This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft File: pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft (raw, json) Hash identifier: aRTJLqZkQy3Bl+Vzr2++J0HSM6GwjKUtVCaVp02fmcU= Subject key identifier: 05:2F:79:56:A6:50:B3:26:64:0B:80:53:12:53:42:DA:8A:EF:E1:37 Authority key identifier: A6:30:75:CB:B7:EB:16:93:EE:71:BC:90:E5:F7:3D:AD:C2:25:D9:1A Certificate issuer: /CN=a63075cbb7eb1693ee71bc90e5f73dadc225d91a Certificate serial: 019AF12CEFD4A707E14107314BAC29835819 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:00:45 +0000 Manifest this update: Sat 06 Dec 2025 01:00:45 +0000 Manifest next update: Sun 07 Dec 2025 01:00:45 +0000 Files and hashes: 1: pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl (hash: t741BlmkLXTDNreXQDkliiNzUFhTzyWdnDxGbf9ckjQ=) 2: t403LtXkOSW8w7w_vK-2ppXvWVA.roa (hash: kUS7ckaNEkh4qS4uYt0WI3yhqZiJYbt1KK2dO98adJY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:ef:d4:a7:07:e1:41:07:31:4b:ac:29:83:58:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a63075cbb7eb1693ee71bc90e5f73dadc225d91a Validity Not Before: Dec 6 01:00:45 2025 GMT Not After : Dec 7 01:00:45 2025 GMT Subject: CN=052f7956a650b326640b8053125342da8aefe137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1b:8c:af:74:9c:97:db:8c:ee:87:16:3e:08: ca:d9:e4:46:ed:05:8a:96:5e:85:5f:2f:04:5d:3a: 13:ff:80:62:9c:cc:45:b7:b0:fb:c2:c7:7d:e9:8a: 52:63:52:1e:84:4d:2f:e7:3f:68:78:70:8b:b3:f1: c0:c8:95:34:4e:37:d4:27:5d:67:34:3a:24:67:96: f3:47:08:15:6f:52:00:27:1f:d4:43:d0:0d:51:8d: df:9e:17:5a:8f:db:10:4c:c9:f3:ea:21:25:8c:3c: c1:a5:b9:5c:4a:18:02:2a:c8:24:0d:ca:d4:c0:4e: 97:8c:05:8a:3a:22:69:8c:f2:e8:6d:a4:06:5c:9d: c4:ca:7f:de:59:99:e4:a1:2b:a1:91:ff:a3:4d:4c: b0:ed:21:95:01:a1:d6:e0:d9:5f:27:2e:8e:08:56: 26:c1:5d:aa:30:34:06:4f:16:1e:c2:06:e5:90:5b: 21:92:d9:de:87:83:4c:1f:6a:96:d6:4b:b7:c5:b4: 63:2f:c8:a4:e1:0b:05:d8:19:df:56:9c:cc:0f:bc: 55:e3:7d:7b:87:a7:88:36:f8:f9:27:e5:26:1d:c4: 0c:69:82:99:c3:ac:19:71:7e:06:25:42:e9:80:a4: b0:01:16:31:45:3a:19:4f:ba:08:3d:a8:d4:84:ac: 7a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:2F:79:56:A6:50:B3:26:64:0B:80:53:12:53:42:DA:8A:EF:E1:37 X509v3 Authority Key Identifier: keyid:A6:30:75:CB:B7:EB:16:93:EE:71:BC:90:E5:F7:3D:AD:C2:25:D9:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:c5:52:7a:7a:ca:43:19:f6:46:b9:8d:1b:8d:a8:f4:2d:14: c4:d9:d2:e2:58:4a:fb:b2:eb:96:20:67:44:e6:fe:ef:45:24: 16:ef:1d:d9:0b:c8:91:89:f5:eb:32:7a:aa:08:85:6a:2e:ab: 2e:91:d7:b0:3e:24:b4:d5:05:ec:95:e2:cd:d3:1a:72:20:41: 4f:ad:f9:64:f6:6e:e4:6e:e3:d6:fe:25:5f:7c:aa:e5:74:0a: eb:d0:6f:28:29:15:e2:05:e6:dc:1e:59:4e:94:10:0a:0d:09: 57:c3:54:3b:f1:55:83:a5:a8:15:df:40:85:3b:8c:b5:27:aa: bc:bd:ff:22:4e:15:8c:a7:fd:70:40:24:b6:3c:bf:5c:b1:48: d5:60:af:d9:f7:a2:50:34:e6:02:e3:79:f4:eb:09:19:32:81: 64:e9:ad:70:ce:ac:82:f9:75:b0:c1:61:20:4b:49:20:a2:60: 52:ec:ce:72:ac:21:70:50:f3:7d:60:f9:90:0e:a7:4a:0f:12: 53:a8:bc:25:4a:bf:44:ca:ca:87:b2:8b:23:00:8e:14:7d:ef: fb:a8:29:81:41:aa:f6:e8:e6:7c:12:17:2a:59:cb:26:30:4d: f1:f9:11:90:3d:8b:2c:d0:18:d8:94:c2:fb:e6:40:e8:0b:d8: f7:17:df:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLO/UpwfhQQcxS6wpg1gZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MzA3NWNiYjdlYjE2OTNlZTcxYmM5MGU1ZjczZGFkYzIy NWQ5MWEwHhcNMjUxMjA2MDEwMDQ1WhcNMjUxMjA3MDEwMDQ1WjAzMTEwLwYDVQQD EygwNTJmNzk1NmE2NTBiMzI2NjQwYjgwNTMxMjUzNDJkYThhZWZlMTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhuMr3Scl9uM7ocWPgjK2eRG7QWK ll6FXy8EXToT/4BinMxFt7D7wsd96YpSY1IehE0v5z9oeHCLs/HAyJU0TjfUJ11n NDokZ5bzRwgVb1IAJx/UQ9ANUY3fnhdaj9sQTMnz6iEljDzBpblcShgCKsgkDcrU wE6XjAWKOiJpjPLobaQGXJ3Eyn/eWZnkoSuhkf+jTUyw7SGVAaHW4NlfJy6OCFYm wV2qMDQGTxYewgblkFshktneh4NMH2qW1ku3xbRjL8ik4QsF2BnfVpzMD7xV4317 h6eINvj5J+UmHcQMaYKZw6wZcX4GJULpgKSwARYxRToZT7oIPajUhKx66wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAUveVamULMmZAuAUxJTQtqK7+E3MB8GA1UdIwQY MBaAFKYwdcu36xaT7nG8kOX3Pa3CJdkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGpCMXk3ZnJGcFB1Y2J5UTVmYzlyY0lsMlJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9iYmU5ZmYtMjM2NS00OWM4LTk4ZDYt ZTcxYzMxN2EzZmE4LzEvcGpCMXk3ZnJGcFB1Y2J5UTVmYzlyY0lsMlJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9iYmU5ZmYtMjM2NS00OWM4LTk4ZDYtZTcxYzMxN2EzZmE4 LzEvcGpCMXk3ZnJGcFB1Y2J5UTVmYzlyY0lsMlJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEsVSenrK Qxn2RrmNG42o9C0UxNnS4lhK+7LrliBnROb+70UkFu8d2QvIkYn16zJ6qgiFai6r LpHXsD4ktNUF7JXizdMaciBBT635ZPZu5G7j1v4lX3yq5XQK69BvKCkV4gXm3B5Z TpQQCg0JV8NUO/FVg6WoFd9AhTuMtSeqvL3/Ik4VjKf9cEAktjy/XLFI1WCv2fei UDTmAuN59OsJGTKBZOmtcM6sgvl1sMFhIEtJIKJgUuzOcqwhcFDzfWD5kA6nSg8S U6i8JUq/RMrKh7KLIwCOFH3v+6gpgUGq9ujmfBIXKlnLJjBN8fkRkD2LLNAY2JTC ++ZA6AvY9xffMQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:19 2025 by rpki-client