This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft File: pJKfzWHcadzPvgHV_wA1tBrJUmA.mft (raw, json) Hash identifier: tE5g4QU3XRxJq2daF08YdJnqMjXtGnaxkGiJgfQ76XA= Subject key identifier: 90:96:C8:10:CE:B4:19:A3:87:8F:D3:AA:3D:F2:FA:53:93:E2:43:67 Authority key identifier: A4:92:9F:CD:61:DC:69:DC:CF:BE:01:D5:FF:00:35:B4:1A:C9:52:60 Certificate issuer: /CN=a4929fcd61dc69dccfbe01d5ff0035b41ac95260 Certificate serial: 019AF5776A1C3A6E24D41839E6F3C4554C8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft Manifest number: 1078 Signing time: Sat 06 Dec 2025 21:00:35 +0000 Manifest this update: Sat 06 Dec 2025 21:00:35 +0000 Manifest next update: Sun 07 Dec 2025 21:00:35 +0000 Files and hashes: 1: FMd4ncvFc0vMJ63ZqH_KhMZqr00.roa (hash: GAIpznWNN7ttQuk7XL5JgmFjADI10rnA9JaXxJOak4g=) 2: pJKfzWHcadzPvgHV_wA1tBrJUmA.crl (hash: kCV5ioHj/sTIlPug/If62UrpZPWDP8heqIy06sn7fXk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:6a:1c:3a:6e:24:d4:18:39:e6:f3:c4:55:4c:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4929fcd61dc69dccfbe01d5ff0035b41ac95260 Validity Not Before: Dec 6 21:00:35 2025 GMT Not After : Dec 7 21:00:35 2025 GMT Subject: CN=9096c810ceb419a3878fd3aa3df2fa5393e24367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:52:f9:a1:16:81:ef:c3:d7:d9:4d:40:72:5f: 92:6e:97:15:e9:ca:02:4c:67:10:13:39:9d:64:78: 8a:0d:01:67:f9:53:59:8a:25:f3:ca:41:12:68:b9: 49:59:17:89:f5:2f:98:9e:f3:d4:ce:66:6f:33:51: 2b:d1:74:59:da:ae:3b:5e:f1:2c:a8:fd:87:b4:5e: 17:7e:44:23:88:a4:8e:a9:d3:89:ee:44:f4:f6:79: a0:a4:b2:1e:0b:a3:97:2a:75:9a:42:65:b2:00:15: de:21:b9:5e:a3:43:82:21:13:07:70:01:b5:07:fa: 4d:1e:62:32:ae:0a:45:72:db:df:a7:c0:cc:9e:6d: 27:c1:3b:d0:f8:c5:12:1f:89:a8:e8:31:c1:38:a6: 77:3c:a7:f4:9d:8e:ef:d8:20:b0:dd:f8:33:26:3c: 11:3e:9b:db:bb:79:a8:7d:5c:a5:c0:ae:5b:cb:15: 8e:7a:f9:d1:1d:38:8d:25:d6:0c:d9:98:0d:66:c7: 29:81:e6:fd:7f:0a:3d:0f:53:7a:e5:0b:2c:84:98: cf:2b:7d:db:8d:9b:e0:8f:54:da:79:0e:c6:45:f3: a0:8c:7c:ca:8d:82:d5:e8:35:36:74:ff:5b:e6:b5: f4:c4:89:ac:f1:7c:c6:59:54:f1:08:b1:49:3a:fe: be:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:96:C8:10:CE:B4:19:A3:87:8F:D3:AA:3D:F2:FA:53:93:E2:43:67 X509v3 Authority Key Identifier: keyid:A4:92:9F:CD:61:DC:69:DC:CF:BE:01:D5:FF:00:35:B4:1A:C9:52:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:e2:4b:96:bf:b1:70:8d:a2:e4:6e:b5:ca:09:6d:ec:2d:d2: 68:ef:56:d8:49:19:74:1d:f2:7c:c6:9d:7b:ef:be:e0:fb:2e: f2:f9:3d:10:aa:49:5e:0f:dd:e5:ae:fd:dd:57:1a:17:87:35: ec:9a:2a:07:a2:02:a8:db:b8:9b:15:e8:ef:72:63:5b:82:40: df:65:bf:d2:4e:41:dc:63:e1:cd:74:75:21:41:0d:21:c5:61: 0d:4b:84:07:54:25:91:ea:e0:ec:8f:7e:71:18:9c:e5:6b:bd: 67:cf:f4:17:98:ed:c9:5b:8a:fd:82:f8:cb:a6:87:22:3c:5a: 01:f5:a9:d8:39:f4:46:59:70:b7:5f:ad:8f:75:07:ff:2c:58: 50:74:eb:1a:cc:dd:25:f7:2f:78:a9:19:4c:71:47:7e:c4:c5: 97:12:e1:75:a1:bf:bd:39:af:6c:53:76:55:9a:87:65:45:e3: 34:29:5a:e7:44:62:fb:aa:d2:f5:c9:9d:26:fd:1a:44:6e:f1: ac:14:40:02:e2:8d:4d:82:3e:69:ef:18:37:52:91:67:0a:a9: 59:62:d7:99:96:8d:21:5f:ca:bb:42:b8:b5:6a:c0:67:ff:e7: c9:5d:e7:ef:eb:f7:ef:bf:5f:08:38:ac:cb:22:10:dd:d3:ec: 46:88:f3:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d2ocOm4k1Bg55vPEVUyNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0OTI5ZmNkNjFkYzY5ZGNjZmJlMDFkNWZmMDAzNWI0MWFj OTUyNjAwHhcNMjUxMjA2MjEwMDM1WhcNMjUxMjA3MjEwMDM1WjAzMTEwLwYDVQQD Eyg5MDk2YzgxMGNlYjQxOWEzODc4ZmQzYWEzZGYyZmE1MzkzZTI0MzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5FL5oRaB78PX2U1Acl+SbpcV6coC TGcQEzmdZHiKDQFn+VNZiiXzykESaLlJWReJ9S+YnvPUzmZvM1Er0XRZ2q47XvEs qP2HtF4XfkQjiKSOqdOJ7kT09nmgpLIeC6OXKnWaQmWyABXeIbleo0OCIRMHcAG1 B/pNHmIyrgpFctvfp8DMnm0nwTvQ+MUSH4mo6DHBOKZ3PKf0nY7v2CCw3fgzJjwR Ppvbu3mofVylwK5byxWOevnRHTiNJdYM2ZgNZscpgeb9fwo9D1N65QsshJjPK33b jZvgj1TaeQ7GRfOgjHzKjYLV6DU2dP9b5rX0xIms8XzGWVTxCLFJOv6+DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJCWyBDOtBmjh4/Tqj3y+lOT4kNnMB8GA1UdIwQY MBaAFKSSn81h3Gncz74B1f8ANbQayVJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEpLZnpXSGNhZHpQdmdIVl93QTF0QnJKVW1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81YTIxMTctZjU4My00NDVkLWI3MmUt ZWJhOWM1Y2IzMmQwLzEvcEpLZnpXSGNhZHpQdmdIVl93QTF0QnJKVW1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy81YTIxMTctZjU4My00NDVkLWI3MmUtZWJhOWM1Y2IzMmQw LzEvcEpLZnpXSGNhZHpQdmdIVl93QTF0QnJKVW1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhOJLlr+x cI2i5G61yglt7C3SaO9W2EkZdB3yfMade+++4Psu8vk9EKpJXg/d5a793VcaF4c1 7JoqB6ICqNu4mxXo73JjW4JA32W/0k5B3GPhzXR1IUENIcVhDUuEB1Qlkerg7I9+ cRic5Wu9Z8/0F5jtyVuK/YL4y6aHIjxaAfWp2Dn0Rllwt1+tj3UH/yxYUHTrGszd JfcveKkZTHFHfsTFlxLhdaG/vTmvbFN2VZqHZUXjNCla50Ri+6rS9cmdJv0aRG7x rBRAAuKNTYI+ae8YN1KRZwqpWWLXmZaNIV/Ku0K4tWrAZ//nyV3n7+v3779fCDis yyIQ3dPsRojzHA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:55:17 2025 by rpki-client