This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft File: pJ0uULdziu0KzBoOwv7jAIAlWDg.mft (raw, json) Hash identifier: YSJrTiYWFAvn9JIQyG7tGXAiHAIq6B8K2aorcmfKM6k= Subject key identifier: 98:C8:B5:9F:A1:8B:C6:12:46:1E:4B:2C:40:BE:F8:FC:BF:AE:E0:3F Authority key identifier: A4:9D:2E:50:B7:73:8A:ED:0A:CC:1A:0E:C2:FE:E3:00:80:25:58:38 Certificate issuer: /CN=a49d2e50b7738aed0acc1a0ec2fee30080255838 Certificate serial: 019AF23FBC882E7B3BA7A12B2E3518D0BAA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJ0uULdziu0KzBoOwv7jAIAlWDg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft Manifest number: 0AA3 Signing time: Sat 06 Dec 2025 06:00:54 +0000 Manifest this update: Sat 06 Dec 2025 06:00:54 +0000 Manifest next update: Sun 07 Dec 2025 06:00:54 +0000 Files and hashes: 1: cGGNHHL2taAbcfw5rMUB84kQw_k.roa (hash: J56YjCbrct/bNrc5fidg1pLfrEEsu9MaAGzXOMhbxY8=) 2: pJ0uULdziu0KzBoOwv7jAIAlWDg.crl (hash: mL5yt9TOdH+/kTMAO8vmzRj3rQAMmxxFlVAQRqE2b6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.crl rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft rsync://rpki.ripe.net/repository/DEFAULT/pJ0uULdziu0KzBoOwv7jAIAlWDg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:bc:88:2e:7b:3b:a7:a1:2b:2e:35:18:d0:ba:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a49d2e50b7738aed0acc1a0ec2fee30080255838 Validity Not Before: Dec 6 06:00:54 2025 GMT Not After : Dec 7 06:00:54 2025 GMT Subject: CN=98c8b59fa18bc612461e4b2c40bef8fcbfaee03f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:52:6a:b7:aa:8e:d2:05:6b:c0:b5:3c:b3:40: 4d:2f:f4:62:78:b7:cd:eb:b8:14:a5:08:ab:c5:bf: e2:59:cd:aa:fd:6f:51:a1:ce:ce:36:cb:3c:5b:42: 31:fd:1c:3a:75:b6:1f:a0:33:8b:ef:fd:bc:38:7e: 06:60:fb:fe:68:49:ab:75:95:7a:c4:95:3d:c1:b0: 51:c6:52:9a:11:63:c0:17:9d:6c:26:91:db:55:44: ae:4c:ee:42:5a:de:b9:62:45:06:37:df:14:56:34: cb:dc:d0:cb:29:d4:cc:f2:47:a5:31:54:6f:af:3e: 6a:0b:a9:28:16:ee:a4:1d:26:d7:b4:b0:d0:ed:fe: 02:6e:52:ae:a3:4e:36:5e:26:f7:32:18:1c:00:d4: a1:62:f2:7a:06:86:f4:12:9b:bc:c2:87:29:0b:f8: ff:1d:37:94:65:54:47:6f:a4:fb:99:2b:3b:b1:0e: 59:f4:83:e8:7b:00:75:fc:87:66:e1:7e:73:dd:87: 4c:da:6b:39:c0:d5:ab:07:71:47:68:d0:68:ae:a1: d4:e7:ad:b3:14:1f:d5:6f:c5:83:8b:20:1e:e8:3f: 3d:e1:02:5c:14:da:07:25:80:ed:b7:c2:1b:4c:13: 6d:d6:c0:c1:74:4f:b4:02:9b:66:ee:d3:a4:d1:39: da:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C8:B5:9F:A1:8B:C6:12:46:1E:4B:2C:40:BE:F8:FC:BF:AE:E0:3F X509v3 Authority Key Identifier: keyid:A4:9D:2E:50:B7:73:8A:ED:0A:CC:1A:0E:C2:FE:E3:00:80:25:58:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ0uULdziu0KzBoOwv7jAIAlWDg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:d8:c2:d5:82:1b:a1:61:6a:35:a3:c8:47:e3:75:3d:a4:d2: c7:a5:b0:00:86:eb:64:96:74:b1:4f:e0:51:d9:5c:0f:cc:24: ba:a3:0b:29:7e:a3:32:70:4c:a7:e3:54:be:ca:69:4c:0c:f9: 1d:b5:88:4f:f7:16:57:df:54:69:10:e9:b2:ce:6f:b8:b2:d2: aa:47:82:23:82:2c:7a:bf:90:98:3c:85:7d:ee:e6:ae:9d:ee: 49:48:3a:bb:93:b2:b0:12:85:84:b6:a7:fb:d8:63:af:4c:d4: cb:c7:49:b7:f2:07:ae:f3:0d:6e:9f:0d:57:38:a3:d3:44:fc: dd:ee:6c:ff:04:cc:93:bc:8b:47:8c:12:aa:ad:14:ce:5b:b1: 83:22:02:49:11:f9:2b:dd:45:86:09:13:6d:e8:dd:11:92:d1: e8:ca:74:46:10:ae:da:b2:35:3b:9a:e1:8b:97:a1:c8:4a:03: a1:76:a1:17:dc:33:d4:6e:09:16:82:77:80:f4:55:c1:7e:41: ea:c2:72:aa:aa:2d:18:0a:30:cc:ff:ec:7d:c5:09:a5:b7:06: 55:0c:1b:e0:17:45:85:18:49:c4:d2:24:20:7d:15:49:83:47: a9:41:60:9d:b8:4c:1e:a1:50:dd:d7:0e:9a:3c:fb:58:e3:49: 30:5a:8e:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP7yILns7p6ErLjUY0LqhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0OWQyZTUwYjc3MzhhZWQwYWNjMWEwZWMyZmVlMzAwODAy NTU4MzgwHhcNMjUxMjA2MDYwMDU0WhcNMjUxMjA3MDYwMDU0WjAzMTEwLwYDVQQD Eyg5OGM4YjU5ZmExOGJjNjEyNDYxZTRiMmM0MGJlZjhmY2JmYWVlMDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1Jqt6qO0gVrwLU8s0BNL/RieLfN 67gUpQirxb/iWc2q/W9Roc7ONss8W0Ix/Rw6dbYfoDOL7/28OH4GYPv+aEmrdZV6 xJU9wbBRxlKaEWPAF51sJpHbVUSuTO5CWt65YkUGN98UVjTL3NDLKdTM8kelMVRv rz5qC6koFu6kHSbXtLDQ7f4CblKuo042Xib3MhgcANShYvJ6Bob0Epu8wocpC/j/ HTeUZVRHb6T7mSs7sQ5Z9IPoewB1/Idm4X5z3YdM2ms5wNWrB3FHaNBorqHU562z FB/Vb8WDiyAe6D894QJcFNoHJYDtt8IbTBNt1sDBdE+0Aptm7tOk0TnazQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJjItZ+hi8YSRh5LLEC++Py/ruA/MB8GA1UdIwQY MBaAFKSdLlC3c4rtCswaDsL+4wCAJVg4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEowdVVMZHppdTBLekJvT3d2N2pBSUFsV0RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8zOTMyMTgtNDZlNS00NjhiLWI1OGIt N2YzMzUyMjM0ZTIxLzEvcEowdVVMZHppdTBLekJvT3d2N2pBSUFsV0RnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8zOTMyMTgtNDZlNS00NjhiLWI1OGItN2YzMzUyMjM0ZTIx LzEvcEowdVVMZHppdTBLekJvT3d2N2pBSUFsV0RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa9jC1YIb oWFqNaPIR+N1PaTSx6WwAIbrZJZ0sU/gUdlcD8wkuqMLKX6jMnBMp+NUvsppTAz5 HbWIT/cWV99UaRDpss5vuLLSqkeCI4Iser+QmDyFfe7mrp3uSUg6u5OysBKFhLan +9hjr0zUy8dJt/IHrvMNbp8NVzij00T83e5s/wTMk7yLR4wSqq0UzluxgyICSRH5 K91FhgkTbejdEZLR6Mp0RhCu2rI1O5rhi5ehyEoDoXahF9wz1G4JFoJ3gPRVwX5B 6sJyqqotGAowzP/sfcUJpbcGVQwb4BdFhRhJxNIkIH0VSYNHqUFgnbhMHqFQ3dcO mjz7WONJMFqOrg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:14 2025 by rpki-client