This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft File: PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft (raw, json) Hash identifier: pwRIyPcoxRC2kuQhzoj2tzDOIcJkaS3nqV31fPtWlIA= Subject key identifier: 07:FC:96:16:E2:D6:94:49:CB:E8:D7:34:2C:A1:33:5A:91:01:92:3B Authority key identifier: 3C:9F:40:0F:88:4F:70:30:31:8E:B6:BE:74:C5:28:48:5A:BE:44:60 Certificate issuer: /CN=3c9f400f884f7030318eb6be74c528485abe4460 Certificate serial: 019B269BBBCF2BC37E3C38AAA8856BF84B8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PJ9AD4hPcDAxjra-dMUoSFq-RGA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft Manifest number: 0410 Signing time: Tue 16 Dec 2025 10:01:38 +0000 Manifest this update: Tue 16 Dec 2025 10:01:38 +0000 Manifest next update: Wed 17 Dec 2025 10:01:38 +0000 Files and hashes: 1: 5CyBpeLyifB2AFAXOFh8yVUvCwE.roa (hash: JsDCYkyYiFX4qZJz2FVAXDqsZF5P1tX4kX3+rULf7lU=) 2: PJ9AD4hPcDAxjra-dMUoSFq-RGA.crl (hash: t+dFMfZyiatXHFxiU6jEhKVbOtEoHtilaNQ3Korel2M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.crl rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft rsync://rpki.ripe.net/repository/DEFAULT/PJ9AD4hPcDAxjra-dMUoSFq-RGA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:9b:bb:cf:2b:c3:7e:3c:38:aa:a8:85:6b:f8:4b:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c9f400f884f7030318eb6be74c528485abe4460 Validity Not Before: Dec 16 10:01:38 2025 GMT Not After : Dec 17 10:01:38 2025 GMT Subject: CN=07fc9616e2d69449cbe8d7342ca1335a9101923b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:69:52:d6:63:aa:36:a9:1b:96:65:86:62:bd: 01:31:e5:45:7d:ff:4d:72:20:25:aa:bb:2a:69:13: 91:ac:2d:5a:cd:07:3a:55:15:1e:2b:1c:58:87:f5: 7b:b5:8c:57:17:fa:11:a0:27:ff:7b:7a:cb:78:f5: eb:e4:12:be:63:ae:9e:65:17:7a:aa:ab:0a:2b:de: 84:01:5b:da:af:d7:94:28:d1:5c:78:bd:3f:e8:6f: 35:a9:fb:bc:c6:d3:41:2f:d8:af:24:e6:96:73:56: f6:fd:4d:89:6b:1a:b0:d5:ca:9d:5f:a6:17:38:79: 5a:ac:a6:1f:ae:d7:ab:b5:d6:7a:9b:80:5a:e8:0a: 30:23:b6:d4:66:a1:74:6f:58:7d:4a:35:f7:0c:c3: 24:d2:ef:b4:e4:63:be:ef:fd:74:89:8c:3e:39:91: 34:40:5b:8e:ca:35:15:f8:c3:95:f3:a5:be:d2:b6: e7:56:67:f2:cb:da:3c:ba:b3:4f:09:3e:42:49:0d: a9:55:35:fa:e9:8d:5b:49:19:b2:b4:72:d4:dd:a7: 1b:b2:52:ee:b4:05:4e:a1:5b:ed:7a:34:03:2e:dd: 64:c8:28:33:fe:7e:92:b4:dd:fc:3a:f0:fc:d6:23: 6f:73:0c:09:8e:ea:ee:fb:9f:e9:43:8d:6e:11:a4: ba:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:FC:96:16:E2:D6:94:49:CB:E8:D7:34:2C:A1:33:5A:91:01:92:3B X509v3 Authority Key Identifier: keyid:3C:9F:40:0F:88:4F:70:30:31:8E:B6:BE:74:C5:28:48:5A:BE:44:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJ9AD4hPcDAxjra-dMUoSFq-RGA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:03:54:3c:fa:58:2b:e2:da:a8:2d:65:d5:1f:80:9f:21:1a: 2e:75:91:3d:44:89:41:d0:c3:15:20:ce:e3:37:c2:70:94:ff: e8:b8:72:47:c9:2a:c8:32:a2:0b:76:5c:ae:b2:e2:89:9c:84: 50:c5:aa:7f:5a:fc:00:ff:b8:6a:4d:10:80:a4:62:f8:53:0c: 39:52:df:be:d5:33:c5:e8:ad:1b:99:c0:40:9e:e2:9c:de:44: 2f:2b:47:43:ae:98:39:23:14:f8:5c:c8:fd:71:d2:6c:49:b0: 25:ee:5f:1f:fb:5f:7c:33:90:49:36:bf:6e:1d:1e:e0:62:fd: ba:10:b8:68:3b:a8:5b:29:dc:77:92:48:5f:e2:d3:eb:eb:c7: e2:2b:2f:30:37:bb:a2:eb:10:11:7e:cc:13:4f:e2:c5:d1:40: 50:e9:7c:5e:6d:70:97:23:71:56:77:ea:1b:87:f2:2e:27:f4: 8f:54:0a:41:3b:1b:fd:cb:d5:c1:df:6c:99:58:a6:1f:88:65: fc:93:0c:e9:4c:05:66:eb:0d:bd:96:ce:a7:b2:b8:d9:f4:99: e2:10:f0:fa:2a:72:0e:96:eb:6b:65:b9:04:a4:c0:c9:2b:4a: e2:73:53:ce:78:33:c6:3a:2b:2b:93:6f:6a:aa:c1:28:d9:d2: 90:83:69:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmm7vPK8N+PDiqqIVr+EuMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjOWY0MDBmODg0ZjcwMzAzMThlYjZiZTc0YzUyODQ4NWFi ZTQ0NjAwHhcNMjUxMjE2MTAwMTM4WhcNMjUxMjE3MTAwMTM4WjAzMTEwLwYDVQQD EygwN2ZjOTYxNmUyZDY5NDQ5Y2JlOGQ3MzQyY2ExMzM1YTkxMDE5MjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GlS1mOqNqkblmWGYr0BMeVFff9N ciAlqrsqaRORrC1azQc6VRUeKxxYh/V7tYxXF/oRoCf/e3rLePXr5BK+Y66eZRd6 qqsKK96EAVvar9eUKNFceL0/6G81qfu8xtNBL9ivJOaWc1b2/U2Jaxqw1cqdX6YX OHlarKYfrtertdZ6m4Ba6AowI7bUZqF0b1h9SjX3DMMk0u+05GO+7/10iYw+OZE0 QFuOyjUV+MOV86W+0rbnVmfyy9o8urNPCT5CSQ2pVTX66Y1bSRmytHLU3acbslLu tAVOoVvtejQDLt1kyCgz/n6StN38OvD81iNvcwwJjuru+5/pQ41uEaS6nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAf8lhbi1pRJy+jXNCyhM1qRAZI7MB8GA1UdIwQY MBaAFDyfQA+IT3AwMY62vnTFKEhavkRgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEo5QUQ0aFBjREF4anJhLWRNVW9TRnEtUkdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My84NGFiZDUtMTkxZi00Zjg4LWJkZTEt Zjg0OGRkYzVhMGIyLzEvUEo5QUQ0aFBjREF4anJhLWRNVW9TRnEtUkdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My84NGFiZDUtMTkxZi00Zjg4LWJkZTEtZjg0OGRkYzVhMGIy LzEvUEo5QUQ0aFBjREF4anJhLWRNVW9TRnEtUkdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFANUPPpY K+LaqC1l1R+AnyEaLnWRPUSJQdDDFSDO4zfCcJT/6LhyR8kqyDKiC3ZcrrLiiZyE UMWqf1r8AP+4ak0QgKRi+FMMOVLfvtUzxeitG5nAQJ7inN5ELytHQ66YOSMU+FzI /XHSbEmwJe5fH/tffDOQSTa/bh0e4GL9uhC4aDuoWyncd5JIX+LT6+vH4isvMDe7 ousQEX7ME0/ixdFAUOl8Xm1wlyNxVnfqG4fyLif0j1QKQTsb/cvVwd9smVimH4hl /JMM6UwFZusNvZbOp7K42fSZ4hDw+ipyDpbra2W5BKTAyStK4nNTzngzxjorK5Nv aqrBKNnSkINpjQ== -----END CERTIFICATE-----Generated at Tue Dec 16 13:45:15 2025 by rpki-client