This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft File: PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft (raw, json) Hash identifier: OTfGfB9UtNIsYrbfa97rcDaSDmdbeyyi6z2Nuna5O9U= Subject key identifier: D2:39:5D:60:CF:AC:8A:93:11:A8:F9:10:85:7E:55:11:00:49:FC:7C Authority key identifier: 3C:9F:40:0F:88:4F:70:30:31:8E:B6:BE:74:C5:28:48:5A:BE:44:60 Certificate issuer: /CN=3c9f400f884f7030318eb6be74c528485abe4460 Certificate serial: 019B3BD907EE9F25B77169AE2A15E2EDF420 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PJ9AD4hPcDAxjra-dMUoSFq-RGA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft Manifest number: 041B Signing time: Sat 20 Dec 2025 13:00:37 +0000 Manifest this update: Sat 20 Dec 2025 13:00:37 +0000 Manifest next update: Sun 21 Dec 2025 13:00:37 +0000 Files and hashes: 1: 5CyBpeLyifB2AFAXOFh8yVUvCwE.roa (hash: JsDCYkyYiFX4qZJz2FVAXDqsZF5P1tX4kX3+rULf7lU=) 2: PJ9AD4hPcDAxjra-dMUoSFq-RGA.crl (hash: V1iGHoviKBe2NrsU+ZgWJVb5EjqSZmwdm4nETcy8qI0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.crl rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft rsync://rpki.ripe.net/repository/DEFAULT/PJ9AD4hPcDAxjra-dMUoSFq-RGA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:07:ee:9f:25:b7:71:69:ae:2a:15:e2:ed:f4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c9f400f884f7030318eb6be74c528485abe4460 Validity Not Before: Dec 20 13:00:37 2025 GMT Not After : Dec 21 13:00:37 2025 GMT Subject: CN=d2395d60cfac8a9311a8f910857e55110049fc7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6d:c9:67:9d:33:81:8c:c2:f6:14:96:c9:9a: d8:2a:06:f5:6c:37:75:de:c6:83:ec:ef:2c:bd:e4: 2d:32:dd:54:0b:d4:2f:c3:cd:3e:16:93:7b:4f:e2: 8d:e0:10:06:41:fe:53:3a:53:bc:89:fb:25:bd:ed: fb:e1:15:5b:75:ae:e1:31:de:6e:c3:aa:de:64:1d: c2:44:ac:76:69:fb:98:fd:87:4b:24:3e:2c:2c:77: 20:2b:46:96:47:63:cf:7e:1e:7e:d1:ce:ff:51:77: 34:e4:41:47:e8:33:c0:c9:58:dc:6f:08:0b:a3:73: 85:2c:fb:ca:16:12:0c:f1:a3:4f:49:62:ee:0c:15: 35:b9:51:fc:56:4b:66:79:1b:5a:18:f5:dc:06:cb: 8e:c5:28:30:78:b9:e4:bc:7b:f8:84:c8:f3:d3:fa: 43:43:e2:eb:c9:b0:6d:aa:b7:80:65:7a:f8:21:05: 43:fa:fa:1f:e3:c1:32:b8:53:b4:fa:ce:16:d3:3e: 7d:a5:03:a0:01:8e:67:79:9b:98:38:51:2d:ff:67: 4e:ad:b4:fe:ff:42:18:72:fd:f9:bf:d5:00:36:05: ab:b0:bf:14:c2:ba:b7:6d:9f:41:62:c8:a6:db:5b: ef:d2:9f:ed:23:28:f5:f4:cd:ab:5c:1a:ea:20:62: 3e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:39:5D:60:CF:AC:8A:93:11:A8:F9:10:85:7E:55:11:00:49:FC:7C X509v3 Authority Key Identifier: keyid:3C:9F:40:0F:88:4F:70:30:31:8E:B6:BE:74:C5:28:48:5A:BE:44:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJ9AD4hPcDAxjra-dMUoSFq-RGA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:d4:fd:2e:fe:2d:ac:6d:9e:1b:34:81:4e:d1:dc:b0:df:27: 33:f5:1a:6a:0f:be:83:c4:f2:98:d6:cf:c7:9b:85:67:15:3d: 34:d3:d7:64:5a:81:16:6c:ae:d4:bb:e7:9b:db:47:61:c5:a5: 20:a3:82:70:59:8b:60:da:84:19:cc:c0:e7:68:ee:e5:4b:e3: 8b:46:b3:ee:9c:3a:da:6c:e3:af:7d:bb:6a:96:35:22:b7:bc: e6:a5:f9:cb:be:03:d1:da:ba:12:1c:23:0d:6c:15:f6:d6:18: 05:4f:27:61:8e:dd:1f:34:e2:2f:7e:9e:b2:7b:26:91:2d:8e: 89:c0:3c:ac:30:4d:b8:fa:ed:ec:f4:65:a2:5d:7f:9b:a7:d1: d1:01:23:a8:d8:df:56:17:dc:2d:e1:47:b0:e2:3a:5d:d1:8a: cd:8e:27:a9:6a:ba:39:15:d2:f0:29:d6:c0:ee:39:07:61:10: 25:3b:93:96:3a:33:48:76:b2:94:03:ed:80:d2:f3:66:5f:6c: 52:0d:53:17:ea:5c:ff:e1:bb:25:a2:84:4d:b5:cb:97:a5:31: c1:bb:d2:bc:80:4d:86:44:2b:fd:3c:74:b6:d7:44:10:3a:73: 9d:99:25:88:c1:83:f2:ff:c6:f3:ba:c4:3d:0f:5c:7e:56:58: 69:fa:3a:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72QfunyW3cWmuKhXi7fQgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjOWY0MDBmODg0ZjcwMzAzMThlYjZiZTc0YzUyODQ4NWFi ZTQ0NjAwHhcNMjUxMjIwMTMwMDM3WhcNMjUxMjIxMTMwMDM3WjAzMTEwLwYDVQQD EyhkMjM5NWQ2MGNmYWM4YTkzMTFhOGY5MTA4NTdlNTUxMTAwNDlmYzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2W3JZ50zgYzC9hSWyZrYKgb1bDd1 3saD7O8sveQtMt1UC9Qvw80+FpN7T+KN4BAGQf5TOlO8ifslve374RVbda7hMd5u w6reZB3CRKx2afuY/YdLJD4sLHcgK0aWR2PPfh5+0c7/UXc05EFH6DPAyVjcbwgL o3OFLPvKFhIM8aNPSWLuDBU1uVH8VktmeRtaGPXcBsuOxSgweLnkvHv4hMjz0/pD Q+LrybBtqreAZXr4IQVD+vof48EyuFO0+s4W0z59pQOgAY5neZuYOFEt/2dOrbT+ /0IYcv35v9UANgWrsL8Uwrq3bZ9BYsim21vv0p/tIyj19M2rXBrqIGI+bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNI5XWDPrIqTEaj5EIV+VREASfx8MB8GA1UdIwQY MBaAFDyfQA+IT3AwMY62vnTFKEhavkRgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEo5QUQ0aFBjREF4anJhLWRNVW9TRnEtUkdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My84NGFiZDUtMTkxZi00Zjg4LWJkZTEt Zjg0OGRkYzVhMGIyLzEvUEo5QUQ0aFBjREF4anJhLWRNVW9TRnEtUkdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My84NGFiZDUtMTkxZi00Zjg4LWJkZTEtZjg0OGRkYzVhMGIy LzEvUEo5QUQ0aFBjREF4anJhLWRNVW9TRnEtUkdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJNT9Lv4t rG2eGzSBTtHcsN8nM/Uaag++g8TymNbPx5uFZxU9NNPXZFqBFmyu1Lvnm9tHYcWl IKOCcFmLYNqEGczA52ju5Uvji0az7pw62mzjr327apY1Ire85qX5y74D0dq6Ehwj DWwV9tYYBU8nYY7dHzTiL36esnsmkS2OicA8rDBNuPrt7PRlol1/m6fR0QEjqNjf VhfcLeFHsOI6XdGKzY4nqWq6ORXS8CnWwO45B2EQJTuTljozSHaylAPtgNLzZl9s Ug1TF+pc/+G7JaKETbXLl6UxwbvSvIBNhkQr/Tx0ttdEEDpznZkliMGD8v/G87rE PQ9cflZYafo6XQ== -----END CERTIFICATE-----Generated at Sat Dec 20 19:01:23 2025 by rpki-client