This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/pJR6ZT3sU9F51XJPJRTHJW22nfg.mft File: pJR6ZT3sU9F51XJPJRTHJW22nfg.mft (raw, json) Hash identifier: gKsXPE1WyPRMs87argmvNan84nI5IEWXf5C+kRs8OaA= Subject key identifier: 26:03:3A:B1:EC:68:38:57:06:95:9C:F7:96:ED:8A:D9:6F:12:AC:59 Authority key identifier: A4:94:7A:65:3D:EC:53:D1:79:D5:72:4F:25:14:C7:25:6D:B6:9D:F8 Certificate issuer: /CN=a4947a653dec53d179d5724f2514c7256db69df8 Certificate serial: 019B18DF2BAAD794F37CAE2C638FBB5E5383 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJR6ZT3sU9F51XJPJRTHJW22nfg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/pJR6ZT3sU9F51XJPJRTHJW22nfg.mft Manifest number: 10A3 Signing time: Sat 13 Dec 2025 18:00:37 +0000 Manifest this update: Sat 13 Dec 2025 18:00:37 +0000 Manifest next update: Sun 14 Dec 2025 18:00:37 +0000 Files and hashes: 1: pJR6ZT3sU9F51XJPJRTHJW22nfg.crl (hash: TUz23yyzd4yOxYCbLqlGItYm1aFjm/olTUSou7kvOZo=) 2: qOhrpnYZCzUpUKZB3MFNa4-HHEI.roa (hash: 6oJMsP2H8bztySGaS8Vu2F0xQVmbFj5CBgjWIqAhkAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/pJR6ZT3sU9F51XJPJRTHJW22nfg.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/pJR6ZT3sU9F51XJPJRTHJW22nfg.mft rsync://rpki.ripe.net/repository/DEFAULT/pJR6ZT3sU9F51XJPJRTHJW22nfg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:df:2b:aa:d7:94:f3:7c:ae:2c:63:8f:bb:5e:53:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4947a653dec53d179d5724f2514c7256db69df8 Validity Not Before: Dec 13 18:00:37 2025 GMT Not After : Dec 14 18:00:37 2025 GMT Subject: CN=26033ab1ec68385706959cf796ed8ad96f12ac59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:45:5c:f3:e3:df:74:d7:c2:69:d0:c7:91:9c: 40:4e:7a:de:e3:c2:f0:58:10:3b:79:0f:d2:6b:4e: 16:34:7f:43:1b:b7:e4:7d:06:44:46:5c:b4:6f:1d: 48:3f:75:8a:ec:f9:15:a1:a0:32:52:d8:a1:b7:a3: c0:ea:d9:bc:10:2d:9d:94:be:37:9a:5b:15:b7:50: 86:be:31:4d:76:74:fb:65:7f:9a:5e:4d:d8:09:88: 1b:9f:f9:46:80:87:88:49:2e:c7:2d:5c:1d:46:4b: 7a:f4:69:b5:1a:f3:63:8e:48:74:6c:98:3d:f5:8f: 33:09:55:f2:90:2f:53:78:44:9a:9f:80:ba:51:d5: bc:8e:57:06:d5:4a:fe:54:bb:1c:6a:e6:c1:c9:3f: c3:e1:b1:21:6d:36:21:be:13:00:5f:3c:2d:b1:2c: 07:1a:fb:b5:14:1e:fe:db:a2:5a:9a:78:08:e1:b7: e0:b3:9b:ed:d1:c2:a8:cc:a8:80:1d:29:54:40:2c: e1:0f:f5:85:27:bf:04:fd:3a:d2:03:30:a9:b7:56: 43:6f:5f:8a:79:ab:ba:be:1d:3f:e3:bf:c2:79:6c: a4:72:e8:08:94:27:ec:ad:ef:2d:7b:33:31:6a:4d: 9a:0c:21:0f:0b:ad:7d:fb:13:bc:5e:f8:0e:36:8a: fc:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:03:3A:B1:EC:68:38:57:06:95:9C:F7:96:ED:8A:D9:6F:12:AC:59 X509v3 Authority Key Identifier: keyid:A4:94:7A:65:3D:EC:53:D1:79:D5:72:4F:25:14:C7:25:6D:B6:9D:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJR6ZT3sU9F51XJPJRTHJW22nfg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/pJR6ZT3sU9F51XJPJRTHJW22nfg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/pJR6ZT3sU9F51XJPJRTHJW22nfg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:ec:28:7c:21:05:67:f2:3a:5d:95:5a:3d:b4:54:26:03:70: c6:de:de:37:9b:4f:86:84:33:a1:12:a1:4c:ec:4b:73:ed:e7: 6a:f4:33:41:0c:d8:d3:33:a1:0f:ea:77:a6:ef:8f:c5:ca:70: 99:aa:5a:6a:88:70:57:46:4c:ff:e4:c2:89:a6:f2:a5:a9:77: 10:33:5f:d6:de:cc:31:29:5f:ad:54:12:8c:a1:bd:74:24:50: bb:28:c2:e2:d3:e8:2c:a3:9b:27:b3:c9:01:12:79:93:52:24: fd:ce:13:31:df:06:40:14:04:f9:3b:ef:6e:b6:36:2d:55:2b: df:ba:2d:d3:dd:9a:81:8e:ea:1b:21:84:1c:a3:7e:79:f5:62: d8:fb:90:75:39:ae:c8:ff:2e:2f:62:be:99:2b:73:c3:0c:34: 1c:fc:e1:f4:68:4c:c3:11:a4:38:0b:bb:d0:89:af:d8:3c:6f: 59:14:a9:58:4f:98:1e:ca:1f:72:cd:0a:78:e4:86:f2:5e:de: 12:d7:05:8f:72:51:6b:be:59:03:ca:be:63:c0:f5:04:e8:0d: 2a:fa:7e:d0:23:9d:ed:5d:5a:5c:e6:e2:e8:f3:88:1f:c2:13: 94:b2:16:ab:91:6a:73:07:82:d9:70:84:79:c3:d9:1a:d8:d3: 99:5d:96:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsY3yuq15TzfK4sY4+7XlODMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0OTQ3YTY1M2RlYzUzZDE3OWQ1NzI0ZjI1MTRjNzI1NmRi NjlkZjgwHhcNMjUxMjEzMTgwMDM3WhcNMjUxMjE0MTgwMDM3WjAzMTEwLwYDVQQD EygyNjAzM2FiMWVjNjgzODU3MDY5NTljZjc5NmVkOGFkOTZmMTJhYzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEVc8+PfdNfCadDHkZxATnre48Lw WBA7eQ/Sa04WNH9DG7fkfQZERly0bx1IP3WK7PkVoaAyUtiht6PA6tm8EC2dlL43 mlsVt1CGvjFNdnT7ZX+aXk3YCYgbn/lGgIeISS7HLVwdRkt69Gm1GvNjjkh0bJg9 9Y8zCVXykC9TeESan4C6UdW8jlcG1Ur+VLscaubByT/D4bEhbTYhvhMAXzwtsSwH Gvu1FB7+26JamngI4bfgs5vt0cKozKiAHSlUQCzhD/WFJ78E/TrSAzCpt1ZDb1+K eau6vh0/47/CeWykcugIlCfsre8tezMxak2aDCEPC619+xO8XvgONor8aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCYDOrHsaDhXBpWc95btitlvEqxZMB8GA1UdIwQY MBaAFKSUemU97FPRedVyTyUUxyVttp34MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEpSNlpUM3NVOUY1MVhKUEpSVEhKVzIybmZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83NjcwNmMtMTI0Yy00ZGJmLWFlZjgt NzNkYmExZGRkY2E3LzEvcEpSNlpUM3NVOUY1MVhKUEpSVEhKVzIybmZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS83NjcwNmMtMTI0Yy00ZGJmLWFlZjgtNzNkYmExZGRkY2E3 LzEvcEpSNlpUM3NVOUY1MVhKUEpSVEhKVzIybmZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEewofCEF Z/I6XZVaPbRUJgNwxt7eN5tPhoQzoRKhTOxLc+3navQzQQzY0zOhD+p3pu+Pxcpw mapaaohwV0ZM/+TCiabypal3EDNf1t7MMSlfrVQSjKG9dCRQuyjC4tPoLKObJ7PJ ARJ5k1Ik/c4TMd8GQBQE+TvvbrY2LVUr37ot092agY7qGyGEHKN+efVi2PuQdTmu yP8uL2K+mStzwww0HPzh9GhMwxGkOAu70Imv2DxvWRSpWE+YHsofcs0KeOSG8l7e EtcFj3JRa75ZA8q+Y8D1BOgNKvp+0COd7V1aXObi6POIH8ITlLIWq5FqcweC2XCE ecPZGtjTmV2Wqw== -----END CERTIFICATE-----Generated at Sun Dec 14 01:52:36 2025 by rpki-client