This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft File: pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft (raw, json) Hash identifier: 8gtESjNDS8NquCO+H1w06mHmCUYpO777IZFdBKUXq3k= Subject key identifier: C9:11:21:A2:EF:09:81:22:57:6D:2C:B0:FA:0E:72:FF:F1:9F:80:FD Authority key identifier: A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4 Certificate issuer: /CN=a499903dab85f6a59772b3edfd4bf0e491af57c4 Certificate serial: 019AF12D182FA246A398548105F8CBE5A6B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 01:00:55 +0000 Manifest this update: Sat 06 Dec 2025 01:00:55 +0000 Manifest next update: Sun 07 Dec 2025 01:00:55 +0000 Files and hashes: 1: 1-Rh4xR4UjkOh8VqSY4pK4d1pRds.roa (hash: x3ETC4RsRxr7b/UEU+/7lhOsihrtUte3yh6z17TAj9w=) 2: GISiwDWwkN55w-OPn4qwRSweA84.roa (hash: HIcUUP5vEFNT3gS3RcoPzA6F9bPL2QzZ521VNaxnhks=) 3: kT-9aZ8PqlfT-VcjyzgIGjoK45k.roa (hash: GXEy5f6ZMAPtdjysI4zwNtCcC/imdXdb1ZPEUBC58HA=) 4: lXukILbe6VXJ7h_Wf9WW21z12mw.roa (hash: +Zzql9kBnSussoen1LHmVUwZhXfkIG96Hh/jt0AAOuY=) 5: llr3G6G5AM7M10tmA9xFiPTyO0Y.roa (hash: iQGQsp8WoDcGM5vwoYe4dx6kdl9hCiwMrIHoYkwEWK0=) 6: pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl (hash: K3GaYqemfo26LmeWev8v5sUxjDCtpeAoYJB6/+PoJwM=) 7: rKCFva5BURgPwYBY7AhhhAP1WfI.roa (hash: yPJLL1iPDAh4jC5sDkvBCraLd8BwdjLiqxgvyLndKHU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:18:2f:a2:46:a3:98:54:81:05:f8:cb:e5:a6:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a499903dab85f6a59772b3edfd4bf0e491af57c4 Validity Not Before: Dec 6 01:00:55 2025 GMT Not After : Dec 7 01:00:55 2025 GMT Subject: CN=c91121a2ef098122576d2cb0fa0e72fff19f80fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c4:6e:c8:6e:8a:c6:b9:dd:35:5d:ef:b3:d0: 14:43:6d:09:45:f5:5b:fa:ca:62:4a:96:c3:62:ce: d0:66:b7:bb:a7:58:2d:3b:4e:36:fd:42:32:b7:47: 92:e0:e0:c7:91:14:20:bc:f2:55:c3:38:d4:a5:53: fa:69:3d:08:12:24:a2:f7:fa:e6:13:4e:32:5c:fa: ac:9a:c2:1e:d0:92:7c:5a:da:e6:a3:c2:ea:3d:a4: 3b:6f:69:fd:59:6e:fe:86:6c:f1:01:a4:d2:12:84: 8b:3c:e2:05:04:92:6e:0d:d8:18:b7:27:0b:e1:89: b1:c7:9a:83:e2:c8:8e:29:46:db:1b:2f:dd:fe:66: e2:20:84:f6:b5:e7:2c:57:26:7b:fa:b9:7c:c3:78: 84:bf:ee:4a:f7:b7:22:0f:31:2a:ba:06:a2:8f:c5: 4a:48:38:4e:b8:7e:0b:86:d2:3a:76:7a:a1:38:14: 68:5e:f3:39:4f:3d:80:50:3a:96:ad:bf:99:3d:4f: 59:8f:36:3f:aa:28:1b:51:a9:22:95:98:fc:b8:51: 5f:74:97:90:45:5d:22:84:ed:b9:45:45:87:66:33: 5a:4a:78:0b:c2:7d:d9:87:81:fa:2e:3c:6e:4a:29: 30:bf:ce:8e:11:57:10:5a:d3:7c:ad:6e:bc:12:36: 3e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:11:21:A2:EF:09:81:22:57:6D:2C:B0:FA:0E:72:FF:F1:9F:80:FD X509v3 Authority Key Identifier: keyid:A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:90:c6:be:1a:82:45:d0:62:5d:74:02:ec:82:27:f1:08:43: 25:b0:6d:da:1a:e6:05:09:6c:a0:70:ed:89:82:a9:f8:d4:ac: 31:95:4b:5c:18:a1:16:42:a2:97:10:1f:8c:fe:5b:49:64:42: 81:e6:01:cd:7b:ad:60:1e:1b:83:de:12:ed:f9:ee:17:94:2b: 52:61:c2:42:78:66:77:ba:d4:4a:b7:fe:f5:06:22:0a:2e:30: f2:15:cb:bf:a0:08:ab:82:04:64:17:68:aa:c5:03:e7:ae:3f: a9:12:c1:83:ca:fe:d1:e7:68:73:8e:4c:6c:bb:0c:f9:b1:e9: 87:c5:47:86:91:d9:82:2d:fa:e5:1e:71:94:5c:13:ed:f1:6a: 8d:ea:4c:f9:3a:6c:f9:2d:48:f7:41:0e:d9:ed:6d:e4:3b:b5: a7:62:70:e9:98:6a:23:f0:1b:13:ea:47:6e:da:67:22:05:9b: 91:79:6c:0b:42:8e:66:97:93:d7:68:e7:1d:90:55:8e:27:d2: f6:cd:5a:e5:2d:35:25:42:12:80:e4:f2:9e:cf:56:ca:e2:a9: 3a:d5:00:7d:69:8e:13:c2:8c:d5:73:59:40:1f:bf:1a:b4:21: b3:19:e8:9a:30:0e:d0:c0:9b:5f:c5:4c:69:22:57:06:ed:e0: fc:98:7d:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLRgvokajmFSBBfjL5aazMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0OTk5MDNkYWI4NWY2YTU5NzcyYjNlZGZkNGJmMGU0OTFh ZjU3YzQwHhcNMjUxMjA2MDEwMDU1WhcNMjUxMjA3MDEwMDU1WjAzMTEwLwYDVQQD EyhjOTExMjFhMmVmMDk4MTIyNTc2ZDJjYjBmYTBlNzJmZmYxOWY4MGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsRuyG6KxrndNV3vs9AUQ20JRfVb +spiSpbDYs7QZre7p1gtO042/UIyt0eS4ODHkRQgvPJVwzjUpVP6aT0IEiSi9/rm E04yXPqsmsIe0JJ8Wtrmo8LqPaQ7b2n9WW7+hmzxAaTSEoSLPOIFBJJuDdgYtycL 4Ymxx5qD4siOKUbbGy/d/mbiIIT2tecsVyZ7+rl8w3iEv+5K97ciDzEqugaij8VK SDhOuH4LhtI6dnqhOBRoXvM5Tz2AUDqWrb+ZPU9ZjzY/qigbUakilZj8uFFfdJeQ RV0ihO25RUWHZjNaSngLwn3Zh4H6LjxuSikwv86OEVcQWtN8rW68EjY+0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMkRIaLvCYEiV20ssPoOcv/xn4D9MB8GA1UdIwQY MBaAFKSZkD2rhfall3Kz7f1L8OSRr1fEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEptUVBhdUY5cVdYY3JQdF9Vdnc1Skd2VjhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC84ZWRhOWEtZDEzYy00NDMwLThjZjQt NTdlYzEyZTg2NDFlLzEvcEptUVBhdUY5cVdYY3JQdF9Vdnc1Skd2VjhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC84ZWRhOWEtZDEzYy00NDMwLThjZjQtNTdlYzEyZTg2NDFl LzEvcEptUVBhdUY5cVdYY3JQdF9Vdnc1Skd2VjhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmZDGvhqC RdBiXXQC7IIn8QhDJbBt2hrmBQlsoHDtiYKp+NSsMZVLXBihFkKilxAfjP5bSWRC geYBzXutYB4bg94S7fnuF5QrUmHCQnhmd7rUSrf+9QYiCi4w8hXLv6AIq4IEZBdo qsUD564/qRLBg8r+0edoc45MbLsM+bHph8VHhpHZgi365R5xlFwT7fFqjepM+Tps +S1I90EO2e1t5Du1p2Jw6ZhqI/AbE+pHbtpnIgWbkXlsC0KOZpeT12jnHZBVjifS 9s1a5S01JUISgOTyns9WyuKpOtUAfWmOE8KM1XNZQB+/GrQhsxnomjAO0MCbX8VM aSJXBu3g/Jh9MQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:56:27 2025 by rpki-client