This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft File: pJMvpJVkpXamFD5F-BVmjyANdjc.mft (raw, json) Hash identifier: dAjrD2Zd5QPOlm/1i4+aGlALU19CHHKc12LKIFo/GbQ= Subject key identifier: C7:CE:98:FB:26:FB:8B:82:62:C1:69:6C:C4:E8:EE:F2:E1:9D:41:5D Authority key identifier: A4:93:2F:A4:95:64:A5:76:A6:14:3E:45:F8:15:66:8F:20:0D:76:37 Certificate issuer: /CN=a4932fa49564a576a6143e45f815668f200d7637 Certificate serial: 019AF2E42FC24F09884A6D427A0E08D8907E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft Manifest number: 080E Signing time: Sat 06 Dec 2025 09:00:31 +0000 Manifest this update: Sat 06 Dec 2025 09:00:31 +0000 Manifest next update: Sun 07 Dec 2025 09:00:31 +0000 Files and hashes: 1: iSvukQiHuclGtd8pfRMbiEnBLFw.roa (hash: vbZa2xzxuysE29r0DoXtqTPn6Mvw10H9Gc8C3jS/Yw8=) 2: pJMvpJVkpXamFD5F-BVmjyANdjc.crl (hash: TYIVnZS9D++aeLIGo+fVNqtOtxsWgE3bUOgwGpWZY88=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:2f:c2:4f:09:88:4a:6d:42:7a:0e:08:d8:90:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4932fa49564a576a6143e45f815668f200d7637 Validity Not Before: Dec 6 09:00:31 2025 GMT Not After : Dec 7 09:00:31 2025 GMT Subject: CN=c7ce98fb26fb8b8262c1696cc4e8eef2e19d415d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b4:34:a5:9f:b8:b6:04:fa:20:7d:43:0d:52: 4a:12:e7:af:0c:a7:1f:2e:40:4d:76:b4:05:e8:6a: 07:eb:67:0b:61:7b:fe:3e:74:f1:ec:cb:8e:c6:46: 4e:24:05:99:03:c6:0b:29:4a:05:ee:a9:56:c7:3b: ef:fe:48:55:dc:e2:bd:4f:1e:82:a4:ba:d8:e9:b2: a7:da:cf:3f:15:fd:a2:90:35:5d:55:8e:29:22:e7: 0e:00:0e:1e:45:68:a6:4c:c1:58:fa:67:f0:fc:04: b2:00:30:af:76:ce:6f:e5:32:8e:da:c1:d8:54:19: 36:1b:20:13:4d:a7:ed:56:eb:89:79:1a:9a:90:8a: fa:ef:11:7a:d0:a8:7e:74:49:02:bf:8f:bb:b2:e3: 7d:23:98:10:2c:49:c9:47:7f:28:aa:cb:96:3f:54: 51:12:94:c9:cc:0e:8b:1e:cb:66:18:e1:f5:4a:2f: 7b:0c:00:41:f5:d7:07:3f:e0:89:57:28:ca:d2:ec: 7b:23:6e:40:4c:8f:a0:2f:af:f0:16:7f:2d:91:27: 6b:a2:07:8a:ee:b9:73:a6:83:07:4f:2c:72:76:e3: 8a:1d:13:a2:cd:5c:80:1a:df:18:e9:d8:cf:63:2d: e5:e6:bd:e9:83:2c:f4:e2:e1:d8:d3:55:26:a8:2f: df:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:CE:98:FB:26:FB:8B:82:62:C1:69:6C:C4:E8:EE:F2:E1:9D:41:5D X509v3 Authority Key Identifier: keyid:A4:93:2F:A4:95:64:A5:76:A6:14:3E:45:F8:15:66:8F:20:0D:76:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:ae:eb:5a:b1:6e:92:2d:bc:8a:a9:2d:ed:7e:25:53:b0:c9: 6f:c6:f0:c9:1f:8e:ea:8d:a3:f6:9d:90:ad:34:51:c0:33:59: 61:b0:5a:3f:d9:df:9a:59:d8:96:36:5a:32:01:bb:19:9e:ee: 7e:65:63:7a:2d:ca:c2:fd:0b:07:70:02:0c:18:d6:41:20:4e: 9d:3e:c2:79:4a:cc:60:d0:6f:ee:0f:ac:06:8e:97:f1:f4:49: 5c:fd:bd:8c:87:92:ea:a9:49:dc:0a:d3:91:80:b3:9f:f7:5d: b1:27:65:08:15:2b:41:a8:7b:c4:d9:34:01:76:23:2a:c3:15: 10:51:26:35:4d:1f:4a:d0:d6:ba:82:69:b1:66:45:ec:02:1e: 81:4a:e1:53:7f:f2:0f:4a:6a:8e:99:95:49:2b:cb:f1:a3:77: 1f:c7:05:3d:36:65:f5:53:b6:df:b0:79:df:4d:6a:f2:11:4f: 1a:7f:52:0e:a4:2d:26:fc:6f:74:90:a6:fd:07:bd:65:5b:88: 9e:ca:59:f5:61:a9:98:96:6e:e4:03:eb:be:18:3b:7e:9c:d3: 21:55:fd:46:31:86:af:1d:15:32:3b:cc:5d:67:d8:13:13:cd: 0b:e7:af:38:8f:e5:2b:0d:ca:2b:7d:d0:a8:5b:e5:92:34:37: 14:d5:fc:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5C/CTwmISm1Ceg4I2JB+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0OTMyZmE0OTU2NGE1NzZhNjE0M2U0NWY4MTU2NjhmMjAw ZDc2MzcwHhcNMjUxMjA2MDkwMDMxWhcNMjUxMjA3MDkwMDMxWjAzMTEwLwYDVQQD EyhjN2NlOThmYjI2ZmI4YjgyNjJjMTY5NmNjNGU4ZWVmMmUxOWQ0MTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLQ0pZ+4tgT6IH1DDVJKEuevDKcf LkBNdrQF6GoH62cLYXv+PnTx7MuOxkZOJAWZA8YLKUoF7qlWxzvv/khV3OK9Tx6C pLrY6bKn2s8/Ff2ikDVdVY4pIucOAA4eRWimTMFY+mfw/ASyADCvds5v5TKO2sHY VBk2GyATTaftVuuJeRqakIr67xF60Kh+dEkCv4+7suN9I5gQLEnJR38oqsuWP1RR EpTJzA6LHstmGOH1Si97DABB9dcHP+CJVyjK0ux7I25ATI+gL6/wFn8tkSdrogeK 7rlzpoMHTyxyduOKHROizVyAGt8Y6djPYy3l5r3pgyz04uHY01UmqC/fiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMfOmPsm+4uCYsFpbMTo7vLhnUFdMB8GA1UdIwQY MBaAFKSTL6SVZKV2phQ+RfgVZo8gDXY3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEpNdnBKVmtwWGFtRkQ1Ri1CVm1qeUFOZGpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8wNGFiNDYtODNmMy00MTViLTg4M2Et YzdjMzI2ZDdhMzY0LzEvcEpNdnBKVmtwWGFtRkQ1Ri1CVm1qeUFOZGpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi8wNGFiNDYtODNmMy00MTViLTg4M2EtYzdjMzI2ZDdhMzY0 LzEvcEpNdnBKVmtwWGFtRkQ1Ri1CVm1qeUFOZGpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXK7rWrFu ki28iqkt7X4lU7DJb8bwyR+O6o2j9p2QrTRRwDNZYbBaP9nfmlnYljZaMgG7GZ7u fmVjei3Kwv0LB3ACDBjWQSBOnT7CeUrMYNBv7g+sBo6X8fRJXP29jIeS6qlJ3ArT kYCzn/ddsSdlCBUrQah7xNk0AXYjKsMVEFEmNU0fStDWuoJpsWZF7AIegUrhU3/y D0pqjpmVSSvL8aN3H8cFPTZl9VO237B5301q8hFPGn9SDqQtJvxvdJCm/Qe9ZVuI nspZ9WGpmJZu5APrvhg7fpzTIVX9RjGGrx0VMjvMXWfYExPNC+evOI/lKw3KK33Q qFvlkjQ3FNX8cw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:43:05 2025 by rpki-client