This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft File: pDJ8VulBFx6jvrom67niP031vPM.mft (raw, json) Hash identifier: J7XCp0XE3kmbs2n5Axb7Oz1xTdsRqalMdyjvuWvDIsA= Subject key identifier: E3:09:A7:B0:A0:BE:80:74:F6:6D:6F:FF:85:25:CA:BB:01:80:3C:4B Authority key identifier: A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3 Certificate issuer: /CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3 Certificate serial: 019AF19B156BA2B907C1C68ED1E087C0F395 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft Manifest number: 0824 Signing time: Sat 06 Dec 2025 03:01:03 +0000 Manifest this update: Sat 06 Dec 2025 03:01:03 +0000 Manifest next update: Sun 07 Dec 2025 03:01:03 +0000 Files and hashes: 1: 3vdSYlPhYCcKWdxmctUlZz3LRrA.roa (hash: JYH+c4M07iZOS3Xafi4xgQEUcEXeZVf7HAqO1Fudxb4=) 2: IKxoI34yNDqSYAVSbtJ6URAzHH8.roa (hash: /1RKNbwdvJvERdDo7l1kD+y03W4o9/o77qVS9bJMSGs=) 3: cLRpZsuHj1Ogs0ExPm-7o6d-jPI.roa (hash: TUBUIVHrB/n/iv6Q1YfM7h8U6VmMHs60X+y0rpIetb0=) 4: lbRMrKUagBNury-urjZX3f75_Qw.roa (hash: mq29IIHcb8ubsfXIgUD4LUU90hH0YRXl8dREvVbfEwI=) 5: pDJ8VulBFx6jvrom67niP031vPM.crl (hash: sd7zCunM8LQvf0SuGQ+64zZlvGLlPB0Go3ABrEAP9l0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:15:6b:a2:b9:07:c1:c6:8e:d1:e0:87:c0:f3:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3 Validity Not Before: Dec 6 03:01:03 2025 GMT Not After : Dec 7 03:01:03 2025 GMT Subject: CN=e309a7b0a0be8074f66d6fff8525cabb01803c4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8c:9e:2f:87:1b:e2:05:93:e2:b3:e2:fb:d7: 05:2e:39:f9:0b:17:5a:04:e0:04:e6:93:db:f7:61: b1:c7:9c:ed:3e:d4:4c:45:e2:ec:e5:24:cb:2e:0d: 3a:57:1a:35:6b:a3:ba:1c:86:6b:ee:e0:7a:2b:f8: 4a:4c:7b:d8:e4:6b:e0:e8:3c:a8:bb:67:f0:75:99: 42:4d:d0:50:48:c7:d2:19:2c:11:b9:0a:09:7f:d6: 5e:1e:9b:eb:a5:0a:4d:d7:53:75:99:2b:46:f4:6d: 43:f3:0b:e2:65:a9:8f:36:50:5f:33:33:31:b2:1d: 8f:a0:c3:68:d8:46:99:17:a1:76:67:09:21:8f:6e: cb:a3:7c:4f:0d:4b:ec:96:65:f7:56:01:87:63:79: 6d:9b:f9:ef:cf:c6:e1:2d:b0:95:18:41:8a:11:48: 3a:09:16:fa:ff:2c:7d:c3:ef:02:3e:93:fb:c4:2b: 60:47:0e:d5:f8:7f:4f:01:36:a5:b1:92:5a:1a:40: d7:cc:d7:7f:0c:09:b0:e4:a8:0e:f4:75:26:76:76: 5b:a6:69:ed:4b:a9:cf:61:22:59:56:5c:50:d9:c2: 2b:13:9c:41:ac:7a:ca:54:e7:30:96:d0:8f:f3:e9: 03:6b:a3:23:26:ac:87:e7:da:2c:43:37:29:0a:93: 5b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:09:A7:B0:A0:BE:80:74:F6:6D:6F:FF:85:25:CA:BB:01:80:3C:4B X509v3 Authority Key Identifier: keyid:A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:1c:6b:3a:8e:b5:00:e0:f6:1e:7e:a7:d2:12:ea:d6:c2:b9: 1e:05:df:8c:2e:9e:9e:94:39:17:f9:bb:3d:08:5b:e9:14:e1: 5f:a2:fe:77:be:b1:4e:bd:0c:bc:26:d4:ee:da:d1:bb:bf:e3: ed:17:3b:c4:d4:c5:88:25:29:a2:9d:bf:3e:ff:4a:f1:39:7e: 7e:c7:55:fe:e0:f4:81:fd:6e:c0:a0:d1:38:b8:de:cd:c0:9a: d9:c5:71:80:87:e6:11:d3:7b:36:4e:c1:59:e6:2e:a2:fc:6a: 17:cf:a4:16:dd:c9:e8:7f:d6:25:95:e7:14:54:da:f9:7c:5f: 70:ad:7b:c9:40:0e:e1:87:e7:97:87:8a:9c:c6:72:86:b6:ef: c9:97:3f:3e:13:98:79:16:39:4c:ed:cf:76:9c:2f:f0:95:94: 44:b7:21:58:09:96:29:f5:3b:40:19:b9:ae:29:39:56:45:1f: 7a:0c:86:35:4c:84:7b:07:ce:74:f0:43:50:37:35:7e:ca:85: db:fc:7d:e5:76:a3:48:9f:d9:51:a6:f5:7d:79:d6:f5:39:20: 4d:e9:06:7d:81:37:50:d7:2f:4d:af:7f:a5:6d:26:13:81:5e: c4:7e:95:00:85:e4:39:23:ae:19:5f:a6:3e:0a:58:7a:90:a8: bb:19:28:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmxVrorkHwcaO0eCHwPOVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MzI3YzU2ZTk0MTE3MWVhM2JlYmEyNmViYjllMjNmNGRm NWJjZjMwHhcNMjUxMjA2MDMwMTAzWhcNMjUxMjA3MDMwMTAzWjAzMTEwLwYDVQQD EyhlMzA5YTdiMGEwYmU4MDc0ZjY2ZDZmZmY4NTI1Y2FiYjAxODAzYzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIyeL4cb4gWT4rPi+9cFLjn5Cxda BOAE5pPb92Gxx5ztPtRMReLs5STLLg06Vxo1a6O6HIZr7uB6K/hKTHvY5Gvg6Dyo u2fwdZlCTdBQSMfSGSwRuQoJf9ZeHpvrpQpN11N1mStG9G1D8wviZamPNlBfMzMx sh2PoMNo2EaZF6F2Zwkhj27Lo3xPDUvslmX3VgGHY3ltm/nvz8bhLbCVGEGKEUg6 CRb6/yx9w+8CPpP7xCtgRw7V+H9PATalsZJaGkDXzNd/DAmw5KgO9HUmdnZbpmnt S6nPYSJZVlxQ2cIrE5xBrHrKVOcwltCP8+kDa6MjJqyH59osQzcpCpNbTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOMJp7CgvoB09m1v/4UlyrsBgDxLMB8GA1UdIwQY MBaAFKQyfFbpQRceo766Juu54j9N9bzzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcERKOFZ1bEJGeDZqdnJvbTY3bmlQMDMxdlBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS85YTQ4MzMtNmRhNC00ZGRhLWI3YWIt MjhjMzQzY2U5ZDVkLzEvcERKOFZ1bEJGeDZqdnJvbTY3bmlQMDMxdlBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS85YTQ4MzMtNmRhNC00ZGRhLWI3YWItMjhjMzQzY2U5ZDVk LzEvcERKOFZ1bEJGeDZqdnJvbTY3bmlQMDMxdlBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAthxrOo61 AOD2Hn6n0hLq1sK5HgXfjC6enpQ5F/m7PQhb6RThX6L+d76xTr0MvCbU7trRu7/j 7Rc7xNTFiCUpop2/Pv9K8Tl+fsdV/uD0gf1uwKDROLjezcCa2cVxgIfmEdN7Nk7B WeYuovxqF8+kFt3J6H/WJZXnFFTa+XxfcK17yUAO4Yfnl4eKnMZyhrbvyZc/PhOY eRY5TO3Pdpwv8JWURLchWAmWKfU7QBm5rik5VkUfegyGNUyEewfOdPBDUDc1fsqF 2/x95XajSJ/ZUab1fXnW9TkgTekGfYE3UNcvTa9/pW0mE4FexH6VAIXkOSOuGV+m PgpYepCouxkolg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:13:39 2025 by rpki-client