This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft
File: pjvMbSX3R2-7PsM_bbw-nurZIhI.mft (raw, json)
Hash identifier: TQ45yuRyuzSdul+HoQwhDDlj8RP/U+O7CRCpGNaZR5U=
Subject key identifier: 7C:8C:F0:FD:54:F0:AC:72:8B:72:C0:E6:D6:CC:16:14:66:E7:0D:98
Authority key identifier: A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12
Certificate issuer: /CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212
Certificate serial: 019B1C17EF66870186C3DFA4933DDFC3667E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft
Manifest number: 0ADC
Signing time: Sun 14 Dec 2025 09:01:29 +0000
Manifest this update: Sun 14 Dec 2025 09:01:29 +0000
Manifest next update: Mon 15 Dec 2025 09:01:29 +0000
Files and hashes: 1: 5NFcVQOlS2SfRA9_dseHho-9-mc.roa (hash: swfI8aXvx2sxn3YOzxRnlDU7qvwOILHJAwX26Y3ztqI=)
2: 719PZLmeHqbujtRsKmvo5771XIo.roa (hash: bsKRuhzJIveVWiHQvKvv+dLt6oNf3d66tNY6ht9/C3A=)
3: 8-R9vBIjsdFkLJ6TAxmOtR4QU6I.roa (hash: F/qibakU6AQARJG53zEiFCnfouALh8xovmhCIsR4Po8=)
4: 8WUQrdzKsEZUNzZ9k3E9ajfkd5s.roa (hash: Ixz0hSpVqJJ/oAfsncTGxOv3fHWBSaH9gBGjqTv8vpQ=)
5: FHXWFrj4nreKJjXTfDKCc6Y16Is.roa (hash: PfuW04ELrwKUUeQD8qGy+/BFhBo8C5J05OWPOUMFx5w=)
6: Ho4pDAaaconFe5cZ7ygze1a44Xo.roa (hash: 1pC6hpICFpbgfqlZn7adq2AVfLKO5t0AC5KWofkjFSE=)
7: Kd5CFoG07kPDgqUGQpHj24zQka8.roa (hash: +2s4BraFjLJP4x9hMH6DgHfMWVkWCLxuz2cF8ghToGs=)
8: NYJYw1BTKJV56akoY5ZQRJna-MA.roa (hash: brwHoHz9mi1vg8NUkbqZqqePDdu1Ej44xmauCwQ9Qac=)
9: TLEdQvZiEPlpX35O8B6oknJfuyE.roa (hash: AdjCtV/JftiFEQtyk78ssQUWpqAhZBfMUWjoyo3BngI=)
10: fBfhsJw2d6Op2y70b533dv-T4j4.roa (hash: B8cZmEngTY2Ne9QwtzyJ6aeIrWSAdYH7Des5rTXKgP4=)
11: pjvMbSX3R2-7PsM_bbw-nurZIhI.crl (hash: Z1yS6gXO+k6ds1vPFBeJEZjqk8uvVjmIjM4uCQBY9NM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:1c:17:ef:66:87:01:86:c3:df:a4:93:3d:df:c3:66:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212
Validity
Not Before: Dec 14 09:01:29 2025 GMT
Not After : Dec 15 09:01:29 2025 GMT
Subject: CN=7c8cf0fd54f0ac728b72c0e6d6cc161466e70d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a6:8a:b2:f3:6e:f1:eb:33:28:ee:a4:8c:bb:
7b:8a:f8:60:1b:c3:7b:64:42:34:20:54:24:20:03:
54:64:2b:32:d0:0e:1d:ae:ff:0a:83:5b:2e:5c:e5:
2c:a9:c1:31:43:6e:72:62:0f:38:15:83:ee:47:a7:
2e:be:2d:cb:5b:d1:b1:62:bf:c0:ff:84:f9:f1:04:
19:f4:42:ae:e0:aa:6a:c0:e3:7e:fd:d1:f3:ec:db:
0c:79:c8:8c:ed:c8:66:1a:94:0e:8e:0c:c0:72:96:
98:a3:dd:7c:57:2f:58:4d:59:f9:8c:3b:2a:88:19:
d9:bc:57:a6:ab:1c:31:89:36:84:ad:fe:03:68:28:
81:9a:aa:2e:19:4a:20:39:a0:ab:04:94:24:60:54:
39:80:7e:97:82:ec:40:1a:8f:66:a0:0b:f3:fe:31:
29:1b:6e:5c:ba:55:84:35:d8:dd:fd:49:f3:59:12:
f0:d8:54:8b:3c:08:1a:04:fa:c9:86:47:7e:07:70:
45:00:80:38:33:70:58:d7:81:4b:e8:6d:e2:42:d5:
39:bd:2a:e7:89:ee:7c:0f:0b:c4:fc:4b:25:38:92:
40:12:6e:f9:58:39:50:7f:7f:2b:ca:f9:e1:d4:09:
35:74:4a:d9:f3:54:8a:9d:6b:c6:77:9b:74:6b:2b:
bb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8C:F0:FD:54:F0:AC:72:8B:72:C0:E6:D6:CC:16:14:66:E7:0D:98
X509v3 Authority Key Identifier:
keyid:A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:0b:43:0d:d3:e0:62:b7:26:e2:b7:37:57:3a:b9:d1:ed:fd:
12:cd:5d:1d:b3:9d:08:28:18:22:5f:28:bb:56:f9:fe:dd:f4:
12:39:a6:1c:af:ad:6b:18:ee:30:0f:2a:4c:56:9b:7f:63:46:
15:68:3b:b3:6e:56:ca:fa:41:d2:72:9e:a4:d5:11:48:60:a1:
4d:eb:a5:5f:52:64:ef:86:97:ee:29:ab:78:f5:35:5c:78:8b:
c4:ab:d8:8b:36:ea:58:a8:8a:f7:31:67:02:6e:b0:24:10:a3:
13:1f:41:e0:86:36:ee:50:40:29:eb:83:60:5d:af:ac:d9:38:
ed:fe:77:4d:11:d0:2b:79:83:c3:e2:25:41:79:74:3b:b6:a1:
31:b4:f0:09:d3:69:02:42:ec:7a:3e:f4:31:52:27:82:d7:79:
1e:a7:55:9f:d6:f9:fc:94:ff:e3:27:12:7b:dd:50:c3:6b:a6:
4c:e1:83:d9:ee:a5:3f:79:6c:41:c7:a5:74:14:cc:5d:09:c2:
aa:30:d0:97:ac:26:24:2e:4c:1a:6e:f6:c6:bd:0e:6c:ef:3d:
7e:2b:22:39:61:01:eb:3d:9a:a7:86:92:16:de:22:17:8c:34:
f1:28:0e:4e:e2:6b:21:21:75:e3:28:7b:0a:dd:36:ab:d1:a9:
f7:c5:f9:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZscF+9mhwGGw9+kkz3fw2Z+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2M2JjYzZkMjVmNzQ3NmZiYjNlYzMzZjZkYmMzZTllZWFk
OTIyMTIwHhcNMjUxMjE0MDkwMTI5WhcNMjUxMjE1MDkwMTI5WjAzMTEwLwYDVQQD
Eyg3YzhjZjBmZDU0ZjBhYzcyOGI3MmMwZTZkNmNjMTYxNDY2ZTcwZDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKaKsvNu8eszKO6kjLt7ivhgG8N7
ZEI0IFQkIANUZCsy0A4drv8Kg1suXOUsqcExQ25yYg84FYPuR6cuvi3LW9GxYr/A
/4T58QQZ9EKu4KpqwON+/dHz7NsMeciM7chmGpQOjgzAcpaYo918Vy9YTVn5jDsq
iBnZvFemqxwxiTaErf4DaCiBmqouGUogOaCrBJQkYFQ5gH6XguxAGo9moAvz/jEp
G25culWENdjd/UnzWRLw2FSLPAgaBPrJhkd+B3BFAIA4M3BY14FL6G3iQtU5vSrn
ie58DwvE/EslOJJAEm75WDlQf38ryvnh1Ak1dErZ81SKnWvGd5t0ayu7vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHyM8P1U8Kxyi3LA5tbMFhRm5w2YMB8GA1UdIwQY
MBaAFKY7zG0l90dvuz7DP228Pp7q2SISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQt
NDkyNGZhMDAwYjdjLzEvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQtNDkyNGZhMDAwYjdj
LzEvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWwtDDdPg
Yrcm4rc3Vzq50e39Es1dHbOdCCgYIl8ou1b5/t30EjmmHK+taxjuMA8qTFabf2NG
FWg7s25WyvpB0nKepNURSGChTeulX1Jk74aX7imrePU1XHiLxKvYizbqWKiK9zFn
Am6wJBCjEx9B4IY27lBAKeuDYF2vrNk47f53TRHQK3mDw+IlQXl0O7ahMbTwCdNp
AkLsej70MVIngtd5HqdVn9b5/JT/4ycSe91Qw2umTOGD2e6lP3lsQceldBTMXQnC
qjDQl6wmJC5MGm72xr0ObO89fisiOWEB6z2ap4aSFt4iF4w08SgOTuJrISF14yh7
Ct02q9Gp98X5Wg==
-----END CERTIFICATE-----
Generated at Sun Dec 14 13:28:49 2025 by rpki-client