This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft File: PJMfJlqEcdMs6ESdnhhvDccRSno.mft (raw, json) Hash identifier: dn6pWMW1VZXN6dSUnEiP3zfTDYZnbxxTq4GNwUzppnw= Subject key identifier: 7D:08:91:F4:6B:5D:08:62:5A:33:32:CC:BA:3F:3F:34:E2:80:43:E9 Authority key identifier: 3C:93:1F:26:5A:84:71:D3:2C:E8:44:9D:9E:18:6F:0D:C7:11:4A:7A Certificate issuer: /CN=3c931f265a8471d32ce8449d9e186f0dc7114a7a Certificate serial: 019AF1D1D984CE7413C712E38717825D8174 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft Manifest number: 145F Signing time: Sat 06 Dec 2025 04:00:53 +0000 Manifest this update: Sat 06 Dec 2025 04:00:53 +0000 Manifest next update: Sun 07 Dec 2025 04:00:53 +0000 Files and hashes: 1: PJMfJlqEcdMs6ESdnhhvDccRSno.crl (hash: 2sgquSlUjBLoQat2kQK9D6q0S/S0HxCoVH4pwQrzRxA=) 2: PkJhyt9pT1uGvNEkXULDRnIoKM8.roa (hash: GnXTwsBZIxIhJPycvbpoXf49+cV9ppIdazG5Z3GlNBg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.crl rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:d9:84:ce:74:13:c7:12:e3:87:17:82:5d:81:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c931f265a8471d32ce8449d9e186f0dc7114a7a Validity Not Before: Dec 6 04:00:53 2025 GMT Not After : Dec 7 04:00:53 2025 GMT Subject: CN=7d0891f46b5d08625a3332ccba3f3f34e28043e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9b:e3:3b:bd:c3:e7:1e:a3:4d:d5:55:9a:38: bf:46:ee:95:f7:61:d3:11:20:ef:0e:a6:58:de:bb: 13:4d:72:2d:4c:95:ec:47:74:33:44:bf:8b:1c:f2: 5b:44:c1:1c:86:58:ad:e6:8b:16:23:ec:c2:de:d1: 93:48:5c:10:98:4e:a6:99:a9:a9:ec:db:82:99:97: 54:e0:6b:cb:68:3d:36:dd:53:cd:4f:f9:8b:96:90: 80:1d:41:74:ba:5b:e9:d4:47:e3:ea:1d:6e:bd:1a: c2:60:f7:b9:d8:e4:55:82:fd:5b:97:74:a6:35:ea: ec:df:c8:d4:60:3a:3c:be:8f:ab:7e:fb:e6:79:c2: 7c:d3:e2:06:57:05:32:24:81:24:d7:4a:7c:3d:dc: 2b:c0:9e:15:61:f2:50:15:88:71:2e:fe:8f:fd:08: fc:91:0c:91:ed:eb:34:66:b8:37:3a:85:61:4b:9a: f5:72:c6:f1:9f:42:a2:71:00:15:95:38:81:1e:f7: ac:c5:92:34:86:d4:71:e6:07:46:b1:1f:63:25:af: 71:9b:15:8e:4b:4a:f8:de:e6:a5:b4:6c:33:3a:6f: bf:85:26:24:1d:eb:e0:1d:83:2a:59:16:e7:22:9c: c4:10:f2:34:71:8d:03:cf:9a:fb:58:da:4f:9e:86: ca:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:08:91:F4:6B:5D:08:62:5A:33:32:CC:BA:3F:3F:34:E2:80:43:E9 X509v3 Authority Key Identifier: keyid:3C:93:1F:26:5A:84:71:D3:2C:E8:44:9D:9E:18:6F:0D:C7:11:4A:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:90:36:ca:7b:15:3b:d6:2b:ca:1c:84:0f:e9:67:4e:6c:82: 1b:3e:ab:08:90:93:87:24:a8:6d:8e:e1:fe:ba:35:89:98:9f: 26:75:2c:52:1b:e7:b2:01:9f:2c:38:c1:26:7d:5d:d5:bd:d1: 7c:de:d0:fd:49:5a:50:f9:86:f2:9b:e7:04:77:eb:f1:11:af: 0d:4f:b7:e2:cc:6f:a4:00:30:25:00:ed:c4:b4:1a:a8:82:87: 7b:e5:1a:2f:45:09:e0:d2:50:8b:de:6c:5f:44:dd:b8:95:fb: 46:eb:b6:a8:a7:63:cf:c7:1e:3f:1a:1e:30:f1:5d:88:25:56: 35:6e:13:c7:87:51:17:96:df:31:a0:00:50:94:77:e2:27:4d: 34:a0:4e:4e:d0:35:24:ec:bb:ed:33:5a:52:f2:c7:7c:25:e9: f1:5b:28:ab:ad:19:7a:36:eb:a3:00:9b:30:87:c5:02:1f:cf: da:03:48:1e:6f:f3:c0:0e:42:e3:05:c0:06:2a:65:3d:12:b9: cc:80:ab:b0:c6:af:e5:36:54:d0:d2:58:bb:e2:8c:56:6a:b4: 0b:22:84:b5:0c:d9:da:89:ff:0f:8c:e8:a2:95:60:96:a8:59: f0:ad:53:41:b4:5e:6c:35:fd:40:28:57:c1:dc:c7:ce:68:72: cd:54:9b:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0dmEznQTxxLjhxeCXYF0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjOTMxZjI2NWE4NDcxZDMyY2U4NDQ5ZDllMTg2ZjBkYzcx MTRhN2EwHhcNMjUxMjA2MDQwMDUzWhcNMjUxMjA3MDQwMDUzWjAzMTEwLwYDVQQD Eyg3ZDA4OTFmNDZiNWQwODYyNWEzMzMyY2NiYTNmM2YzNGUyODA0M2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpvjO73D5x6jTdVVmji/Ru6V92HT ESDvDqZY3rsTTXItTJXsR3QzRL+LHPJbRMEchlit5osWI+zC3tGTSFwQmE6mmamp 7NuCmZdU4GvLaD023VPNT/mLlpCAHUF0ulvp1Efj6h1uvRrCYPe52ORVgv1bl3Sm Ners38jUYDo8vo+rfvvmecJ80+IGVwUyJIEk10p8PdwrwJ4VYfJQFYhxLv6P/Qj8 kQyR7es0Zrg3OoVhS5r1csbxn0KicQAVlTiBHvesxZI0htRx5gdGsR9jJa9xmxWO S0r43ualtGwzOm+/hSYkHevgHYMqWRbnIpzEEPI0cY0Dz5r7WNpPnobKEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH0IkfRrXQhiWjMyzLo/PzTigEPpMB8GA1UdIwQY MBaAFDyTHyZahHHTLOhEnZ4Ybw3HEUp6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEpNZkpscUVjZE1zNkVTZG5oaHZEY2NSU25vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9iNTBiZGEtNjg5OS00ZWVmLWEyMzEt NWUwMDI2MzAzNjI5LzEvUEpNZkpscUVjZE1zNkVTZG5oaHZEY2NSU25vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9iNTBiZGEtNjg5OS00ZWVmLWEyMzEtNWUwMDI2MzAzNjI5 LzEvUEpNZkpscUVjZE1zNkVTZG5oaHZEY2NSU25vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfJA2ynsV O9YryhyED+lnTmyCGz6rCJCThySobY7h/ro1iZifJnUsUhvnsgGfLDjBJn1d1b3R fN7Q/UlaUPmG8pvnBHfr8RGvDU+34sxvpAAwJQDtxLQaqIKHe+UaL0UJ4NJQi95s X0TduJX7Ruu2qKdjz8cePxoeMPFdiCVWNW4Tx4dRF5bfMaAAUJR34idNNKBOTtA1 JOy77TNaUvLHfCXp8Vsoq60ZejbrowCbMIfFAh/P2gNIHm/zwA5C4wXABiplPRK5 zICrsMav5TZU0NJYu+KMVmq0CyKEtQzZ2on/D4zoopVglqhZ8K1TQbRebDX9QChX wdzHzmhyzVSbqA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:18 2025 by rpki-client