This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft File: pmJGuAbomrpA5-WIiPNXZROjk0o.mft (raw, json) Hash identifier: AkbPipYjc0oPeOPhknoT0CtM8trPhu+7GsJ9e1+Yuxo= Subject key identifier: 4F:8C:D2:16:2E:AD:EC:A4:79:9D:63:D2:14:86:A4:B7:3B:01:98:6C Authority key identifier: A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A Certificate issuer: /CN=a66246b806e89aba40e7e58888f3576513a3934a Certificate serial: 019AF2AD633E2CE83A6446296638E2FA0D86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft Manifest number: 1769 Signing time: Sat 06 Dec 2025 08:00:40 +0000 Manifest this update: Sat 06 Dec 2025 08:00:40 +0000 Manifest next update: Sun 07 Dec 2025 08:00:40 +0000 Files and hashes: 1: 6W6gmSc4k57Y4v5MIcHO8sDy0Nk.roa (hash: aByrM29yQlmUSgYmIxuh2nCAQIQ4+06fpCqZWYYHHbE=) 2: WwtbLNZ8w3CZaCckJBj7-wgL_Wg.roa (hash: awi9blZyXe6dA7Vb92PcI70MUj14FAGRwBheENnmVNg=) 3: pmJGuAbomrpA5-WIiPNXZROjk0o.crl (hash: PoWuGR8uzC9hD2nXtCadLnhpWvMYJO8d1kp0P8AQYtI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:63:3e:2c:e8:3a:64:46:29:66:38:e2:fa:0d:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a66246b806e89aba40e7e58888f3576513a3934a Validity Not Before: Dec 6 08:00:40 2025 GMT Not After : Dec 7 08:00:40 2025 GMT Subject: CN=4f8cd2162eadeca4799d63d21486a4b73b01986c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a3:3a:71:d7:73:8e:ee:cc:c0:82:0a:81:a8: 36:bc:fc:fb:be:be:7b:17:1a:17:f9:dc:ea:9c:5a: 99:d2:31:85:4c:0d:25:05:48:ac:52:41:34:36:9e: 92:32:6d:1c:04:21:67:16:a9:36:45:c8:1c:6e:2a: dd:6c:8c:8b:ee:c6:a4:d1:f3:30:e9:d0:c1:64:e6: ef:d2:14:15:b3:e1:6e:71:7c:dd:0d:ad:37:67:59: f7:4e:7e:bb:d8:08:fa:05:b8:91:7f:54:4b:17:ad: 2c:37:75:e6:2c:80:01:50:71:c2:72:9f:46:12:5e: 28:69:fc:a3:94:9d:88:af:66:99:cb:c8:bd:9d:4e: d3:98:f2:f9:0e:f4:de:8d:3e:b1:13:9f:85:10:23: 61:30:a7:e3:79:33:4d:2a:39:e9:6d:c2:e7:e4:08: 0f:19:0d:55:11:e6:58:63:1a:7b:99:fe:be:91:15: a4:fe:2a:e7:01:c4:bc:80:ce:dd:e9:06:dd:93:3d: d0:30:b7:5d:42:bc:76:7b:92:b8:71:e4:1c:66:27: 34:64:f2:86:83:ec:0e:1c:0e:d5:aa:83:a4:96:83: 9f:32:f4:3b:c5:49:24:89:d4:3b:9d:7e:58:09:f2: 2f:e4:36:df:d9:cb:8f:ef:a2:11:20:37:8a:57:ad: 23:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:8C:D2:16:2E:AD:EC:A4:79:9D:63:D2:14:86:A4:B7:3B:01:98:6C X509v3 Authority Key Identifier: keyid:A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:03:94:fb:d9:d6:1e:b5:1a:2b:43:5c:db:67:9e:5c:5c:32: e2:ec:8c:b3:bb:fd:94:ad:a3:60:c1:df:e9:a2:79:f7:4e:da: fc:02:c4:35:88:c0:ab:39:01:4e:c0:b1:f6:6f:5e:49:03:83: fe:d2:98:df:4b:01:01:ef:bb:c2:10:8b:74:65:50:5b:66:85: 6a:60:ce:68:d7:50:59:cc:3c:64:11:47:a0:53:53:59:b6:40: 42:e3:9e:42:10:0b:69:28:60:c1:3e:45:77:fa:be:85:74:21: fe:36:04:81:b5:fa:0a:cc:63:c1:fc:9c:c3:2d:d8:d5:b2:08: 8e:73:1f:f9:4e:00:ad:d6:81:7d:33:0c:66:77:95:4f:a5:19: 93:79:13:40:35:96:7c:d2:1c:58:0f:e5:de:a6:b5:7b:63:29: ca:42:07:8a:3c:9d:6b:0b:66:17:94:25:06:bc:b9:a3:eb:1b: 4d:b8:2d:b8:ea:fa:58:b3:a5:0b:a8:24:b4:e7:2b:70:db:b7: be:02:63:d1:fc:f6:59:70:8f:56:7b:86:3c:24:51:a7:0c:45: ac:c3:b9:a1:43:99:01:c0:59:b8:b6:4a:a0:12:a1:2e:d4:f1: 72:4f:35:2b:a2:35:b1:b3:d1:a1:1a:36:01:30:46:ae:49:74: ca:2b:97:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrWM+LOg6ZEYpZjji+g2GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NjI0NmI4MDZlODlhYmE0MGU3ZTU4ODg4ZjM1NzY1MTNh MzkzNGEwHhcNMjUxMjA2MDgwMDQwWhcNMjUxMjA3MDgwMDQwWjAzMTEwLwYDVQQD Eyg0ZjhjZDIxNjJlYWRlY2E0Nzk5ZDYzZDIxNDg2YTRiNzNiMDE5ODZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKM6cddzju7MwIIKgag2vPz7vr57 FxoX+dzqnFqZ0jGFTA0lBUisUkE0Np6SMm0cBCFnFqk2RcgcbirdbIyL7sak0fMw 6dDBZObv0hQVs+FucXzdDa03Z1n3Tn672Aj6BbiRf1RLF60sN3XmLIABUHHCcp9G El4oafyjlJ2Ir2aZy8i9nU7TmPL5DvTejT6xE5+FECNhMKfjeTNNKjnpbcLn5AgP GQ1VEeZYYxp7mf6+kRWk/irnAcS8gM7d6Qbdkz3QMLddQrx2e5K4ceQcZic0ZPKG g+wOHA7VqoOkloOfMvQ7xUkkidQ7nX5YCfIv5Dbf2cuP76IRIDeKV60jVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE+M0hYureykeZ1j0hSGpLc7AZhsMB8GA1UdIwQY MBaAFKZiRrgG6Jq6QOfliIjzV2UTo5NKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcG1KR3VBYm9tcnBBNS1XSWlQTlhaUk9qazBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC81NTUyMjEtMDAwZC00OWY2LTgzMzUt NGZkMjhjNjYxOWFlLzEvcG1KR3VBYm9tcnBBNS1XSWlQTlhaUk9qazBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC81NTUyMjEtMDAwZC00OWY2LTgzMzUtNGZkMjhjNjYxOWFl LzEvcG1KR3VBYm9tcnBBNS1XSWlQTlhaUk9qazBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAwOU+9nW HrUaK0Nc22eeXFwy4uyMs7v9lK2jYMHf6aJ5907a/ALENYjAqzkBTsCx9m9eSQOD /tKY30sBAe+7whCLdGVQW2aFamDOaNdQWcw8ZBFHoFNTWbZAQuOeQhALaShgwT5F d/q+hXQh/jYEgbX6Csxjwfycwy3Y1bIIjnMf+U4ArdaBfTMMZneVT6UZk3kTQDWW fNIcWA/l3qa1e2MpykIHijydawtmF5QlBry5o+sbTbgtuOr6WLOlC6gktOcrcNu3 vgJj0fz2WXCPVnuGPCRRpwxFrMO5oUOZAcBZuLZKoBKhLtTxck81K6I1sbPRoRo2 ATBGrkl0yiuXRg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:25:34 2025 by rpki-client