This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft File: pJuD9b3hodyT3mlHaDfp46N3l68.mft (raw, json) Hash identifier: ItXdUideeZKWx7t+7Yyzv4XkEjO8unROb55YRAT8b+w= Subject key identifier: CE:98:8A:DB:62:4D:C9:41:8C:10:C6:0A:93:9E:15:F4:A9:C1:FF:E8 Authority key identifier: A4:9B:83:F5:BD:E1:A1:DC:93:DE:69:47:68:37:E9:E3:A3:77:97:AF Certificate issuer: /CN=a49b83f5bde1a1dc93de69476837e9e3a37797af Certificate serial: 019AF163F4A4E147E0F42A3CDF321235A67B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 02:00:51 +0000 Manifest this update: Sat 06 Dec 2025 02:00:51 +0000 Manifest next update: Sun 07 Dec 2025 02:00:51 +0000 Files and hashes: 1: ivIvX3ybfrEo6-_TJQtybec7lto.roa (hash: AYMx34pgwR2VT7P45blq8Gv6Ax5FOOQvXf8mR5QOiWI=) 2: pJuD9b3hodyT3mlHaDfp46N3l68.crl (hash: s3g+y7X5VfSRbTJqFSxf1H+g0IOBrpIlP5pXalaAEFE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:f4:a4:e1:47:e0:f4:2a:3c:df:32:12:35:a6:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a49b83f5bde1a1dc93de69476837e9e3a37797af Validity Not Before: Dec 6 02:00:51 2025 GMT Not After : Dec 7 02:00:51 2025 GMT Subject: CN=ce988adb624dc9418c10c60a939e15f4a9c1ffe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:af:ea:fa:61:86:a8:0c:e8:85:93:83:35:50: 34:83:03:db:9a:db:13:9f:13:db:07:34:c0:de:a0: 25:75:54:5b:e0:71:28:29:08:d9:9a:6e:16:91:5c: 76:90:13:58:39:a7:e9:3a:b9:a7:fb:a2:fb:0d:91: 84:53:78:1b:a0:98:45:1f:e3:ec:e7:3e:1e:a5:3d: 99:83:75:fc:63:92:8f:f5:c8:84:e1:8b:4e:32:f8: 5d:e4:15:a0:01:de:9d:c2:ba:58:90:c9:cd:d6:22: be:a5:b0:e5:6a:3f:3e:cd:84:e8:df:0a:41:3c:91: 25:d6:0c:03:4e:e7:56:fa:de:1e:26:20:3b:55:fe: 26:5e:fa:bb:b3:a0:7e:14:4f:53:0b:b7:79:c4:d7: a0:e4:38:d0:21:84:6b:8f:7f:94:9d:b9:db:03:fb: 1f:08:2a:93:37:db:67:fd:d0:a9:cc:a0:7c:41:40: a9:74:66:42:93:b3:26:bb:87:1d:88:d7:c5:bc:e7: 82:ed:28:a8:47:23:4a:6e:ef:1b:85:7c:62:fa:f8: 98:d2:43:f2:bd:55:2f:52:33:a7:f3:5a:f3:02:7a: 71:e3:eb:36:6a:12:6e:e0:bd:fc:e0:a9:e7:e1:e3: 62:8f:09:ef:bf:80:ee:f9:eb:07:41:b0:57:d8:69: d3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:98:8A:DB:62:4D:C9:41:8C:10:C6:0A:93:9E:15:F4:A9:C1:FF:E8 X509v3 Authority Key Identifier: keyid:A4:9B:83:F5:BD:E1:A1:DC:93:DE:69:47:68:37:E9:E3:A3:77:97:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:d3:13:8d:30:fc:68:80:c2:ef:db:f3:e6:81:db:3f:3c:c5: 2d:4f:1f:46:7b:2d:c9:d1:28:da:4b:4c:a3:3c:a8:73:85:bb: 1c:03:15:01:9b:6d:63:3d:b2:b1:04:e0:91:93:03:db:cc:79: 48:50:9c:62:70:d8:71:d7:10:83:04:19:eb:18:11:c9:7a:10: da:a2:15:74:71:82:77:1b:a1:4d:e1:c5:fc:a3:c7:12:81:66: 42:ac:fc:ca:c6:1b:11:eb:30:0e:b3:3a:6c:c4:2a:39:ee:ff: d7:0e:ec:16:77:f9:d6:bc:34:42:5c:9d:85:35:f6:df:21:dc: 9a:9c:7a:72:dd:26:e7:43:da:69:f9:8b:fc:7a:4a:cb:6b:7f: 11:20:db:54:48:1d:a5:e2:37:09:81:09:c0:2a:57:e3:89:32: 15:33:94:12:40:4e:a4:70:f2:f1:0f:55:63:3d:83:e9:b4:37: 26:e9:d1:fc:2e:b9:56:67:f5:87:9a:52:6a:a4:9a:da:ee:1b: 53:a3:ef:cc:7a:08:87:66:56:7d:3e:5a:26:27:ca:87:24:f1: d8:08:70:41:b5:26:23:08:e7:30:05:72:e3:20:cd:5e:b9:67: 22:ca:52:eb:27:0e:de:53:59:0b:88:a1:af:35:4c:98:2c:72: ef:cb:79:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY/Sk4Ufg9Co83zISNaZ7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0OWI4M2Y1YmRlMWExZGM5M2RlNjk0NzY4MzdlOWUzYTM3 Nzk3YWYwHhcNMjUxMjA2MDIwMDUxWhcNMjUxMjA3MDIwMDUxWjAzMTEwLwYDVQQD EyhjZTk4OGFkYjYyNGRjOTQxOGMxMGM2MGE5MzllMTVmNGE5YzFmZmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvK/q+mGGqAzohZODNVA0gwPbmtsT nxPbBzTA3qAldVRb4HEoKQjZmm4WkVx2kBNYOafpOrmn+6L7DZGEU3gboJhFH+Ps 5z4epT2Zg3X8Y5KP9ciE4YtOMvhd5BWgAd6dwrpYkMnN1iK+pbDlaj8+zYTo3wpB PJEl1gwDTudW+t4eJiA7Vf4mXvq7s6B+FE9TC7d5xNeg5DjQIYRrj3+UnbnbA/sf CCqTN9tn/dCpzKB8QUCpdGZCk7Mmu4cdiNfFvOeC7SioRyNKbu8bhXxi+viY0kPy vVUvUjOn81rzAnpx4+s2ahJu4L384Knn4eNijwnvv4Du+esHQbBX2GnT/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6YittiTclBjBDGCpOeFfSpwf/oMB8GA1UdIwQY MBaAFKSbg/W94aHck95pR2g36eOjd5evMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEp1RDliM2hvZHlUM21sSGFEZnA0Nk4zbDY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9hZDFjNjktY2U1Ni00ZWRhLTg3ZWEt OTg3NzE5ZWU2YTBjLzEvcEp1RDliM2hvZHlUM21sSGFEZnA0Nk4zbDY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9hZDFjNjktY2U1Ni00ZWRhLTg3ZWEtOTg3NzE5ZWU2YTBj LzEvcEp1RDliM2hvZHlUM21sSGFEZnA0Nk4zbDY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk9MTjTD8 aIDC79vz5oHbPzzFLU8fRnstydEo2ktMozyoc4W7HAMVAZttYz2ysQTgkZMD28x5 SFCcYnDYcdcQgwQZ6xgRyXoQ2qIVdHGCdxuhTeHF/KPHEoFmQqz8ysYbEeswDrM6 bMQqOe7/1w7sFnf51rw0QlydhTX23yHcmpx6ct0m50PaafmL/HpKy2t/ESDbVEgd peI3CYEJwCpX44kyFTOUEkBOpHDy8Q9VYz2D6bQ3JunR/C65Vmf1h5pSaqSa2u4b U6PvzHoIh2ZWfT5aJifKhyTx2AhwQbUmIwjnMAVy4yDNXrlnIspS6ycO3lNZC4ih rzVMmCxy78t5FA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:45 2025 by rpki-client