This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft File: pJKfzWHcadzPvgHV_wA1tBrJUmA.mft (raw, json) Hash identifier: BsljQjsMkBujvpac4zzCfkGPnmAaFJwoHg8X2ymXzcE= Subject key identifier: 69:BF:AD:65:DB:B5:F8:2F:EC:F9:50:19:60:66:0D:50:DF:42:68:FB Authority key identifier: A4:92:9F:CD:61:DC:69:DC:CF:BE:01:D5:FF:00:35:B4:1A:C9:52:60 Certificate issuer: /CN=a4929fcd61dc69dccfbe01d5ff0035b41ac95260 Certificate serial: 019B3532760B2C3476590C32159C6BD60A29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft Manifest number: 1099 Signing time: Fri 19 Dec 2025 06:00:57 +0000 Manifest this update: Fri 19 Dec 2025 06:00:57 +0000 Manifest next update: Sat 20 Dec 2025 06:00:57 +0000 Files and hashes: 1: FMd4ncvFc0vMJ63ZqH_KhMZqr00.roa (hash: GAIpznWNN7ttQuk7XL5JgmFjADI10rnA9JaXxJOak4g=) 2: pJKfzWHcadzPvgHV_wA1tBrJUmA.crl (hash: d+Atdk/wjFF3rnyY3sQW82FHC4s2dOKzamhhzk/r4g8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:76:0b:2c:34:76:59:0c:32:15:9c:6b:d6:0a:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4929fcd61dc69dccfbe01d5ff0035b41ac95260 Validity Not Before: Dec 19 06:00:57 2025 GMT Not After : Dec 20 06:00:57 2025 GMT Subject: CN=69bfad65dbb5f82fecf9501960660d50df4268fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:02:c9:7d:80:48:db:82:f6:12:4e:80:fc:bd: ed:a4:c2:1c:d8:46:f7:6e:48:24:ca:13:77:41:1b: a7:b6:90:65:91:dd:1f:28:d8:a4:26:82:c9:d9:09: fb:02:14:40:1e:f5:72:e6:c9:af:ec:df:d4:c3:68: 2e:1d:ad:bb:e7:73:2e:71:15:1f:78:6b:32:34:4d: cd:06:b7:59:da:52:ae:27:5b:84:e9:08:03:52:88: f5:8b:4b:78:d1:4a:60:44:14:ec:8f:f4:be:74:47: 38:25:3c:b9:c1:87:71:f9:63:b9:66:2b:f8:bd:b7: 4e:2f:b6:7e:6a:aa:e4:c1:d0:de:fe:0c:4c:3d:44: a4:7a:b6:48:74:9c:e2:eb:36:9f:98:d9:33:df:6b: 9a:e0:15:90:64:35:aa:22:c5:3a:ad:c7:07:57:17: 8a:1f:7d:2e:3d:e7:03:2b:5d:5a:b4:2c:ba:a9:d6: 07:cd:10:9d:e5:21:7c:b7:d7:ed:25:7e:13:93:5e: 06:c9:bd:ff:96:df:0a:e9:50:c9:8a:32:ab:3a:8c: 28:0d:1a:6d:4c:a9:0c:18:a0:6f:8f:d2:42:11:b7: fc:9d:c2:d4:ed:e7:b2:a9:fe:3a:9a:20:92:6b:68: 24:85:a4:e5:93:a7:4b:85:65:c1:e4:bc:fb:87:88: 31:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:BF:AD:65:DB:B5:F8:2F:EC:F9:50:19:60:66:0D:50:DF:42:68:FB X509v3 Authority Key Identifier: keyid:A4:92:9F:CD:61:DC:69:DC:CF:BE:01:D5:FF:00:35:B4:1A:C9:52:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:50:53:d5:9c:9e:3b:68:ae:fe:0f:a3:f4:3f:cf:4c:e5:ef: 15:26:3b:07:34:0f:d7:26:ed:7d:51:09:87:53:17:e1:19:d9: c4:98:79:43:e1:4c:92:b1:e2:a5:ef:4d:e4:b0:d1:ca:4b:7b: 20:6c:05:ba:41:86:c7:6d:48:e2:c0:82:f3:11:57:07:08:6a: 43:d4:0f:d6:d8:4a:99:dc:05:f4:d6:88:df:49:7d:85:ab:16: 24:6e:c0:14:a0:6e:5b:96:92:0f:85:8a:9d:59:e7:f3:df:d1: 37:c4:3d:6c:59:8b:d3:a9:67:ca:f1:ec:ac:55:58:c9:90:98: 01:7d:04:ec:4e:e0:bb:ae:27:c7:a3:72:46:91:8a:10:6b:54: 4d:ea:4f:51:af:72:c7:d6:d8:80:81:a3:62:15:a6:00:dc:91: 7f:74:89:1a:d3:a1:38:01:72:d2:02:a3:92:64:c4:85:12:85: e5:1e:1c:e4:06:0c:9d:5a:67:41:7b:eb:f1:ba:59:ee:d1:b3: 3d:75:ee:cf:53:10:7f:11:bf:a3:11:6d:b3:e8:1b:dd:5d:53: 21:54:f4:14:66:81:fe:7d:ed:1f:f2:9a:27:24:45:4b:88:52: eb:d0:19:ba:a5:41:a6:48:ba:0a:83:e3:97:d2:84:93:f5:9e: 82:05:9c:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MnYLLDR2WQwyFZxr1gopMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0OTI5ZmNkNjFkYzY5ZGNjZmJlMDFkNWZmMDAzNWI0MWFj OTUyNjAwHhcNMjUxMjE5MDYwMDU3WhcNMjUxMjIwMDYwMDU3WjAzMTEwLwYDVQQD Eyg2OWJmYWQ2NWRiYjVmODJmZWNmOTUwMTk2MDY2MGQ1MGRmNDI2OGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ALJfYBI24L2Ek6A/L3tpMIc2Eb3 bkgkyhN3QRuntpBlkd0fKNikJoLJ2Qn7AhRAHvVy5smv7N/Uw2guHa2753MucRUf eGsyNE3NBrdZ2lKuJ1uE6QgDUoj1i0t40UpgRBTsj/S+dEc4JTy5wYdx+WO5Ziv4 vbdOL7Z+aqrkwdDe/gxMPUSkerZIdJzi6zafmNkz32ua4BWQZDWqIsU6rccHVxeK H30uPecDK11atCy6qdYHzRCd5SF8t9ftJX4Tk14Gyb3/lt8K6VDJijKrOowoDRpt TKkMGKBvj9JCEbf8ncLU7eeyqf46miCSa2gkhaTlk6dLhWXB5Lz7h4gx3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGm/rWXbtfgv7PlQGWBmDVDfQmj7MB8GA1UdIwQY MBaAFKSSn81h3Gncz74B1f8ANbQayVJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEpLZnpXSGNhZHpQdmdIVl93QTF0QnJKVW1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81YTIxMTctZjU4My00NDVkLWI3MmUt ZWJhOWM1Y2IzMmQwLzEvcEpLZnpXSGNhZHpQdmdIVl93QTF0QnJKVW1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy81YTIxMTctZjU4My00NDVkLWI3MmUtZWJhOWM1Y2IzMmQw LzEvcEpLZnpXSGNhZHpQdmdIVl93QTF0QnJKVW1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkVBT1Zye O2iu/g+j9D/PTOXvFSY7BzQP1ybtfVEJh1MX4RnZxJh5Q+FMkrHipe9N5LDRykt7 IGwFukGGx21I4sCC8xFXBwhqQ9QP1thKmdwF9NaI30l9hasWJG7AFKBuW5aSD4WK nVnn89/RN8Q9bFmL06lnyvHsrFVYyZCYAX0E7E7gu64nx6NyRpGKEGtUTepPUa9y x9bYgIGjYhWmANyRf3SJGtOhOAFy0gKjkmTEhRKF5R4c5AYMnVpnQXvr8bpZ7tGz PXXuz1MQfxG/oxFts+gb3V1TIVT0FGaB/n3tH/KaJyRFS4hS69AZuqVBpki6CoPj l9KEk/WeggWcXA== -----END CERTIFICATE-----Generated at Fri Dec 19 10:26:16 2025 by rpki-client