This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft File: pJxODPXI27tqZ88dovMfQWJ0n90.mft (raw, json) Hash identifier: WEoHg6HPhfi/InthWw6NxU0GvbRmmSwd7Gbznij04bY= Subject key identifier: 3F:F4:23:C7:88:AB:1C:87:7D:AD:0C:2D:7F:3D:8D:F5:40:53:D1:AB Authority key identifier: A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD Certificate issuer: /CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd Certificate serial: 019AF12D6098D0C29A614F717EF1248E5D95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft Manifest number: 1779 Signing time: Sat 06 Dec 2025 01:01:14 +0000 Manifest this update: Sat 06 Dec 2025 01:01:14 +0000 Manifest next update: Sun 07 Dec 2025 01:01:14 +0000 Files and hashes: 1: oTERYQxbfcdAepRJdL-H3PXCPnk.roa (hash: BUX480Cq0/FWcz+EdrT0tY5q1vVSAi6pm1ula8qFGn4=) 2: pJxODPXI27tqZ88dovMfQWJ0n90.crl (hash: fb90lrsducPnnl2yZuOOobW+9KROPWVmw7z+EgWLXRg=) 3: wsY5k4qqG0xYHV0_JKKO-MLN1Lc.roa (hash: f/706SBS64fiaR4N+7m+WUBpo55cQMTVv5UqqvUPZQs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:60:98:d0:c2:9a:61:4f:71:7e:f1:24:8e:5d:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd Validity Not Before: Dec 6 01:01:14 2025 GMT Not After : Dec 7 01:01:14 2025 GMT Subject: CN=3ff423c788ab1c877dad0c2d7f3d8df54053d1ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e8:aa:9a:85:48:6d:33:58:87:31:bb:72:0c: 4a:26:bc:b9:5d:e2:48:91:77:d6:8e:cc:4b:df:fb: 32:75:b1:65:ad:19:80:d6:32:ac:2c:c2:2c:3f:e4: bc:af:be:6f:ec:3f:9f:19:9a:20:ae:e7:67:f1:33: d2:9d:52:ad:32:16:59:89:3e:88:ee:63:dd:f0:62: 34:37:d4:70:4b:bb:59:7c:0f:fc:67:63:01:d2:08: 39:6a:fb:f5:2a:98:09:8c:3e:ca:16:6b:90:ae:fe: 1b:a3:6a:92:6a:83:25:67:37:d4:03:b9:90:67:d2: 5d:a8:7e:96:00:ac:64:d7:a7:f6:1a:e3:05:f8:3b: bf:5b:bc:42:62:17:18:30:20:ac:e4:0b:ca:50:cd: 77:a4:fa:9c:1b:0d:c6:49:c4:88:7d:09:ed:82:c4: 6c:eb:7b:8c:bc:4e:71:4c:f5:26:9f:71:64:2c:5f: 8a:dc:3e:df:41:e4:cb:39:a6:d7:04:8f:54:5c:41: 43:d3:ce:de:50:55:7f:72:6d:b3:2c:82:b5:c5:b6: 49:6d:2e:ae:c6:71:99:fe:7f:ee:50:68:e6:9d:b0: 99:8f:a2:4f:90:1b:eb:54:2b:94:0c:39:2d:64:32: 88:88:37:e9:3e:84:0b:d1:5e:ac:e5:2c:ce:a0:57: 41:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F4:23:C7:88:AB:1C:87:7D:AD:0C:2D:7F:3D:8D:F5:40:53:D1:AB X509v3 Authority Key Identifier: keyid:A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:2e:b0:e9:bf:13:40:26:94:c1:8e:9e:27:d5:ae:e3:cd:23: 21:85:86:5f:bd:7d:1a:6a:b3:1c:e7:03:ba:c7:57:c6:b1:e8: ff:61:30:53:15:01:56:25:50:84:ca:1e:f0:b9:38:0d:ed:40: 5d:31:c9:cb:43:23:48:a6:53:cd:75:50:07:9c:41:ce:6c:5d: 96:52:1c:50:c0:0f:6c:9d:91:5c:89:69:bf:0a:99:91:95:2d: bb:03:db:dd:b5:86:39:3c:db:f5:56:63:1a:4c:4f:21:b4:1f: 08:7f:33:1c:fc:91:4f:d3:6b:8a:07:c6:38:a4:bc:7a:06:7f: fe:eb:5a:88:4b:e3:b1:57:40:47:f0:57:54:44:e0:3c:af:a1: 65:3c:40:2b:53:15:1e:6a:8b:a2:1e:fe:f2:49:9b:0e:c9:fc: 30:ba:f1:37:f5:c5:75:3a:a8:63:f6:96:97:81:38:52:ae:c1: 43:ba:ba:a2:e1:87:67:05:62:e0:49:a4:69:18:a8:be:d3:5f: 32:3e:63:d9:be:5b:71:6c:cf:95:cd:4e:96:21:95:b4:1d:ae: 63:53:15:90:84:d9:e8:fb:8e:d1:81:02:04:af:78:49:2b:e1: bd:51:84:bb:32:05:db:97:c9:55:42:45:2a:1a:50:22:61:72: 3e:dc:ca:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLWCY0MKaYU9xfvEkjl2VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0OWM0ZTBjZjVjOGRiYmI2YTY3Y2YxZGEyZjMxZjQxNjI3 NDlmZGQwHhcNMjUxMjA2MDEwMTE0WhcNMjUxMjA3MDEwMTE0WjAzMTEwLwYDVQQD EygzZmY0MjNjNzg4YWIxYzg3N2RhZDBjMmQ3ZjNkOGRmNTQwNTNkMWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOiqmoVIbTNYhzG7cgxKJry5XeJI kXfWjsxL3/sydbFlrRmA1jKsLMIsP+S8r75v7D+fGZogrudn8TPSnVKtMhZZiT6I 7mPd8GI0N9RwS7tZfA/8Z2MB0gg5avv1KpgJjD7KFmuQrv4bo2qSaoMlZzfUA7mQ Z9JdqH6WAKxk16f2GuMF+Du/W7xCYhcYMCCs5AvKUM13pPqcGw3GScSIfQntgsRs 63uMvE5xTPUmn3FkLF+K3D7fQeTLOabXBI9UXEFD087eUFV/cm2zLIK1xbZJbS6u xnGZ/n/uUGjmnbCZj6JPkBvrVCuUDDktZDKIiDfpPoQL0V6s5SzOoFdB6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD/0I8eIqxyHfa0MLX89jfVAU9GrMB8GA1UdIwQY MBaAFKScTgz1yNu7amfPHaLzH0FidJ/dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEp4T0RQWEkyN3RxWjg4ZG92TWZRV0owbjkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC85ZTE5YzYtZGVmZC00NTVmLTkwYTMt ODhlZDhkNzcxN2E0LzEvcEp4T0RQWEkyN3RxWjg4ZG92TWZRV0owbjkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC85ZTE5YzYtZGVmZC00NTVmLTkwYTMtODhlZDhkNzcxN2E0 LzEvcEp4T0RQWEkyN3RxWjg4ZG92TWZRV0owbjkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASS6w6b8T QCaUwY6eJ9Wu480jIYWGX719GmqzHOcDusdXxrHo/2EwUxUBViVQhMoe8Lk4De1A XTHJy0MjSKZTzXVQB5xBzmxdllIcUMAPbJ2RXIlpvwqZkZUtuwPb3bWGOTzb9VZj GkxPIbQfCH8zHPyRT9NrigfGOKS8egZ//utaiEvjsVdAR/BXVETgPK+hZTxAK1MV HmqLoh7+8kmbDsn8MLrxN/XFdTqoY/aWl4E4Uq7BQ7q6ouGHZwVi4EmkaRiovtNf Mj5j2b5bcWzPlc1OliGVtB2uY1MVkITZ6PuO0YECBK94SSvhvVGEuzIF25fJVUJF KhpQImFyPtzKdg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:18:15 2025 by rpki-client