This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft File: pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft (raw, json) Hash identifier: OASjhzPHppQVvB5o/rt75JMUGRPkQpWY402jGY+x5g8= Subject key identifier: F9:64:21:97:C1:D0:08:F4:8F:3C:F0:FE:7A:3C:20:B6:7D:3A:5D:5D Authority key identifier: A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF Certificate issuer: /CN=a633725cd5dd91cf190ab3a99526e898357856ef Certificate serial: 019AEF3F3C9F1F796D1AE8401FCB3BD32060 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft Manifest number: 1762 Signing time: Fri 05 Dec 2025 16:01:29 +0000 Manifest this update: Fri 05 Dec 2025 16:01:29 +0000 Manifest next update: Sat 06 Dec 2025 16:01:29 +0000 Files and hashes: 1: SMwI-Rnmis2eePW_F_GRyzsQVwc.roa (hash: tdRLxodAQZWX8dKW9xJOxhOQI+ocU2apdjVD9eeaSWc=) 2: jHM5InJQV_3L354P4EcDRlzLqQg.roa (hash: YagEFBVsay86X4xOyFCoWFnHQNGB7P3cKZT9Ojcer8U=) 3: p60T_9BRDnROvd9U0mIYWu3JYG4.roa (hash: CASmZCb6AimtCFSZaoN9/6dcpSXZ9rOo6eQFeAX0PBw=) 4: pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl (hash: uiqBThHCWAS7pQiHJd9xyfR6Lnqm7zkOanxAbDrxiuQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 16:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ef:3f:3c:9f:1f:79:6d:1a:e8:40:1f:cb:3b:d3:20:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a633725cd5dd91cf190ab3a99526e898357856ef Validity Not Before: Dec 5 16:01:29 2025 GMT Not After : Dec 6 16:01:29 2025 GMT Subject: CN=f9642197c1d008f48f3cf0fe7a3c20b67d3a5d5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a0:60:df:43:45:55:86:e7:b2:ef:d0:a9:72: c4:45:3b:da:31:f8:8e:5a:7e:1c:8d:df:5b:2a:fa: 35:69:07:f3:db:6c:97:16:fc:ff:16:86:0f:22:a3: b2:d0:a5:e1:d1:97:8d:e4:69:ee:7d:5f:0c:99:7f: 39:95:8e:8b:fc:57:53:bd:eb:03:64:2b:a6:1e:a7: 14:37:d1:f8:fb:35:55:0a:43:b2:9b:da:42:9c:87: 7d:2b:98:34:e0:9b:d7:99:83:e7:12:16:9e:7f:15: fc:f6:c2:6d:1c:83:fa:db:10:4e:3a:f5:3f:f6:60: 8f:5d:15:ce:de:7f:eb:e3:16:2d:5a:2e:5e:dc:40: 24:4e:40:85:5a:84:09:47:6a:82:27:8f:d7:c0:93: 2d:aa:48:03:74:43:ce:a4:3d:65:1b:bb:5b:a7:c8: a5:30:5d:fd:e0:aa:38:af:63:07:e2:b2:4c:02:4e: a5:ee:c1:83:6f:ad:60:10:18:61:83:53:cb:82:be: d0:14:af:9d:0b:fa:81:62:4e:92:7e:1f:ce:a7:71: b0:1a:4c:07:4a:a4:89:b8:b1:16:90:91:41:85:e8: 57:5e:e6:b0:eb:83:08:dd:4a:3b:07:3f:ed:32:08: f5:6f:3d:97:d9:6a:1d:3c:6a:fc:72:68:78:e0:ff: cf:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:64:21:97:C1:D0:08:F4:8F:3C:F0:FE:7A:3C:20:B6:7D:3A:5D:5D X509v3 Authority Key Identifier: keyid:A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:4b:c2:55:65:8d:cc:f3:7d:fb:30:81:80:c5:e7:1f:13:44: 16:78:68:e0:23:3b:79:5a:6d:6f:68:79:f9:1e:7d:45:1f:56: eb:da:4d:6c:09:23:73:3d:db:5f:03:88:93:d5:94:ed:e2:ae: cc:03:86:aa:43:95:cd:f4:6e:06:61:60:eb:54:d5:26:88:39: 2a:35:94:61:fc:7a:b7:36:62:e2:28:11:bb:8b:bb:a6:8e:fa: c0:a0:30:94:6d:5e:f7:88:71:28:fd:15:7e:5c:08:cd:c3:b9: 29:11:1f:41:85:f9:11:0e:54:00:08:42:b8:e5:c7:42:8b:ea: c1:f8:eb:94:a0:c9:be:0d:9d:9a:88:72:3a:a9:b6:79:66:0c: 74:50:47:4f:7d:0b:68:f4:09:52:58:e8:02:e2:93:0b:65:11: b6:17:93:e1:11:07:02:13:49:0a:79:76:a8:90:49:8f:3e:a4: 6a:47:77:80:f3:2c:9d:d6:51:96:5f:e5:6b:65:06:ba:e1:c1: 57:19:27:80:d5:6d:36:b7:b7:3b:bd:27:aa:12:83:40:6f:1c: 48:1f:9c:52:ce:16:29:4d:7d:2f:13:ce:41:ec:7c:c1:52:e0: 84:9b:02:d2:d0:0d:cb:70:1b:22:ea:63:10:39:91:6e:6c:99: 8d:0d:e5:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrvPzyfH3ltGuhAH8s70yBgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MzM3MjVjZDVkZDkxY2YxOTBhYjNhOTk1MjZlODk4MzU3 ODU2ZWYwHhcNMjUxMjA1MTYwMTI5WhcNMjUxMjA2MTYwMTI5WjAzMTEwLwYDVQQD EyhmOTY0MjE5N2MxZDAwOGY0OGYzY2YwZmU3YTNjMjBiNjdkM2E1ZDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6Bg30NFVYbnsu/QqXLERTvaMfiO Wn4cjd9bKvo1aQfz22yXFvz/FoYPIqOy0KXh0ZeN5GnufV8MmX85lY6L/FdTvesD ZCumHqcUN9H4+zVVCkOym9pCnId9K5g04JvXmYPnEhaefxX89sJtHIP62xBOOvU/ 9mCPXRXO3n/r4xYtWi5e3EAkTkCFWoQJR2qCJ4/XwJMtqkgDdEPOpD1lG7tbp8il MF394Ko4r2MH4rJMAk6l7sGDb61gEBhhg1PLgr7QFK+dC/qBYk6Sfh/Op3GwGkwH SqSJuLEWkJFBhehXXuaw64MI3Uo7Bz/tMgj1bz2X2WodPGr8cmh44P/PaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPlkIZfB0Aj0jzzw/no8ILZ9Ol1dMB8GA1UdIwQY MBaAFKYzclzV3ZHPGQqzqZUm6Jg1eFbvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGpOeVhOWGRrYzhaQ3JPcGxTYm9tRFY0VnU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC81Yjg1NmEtYTkwZC00NzkxLTljMTAt YzBiODEzYjRlYzdlLzEvcGpOeVhOWGRrYzhaQ3JPcGxTYm9tRFY0VnU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC81Yjg1NmEtYTkwZC00NzkxLTljMTAtYzBiODEzYjRlYzdl LzEvcGpOeVhOWGRrYzhaQ3JPcGxTYm9tRFY0VnU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATEvCVWWN zPN9+zCBgMXnHxNEFnho4CM7eVptb2h5+R59RR9W69pNbAkjcz3bXwOIk9WU7eKu zAOGqkOVzfRuBmFg61TVJog5KjWUYfx6tzZi4igRu4u7po76wKAwlG1e94hxKP0V flwIzcO5KREfQYX5EQ5UAAhCuOXHQovqwfjrlKDJvg2dmohyOqm2eWYMdFBHT30L aPQJUljoAuKTC2URtheT4REHAhNJCnl2qJBJjz6kakd3gPMsndZRll/la2UGuuHB VxkngNVtNre3O70nqhKDQG8cSB+cUs4WKU19LxPOQex8wVLghJsC0tANy3AbIupj EDmRbmyZjQ3lCg== -----END CERTIFICATE-----Generated at Fri Dec 5 22:59:30 2025 by rpki-client