This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft File: PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft (raw, json) Hash identifier: s/pL+iy1TFxdG3IhEzlQMnsYbQpJqMBzCi7/X9LHMzU= Subject key identifier: BB:AD:83:9A:7A:E8:86:C6:04:2A:49:69:54:63:D9:CF:39:B8:81:FC Authority key identifier: 3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D Certificate issuer: /CN=3e34b02edc7c2878f94c5104cafa8978afb6752d Certificate serial: 019AF23F994467D61541B67C00BF7D670D8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft Manifest number: 097B Signing time: Sat 06 Dec 2025 06:00:45 +0000 Manifest this update: Sat 06 Dec 2025 06:00:45 +0000 Manifest next update: Sun 07 Dec 2025 06:00:45 +0000 Files and hashes: 1: PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl (hash: HLVgcG49Mxl2XfzKnvTSbrCCm7nKewpWkttJ7GI8Le8=) 2: zw3ZQoqzEpP0EhpQ36h6FYlUI5I.roa (hash: Jk/Vq/HavBcVMjBR4tqdS47N90EhCkZ4tAXukBLV+pA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:99:44:67:d6:15:41:b6:7c:00:bf:7d:67:0d:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e34b02edc7c2878f94c5104cafa8978afb6752d Validity Not Before: Dec 6 06:00:45 2025 GMT Not After : Dec 7 06:00:45 2025 GMT Subject: CN=bbad839a7ae886c6042a49695463d9cf39b881fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9a:c6:56:b7:fb:49:a7:c8:d5:33:3c:69:8b: eb:72:59:d9:18:f4:40:f9:5c:2d:eb:50:8e:4a:42: 29:90:3f:f8:d4:df:cf:74:d1:5b:7a:45:8c:c3:9c: 1c:ca:0b:7c:e4:67:f6:55:b8:16:be:fe:66:c2:5e: 89:48:04:e2:90:c0:72:e3:0b:96:0d:cd:30:52:13: 0a:39:fd:ff:95:f3:84:9a:77:2c:d4:e6:ad:0a:88: 8e:ad:e4:44:94:1e:70:87:82:40:22:92:57:1f:46: 8f:53:df:bb:68:cf:52:71:ee:f0:6d:4a:24:de:c2: 4c:69:ca:06:54:39:99:93:db:a0:b8:3d:9d:c1:6c: de:e3:47:09:ed:9c:91:95:f3:41:63:13:39:e8:3f: 35:ac:57:ee:e7:5d:e7:e8:e8:a0:b5:5a:50:fd:87: b9:09:79:d7:34:1f:ac:c4:38:7a:2f:38:5f:c3:76: 15:08:50:10:ef:c6:55:39:18:7a:aa:d9:1c:6d:ea: 63:ff:86:2e:e2:58:8e:c6:d5:6d:d7:29:ba:54:28: 76:2e:55:21:45:10:3a:82:e0:c8:91:96:30:fd:99: 9f:b7:f7:f8:c5:61:78:db:94:d1:bd:b0:a5:a4:47: 06:22:e1:dd:4d:c5:dd:55:ed:c4:97:78:b1:98:d9: 59:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:AD:83:9A:7A:E8:86:C6:04:2A:49:69:54:63:D9:CF:39:B8:81:FC X509v3 Authority Key Identifier: keyid:3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:b0:4e:94:15:42:6d:7c:20:2e:bb:39:f8:3b:72:bf:1b:e6: b1:69:ba:b3:4f:0e:d0:ae:54:9c:8b:f3:96:bf:28:0a:e7:d1: e2:04:52:9b:f3:08:09:90:1c:e7:81:60:75:ea:2c:93:fa:47: 4a:a2:22:e4:94:1d:55:c1:39:79:7c:f3:3c:f8:ba:c9:33:20: 4a:bc:61:3b:c9:ba:d4:67:d7:fc:bf:83:c1:bb:1d:1e:8c:df: 7f:31:e3:ed:d5:0d:59:e8:d3:9f:48:fc:93:f0:9f:7a:df:a4: 8c:1e:8e:9b:c9:57:9e:8b:05:04:34:1c:40:d3:da:ce:fc:f8: e2:14:6a:00:14:50:62:8e:5b:40:cf:b0:80:28:59:e4:89:72: e8:60:af:dd:88:7d:bd:cf:9f:d7:9a:c8:c1:97:38:f4:a3:48: d9:d5:94:47:58:f5:47:a1:08:80:18:83:5a:7d:b3:66:37:1d: a7:48:ed:17:e6:4e:88:cf:3e:33:31:c0:78:4a:90:b3:da:41: c1:5e:50:f2:d8:38:23:d0:54:20:7a:0d:09:b2:1d:01:d7:17: ab:87:2c:0f:d1:3d:dd:0a:7b:00:18:f3:07:1d:4b:07:0d:5a: 4b:2c:23:6e:28:54:72:fc:87:a5:39:00:b0:f6:44:38:b2:b6: c3:a5:48:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP5lEZ9YVQbZ8AL99Zw2OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMzRiMDJlZGM3YzI4NzhmOTRjNTEwNGNhZmE4OTc4YWZi Njc1MmQwHhcNMjUxMjA2MDYwMDQ1WhcNMjUxMjA3MDYwMDQ1WjAzMTEwLwYDVQQD EyhiYmFkODM5YTdhZTg4NmM2MDQyYTQ5Njk1NDYzZDljZjM5Yjg4MWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZrGVrf7SafI1TM8aYvrclnZGPRA +Vwt61COSkIpkD/41N/PdNFbekWMw5wcygt85Gf2VbgWvv5mwl6JSATikMBy4wuW Dc0wUhMKOf3/lfOEmncs1OatCoiOreRElB5wh4JAIpJXH0aPU9+7aM9Sce7wbUok 3sJMacoGVDmZk9uguD2dwWze40cJ7ZyRlfNBYxM56D81rFfu513n6OigtVpQ/Ye5 CXnXNB+sxDh6Lzhfw3YVCFAQ78ZVORh6qtkcbepj/4Yu4liOxtVt1ym6VCh2LlUh RRA6guDIkZYw/Zmft/f4xWF425TRvbClpEcGIuHdTcXdVe3El3ixmNlZPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLutg5p66IbGBCpJaVRj2c85uIH8MB8GA1UdIwQY MBaAFD40sC7cfCh4+UxRBMr6iXivtnUtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGpTd0x0eDhLSGo1VEZFRXl2cUplSy0yZFMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi80MjI1MmUtMDMyMS00ZGEyLTkyZjQt MzVhMDI0MWE0MzAxLzEvUGpTd0x0eDhLSGo1VEZFRXl2cUplSy0yZFMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi80MjI1MmUtMDMyMS00ZGEyLTkyZjQtMzVhMDI0MWE0MzAx LzEvUGpTd0x0eDhLSGo1VEZFRXl2cUplSy0yZFMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiLBOlBVC bXwgLrs5+DtyvxvmsWm6s08O0K5UnIvzlr8oCufR4gRSm/MICZAc54Fgdeosk/pH SqIi5JQdVcE5eXzzPPi6yTMgSrxhO8m61GfX/L+DwbsdHozffzHj7dUNWejTn0j8 k/Cfet+kjB6Om8lXnosFBDQcQNPazvz44hRqABRQYo5bQM+wgChZ5Ily6GCv3Yh9 vc+f15rIwZc49KNI2dWUR1j1R6EIgBiDWn2zZjcdp0jtF+ZOiM8+MzHAeEqQs9pB wV5Q8tg4I9BUIHoNCbIdAdcXq4csD9E93Qp7ABjzBx1LBw1aSywjbihUcvyHpTkA sPZEOLK2w6VIFw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:45:36 2025 by rpki-client