This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft File: pj3LkKFHQqUr5coJy-2N_BzT0e8.mft (raw, json) Hash identifier: RHfXMd9lFkcP9I8uckSjGrx6C0MysNigRVVOjA6D9r8= Subject key identifier: D5:57:2F:44:72:24:9A:07:2D:AC:78:10:7C:AE:3E:2F:E2:01:53:50 Authority key identifier: A6:3D:CB:90:A1:47:42:A5:2B:E5:CA:09:CB:ED:8D:FC:1C:D3:D1:EF Certificate issuer: /CN=a63dcb90a14742a52be5ca09cbed8dfc1cd3d1ef Certificate serial: 019AF2402DCAFFFDE9F970BB1106871C87D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pj3LkKFHQqUr5coJy-2N_BzT0e8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 06:01:23 +0000 Manifest this update: Sat 06 Dec 2025 06:01:23 +0000 Manifest next update: Sun 07 Dec 2025 06:01:23 +0000 Files and hashes: 1: _fFHOJoXpOrY_um7x7QB-vvO3bk.roa (hash: p/LewBD8vsUMOUJR34qULDasx72iNLAz4cIqUSFI+5E=) 2: pj3LkKFHQqUr5coJy-2N_BzT0e8.crl (hash: 0GuMjD9o7jzhYyIaGqBADMedVRlF8Mv2TxvWKuaK0hc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft rsync://rpki.ripe.net/repository/DEFAULT/pj3LkKFHQqUr5coJy-2N_BzT0e8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 06:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:2d:ca:ff:fd:e9:f9:70:bb:11:06:87:1c:87:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a63dcb90a14742a52be5ca09cbed8dfc1cd3d1ef Validity Not Before: Dec 6 06:01:23 2025 GMT Not After : Dec 7 06:01:23 2025 GMT Subject: CN=d5572f4472249a072dac78107cae3e2fe2015350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:42:2f:32:9a:39:da:ed:66:b6:fd:60:d5:e3: 2b:8c:99:f7:37:35:58:7f:45:bc:76:ae:7f:bd:61: dd:53:cb:ec:4a:74:5e:d4:62:7c:cc:ff:13:c2:b9: 7c:02:b8:60:b1:6d:82:ff:5b:00:35:90:0f:d0:db: f0:f7:99:76:54:fd:59:76:ba:ad:c7:cd:3b:1e:b0: 9a:f2:32:3b:27:c0:c0:6b:4d:48:7e:c0:ce:c9:fe: a1:7f:04:99:68:c3:6f:41:0e:74:b4:55:e4:08:66: 33:1a:36:7b:9c:47:5a:f6:82:03:42:82:c1:95:8f: 78:14:40:63:a0:3c:90:dc:6a:fd:0c:0a:e0:e8:8d: f7:e7:5c:b2:c9:10:a6:6d:e6:2f:93:f1:45:f6:f0: 5f:38:9b:f5:32:18:1a:73:89:96:ee:4e:dc:1d:95: 42:dc:17:25:23:c0:84:f0:6f:38:0d:14:7c:7c:f0: 75:14:58:9a:35:db:eb:7c:e0:50:f6:b8:15:bb:91: 5b:82:3e:ff:70:51:99:9f:34:aa:48:fb:77:55:0d: 1c:4c:4a:9b:57:55:47:97:7a:9e:82:5e:b2:35:e9: 9c:7f:d8:89:90:96:91:ed:6e:39:f2:1d:54:da:d5: d1:a5:52:92:8a:fa:81:d5:9e:e4:e7:55:c4:58:84: a5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:57:2F:44:72:24:9A:07:2D:AC:78:10:7C:AE:3E:2F:E2:01:53:50 X509v3 Authority Key Identifier: keyid:A6:3D:CB:90:A1:47:42:A5:2B:E5:CA:09:CB:ED:8D:FC:1C:D3:D1:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pj3LkKFHQqUr5coJy-2N_BzT0e8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:27:07:5b:97:53:77:de:c9:13:5f:14:00:cc:48:c7:2f:63: f6:cf:07:39:a6:ee:2d:47:94:43:b3:c3:99:a4:bd:83:03:2e: af:ed:ef:85:cd:db:77:e2:5b:19:1b:86:b9:4a:1f:59:8f:c4: 56:3c:19:b2:55:cf:4f:bb:5b:60:a4:1a:45:a4:57:2d:58:75: 37:6e:32:47:e1:68:e0:ef:5d:97:69:91:c8:30:7b:61:bf:76: f4:a6:f8:cd:5f:e5:65:49:34:bc:db:5e:ee:b9:b9:a2:03:da: 45:ab:ce:c1:66:d4:10:c6:a0:db:e7:fd:23:e5:9d:28:b2:c9: 75:ab:33:0b:4c:6b:05:a2:27:e6:d3:33:ad:8b:a3:98:3e:f4: 5e:b3:8a:4d:bb:b2:ec:01:3f:cd:d1:af:b2:73:52:5c:17:a6: 8c:20:7f:6f:54:98:17:6f:cd:1e:b4:69:ea:d9:e0:f6:e8:ae: 9a:f5:a7:77:c9:f7:85:0a:f0:87:51:a2:97:eb:7e:d2:d7:50: 65:0a:f5:2c:19:2e:16:bd:8b:cf:4c:9b:e1:2d:86:8a:a2:3b: fb:b6:17:16:9c:3a:66:d3:f4:bb:56:1f:5c:5b:e2:c1:39:b9: 87:8b:77:7d:f3:9a:5c:bb:0d:7b:e2:f1:c2:26:f6:53:e1:d4: 63:01:c5:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQC3K//3p+XC7EQaHHIfSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2M2RjYjkwYTE0NzQyYTUyYmU1Y2EwOWNiZWQ4ZGZjMWNk M2QxZWYwHhcNMjUxMjA2MDYwMTIzWhcNMjUxMjA3MDYwMTIzWjAzMTEwLwYDVQQD EyhkNTU3MmY0NDcyMjQ5YTA3MmRhYzc4MTA3Y2FlM2UyZmUyMDE1MzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEIvMpo52u1mtv1g1eMrjJn3NzVY f0W8dq5/vWHdU8vsSnRe1GJ8zP8Twrl8ArhgsW2C/1sANZAP0Nvw95l2VP1Zdrqt x807HrCa8jI7J8DAa01IfsDOyf6hfwSZaMNvQQ50tFXkCGYzGjZ7nEda9oIDQoLB lY94FEBjoDyQ3Gr9DArg6I3351yyyRCmbeYvk/FF9vBfOJv1Mhgac4mW7k7cHZVC 3BclI8CE8G84DRR8fPB1FFiaNdvrfOBQ9rgVu5Fbgj7/cFGZnzSqSPt3VQ0cTEqb V1VHl3qegl6yNemcf9iJkJaR7W458h1U2tXRpVKSivqB1Z7k51XEWISllQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNVXL0RyJJoHLax4EHyuPi/iAVNQMB8GA1UdIwQY MBaAFKY9y5ChR0KlK+XKCcvtjfwc09HvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGozTGtLRkhRcVVyNWNvSnktMk5fQnpUMGU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8yYzhiNzAtNjZiYy00MTYzLThmODAt MjBmN2Q0NGVkMTI2LzEvcGozTGtLRkhRcVVyNWNvSnktMk5fQnpUMGU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy8yYzhiNzAtNjZiYy00MTYzLThmODAtMjBmN2Q0NGVkMTI2 LzEvcGozTGtLRkhRcVVyNWNvSnktMk5fQnpUMGU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPCcHW5dT d97JE18UAMxIxy9j9s8HOabuLUeUQ7PDmaS9gwMur+3vhc3bd+JbGRuGuUofWY/E VjwZslXPT7tbYKQaRaRXLVh1N24yR+Fo4O9dl2mRyDB7Yb929Kb4zV/lZUk0vNte 7rm5ogPaRavOwWbUEMag2+f9I+WdKLLJdaszC0xrBaIn5tMzrYujmD70XrOKTbuy 7AE/zdGvsnNSXBemjCB/b1SYF2/NHrRp6tng9uiumvWnd8n3hQrwh1Gil+t+0tdQ ZQr1LBkuFr2Lz0yb4S2GiqI7+7YXFpw6ZtP0u1YfXFviwTm5h4t3ffOaXLsNe+Lx wib2U+HUYwHFgA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:55:07 2025 by rpki-client