This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft File: PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft (raw, json) Hash identifier: TxlSx8EzAduaYw6R6x2sLfS8ybfrqQ/JqIRe5s7j4Oc= Subject key identifier: 2E:62:63:55:80:3B:A4:69:8D:A8:6C:8D:96:AF:FD:38:A6:76:6C:07 Authority key identifier: 3C:9F:40:0F:88:4F:70:30:31:8E:B6:BE:74:C5:28:48:5A:BE:44:60 Certificate issuer: /CN=3c9f400f884f7030318eb6be74c528485abe4460 Certificate serial: 019AF464ADCCDEFE5CCE041E092E9B022BC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PJ9AD4hPcDAxjra-dMUoSFq-RGA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft Manifest number: 03F6 Signing time: Sat 06 Dec 2025 16:00:29 +0000 Manifest this update: Sat 06 Dec 2025 16:00:29 +0000 Manifest next update: Sun 07 Dec 2025 16:00:29 +0000 Files and hashes: 1: 5CyBpeLyifB2AFAXOFh8yVUvCwE.roa (hash: JsDCYkyYiFX4qZJz2FVAXDqsZF5P1tX4kX3+rULf7lU=) 2: PJ9AD4hPcDAxjra-dMUoSFq-RGA.crl (hash: um2q0CpAPkf4OwuhVPcr2ZcWBO4eJ/CwhMNiHe0joOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.crl rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft rsync://rpki.ripe.net/repository/DEFAULT/PJ9AD4hPcDAxjra-dMUoSFq-RGA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:ad:cc:de:fe:5c:ce:04:1e:09:2e:9b:02:2b:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c9f400f884f7030318eb6be74c528485abe4460 Validity Not Before: Dec 6 16:00:29 2025 GMT Not After : Dec 7 16:00:29 2025 GMT Subject: CN=2e626355803ba4698da86c8d96affd38a6766c07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c0:e5:c0:87:2b:ab:5c:3d:f5:3e:59:99:9b: 74:4a:0c:e8:c7:23:11:91:7c:6c:5c:c9:1b:61:56: 61:20:31:01:44:49:cc:b2:8f:d7:8b:31:af:1f:f1: ab:3d:cc:d8:a1:15:e0:a3:dd:a0:2b:d8:0b:24:0b: e7:14:13:f5:49:74:86:85:c7:1f:d2:dd:6b:45:9c: 2e:d2:65:94:32:f3:47:87:4c:35:99:d5:6a:bb:38: 9d:1e:57:c7:9f:8e:b5:ca:6e:85:cc:ef:e9:ab:e9: 42:2d:9d:44:9c:a3:ee:0f:11:cc:25:bb:1f:cb:a0: 4c:76:24:47:5c:ea:77:fc:93:d8:eb:ae:65:9a:21: f5:af:02:3b:f1:b1:8a:19:d4:c6:ee:c9:f0:c7:49: ae:29:f9:9a:c4:69:2e:de:1f:42:d2:05:b1:c4:4f: 73:3e:36:36:19:73:e2:80:87:ab:35:9e:70:b4:9f: 5f:88:ba:fa:78:74:11:49:69:0b:84:d7:a1:66:f5: cd:7f:f4:14:52:84:8f:ff:e0:95:a5:ed:e5:d5:37: db:1e:ab:6f:4b:7c:e7:df:79:b7:e6:53:be:72:86: 5a:02:f3:95:af:05:06:b2:76:44:6b:02:98:27:ad: cc:7c:9c:54:8c:b8:ab:46:ac:f2:16:d7:e9:45:b6: c9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:62:63:55:80:3B:A4:69:8D:A8:6C:8D:96:AF:FD:38:A6:76:6C:07 X509v3 Authority Key Identifier: keyid:3C:9F:40:0F:88:4F:70:30:31:8E:B6:BE:74:C5:28:48:5A:BE:44:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJ9AD4hPcDAxjra-dMUoSFq-RGA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:8d:67:da:77:99:8b:58:40:a3:d6:c4:1b:c4:e1:08:53:62: e9:a6:77:86:bc:56:e0:ca:15:41:00:fd:ae:05:60:c1:5c:90: bc:41:92:4f:33:8d:7c:6c:f9:0f:e5:b5:9c:05:e6:42:2b:d9: 56:5d:a2:72:28:69:db:6c:dd:3b:e4:24:c4:89:a7:d4:3c:67: e6:8c:f8:6c:44:6d:e5:45:61:15:ba:fd:0f:0d:b0:ae:65:65: 20:43:7a:e7:5a:73:02:7a:96:40:1a:6c:4c:2a:46:65:9b:79: 69:9e:35:a9:1d:e6:d8:d7:c8:e1:5f:82:7d:85:73:71:6a:8f: 19:1e:2f:25:6d:f8:59:80:93:3a:f4:31:14:7c:d8:8e:c3:69: 95:f8:9d:99:90:36:9d:e1:8b:ef:01:22:41:d9:55:b7:79:4a: 58:73:ec:f0:58:57:36:41:fd:51:db:a3:94:a6:0f:4c:a5:86: 14:1a:a9:9d:82:ce:08:8d:e9:cb:d9:80:74:91:32:93:de:ed: 6b:bf:7d:48:97:8a:9f:a5:22:18:9f:b6:af:f7:e4:5a:97:24: ff:d3:a0:c4:9e:1f:3d:16:fc:83:6f:42:33:34:8f:ea:90:a7: 8f:f8:e2:7f:69:62:0a:fb:4e:e2:5a:fc:7c:83:f2:28:2f:bd: 16:89:8e:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZK3M3v5czgQeCS6bAivFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjOWY0MDBmODg0ZjcwMzAzMThlYjZiZTc0YzUyODQ4NWFi ZTQ0NjAwHhcNMjUxMjA2MTYwMDI5WhcNMjUxMjA3MTYwMDI5WjAzMTEwLwYDVQQD EygyZTYyNjM1NTgwM2JhNDY5OGRhODZjOGQ5NmFmZmQzOGE2NzY2YzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMDlwIcrq1w99T5ZmZt0SgzoxyMR kXxsXMkbYVZhIDEBREnMso/XizGvH/GrPczYoRXgo92gK9gLJAvnFBP1SXSGhccf 0t1rRZwu0mWUMvNHh0w1mdVquzidHlfHn461ym6FzO/pq+lCLZ1EnKPuDxHMJbsf y6BMdiRHXOp3/JPY665lmiH1rwI78bGKGdTG7snwx0muKfmaxGku3h9C0gWxxE9z PjY2GXPigIerNZ5wtJ9fiLr6eHQRSWkLhNehZvXNf/QUUoSP/+CVpe3l1TfbHqtv S3zn33m35lO+coZaAvOVrwUGsnZEawKYJ63MfJxUjLirRqzyFtfpRbbJ+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC5iY1WAO6RpjahsjZav/TimdmwHMB8GA1UdIwQY MBaAFDyfQA+IT3AwMY62vnTFKEhavkRgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEo5QUQ0aFBjREF4anJhLWRNVW9TRnEtUkdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My84NGFiZDUtMTkxZi00Zjg4LWJkZTEt Zjg0OGRkYzVhMGIyLzEvUEo5QUQ0aFBjREF4anJhLWRNVW9TRnEtUkdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My84NGFiZDUtMTkxZi00Zjg4LWJkZTEtZjg0OGRkYzVhMGIy LzEvUEo5QUQ0aFBjREF4anJhLWRNVW9TRnEtUkdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANo1n2neZ i1hAo9bEG8ThCFNi6aZ3hrxW4MoVQQD9rgVgwVyQvEGSTzONfGz5D+W1nAXmQivZ Vl2icihp22zdO+QkxImn1Dxn5oz4bERt5UVhFbr9Dw2wrmVlIEN651pzAnqWQBps TCpGZZt5aZ41qR3m2NfI4V+CfYVzcWqPGR4vJW34WYCTOvQxFHzYjsNplfidmZA2 neGL7wEiQdlVt3lKWHPs8FhXNkH9UdujlKYPTKWGFBqpnYLOCI3py9mAdJEyk97t a799SJeKn6UiGJ+2r/fkWpck/9OgxJ4fPRb8g29CMzSP6pCnj/jif2liCvtO4lr8 fIPyKC+9FomO1A== -----END CERTIFICATE-----Generated at Sun Dec 7 02:18:24 2025 by rpki-client