This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft File: PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft (raw, json) Hash identifier: eAxwpKCRkKYv4R0tRTkLjdyJGmx++TJOQmBMGkBAGrw= Subject key identifier: 84:61:CB:47:62:06:55:43:96:57:36:2F:DE:F6:CD:46:C0:94:FE:F2 Authority key identifier: 3C:02:09:4C:22:10:D8:B2:17:15:F9:8D:F8:59:8B:35:32:08:D1:0C Certificate issuer: /CN=3c02094c2210d8b21715f98df8598b353208d10c Certificate serial: 019B4136C435980F303FD396E2D71E4B8028 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft Manifest number: 1226 Signing time: Sun 21 Dec 2025 14:01:06 +0000 Manifest this update: Sun 21 Dec 2025 14:01:06 +0000 Manifest next update: Mon 22 Dec 2025 14:01:06 +0000 Files and hashes: 1: CufUT2fMUqvz9LGxO18OZgdQp_g.roa (hash: G2fcMqhZShi/pIW7MbvdKjfohzkmwJAvDqVZX+1pdMQ=) 2: PAIJTCIQ2LIXFfmN-FmLNTII0Qw.crl (hash: a+mZHWfCdkDIOgkxxLSO9guRGBY49KwwVivgEHF1WNI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft rsync://rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:c4:35:98:0f:30:3f:d3:96:e2:d7:1e:4b:80:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c02094c2210d8b21715f98df8598b353208d10c Validity Not Before: Dec 21 14:01:06 2025 GMT Not After : Dec 22 14:01:06 2025 GMT Subject: CN=8461cb47620655439657362fdef6cd46c094fef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:53:b2:8e:44:ef:7a:db:46:a3:dd:fb:bf:4e: 50:3b:24:5e:54:e7:75:bc:08:5d:2e:7e:66:bf:e6: a8:0a:bd:b8:81:fd:63:e9:a0:51:95:01:ce:f4:99: bb:66:c2:8d:bf:ac:d8:6a:0d:6d:ec:87:a2:14:5f: 2c:62:f5:0b:68:dc:a6:45:9a:1b:73:04:67:9d:c2: f6:59:51:1a:e0:cc:6c:be:53:cf:0f:a4:c2:ef:9f: 97:da:98:58:f3:17:4c:d2:86:5c:bc:fe:90:ff:17: 62:3b:d5:2a:47:31:c6:42:b7:55:9a:4f:e6:f0:ba: 95:27:e2:08:fd:f2:46:dd:3c:18:a1:3b:6a:41:41: d6:06:3a:45:4b:76:8f:49:07:c1:21:6b:72:b3:5d: 26:ed:70:fc:66:e9:02:b5:17:14:86:76:51:eb:7f: e8:fa:2c:96:d4:b0:7d:da:06:03:1b:ae:45:3a:1b: 27:67:77:c5:9f:4a:ed:9c:1e:67:f0:47:5c:8b:23: 73:d5:0e:d3:52:3a:84:54:6f:b5:f5:ce:77:19:75: f3:08:09:09:5b:40:0d:e5:49:d7:1e:d2:72:d7:aa: 72:bc:48:2d:a0:88:3c:90:51:3c:89:29:bb:0b:22: 54:9b:9c:20:77:0d:04:c6:3e:53:7a:8a:db:71:28: 2b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:61:CB:47:62:06:55:43:96:57:36:2F:DE:F6:CD:46:C0:94:FE:F2 X509v3 Authority Key Identifier: keyid:3C:02:09:4C:22:10:D8:B2:17:15:F9:8D:F8:59:8B:35:32:08:D1:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:ae:25:29:5b:62:13:7f:47:d3:a3:35:d5:2e:2e:90:7c:cf: 6c:b9:84:8d:08:55:f0:e5:23:d5:6c:28:be:07:bb:5a:a6:70: c4:e9:ed:7f:af:c9:3f:76:ec:7b:39:d7:e1:ee:30:ab:e0:2a: ca:37:7f:0c:56:f5:86:e5:20:63:7f:97:c8:28:32:1d:aa:fa: 99:79:ab:54:a9:c2:cc:5f:05:09:54:a7:d4:f5:be:17:42:8e: b5:7b:1e:6f:bd:ba:1f:08:d7:01:25:1b:b5:96:ec:d0:47:12: d8:86:f6:4c:04:90:26:ab:7d:4b:e6:6e:ad:8a:81:4d:29:ba: f7:73:65:9c:9c:f2:ef:84:67:35:eb:aa:d4:da:65:fc:d1:5e: ca:7c:41:18:8b:8a:ad:79:53:ef:a8:97:84:de:e0:d4:22:81: d0:74:b5:6a:fc:be:81:2a:d3:99:f0:a3:d0:f2:65:50:8f:ed: 86:ae:6a:b2:74:b4:17:b6:ce:ee:d7:74:4e:54:80:d0:18:d9: 3f:06:b8:cb:6e:f8:2e:0c:65:55:cf:2b:14:d2:0d:dd:3d:7d: 2e:58:1a:75:58:96:3c:a1:e0:8e:dc:50:66:f3:53:80:50:4c: 7a:5f:02:cb:ac:ee:48:a3:3a:f4:f8:d1:69:a0:1e:99:64:c7: 61:e0:96:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNsQ1mA8wP9OW4tceS4AoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMDIwOTRjMjIxMGQ4YjIxNzE1Zjk4ZGY4NTk4YjM1MzIw OGQxMGMwHhcNMjUxMjIxMTQwMTA2WhcNMjUxMjIyMTQwMTA2WjAzMTEwLwYDVQQD Eyg4NDYxY2I0NzYyMDY1NTQzOTY1NzM2MmZkZWY2Y2Q0NmMwOTRmZWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1OyjkTvettGo937v05QOyReVOd1 vAhdLn5mv+aoCr24gf1j6aBRlQHO9Jm7ZsKNv6zYag1t7IeiFF8sYvULaNymRZob cwRnncL2WVEa4MxsvlPPD6TC75+X2phY8xdM0oZcvP6Q/xdiO9UqRzHGQrdVmk/m 8LqVJ+II/fJG3TwYoTtqQUHWBjpFS3aPSQfBIWtys10m7XD8ZukCtRcUhnZR63/o +iyW1LB92gYDG65FOhsnZ3fFn0rtnB5n8EdciyNz1Q7TUjqEVG+19c53GXXzCAkJ W0AN5UnXHtJy16pyvEgtoIg8kFE8iSm7CyJUm5wgdw0Exj5TeorbcSgrkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIRhy0diBlVDllc2L972zUbAlP7yMB8GA1UdIwQY MBaAFDwCCUwiENiyFxX5jfhZizUyCNEMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEFJSlRDSVEyTElYRmZtTi1GbUxOVElJMFF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS85ODNjMmMtZGRhYi00MjJiLWJjZDIt MTczNzRiZmZiNzFhLzEvUEFJSlRDSVEyTElYRmZtTi1GbUxOVElJMFF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS85ODNjMmMtZGRhYi00MjJiLWJjZDItMTczNzRiZmZiNzFh LzEvUEFJSlRDSVEyTElYRmZtTi1GbUxOVElJMFF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiq4lKVti E39H06M11S4ukHzPbLmEjQhV8OUj1Wwovge7WqZwxOntf6/JP3bseznX4e4wq+Aq yjd/DFb1huUgY3+XyCgyHar6mXmrVKnCzF8FCVSn1PW+F0KOtXseb726HwjXASUb tZbs0EcS2Ib2TASQJqt9S+ZurYqBTSm693NlnJzy74RnNeuq1Npl/NFeynxBGIuK rXlT76iXhN7g1CKB0HS1avy+gSrTmfCj0PJlUI/thq5qsnS0F7bO7td0TlSA0BjZ Pwa4y274LgxlVc8rFNIN3T19LlgadViWPKHgjtxQZvNTgFBMel8Cy6zuSKM69PjR aaAemWTHYeCWlA== -----END CERTIFICATE-----Generated at Sun Dec 21 23:15:16 2025 by rpki-client