This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft File: Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft (raw, json) Hash identifier: VP3TfW5Edp1D0Gruo06z62pWeK6k99i3w6HdlscKF64= Subject key identifier: B8:BC:85:42:64:66:93:06:99:7F:A4:10:29:C7:DF:7B:23:49:EC:F9 Authority key identifier: 3E:3D:1C:21:A7:7A:0B:0F:7F:0C:E6:63:3E:13:E0:C5:7B:ED:B0:8B Certificate issuer: /CN=3e3d1c21a77a0b0f7f0ce6633e13e0c57bedb08b Certificate serial: 019B318C730E49D12F9E99C6997D9774F243 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft Manifest number: 14BA Signing time: Thu 18 Dec 2025 13:00:46 +0000 Manifest this update: Thu 18 Dec 2025 13:00:46 +0000 Manifest next update: Fri 19 Dec 2025 13:00:46 +0000 Files and hashes: 1: Gw9xXGUQ6gOLxmD3uhPbHUjxqdY.roa (hash: iN7hsvC2N6zVGHZJzHIWk+L6xeaF90AdvlMynpLLSsQ=) 2: Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl (hash: g/BV7RbVhJhuOA6qo1qCjfh2HiDej6Sst2rYfYAI4SE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8c:73:0e:49:d1:2f:9e:99:c6:99:7d:97:74:f2:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e3d1c21a77a0b0f7f0ce6633e13e0c57bedb08b Validity Not Before: Dec 18 13:00:46 2025 GMT Not After : Dec 19 13:00:46 2025 GMT Subject: CN=b8bc854264669306997fa41029c7df7b2349ecf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b5:97:26:4e:d9:26:87:2f:2e:82:d4:4b:59: 92:58:27:f2:16:22:70:5a:19:7c:d7:6d:b3:b8:d5: 87:56:c2:1e:ab:1b:b3:b1:16:59:7d:ea:19:0e:a1: 3d:52:6b:93:9b:00:0c:96:07:74:ba:c3:df:f3:8a: 43:bf:91:9b:f5:59:97:c2:2a:dc:76:4c:1a:da:d0: 6b:fd:67:06:8a:2e:c9:c7:82:b7:b4:43:27:e1:48: 2d:70:bc:59:16:b2:67:6d:0f:38:9b:fe:f3:dd:c5: 70:91:29:d0:8e:0c:a0:0a:5f:4f:0b:8f:71:2f:70: 7c:f0:a6:15:b2:14:ae:07:4a:a9:f1:18:71:c0:1e: b2:b1:90:8e:07:d7:93:d8:35:a0:be:7a:63:48:a1: ea:91:35:e1:a5:a5:ff:02:d0:5b:cf:ba:5b:7c:ea: 37:cc:3c:41:42:8b:a6:9a:a0:a1:f9:5c:47:70:a2: 25:b6:3c:f1:d2:d7:eb:a5:c6:cb:82:35:ba:d6:ab: a6:85:b4:ce:5e:e5:67:08:a9:71:77:f7:16:bb:72: fb:e7:18:94:cb:dc:88:cb:ef:ec:32:28:bd:b8:9b: 7a:12:40:6a:2f:b7:93:27:6d:9c:18:57:42:f7:33: 48:02:c4:bc:a7:e9:3f:e9:8d:c8:c5:0d:37:eb:4a: 25:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:BC:85:42:64:66:93:06:99:7F:A4:10:29:C7:DF:7B:23:49:EC:F9 X509v3 Authority Key Identifier: keyid:3E:3D:1C:21:A7:7A:0B:0F:7F:0C:E6:63:3E:13:E0:C5:7B:ED:B0:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:6e:cb:7c:af:53:5a:c8:a9:01:48:ab:d0:bf:cc:30:11:b7: 02:04:01:5b:98:38:70:42:99:45:30:cd:cb:d5:05:ba:af:f8: 4e:ac:da:8c:47:e5:f0:ff:1c:d9:80:e7:83:52:78:77:c3:b0: 66:a0:47:fc:d7:de:4d:cf:e6:e5:2e:b1:32:91:53:8c:c1:32: 2a:86:9c:d9:a0:34:8e:91:7d:fa:c9:b6:9e:44:bc:e9:63:be: 4b:a7:43:83:64:f7:e1:6c:c9:58:0e:4b:58:99:2c:eb:1e:eb: dd:f8:e3:85:e5:3d:88:6a:21:52:2c:ea:89:4b:64:a2:8a:91: 22:7c:13:29:4f:e8:9e:d5:cb:97:0a:02:0c:5a:71:45:79:da: a0:9f:57:d4:e1:48:aa:83:a9:40:4c:83:ce:d4:bf:9b:bd:9d: ea:c9:ab:73:6c:d0:a7:ed:6e:9f:e4:85:67:66:4d:50:3f:39: 3d:ec:4b:68:0c:cd:40:9f:bf:1f:b0:ed:24:5d:d8:76:ce:e3: 62:2e:1a:62:e7:9c:1d:ab:04:7d:74:9f:d2:ad:8c:34:4b:02: b3:1f:b4:70:4b:57:fb:c6:0f:63:30:2c:77:27:aa:ad:dc:fa: d4:d4:95:63:da:67:11:81:b6:50:b8:c8:e1:34:66:ae:a7:97: 47:24:cb:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjHMOSdEvnpnGmX2XdPJDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlM2QxYzIxYTc3YTBiMGY3ZjBjZTY2MzNlMTNlMGM1N2Jl ZGIwOGIwHhcNMjUxMjE4MTMwMDQ2WhcNMjUxMjE5MTMwMDQ2WjAzMTEwLwYDVQQD EyhiOGJjODU0MjY0NjY5MzA2OTk3ZmE0MTAyOWM3ZGY3YjIzNDllY2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbWXJk7ZJocvLoLUS1mSWCfyFiJw Whl8122zuNWHVsIeqxuzsRZZfeoZDqE9UmuTmwAMlgd0usPf84pDv5Gb9VmXwirc dkwa2tBr/WcGii7Jx4K3tEMn4UgtcLxZFrJnbQ84m/7z3cVwkSnQjgygCl9PC49x L3B88KYVshSuB0qp8RhxwB6ysZCOB9eT2DWgvnpjSKHqkTXhpaX/AtBbz7pbfOo3 zDxBQoummqCh+VxHcKIltjzx0tfrpcbLgjW61qumhbTOXuVnCKlxd/cWu3L75xiU y9yIy+/sMii9uJt6EkBqL7eTJ22cGFdC9zNIAsS8p+k/6Y3IxQ0360olnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLi8hUJkZpMGmX+kECnH33sjSez5MB8GA1UdIwQY MBaAFD49HCGnegsPfwzmYz4T4MV77bCLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGowY0lhZDZDdzlfRE9aalBoUGd4WHZ0c0lzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8wZTllMDAtNDZlNi00ODYzLTkzMjAt MDk4ZjI1OThlNWUzLzEvUGowY0lhZDZDdzlfRE9aalBoUGd4WHZ0c0lzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8wZTllMDAtNDZlNi00ODYzLTkzMjAtMDk4ZjI1OThlNWUz LzEvUGowY0lhZDZDdzlfRE9aalBoUGd4WHZ0c0lzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf27LfK9T WsipAUir0L/MMBG3AgQBW5g4cEKZRTDNy9UFuq/4TqzajEfl8P8c2YDng1J4d8Ow ZqBH/NfeTc/m5S6xMpFTjMEyKoac2aA0jpF9+sm2nkS86WO+S6dDg2T34WzJWA5L WJks6x7r3fjjheU9iGohUizqiUtkooqRInwTKU/ontXLlwoCDFpxRXnaoJ9X1OFI qoOpQEyDztS/m72d6smrc2zQp+1un+SFZ2ZNUD85PexLaAzNQJ+/H7DtJF3Yds7j Yi4aYuecHasEfXSf0q2MNEsCsx+0cEtX+8YPYzAsdyeqrdz61NSVY9pnEYG2ULjI 4TRmrqeXRyTL3g== -----END CERTIFICATE-----Generated at Thu Dec 18 19:06:38 2025 by rpki-client