9:92:ef:d9:54:26:04:95:2b:36:91:02:55: 58:43:0f:5a:62:e1:d7:c4:aa:96:2b:d9:73:31:04: 9a:d6:12:37:9f:45:06:81:bd:ee:de:fa:61:f7:fa: 1f:a6:52:1d:9b:89:18:43:a5:3b:93:fb:b3:ad:ce: 55:36:ce:cf:65:18:7a:82:27:63:48:60:d1:f3:83: 75:03:d6:13:93:0f:f5:20:2e:4e:33:ad:cf:17:f5: 6f:fd:3b:ce:7c:a6:47:5f:09:8b:9a:a7:5e:78:ac: ff:20:09:9f:d1:ed:c3:d7:79:c4:db:fd:e2:3f:d5: 8a:e9:e4:0e:f6:7e:98:b0:23:92:c3:db:a3:d7:3a: e0:3f:35:96:eb:b2:50:76:08:d8:70:ff:f0:60:06: dd:d1:dd:3d:20:1d:16:3f:ce:14:81:2c:4d:3e:95: e7:90:55:41:0b:52:90:83:18:71:c9:bb:fc:da:6c: e4:a7:11:fc:6c:e1:76:35:cb:28:6d:52:0f:5e:74: 7a:bf:3d:50:2f:e7:93:ca:73:b8:71:09:c9:95:e6: 9e:40:a0:37:5d:21:ac:c2:3a:6e:20:9a:e7:c4:65: 10:00:0f:dd:bc:e7:49:4f:8a:43:08:19:33:ec:5c: 37:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A8:6D:B5:68:C9:76:B7:F5:EB:76:6F:A2:79:B4:74:87:C3:67:3B X509v3 Authority Key Identifier: keyid:3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:96:c5:45:1b:08:97:5a:c5:cf:b5:83:4c:73:ea:13:7d:19: ae:a0:2b:5a:5c:76:bb:79:f4:ef:f0:0e:c8:14:45:d2:80:a8: b8:2f:6f:dc:6d:c1:9a:3b:ee:29:b7:d3:56:f4:a6:94:61:d8: f5:b6:92:1f:35:ff:c1:98:8e:82:7a:b8:b5:47:c5:8a:16:cf: 49:e2:01:81:2d:bb:2a:90:b0:e9:88:90:ea:74:c1:6e:2b:17: 8c:41:ac:43:8e:87:88:2e:93:0a:b2:cd:b8:35:b9:80:8b:f7: 44:00:8a:82:3c:5d:cd:28:8a:e4:a2:ed:1f:1a:77:19:fc:9c: 13:f2:58:12:61:48:45:4a:a7:30:26:78:e5:38:ff:14:36:56: 40:d3:22:99:bc:5e:10:16:72:47:16:00:e4:8d:33:3f:e4:29: b5:8d:43:59:39:72:1b:3b:c6:38:8c:24:80:0d:77:13:85:5a: 39:28:bc:92:c2:8c:f2:e0:c3:fc:77:76:df:b4:0e:b3:7f:45: 42:5b:f7:5e:bb:26:83:28:13:d3:e3:83:8a:2d:1b:03:31:61: 54:cd:29:e5:62:11:db:97:b8:c8:f0:48:e3:40:19:e5:7d:96: a0:94:49:9f:e0:3f:91:5d:04:de:a2:4d:13:a7:63:7f:ea:74: 4b:4f:cf:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtzNZVbCDQ2YJ8TBM9vx4jzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkN2I5ZGZmYWFlMzNlYzJjZjE5YjVhZDRlNDljMWU5ZWIx ZDlkNjQwHhcNMjUxMjMxMDcwMDUwWhcNMjYwMTAxMDcwMDUwWjAzMTEwLwYDVQQD EygzY2E4NmRiNTY4Yzk3NmI3ZjVlYjc2NmZhMjc5YjQ3NDg3YzM2NzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+OiA4dJktoKYtAPbRyK1KmS79lU JgSVKzaRAlVYQw9aYuHXxKqWK9lzMQSa1hI3n0UGgb3u3vph9/ofplIdm4kYQ6U7 k/uzrc5VNs7PZRh6gidjSGDR84N1A9YTkw/1IC5OM63PF/Vv/TvOfKZHXwmLmqde eKz/IAmf0e3D13nE2/3iP9WK6eQO9n6YsCOSw9uj1zrgPzWW67JQdgjYcP/wYAbd 0d09IB0WP84UgSxNPpXnkFVBC1KQgxhxybv82mzkpxH8bOF2NcsobVIPXnR6vz1Q L+eTynO4cQnJleaeQKA3XSGswjpuIJrnxGUQAA/dvOdJT4pDCBkz7Fw3mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDyobbVoyXa39et2b6J5tHSHw2c7MB8GA1UdIwQY MBaAFD17nf+q4z7Czxm1rU5JwenrHZ1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFh1ZF82cmpQc0xQR2JXdFRrbkI2ZXNkbldRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80OTE5NWItMjkwOS00NmUwLWFiY2Ut NDIyNTIzYzRlNjhiLzEvUFh1ZF82cmpQc0xQR2JXdFRrbkI2ZXNkbldRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS80OTE5NWItMjkwOS00NmUwLWFiY2UtNDIyNTIzYzRlNjhi LzEvUFh1ZF82cmpQc0xQR2JXdFRrbkI2ZXNkbldRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYpbFRRsI l1rFz7WDTHPqE30ZrqArWlx2u3n07/AOyBRF0oCouC9v3G3BmjvuKbfTVvSmlGHY 9baSHzX/wZiOgnq4tUfFihbPSeIBgS27KpCw6YiQ6nTBbisXjEGsQ46HiC6TCrLN uDW5gIv3RACKgjxdzSiK5KLtHxp3GfycE/JYEmFIRUqnMCZ45Tj/FDZWQNMimbxe EBZyRxYA5I0zP+QptY1DWTlyGzvGOIwkgA13E4VaOSi8ksKM8uDD/Hd237QOs39F Qlv3XrsmgygT0+ODii0bAzFhVM0p5WIR25e4yPBI40AZ5X2WoJRJn+A/kV0E3qJN E6djf+p0S0/P9w== -----END CERTIFICATE-----Generated at Wed Dec 31 09:02:24 2025 by rpki-client