This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft File: PCH6xeiV5bfOZv4In_0LL2FVDSE.mft (raw, json) Hash identifier: k/xe6I4OVl82p0lzQCVZK/x00CBLvAPFnfgtdJP5Fpc= Subject key identifier: 66:11:BB:1A:A0:E0:43:04:B1:26:C6:D7:BF:1E:40:B5:88:19:F4:BD Authority key identifier: 3C:21:FA:C5:E8:95:E5:B7:CE:66:FE:08:9F:FD:0B:2F:61:55:0D:21 Certificate issuer: /CN=3c21fac5e895e5b7ce66fe089ffd0b2f61550d21 Certificate serial: 019B5F412958EBD5D6B406CE2F2CF77D65E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft Manifest number: 179B Signing time: Sat 27 Dec 2025 10:01:04 +0000 Manifest this update: Sat 27 Dec 2025 10:01:04 +0000 Manifest next update: Sun 28 Dec 2025 10:01:04 +0000 Files and hashes: 1: PCH6xeiV5bfOZv4In_0LL2FVDSE.crl (hash: CWcqc5hyb81iWSiv9OCfK/cilpzdS1phlnb7gK33zhA=) 2: kMic-cYu_3jAGaMkqOjyp2h03_Q.roa (hash: q724sfMAPnUFvRmxjRBhUtLlfNKhUfTz/xhqtAFnU88=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 10:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:41:29:58:eb:d5:d6:b4:06:ce:2f:2c:f7:7d:65:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c21fac5e895e5b7ce66fe089ffd0b2f61550d21 Validity Not Before: Dec 27 10:01:04 2025 GMT Not After : Dec 28 10:01:04 2025 GMT Subject: CN=6611bb1aa0e04304b126c6d7bf1e40b58819f4bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:81:7d:48:cf:b9:4b:4c:64:47:cd:56:f7:5c: 32:cc:25:52:2b:9e:82:b7:78:04:a0:04:c0:f7:93: 9a:df:1a:58:05:27:cb:82:00:2c:66:a4:a9:54:a7: 9a:b2:03:ba:d6:bb:30:b1:ee:eb:5c:88:e4:70:36: b4:66:b4:67:7c:94:e0:f9:64:bf:0f:81:ce:6c:ee: a0:bf:5b:f5:15:10:e9:cd:39:14:8c:20:5a:bc:bf: 37:d5:bc:ed:fb:84:9a:db:31:ee:b0:b2:59:28:ba: af:c9:df:a7:a8:88:fe:fb:c0:05:f5:a0:b9:e5:b3: d2:d6:a5:43:a1:b5:29:39:c5:e8:6d:42:7e:bd:3d: 84:e4:86:ff:c3:cd:35:79:18:d8:1b:25:9c:34:a4: fc:8c:19:a8:68:7e:45:75:c7:cc:b5:ff:51:f2:9f: ec:75:bb:3d:2b:a3:c8:e6:ab:07:fd:5b:b5:e9:4e: fd:d6:45:e2:3d:bf:59:a3:1b:98:b7:0d:56:28:b9: 3a:5c:17:dd:dc:ef:cb:5c:c5:7b:67:79:ae:1e:f3: 5f:49:99:28:c4:e6:29:e1:da:48:a6:2a:a2:74:cb: 1a:7b:e3:05:75:43:0e:1c:f2:0b:08:a7:76:3f:37: 6e:13:66:11:fd:17:4b:f8:82:77:c6:e0:c3:62:22: 77:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:11:BB:1A:A0:E0:43:04:B1:26:C6:D7:BF:1E:40:B5:88:19:F4:BD X509v3 Authority Key Identifier: keyid:3C:21:FA:C5:E8:95:E5:B7:CE:66:FE:08:9F:FD:0B:2F:61:55:0D:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:e4:b6:17:92:44:86:ce:b3:f7:64:32:58:cc:36:16:89:bb: d8:62:9a:18:06:61:ca:1c:27:83:c9:8d:fe:e3:26:74:6d:a2: f9:be:38:f6:70:ba:5b:0c:20:e0:91:3a:2e:ff:19:68:39:91: 93:00:06:da:ca:fd:61:4d:2d:ff:b0:db:18:63:6a:22:21:5a: 23:09:ff:52:f6:93:04:38:ed:d4:b7:06:7b:51:6e:bb:5b:bf: 7b:9f:64:f4:f3:23:7c:d2:10:3d:3a:fa:65:79:59:4b:be:e8: 0f:e1:df:11:92:c9:a6:4f:cc:c4:6d:24:c3:3c:95:93:05:70: 8d:73:77:db:ee:4e:e4:bb:24:a3:39:6d:f1:5a:96:4a:9d:fb: 69:6d:e3:94:28:cc:ef:cd:f8:4d:7a:e1:e6:e7:1b:fd:8c:9e: 09:90:9d:50:2b:ed:e9:f6:33:26:b2:43:7b:16:f6:f6:1d:cc: 53:bf:58:29:82:c8:f6:fb:72:1a:32:de:72:a2:65:d9:61:8c: ec:d8:ec:f2:99:91:b7:2a:d0:a5:d2:7a:aa:49:68:33:71:3b: 55:2c:cb:e9:f5:93:79:1b:b5:7c:04:e3:2f:72:79:59:a3:d3: af:04:22:ac:e0:a5:6d:cd:6c:0a:5a:3a:d1:99:d9:11:5d:ed: be:af:3b:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfQSlY69XWtAbOLyz3fWXjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMjFmYWM1ZTg5NWU1YjdjZTY2ZmUwODlmZmQwYjJmNjE1 NTBkMjEwHhcNMjUxMjI3MTAwMTA0WhcNMjUxMjI4MTAwMTA0WjAzMTEwLwYDVQQD Eyg2NjExYmIxYWEwZTA0MzA0YjEyNmM2ZDdiZjFlNDBiNTg4MTlmNGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4F9SM+5S0xkR81W91wyzCVSK56C t3gEoATA95Oa3xpYBSfLggAsZqSpVKeasgO61rswse7rXIjkcDa0ZrRnfJTg+WS/ D4HObO6gv1v1FRDpzTkUjCBavL831bzt+4Sa2zHusLJZKLqvyd+nqIj++8AF9aC5 5bPS1qVDobUpOcXobUJ+vT2E5Ib/w801eRjYGyWcNKT8jBmoaH5FdcfMtf9R8p/s dbs9K6PI5qsH/Vu16U791kXiPb9ZoxuYtw1WKLk6XBfd3O/LXMV7Z3muHvNfSZko xOYp4dpIpiqidMsae+MFdUMOHPILCKd2PzduE2YR/RdL+IJ3xuDDYiJ31QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGYRuxqg4EMEsSbG178eQLWIGfS9MB8GA1UdIwQY MBaAFDwh+sXoleW3zmb+CJ/9Cy9hVQ0hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUENINnhlaVY1YmZPWnY0SW5fMExMMkZWRFNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC82MGIwMDYtNmI1My00ZjAwLWE0ODgt NDg1ZGQ0YWQ1NGZiLzEvUENINnhlaVY1YmZPWnY0SW5fMExMMkZWRFNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC82MGIwMDYtNmI1My00ZjAwLWE0ODgtNDg1ZGQ0YWQ1NGZi LzEvUENINnhlaVY1YmZPWnY0SW5fMExMMkZWRFNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFuS2F5JE hs6z92QyWMw2Fom72GKaGAZhyhwng8mN/uMmdG2i+b449nC6Wwwg4JE6Lv8ZaDmR kwAG2sr9YU0t/7DbGGNqIiFaIwn/UvaTBDjt1LcGe1Fuu1u/e59k9PMjfNIQPTr6 ZXlZS77oD+HfEZLJpk/MxG0kwzyVkwVwjXN32+5O5Lskozlt8VqWSp37aW3jlCjM 7834TXrh5ucb/YyeCZCdUCvt6fYzJrJDexb29h3MU79YKYLI9vtyGjLecqJl2WGM 7Njs8pmRtyrQpdJ6qkloM3E7VSzL6fWTeRu1fATjL3J5WaPTrwQirOClbc1sClo6 0ZnZEV3tvq87yQ== -----END CERTIFICATE-----Generated at Sat Dec 27 19:23:38 2025 by rpki-client