This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft File: PijW8T41ndC7RTSiRlWXTFfSsP4.mft (raw, json) Hash identifier: 9l/DOxY37dPPi92jR0i042Wa8/Obc7XjKVPTS99VBYQ= Subject key identifier: 5C:FA:19:6D:5A:6B:DE:B5:3D:29:00:8E:E4:85:5F:08:0F:2E:CA:48 Authority key identifier: 3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE Certificate issuer: /CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe Certificate serial: 019B383398ED8E77724F4992FDBD42ABAD08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft Manifest number: 0A13 Signing time: Fri 19 Dec 2025 20:01:04 +0000 Manifest this update: Fri 19 Dec 2025 20:01:04 +0000 Manifest next update: Sat 20 Dec 2025 20:01:04 +0000 Files and hashes: 1: PijW8T41ndC7RTSiRlWXTFfSsP4.crl (hash: VWJ5oC/1cW8u1Yz9myFKLjJ/5ns48AXA5z2sHguoKkc=) 2: _-WfGC5BAnZg40YHw-xkJtMu1y8.roa (hash: fBNuXZvCsQYQGG7z7gRAz8VOFKDx2N1N7BNPe/5ZuRI=) 3: quGmI9u7kZ_srTH3LAyxtNKvCAo.roa (hash: RhLYYew4zXRTIVHsFT/3lhPwJj/c1cXNf2IyJ1qOi6w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:33:98:ed:8e:77:72:4f:49:92:fd:bd:42:ab:ad:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe Validity Not Before: Dec 19 20:01:04 2025 GMT Not After : Dec 20 20:01:04 2025 GMT Subject: CN=5cfa196d5a6bdeb53d29008ee4855f080f2eca48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9a:5c:d9:53:8f:3b:9a:23:c8:a6:3e:ec:bd: ef:ec:cd:e4:5c:c4:05:9d:ff:ae:c1:d9:a8:27:91: e8:13:0d:1c:3f:93:4b:d0:99:42:ca:c4:9a:c9:a7: 83:ce:6a:05:69:b2:a3:df:9d:bf:fe:21:4b:ed:87: a6:f7:96:9e:8b:54:20:58:52:04:a3:10:46:95:74: 58:be:39:e3:a7:d9:4e:ba:2f:4e:d6:ba:7e:d8:1b: 31:9a:f9:1a:0e:2e:96:96:6c:00:d8:64:5d:7b:f9: 8c:47:70:8c:ef:97:05:2b:40:8e:b1:b5:d9:72:41: f2:01:d2:77:92:58:1f:cd:89:9f:66:81:49:c8:0a: 84:ab:1f:0d:36:c2:f5:ad:e8:94:27:81:84:61:8d: ac:2b:38:0c:16:14:09:4c:18:c2:32:33:95:a4:61: 12:d1:42:d4:3c:f4:4f:29:97:9b:a4:51:2a:fb:b8: 4a:eb:7c:a8:45:a1:b9:69:b3:de:ae:be:d7:ed:18: c6:16:0c:ea:81:72:5d:f1:14:54:5f:3e:18:54:b8: 57:0f:e1:83:c7:35:30:54:c1:3c:30:37:f9:ff:22: 17:86:c9:73:15:98:cc:8c:43:84:53:56:a1:bb:fe: 75:0b:2e:ed:e7:e8:a0:53:aa:db:d7:06:34:84:8d: 6c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:FA:19:6D:5A:6B:DE:B5:3D:29:00:8E:E4:85:5F:08:0F:2E:CA:48 X509v3 Authority Key Identifier: keyid:3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:05:57:4c:c6:cd:fb:bd:d2:c3:74:a4:7b:8e:cc:b1:62:17: 14:81:23:37:db:0b:24:d3:d1:45:d1:ab:dc:6a:42:05:f7:57: 87:d5:89:e8:f1:97:e7:af:7d:e5:07:a6:82:5f:27:44:cc:6e: 73:e4:3e:a4:3c:79:1b:ae:e2:da:28:3d:4b:dd:ff:7d:07:48: 69:b3:30:15:88:8e:e5:d0:ae:55:5a:b6:eb:9c:13:38:f7:90: 00:3c:2d:c4:c3:4a:28:13:92:29:c6:0d:2c:59:4b:8b:b8:a4: 97:94:21:13:21:6c:fe:36:2a:05:27:42:56:af:f7:22:03:97: 6a:bd:e2:7f:eb:f1:e8:ee:e1:f0:a2:3d:a0:57:e9:7a:63:89: ce:ec:3a:74:06:47:1d:90:ef:da:0c:97:29:90:5f:fa:42:3a: 74:b0:fb:68:c8:9c:d8:3c:84:76:1d:5d:f4:4f:2e:a3:ca:c0: 7b:f0:78:e7:4c:15:32:00:4d:56:9d:fd:39:9a:b8:4c:92:6a: 61:d3:cd:6b:c4:33:3e:ad:57:d8:04:d7:30:a0:fe:4e:cb:3d: 68:7c:96:59:dd:22:6f:12:41:47:2d:b2:37:54:a0:78:85:b5: fa:ae:91:ea:71:e0:d2:a9:45:d1:51:55:a1:9b:cd:a9:de:09: 14:47:9b:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4M5jtjndyT0mS/b1Cq60IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMjhkNmYxM2UzNTlkZDBiYjQ1MzRhMjQ2NTU5NzRjNTdk MmIwZmUwHhcNMjUxMjE5MjAwMTA0WhcNMjUxMjIwMjAwMTA0WjAzMTEwLwYDVQQD Eyg1Y2ZhMTk2ZDVhNmJkZWI1M2QyOTAwOGVlNDg1NWYwODBmMmVjYTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJpc2VOPO5ojyKY+7L3v7M3kXMQF nf+uwdmoJ5HoEw0cP5NL0JlCysSayaeDzmoFabKj352//iFL7Yem95aei1QgWFIE oxBGlXRYvjnjp9lOui9O1rp+2BsxmvkaDi6WlmwA2GRde/mMR3CM75cFK0COsbXZ ckHyAdJ3klgfzYmfZoFJyAqEqx8NNsL1reiUJ4GEYY2sKzgMFhQJTBjCMjOVpGES 0ULUPPRPKZebpFEq+7hK63yoRaG5abPerr7X7RjGFgzqgXJd8RRUXz4YVLhXD+GD xzUwVME8MDf5/yIXhslzFZjMjEOEU1ahu/51Cy7t5+igU6rb1wY0hI1sBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFz6GW1aa961PSkAjuSFXwgPLspIMB8GA1UdIwQY MBaAFD4o1vE+NZ3Qu0U0okZVl0xX0rD+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGlqVzhUNDFuZEM3UlRTaVJsV1hURmZTc1A0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy82NDUwMzgtMjU1Yi00NGRmLWFlOGEt NTQ4ODE2OTExOWU4LzEvUGlqVzhUNDFuZEM3UlRTaVJsV1hURmZTc1A0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy82NDUwMzgtMjU1Yi00NGRmLWFlOGEtNTQ4ODE2OTExOWU4 LzEvUGlqVzhUNDFuZEM3UlRTaVJsV1hURmZTc1A0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEwVXTMbN +73Sw3Ske47MsWIXFIEjN9sLJNPRRdGr3GpCBfdXh9WJ6PGX56995Qemgl8nRMxu c+Q+pDx5G67i2ig9S93/fQdIabMwFYiO5dCuVVq265wTOPeQADwtxMNKKBOSKcYN LFlLi7ikl5QhEyFs/jYqBSdCVq/3IgOXar3if+vx6O7h8KI9oFfpemOJzuw6dAZH HZDv2gyXKZBf+kI6dLD7aMic2DyEdh1d9E8uo8rAe/B450wVMgBNVp39OZq4TJJq YdPNa8QzPq1X2ATXMKD+Tss9aHyWWd0ibxJBRy2yN1SgeIW1+q6R6nHg0qlF0VFV oZvNqd4JFEebXw== -----END CERTIFICATE-----Generated at Sat Dec 20 02:02:24 2025 by rpki-client