This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft File: pJ9iZvYaHszU3uCUzHHG24a7s3s.mft (raw, json) Hash identifier: r/hkRC+NsoCe6am4hcWpOwCz+Uvn/jjT98AO2b3fmqw= Subject key identifier: 4A:D9:E2:13:9B:29:D1:C0:D4:CC:23:61:2E:95:51:E4:81:31:46:9E Authority key identifier: A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B Certificate issuer: /CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b Certificate serial: 019AF1D2640D7F3AB1EDAC42721AE84C35B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft Manifest number: 0F8F Signing time: Sat 06 Dec 2025 04:01:28 +0000 Manifest this update: Sat 06 Dec 2025 04:01:28 +0000 Manifest next update: Sun 07 Dec 2025 04:01:28 +0000 Files and hashes: 1: Fhu6eteSMh-I7iJVqiXmMyG026Q.roa (hash: F9PD+ubtwzitBN7aKci6vGXmXOFiGygMSM+2xXKhmeU=) 2: O79Bxg0BR0VFMQ_a0ZyezMPMz0M.roa (hash: wV2tjiSpv38ZVgcsHYOWBKswr9oGmugpMMubTRaOGF4=) 3: pJ9iZvYaHszU3uCUzHHG24a7s3s.crl (hash: NvJ2lcLdM17ugaUoGImtKx+vZpMuDozNedIcIRDZSJ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:64:0d:7f:3a:b1:ed:ac:42:72:1a:e8:4c:35:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b Validity Not Before: Dec 6 04:01:28 2025 GMT Not After : Dec 7 04:01:28 2025 GMT Subject: CN=4ad9e2139b29d1c0d4cc23612e9551e48131469e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:28:5f:0e:0e:80:9b:29:1b:32:e5:02:43:a8: 6f:9d:49:07:52:77:aa:d8:6b:94:40:52:d4:2a:84: c4:40:23:e2:46:07:fc:66:ba:f5:a9:4a:72:3c:2c: a0:b1:f4:17:fa:86:b3:18:bc:14:d2:f2:1c:ea:24: 1e:8e:02:7b:36:d5:8e:9b:9d:6b:13:9d:76:c8:a0: 18:02:9f:da:d7:d0:f4:ed:26:82:f7:bc:8c:c7:6f: c7:36:89:0d:c1:49:0a:18:84:44:ac:ea:ac:61:0b: 72:39:da:02:fa:43:97:e7:29:e6:4d:af:a0:d4:78: 88:87:02:45:9c:d7:cb:d8:7f:26:bc:59:4c:bf:8d: f8:39:22:d3:83:a8:bf:18:88:fd:da:79:e4:21:63: df:ae:7b:f5:b3:c4:7c:9a:7c:c1:99:06:9a:66:f5: 5d:49:45:5f:92:fb:80:2d:de:c8:b9:4a:96:c2:71: eb:9b:74:4f:94:ed:9d:90:b4:24:32:1a:db:59:e9: 3a:aa:53:e8:67:7f:11:76:ae:f6:74:43:80:61:cf: cc:d7:8a:85:64:52:16:e7:ac:07:55:63:7e:ae:4a: a2:7d:12:ae:84:6d:26:3b:a2:2b:02:eb:94:6e:fd: d7:2a:99:6e:d1:e6:b0:26:9c:b9:88:8b:84:31:b8: da:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:D9:E2:13:9B:29:D1:C0:D4:CC:23:61:2E:95:51:E4:81:31:46:9E X509v3 Authority Key Identifier: keyid:A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:f1:4f:15:3f:cf:eb:36:85:38:d9:8b:55:52:ee:92:21:fa: 6c:46:08:9a:dd:31:ea:78:0f:25:14:6f:84:e5:0d:a0:cc:a5: 90:46:c6:25:dd:ae:67:ff:75:5f:11:c1:ed:8b:db:45:98:e0: 6a:58:2b:78:cf:af:19:1e:af:49:2d:98:d8:d3:d3:55:3f:4e: 9d:89:b3:a4:70:7c:7b:b8:d2:6f:61:e3:b4:01:f2:3d:9e:d5: be:89:c6:d0:80:4e:58:d3:76:54:89:bf:59:f1:d7:bc:b4:3f: d4:ae:8c:c9:47:59:fc:a1:73:d9:dc:e8:90:a0:50:79:00:e7: f3:9a:07:65:e1:53:44:3c:9c:85:ef:1b:6f:60:5f:44:bb:90: e3:00:49:a3:92:80:f8:b4:eb:6d:84:b1:5d:f2:24:01:12:69: 5c:b6:35:76:62:38:5a:08:62:8e:e0:d8:e7:82:a1:47:c4:32: 1d:70:e6:cd:6a:73:48:5c:6c:d4:b8:a9:82:f2:9d:4e:74:84: 5b:3b:b2:17:63:83:8f:6a:a2:a8:05:96:15:e5:a7:59:48:90: 29:a3:e9:0b:ca:34:12:90:6b:e6:ab:d0:50:2f:77:da:de:f4: d8:bb:ba:d2:4a:0c:7a:d4:34:26:40:c1:22:fb:79:5b:45:df: d9:d1:e0:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0mQNfzqx7axCchroTDW4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0OWY2MjY2ZjYxYTFlY2NkNGRlZTA5NGNjNzFjNmRiODZi YmIzN2IwHhcNMjUxMjA2MDQwMTI4WhcNMjUxMjA3MDQwMTI4WjAzMTEwLwYDVQQD Eyg0YWQ5ZTIxMzliMjlkMWMwZDRjYzIzNjEyZTk1NTFlNDgxMzE0NjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ShfDg6AmykbMuUCQ6hvnUkHUneq 2GuUQFLUKoTEQCPiRgf8Zrr1qUpyPCygsfQX+oazGLwU0vIc6iQejgJ7NtWOm51r E512yKAYAp/a19D07SaC97yMx2/HNokNwUkKGIRErOqsYQtyOdoC+kOX5ynmTa+g 1HiIhwJFnNfL2H8mvFlMv434OSLTg6i/GIj92nnkIWPfrnv1s8R8mnzBmQaaZvVd SUVfkvuALd7IuUqWwnHrm3RPlO2dkLQkMhrbWek6qlPoZ38Rdq72dEOAYc/M14qF ZFIW56wHVWN+rkqifRKuhG0mO6IrAuuUbv3XKplu0eawJpy5iIuEMbjacwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFErZ4hObKdHA1MwjYS6VUeSBMUaeMB8GA1UdIwQY MBaAFKSfYmb2Gh7M1N7glMxxxtuGu7N7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEo5aVp2WWFIc3pVM3VDVXpISEcyNGE3czNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS80NzYyNTMtMjc4OC00NTE5LWJlYmEt OThiZTMzNWYzYzU0LzEvcEo5aVp2WWFIc3pVM3VDVXpISEcyNGE3czNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS80NzYyNTMtMjc4OC00NTE5LWJlYmEtOThiZTMzNWYzYzU0 LzEvcEo5aVp2WWFIc3pVM3VDVXpISEcyNGE3czNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlvFPFT/P 6zaFONmLVVLukiH6bEYImt0x6ngPJRRvhOUNoMylkEbGJd2uZ/91XxHB7YvbRZjg algreM+vGR6vSS2Y2NPTVT9OnYmzpHB8e7jSb2HjtAHyPZ7VvonG0IBOWNN2VIm/ WfHXvLQ/1K6MyUdZ/KFz2dzokKBQeQDn85oHZeFTRDyche8bb2BfRLuQ4wBJo5KA +LTrbYSxXfIkARJpXLY1dmI4WghijuDY54KhR8QyHXDmzWpzSFxs1LipgvKdTnSE WzuyF2ODj2qiqAWWFeWnWUiQKaPpC8o0EpBr5qvQUC932t702Lu60koMetQ0JkDB Ivt5W0Xf2dHgww== -----END CERTIFICATE-----Generated at Sat Dec 6 09:14:09 2025 by rpki-client