This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft File: PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft (raw, json) Hash identifier: XeiNO7H6akmJQctRrXSTWcvKZ1JHCxqAbLVKN/xw7tE= Subject key identifier: 5F:5B:46:D8:DE:7C:F4:85:E9:6F:DA:8A:AF:44:B1:90:27:20:66:93 Authority key identifier: 3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D Certificate issuer: /CN=3e34b02edc7c2878f94c5104cafa8978afb6752d Certificate serial: 019B31FACEFA94E8AE49B7E23EAE8B5FC44E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft Manifest number: 099C Signing time: Thu 18 Dec 2025 15:01:19 +0000 Manifest this update: Thu 18 Dec 2025 15:01:19 +0000 Manifest next update: Fri 19 Dec 2025 15:01:19 +0000 Files and hashes: 1: PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl (hash: /kkgHJXRtmf6Y4oCyCnC8uzQhywdtqfrkaUpN4uG71o=) 2: zw3ZQoqzEpP0EhpQ36h6FYlUI5I.roa (hash: Jk/Vq/HavBcVMjBR4tqdS47N90EhCkZ4tAXukBLV+pA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:ce:fa:94:e8:ae:49:b7:e2:3e:ae:8b:5f:c4:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e34b02edc7c2878f94c5104cafa8978afb6752d Validity Not Before: Dec 18 15:01:19 2025 GMT Not After : Dec 19 15:01:19 2025 GMT Subject: CN=5f5b46d8de7cf485e96fda8aaf44b19027206693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ca:1a:0b:8f:76:50:4d:d3:9b:32:88:2e:b0: cf:3e:19:d7:19:e0:92:a6:ee:c5:d4:48:50:a8:4a: 2e:56:88:29:c9:f6:9d:1d:ba:99:5e:0e:a2:93:b0: 65:df:8f:ad:f5:14:c4:03:5c:32:0a:dc:24:d4:ac: 18:7a:b3:0d:10:dd:2c:57:4f:dd:ca:6f:e5:f6:06: 35:18:95:b7:29:70:a0:db:c3:27:26:3d:38:c3:99: 98:e3:3f:1a:bf:00:d1:64:79:b4:6e:2f:f5:5a:87: a2:78:ea:1e:d3:c4:68:f8:11:77:70:23:72:0e:80: f0:49:fc:4f:54:c0:31:23:ac:53:a7:ee:14:17:4e: c8:66:a4:8d:cc:9d:e8:c8:2b:f3:44:aa:b9:36:ea: 64:2e:dd:a2:8e:17:36:32:bb:97:2b:aa:82:39:5c: cb:92:f6:c2:29:98:64:f7:c6:49:4b:88:c1:fa:0e: ee:1d:52:e8:b2:a2:19:8e:f3:70:d5:89:b3:21:e5: 60:5c:0a:8e:9a:6e:84:57:82:48:40:78:00:3d:81: b5:c9:12:73:bf:45:db:d2:af:27:3f:c5:9e:42:9e: 8e:24:cb:42:15:49:68:b2:e2:bc:6d:39:e7:2d:e9: 77:fb:e9:43:d2:e3:51:b4:6d:1c:f5:ca:fb:01:ea: e6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:5B:46:D8:DE:7C:F4:85:E9:6F:DA:8A:AF:44:B1:90:27:20:66:93 X509v3 Authority Key Identifier: keyid:3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:12:44:54:30:7b:a5:15:3c:78:d9:34:26:c1:5d:3f:55:fd: 96:c1:4f:45:ba:31:1b:e9:cb:bf:79:25:d8:f2:d3:d4:a8:c7: 8b:2d:e1:39:c4:c7:73:cf:e4:f3:97:cb:8c:e6:b9:c8:49:47: 01:02:08:51:db:18:6b:f4:d6:1f:e7:c0:97:5a:0b:3b:01:a3: ec:95:31:c3:37:91:9f:4c:5b:b6:70:3d:7f:ed:59:8e:d9:8d: 48:31:e4:ad:e4:a9:0c:c8:dd:7e:24:e0:a5:db:24:1f:77:7b: fa:96:ee:84:c8:7c:e5:74:b7:69:50:3e:5c:5d:79:a3:4e:b4: c9:d4:c8:32:a9:f5:72:15:28:7d:af:0c:ab:88:e7:37:65:94: e9:96:39:af:1f:8f:4d:bd:4b:28:34:42:ff:d2:99:99:8b:d0: a9:ad:fa:39:d6:84:15:c5:6a:0a:8a:30:23:f4:bf:ef:14:d4: 84:4f:cb:84:6f:02:f9:09:58:69:4b:5d:b4:4e:5f:5a:05:e3: b0:fe:08:80:6a:d8:30:26:f0:54:05:60:6a:9b:45:9a:09:66: ab:8b:79:d3:73:0f:17:a5:59:59:7a:ac:c9:5d:b5:54:53:f7: 0c:d2:4e:55:f0:6f:90:08:b4:f9:3b:c1:f1:63:c3:db:49:00: c6:d5:c0:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsx+s76lOiuSbfiPq6LX8ROMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMzRiMDJlZGM3YzI4NzhmOTRjNTEwNGNhZmE4OTc4YWZi Njc1MmQwHhcNMjUxMjE4MTUwMTE5WhcNMjUxMjE5MTUwMTE5WjAzMTEwLwYDVQQD Eyg1ZjViNDZkOGRlN2NmNDg1ZTk2ZmRhOGFhZjQ0YjE5MDI3MjA2NjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMoaC492UE3TmzKILrDPPhnXGeCS pu7F1EhQqEouVogpyfadHbqZXg6ik7Bl34+t9RTEA1wyCtwk1KwYerMNEN0sV0/d ym/l9gY1GJW3KXCg28MnJj04w5mY4z8avwDRZHm0bi/1WoeieOoe08Ro+BF3cCNy DoDwSfxPVMAxI6xTp+4UF07IZqSNzJ3oyCvzRKq5NupkLt2ijhc2MruXK6qCOVzL kvbCKZhk98ZJS4jB+g7uHVLosqIZjvNw1YmzIeVgXAqOmm6EV4JIQHgAPYG1yRJz v0Xb0q8nP8WeQp6OJMtCFUlosuK8bTnnLel3++lD0uNRtG0c9cr7AermxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF9bRtjefPSF6W/aiq9EsZAnIGaTMB8GA1UdIwQY MBaAFD40sC7cfCh4+UxRBMr6iXivtnUtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGpTd0x0eDhLSGo1VEZFRXl2cUplSy0yZFMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi80MjI1MmUtMDMyMS00ZGEyLTkyZjQt MzVhMDI0MWE0MzAxLzEvUGpTd0x0eDhLSGo1VEZFRXl2cUplSy0yZFMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi80MjI1MmUtMDMyMS00ZGEyLTkyZjQtMzVhMDI0MWE0MzAx LzEvUGpTd0x0eDhLSGo1VEZFRXl2cUplSy0yZFMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADRJEVDB7 pRU8eNk0JsFdP1X9lsFPRboxG+nLv3kl2PLT1KjHiy3hOcTHc8/k85fLjOa5yElH AQIIUdsYa/TWH+fAl1oLOwGj7JUxwzeRn0xbtnA9f+1ZjtmNSDHkreSpDMjdfiTg pdskH3d7+pbuhMh85XS3aVA+XF15o060ydTIMqn1chUofa8Mq4jnN2WU6ZY5rx+P Tb1LKDRC/9KZmYvQqa36OdaEFcVqCoowI/S/7xTUhE/LhG8C+QlYaUtdtE5fWgXj sP4IgGrYMCbwVAVgaptFmglmq4t503MPF6VZWXqsyV21VFP3DNJOVfBvkAi0+TvB 8WPD20kAxtXArw== -----END CERTIFICATE-----Generated at Thu Dec 18 18:57:03 2025 by rpki-client