This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft File: pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft (raw, json) Hash identifier: GZxuYFxtFlSH4xAFzZs7gv5kkATGoo1EJRTBVtsNIV0= Subject key identifier: 09:E1:93:BA:F1:F6:2F:57:7C:E9:FC:7B:40:79:17:D0:8C:CB:AD:9F Authority key identifier: A4:91:7D:88:5B:67:56:72:FC:8E:FB:89:D6:E1:4E:23:67:50:52:D9 Certificate issuer: /CN=a4917d885b675672fc8efb89d6e14e23675052d9 Certificate serial: 019AF509E91F9A8FE47254B69ED758D249B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft Manifest number: 09E0 Signing time: Sat 06 Dec 2025 19:00:58 +0000 Manifest this update: Sat 06 Dec 2025 19:00:58 +0000 Manifest next update: Sun 07 Dec 2025 19:00:58 +0000 Files and hashes: 1: pJF9iFtnVnL8jvuJ1uFOI2dQUtk.crl (hash: 0Uj9u/6iC2Q+ShFjmAa2TDxOyGoQLoM22w53vI9FB0o=) 2: prQrRYa7iRxtGVoZ-fOmbS6yQ1I.roa (hash: tnsyAKD0R4WdSHhtE37JrhpYKkCqh9rly9GAA3vquY4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft rsync://rpki.ripe.net/repository/DEFAULT/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:e9:1f:9a:8f:e4:72:54:b6:9e:d7:58:d2:49:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4917d885b675672fc8efb89d6e14e23675052d9 Validity Not Before: Dec 6 19:00:58 2025 GMT Not After : Dec 7 19:00:58 2025 GMT Subject: CN=09e193baf1f62f577ce9fc7b407917d08ccbad9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:1d:f2:64:75:62:94:4b:d5:c0:f7:bc:38:51: 24:39:be:f1:bb:24:10:86:2d:45:b7:5d:98:7e:8a: 7d:ed:27:3b:6d:d9:e4:74:8d:be:b3:e5:fc:2b:10: 31:1f:e6:d4:43:e1:7d:5c:34:e3:ba:79:20:2e:88: cd:31:eb:51:6c:28:54:32:f7:67:17:79:db:9a:64: 38:7b:67:60:80:75:5a:2b:2f:1e:78:ea:b7:28:b8: a1:4e:6d:3b:9d:03:6b:93:80:ab:9a:2c:de:1d:b0: 6b:c7:49:6a:11:77:53:ff:7f:5a:47:28:74:6a:9e: 67:78:7e:23:12:4a:ba:a5:81:7d:a7:cc:d8:e0:7f: 06:fa:6f:eb:d8:fe:53:d6:e1:8f:28:1a:89:13:d5: c1:fe:7f:d6:03:06:e4:b6:97:08:4e:3f:58:a3:f8: 57:c4:6b:d5:d3:d7:d1:46:10:8f:04:4c:1d:ad:08: fc:ec:71:b2:e2:3a:ab:eb:20:b8:c7:cc:60:7b:64: 11:a8:9e:bc:e4:55:1a:6b:de:72:08:85:9a:ab:f7: 01:f5:1b:dc:c8:62:e7:a5:bd:83:8d:eb:6d:bd:f3: b2:dd:a7:99:11:7e:2b:16:74:4c:d2:36:4b:4e:99: 3b:0d:09:37:4b:bc:a0:f4:86:16:60:85:6b:54:31: c9:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:E1:93:BA:F1:F6:2F:57:7C:E9:FC:7B:40:79:17:D0:8C:CB:AD:9F X509v3 Authority Key Identifier: keyid:A4:91:7D:88:5B:67:56:72:FC:8E:FB:89:D6:E1:4E:23:67:50:52:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:e8:d2:c6:7d:ee:f8:9c:0a:de:0d:ed:dd:78:01:41:ae:43: 26:7f:8e:d7:c8:b4:b8:9c:8a:ad:30:0d:91:d7:f2:f9:0e:89: 02:15:82:19:71:77:0f:62:0b:e7:50:24:97:4d:ff:07:58:f9: 4d:71:4f:e2:69:c2:8a:44:6f:46:b9:c5:5e:da:34:bf:3a:60: 55:34:57:cf:42:eb:83:ab:b8:dd:00:63:58:93:59:30:3b:d7: 52:fe:ea:54:8b:fa:86:c6:1e:61:3b:e0:e3:c0:14:ec:8d:f3: 10:7a:10:4a:f6:7a:43:98:e2:dd:4c:78:be:c6:be:b5:83:e9: 31:4b:73:a7:0f:c2:43:ae:dd:bd:cf:c7:61:d8:eb:f1:45:b6: 93:5c:ff:6b:4e:61:f6:a1:83:c6:7f:d0:58:ff:ec:8c:0d:7f: 0d:37:8e:1a:83:68:a9:b4:c6:09:43:62:0b:9e:ed:b9:b5:39: ee:5b:e6:eb:d5:9f:b3:70:29:b2:f9:b5:40:7d:ec:47:91:5e: 7b:f8:e2:dd:5f:85:e0:47:94:0f:4a:4f:cc:9c:97:e8:74:54: fe:00:fb:5f:4a:08:ea:57:e4:41:6a:81:85:73:0f:6a:c2:0b: 7c:66:15:50:99:bd:b4:85:bc:b0:22:5c:e5:c1:21:3f:16:09: 6b:ad:19:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cekfmo/kclS2ntdY0kmzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0OTE3ZDg4NWI2NzU2NzJmYzhlZmI4OWQ2ZTE0ZTIzNjc1 MDUyZDkwHhcNMjUxMjA2MTkwMDU4WhcNMjUxMjA3MTkwMDU4WjAzMTEwLwYDVQQD EygwOWUxOTNiYWYxZjYyZjU3N2NlOWZjN2I0MDc5MTdkMDhjY2JhZDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1B3yZHVilEvVwPe8OFEkOb7xuyQQ hi1Ft12Yfop97Sc7bdnkdI2+s+X8KxAxH+bUQ+F9XDTjunkgLojNMetRbChUMvdn F3nbmmQ4e2dggHVaKy8eeOq3KLihTm07nQNrk4CrmizeHbBrx0lqEXdT/39aRyh0 ap5neH4jEkq6pYF9p8zY4H8G+m/r2P5T1uGPKBqJE9XB/n/WAwbktpcITj9Yo/hX xGvV09fRRhCPBEwdrQj87HGy4jqr6yC4x8xge2QRqJ685FUaa95yCIWaq/cB9Rvc yGLnpb2DjettvfOy3aeZEX4rFnRM0jZLTpk7DQk3S7yg9IYWYIVrVDHJxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAnhk7rx9i9XfOn8e0B5F9CMy62fMB8GA1UdIwQY MBaAFKSRfYhbZ1Zy/I77idbhTiNnUFLZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEpGOWlGdG5Wbkw4anZ1SjF1Rk9JMmRRVXRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8xM2JjMjktNGVmMy00MjFiLWEzMGYt MTM0NGQwMmNmZGE4LzEvcEpGOWlGdG5Wbkw4anZ1SjF1Rk9JMmRRVXRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi8xM2JjMjktNGVmMy00MjFiLWEzMGYtMTM0NGQwMmNmZGE4 LzEvcEpGOWlGdG5Wbkw4anZ1SjF1Rk9JMmRRVXRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdujSxn3u +JwK3g3t3XgBQa5DJn+O18i0uJyKrTANkdfy+Q6JAhWCGXF3D2IL51Akl03/B1j5 TXFP4mnCikRvRrnFXto0vzpgVTRXz0Lrg6u43QBjWJNZMDvXUv7qVIv6hsYeYTvg 48AU7I3zEHoQSvZ6Q5ji3Ux4vsa+tYPpMUtzpw/CQ67dvc/HYdjr8UW2k1z/a05h 9qGDxn/QWP/sjA1/DTeOGoNoqbTGCUNiC57tubU57lvm69Wfs3Apsvm1QH3sR5Fe e/ji3V+F4EeUD0pPzJyX6HRU/gD7X0oI6lfkQWqBhXMPasILfGYVUJm9tIW8sCJc 5cEhPxYJa60Zew== -----END CERTIFICATE-----Generated at Sun Dec 7 02:45:14 2025 by rpki-client