This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft File: pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft (raw, json) Hash identifier: +Vb733WtkXX9UmH0gr5b6FWBs8CBuQMGMMiCugOf39c= Subject key identifier: 0E:C3:21:4C:91:D0:6E:84:8D:C9:F0:61:51:71:F2:0C:7A:31:C8:03 Authority key identifier: A6:30:75:CB:B7:EB:16:93:EE:71:BC:90:E5:F7:3D:AD:C2:25:D9:1A Certificate issuer: /CN=a63075cbb7eb1693ee71bc90e5f73dadc225d91a Certificate serial: 019B5B65B8624ACD5E2071FDBAB0CE604BA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 16:02:31 +0000 Manifest this update: Fri 26 Dec 2025 16:02:31 +0000 Manifest next update: Sat 27 Dec 2025 16:02:31 +0000 Files and hashes: 1: pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl (hash: GpeN7FszttcjyUgXR7/UOgwS8E4iNCEuWHqeRBxxgo4=) 2: t403LtXkOSW8w7w_vK-2ppXvWVA.roa (hash: kUS7ckaNEkh4qS4uYt0WI3yhqZiJYbt1KK2dO98adJY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:65:b8:62:4a:cd:5e:20:71:fd:ba:b0:ce:60:4b:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a63075cbb7eb1693ee71bc90e5f73dadc225d91a Validity Not Before: Dec 26 16:02:31 2025 GMT Not After : Dec 27 16:02:31 2025 GMT Subject: CN=0ec3214c91d06e848dc9f0615171f20c7a31c803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:95:71:c3:c8:c3:a2:63:04:5b:de:1f:60:56: 8c:04:21:23:1a:41:59:8c:e0:20:ef:23:18:7c:8a: 64:79:48:e9:2a:06:e2:03:7a:aa:8d:25:68:23:77: db:54:9e:ad:7b:1a:ef:96:2f:34:5f:b7:35:6f:a3: f1:8f:76:85:e5:ae:0a:27:6b:0b:f7:b2:9c:4d:f8: 09:84:bc:ba:2d:20:84:6a:ff:fa:37:76:71:82:26: d8:bc:db:78:74:bf:82:36:c5:de:9e:4f:39:b0:f2: d1:44:2a:e4:f0:7b:0a:37:1e:03:5d:10:43:21:34: 70:7e:e8:7c:1d:c0:d8:c9:63:ed:de:d4:fa:4c:49: df:e3:b1:41:19:5e:02:34:97:5a:3a:8b:68:ac:26: 3b:1c:a4:24:e5:9e:da:59:91:c6:4e:38:1f:97:4c: 60:7f:b7:66:0b:f2:e6:1e:98:ea:e9:fa:a8:c0:15: 51:83:13:04:16:19:55:52:4c:a5:ed:df:e8:32:47: 19:d0:41:0c:b4:70:41:38:02:a7:fa:ab:c4:11:e8: 2a:74:3f:38:89:58:07:5a:11:71:3d:33:0f:12:93: 55:12:89:60:ac:44:4e:cf:1e:c9:0b:2e:20:f4:48: 73:57:d9:50:e2:a1:1e:00:cc:17:82:ff:cb:c5:c7: 38:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C3:21:4C:91:D0:6E:84:8D:C9:F0:61:51:71:F2:0C:7A:31:C8:03 X509v3 Authority Key Identifier: keyid:A6:30:75:CB:B7:EB:16:93:EE:71:BC:90:E5:F7:3D:AD:C2:25:D9:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:20:4f:ff:86:79:15:25:5d:50:7e:6a:a7:33:49:7c:07:9c: e7:f6:6a:df:87:bf:db:10:20:eb:83:0f:a1:4a:d5:c5:a7:c7: 7f:96:79:d2:dd:36:49:71:1a:57:b7:aa:8b:28:a5:42:35:d0: af:f8:f0:78:3c:e8:97:5f:4d:fb:04:28:45:19:c3:4c:1f:60: 67:5e:04:1a:45:7e:3b:5d:c0:7d:19:2f:b7:0b:fa:89:e9:05: cd:9c:54:b9:31:7f:1d:d8:79:5c:ea:02:95:21:29:28:7d:01: e3:5c:9d:40:48:2c:03:35:5d:b1:f4:09:7f:1c:ef:28:5a:c0: 2c:48:37:70:a7:3f:75:63:f5:e7:38:96:a4:bb:6a:c4:ac:0b: b9:18:b1:07:0e:5c:56:42:f1:52:4d:5f:c3:12:d5:37:88:30: 52:08:00:57:7f:3c:c8:ea:49:64:64:a3:18:a3:d2:36:70:f2: d8:5e:07:fe:2a:1d:6d:48:6c:13:b0:0d:3f:a4:9c:03:4d:02: 07:61:66:73:54:12:c1:0e:8d:86:a5:80:3a:3e:05:7c:1b:32: b9:9c:79:77:03:96:17:a1:d8:84:47:3f:e1:37:42:2e:83:71: ba:f0:a8:59:32:db:e5:f7:71:1b:38:af:55:c9:09:17:b9:d4: 61:10:eb:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbZbhiSs1eIHH9urDOYEukMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MzA3NWNiYjdlYjE2OTNlZTcxYmM5MGU1ZjczZGFkYzIy NWQ5MWEwHhcNMjUxMjI2MTYwMjMxWhcNMjUxMjI3MTYwMjMxWjAzMTEwLwYDVQQD EygwZWMzMjE0YzkxZDA2ZTg0OGRjOWYwNjE1MTcxZjIwYzdhMzFjODAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JVxw8jDomMEW94fYFaMBCEjGkFZ jOAg7yMYfIpkeUjpKgbiA3qqjSVoI3fbVJ6texrvli80X7c1b6Pxj3aF5a4KJ2sL 97KcTfgJhLy6LSCEav/6N3ZxgibYvNt4dL+CNsXenk85sPLRRCrk8HsKNx4DXRBD ITRwfuh8HcDYyWPt3tT6TEnf47FBGV4CNJdaOotorCY7HKQk5Z7aWZHGTjgfl0xg f7dmC/LmHpjq6fqowBVRgxMEFhlVUkyl7d/oMkcZ0EEMtHBBOAKn+qvEEegqdD84 iVgHWhFxPTMPEpNVEolgrEROzx7JCy4g9EhzV9lQ4qEeAMwXgv/Lxcc44wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA7DIUyR0G6EjcnwYVFx8gx6McgDMB8GA1UdIwQY MBaAFKYwdcu36xaT7nG8kOX3Pa3CJdkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGpCMXk3ZnJGcFB1Y2J5UTVmYzlyY0lsMlJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9iYmU5ZmYtMjM2NS00OWM4LTk4ZDYt ZTcxYzMxN2EzZmE4LzEvcGpCMXk3ZnJGcFB1Y2J5UTVmYzlyY0lsMlJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9iYmU5ZmYtMjM2NS00OWM4LTk4ZDYtZTcxYzMxN2EzZmE4 LzEvcGpCMXk3ZnJGcFB1Y2J5UTVmYzlyY0lsMlJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVSBP/4Z5 FSVdUH5qpzNJfAec5/Zq34e/2xAg64MPoUrVxafHf5Z50t02SXEaV7eqiyilQjXQ r/jweDzol19N+wQoRRnDTB9gZ14EGkV+O13AfRkvtwv6iekFzZxUuTF/Hdh5XOoC lSEpKH0B41ydQEgsAzVdsfQJfxzvKFrALEg3cKc/dWP15ziWpLtqxKwLuRixBw5c VkLxUk1fwxLVN4gwUggAV388yOpJZGSjGKPSNnDy2F4H/iodbUhsE7ANP6ScA00C B2Fmc1QSwQ6NhqWAOj4FfBsyuZx5dwOWF6HYhEc/4TdCLoNxuvCoWTLb5fdxGziv VckJF7nUYRDr4A== -----END CERTIFICATE-----Generated at Fri Dec 26 21:08:58 2025 by rpki-client