This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft File: pDJ8VulBFx6jvrom67niP031vPM.mft (raw, json) Hash identifier: v9bMYmxlda+YY5lTbhNlYdX+Ei+B3j6i/7LGkqRPzQo= Subject key identifier: 8E:8D:70:35:EE:6F:CC:CC:D2:42:DC:EC:09:09:E0:F3:1E:02:24:DB Authority key identifier: A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3 Certificate issuer: /CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3 Certificate serial: 019B3532F48791F721DB4D7C8D199A228617 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft Manifest number: 0847 Signing time: Fri 19 Dec 2025 06:01:30 +0000 Manifest this update: Fri 19 Dec 2025 06:01:30 +0000 Manifest next update: Sat 20 Dec 2025 06:01:30 +0000 Files and hashes: 1: 3vdSYlPhYCcKWdxmctUlZz3LRrA.roa (hash: JYH+c4M07iZOS3Xafi4xgQEUcEXeZVf7HAqO1Fudxb4=) 2: IKxoI34yNDqSYAVSbtJ6URAzHH8.roa (hash: /1RKNbwdvJvERdDo7l1kD+y03W4o9/o77qVS9bJMSGs=) 3: cLRpZsuHj1Ogs0ExPm-7o6d-jPI.roa (hash: TUBUIVHrB/n/iv6Q1YfM7h8U6VmMHs60X+y0rpIetb0=) 4: lbRMrKUagBNury-urjZX3f75_Qw.roa (hash: mq29IIHcb8ubsfXIgUD4LUU90hH0YRXl8dREvVbfEwI=) 5: pDJ8VulBFx6jvrom67niP031vPM.crl (hash: APtyDG2Y4UTXMCdxrn0IyWiVWCiet6dL4DAR1jdkktQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:f4:87:91:f7:21:db:4d:7c:8d:19:9a:22:86:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3 Validity Not Before: Dec 19 06:01:30 2025 GMT Not After : Dec 20 06:01:30 2025 GMT Subject: CN=8e8d7035ee6fccccd242dcec0909e0f31e0224db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a0:38:fe:5f:e9:5c:60:ba:f0:a6:59:41:81: 57:3d:3a:34:ee:9c:85:f0:dd:38:f8:bf:09:3a:f4: ab:25:73:43:53:37:a5:63:fe:f9:aa:50:f1:73:b8: c5:17:0c:68:4e:7c:14:f9:78:b9:5e:56:c8:6d:a5: f2:71:71:46:24:a0:12:04:02:df:18:85:4e:f3:8a: 6d:88:4d:7f:59:1d:a7:0f:f1:15:6b:4e:15:d4:d8: b2:d9:ab:6c:b2:cf:56:2c:5f:20:17:1a:7a:cb:66: e4:db:95:fc:69:80:c1:e2:8f:eb:7b:7f:9e:bc:f5: 48:bc:0a:c4:39:b8:79:1b:b1:da:3f:f5:8f:85:22: a3:4e:78:a6:ac:6a:05:2c:fe:fc:dc:38:00:d9:84: cf:b1:9b:fd:c6:68:46:d7:b5:94:8a:05:5f:c4:ef: e4:eb:e3:fa:1e:70:dd:11:ea:3f:2c:91:14:f0:71: e4:a5:f8:60:f4:0a:00:46:6a:1d:a9:72:27:2d:95: 47:21:9e:69:10:82:59:ff:61:75:91:d4:70:82:5e: 4a:4b:c5:3a:12:b9:1f:51:7b:78:44:49:bc:d4:f6: 1f:d9:a7:67:c0:d2:b1:72:4a:b0:9e:d8:26:d5:27: 6c:6c:e2:d3:d5:3d:3e:78:5c:8a:0e:dd:a9:4e:2d: 76:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:8D:70:35:EE:6F:CC:CC:D2:42:DC:EC:09:09:E0:F3:1E:02:24:DB X509v3 Authority Key Identifier: keyid:A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:8d:10:e4:6a:20:dc:f0:75:8d:15:23:37:55:01:6b:33:03: 93:f1:b9:23:81:f0:bf:d5:d7:24:b7:e1:0b:2b:47:72:76:34: 37:c8:88:93:a9:31:5a:92:61:9a:9d:cc:7a:1e:e9:fc:10:1a: 85:2c:51:5f:8d:e6:d4:96:61:55:b1:ad:23:6b:ba:3e:f8:2d: da:fa:1d:fe:1a:77:bb:28:1c:61:d1:65:7c:01:66:63:0e:18: fc:2f:34:66:5f:65:c4:f2:cd:f3:84:6f:09:56:80:98:18:b8: a1:51:66:01:b7:a1:34:2d:ab:26:20:42:38:04:15:54:8b:87: c2:0c:30:0a:40:b1:cf:7a:87:9e:90:a4:40:3f:f3:42:60:7d: 2e:c7:c5:45:a4:13:31:f4:b6:bd:06:5b:23:a8:9f:85:e8:ee: ac:d7:80:66:56:09:5d:f9:8a:d1:75:53:68:25:ca:fb:ab:c2: 07:5a:71:3c:59:6f:de:c5:99:1f:d4:82:ee:02:fd:bf:28:24: f2:ff:da:fc:59:ae:22:ef:f2:5e:a1:b5:e8:25:4f:48:98:fe: ad:7c:fa:6d:43:ca:40:c6:ca:a5:6c:39:c4:8c:1f:e9:45:9b: 7c:9b:cd:db:32:35:28:05:df:ef:01:61:de:bd:01:07:dc:b1: f6:8f:c5:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MvSHkfch2018jRmaIoYXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MzI3YzU2ZTk0MTE3MWVhM2JlYmEyNmViYjllMjNmNGRm NWJjZjMwHhcNMjUxMjE5MDYwMTMwWhcNMjUxMjIwMDYwMTMwWjAzMTEwLwYDVQQD Eyg4ZThkNzAzNWVlNmZjY2NjZDI0MmRjZWMwOTA5ZTBmMzFlMDIyNGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qA4/l/pXGC68KZZQYFXPTo07pyF 8N04+L8JOvSrJXNDUzelY/75qlDxc7jFFwxoTnwU+Xi5XlbIbaXycXFGJKASBALf GIVO84ptiE1/WR2nD/EVa04V1Niy2atsss9WLF8gFxp6y2bk25X8aYDB4o/re3+e vPVIvArEObh5G7HaP/WPhSKjTnimrGoFLP783DgA2YTPsZv9xmhG17WUigVfxO/k 6+P6HnDdEeo/LJEU8HHkpfhg9AoARmodqXInLZVHIZ5pEIJZ/2F1kdRwgl5KS8U6 ErkfUXt4REm81PYf2adnwNKxckqwntgm1SdsbOLT1T0+eFyKDt2pTi12ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI6NcDXub8zM0kLc7AkJ4PMeAiTbMB8GA1UdIwQY MBaAFKQyfFbpQRceo766Juu54j9N9bzzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcERKOFZ1bEJGeDZqdnJvbTY3bmlQMDMxdlBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS85YTQ4MzMtNmRhNC00ZGRhLWI3YWIt MjhjMzQzY2U5ZDVkLzEvcERKOFZ1bEJGeDZqdnJvbTY3bmlQMDMxdlBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS85YTQ4MzMtNmRhNC00ZGRhLWI3YWItMjhjMzQzY2U5ZDVk LzEvcERKOFZ1bEJGeDZqdnJvbTY3bmlQMDMxdlBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQo0Q5Gog 3PB1jRUjN1UBazMDk/G5I4Hwv9XXJLfhCytHcnY0N8iIk6kxWpJhmp3Meh7p/BAa hSxRX43m1JZhVbGtI2u6Pvgt2vod/hp3uygcYdFlfAFmYw4Y/C80Zl9lxPLN84Rv CVaAmBi4oVFmAbehNC2rJiBCOAQVVIuHwgwwCkCxz3qHnpCkQD/zQmB9LsfFRaQT MfS2vQZbI6ifhejurNeAZlYJXfmK0XVTaCXK+6vCB1pxPFlv3sWZH9SC7gL9vygk 8v/a/FmuIu/yXqG16CVPSJj+rXz6bUPKQMbKpWw5xIwf6UWbfJvN2zI1KAXf7wFh 3r0BB9yx9o/Faw== -----END CERTIFICATE-----Generated at Fri Dec 19 14:19:09 2025 by rpki-client