This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft File: PjMt0plMbuiUNhWKLqwfSCkizSo.mft (raw, json) Hash identifier: Gl/XF5FKgxZG7UQRQlfmpc1XjZsMd/26aD2hcT8p8DY= Subject key identifier: 7A:0D:FD:AC:FE:4B:27:8F:10:5C:50:EA:80:20:F4:C8:0F:A4:93:91 Authority key identifier: 3E:33:2D:D2:99:4C:6E:E8:94:36:15:8A:2E:AC:1F:48:29:22:CD:2A Certificate issuer: /CN=3e332dd2994c6ee89436158a2eac1f482922cd2a Certificate serial: 019AEED16D314715C011FA7AFB49632CE7F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PjMt0plMbuiUNhWKLqwfSCkizSo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft Manifest number: 0877 Signing time: Fri 05 Dec 2025 14:01:33 +0000 Manifest this update: Fri 05 Dec 2025 14:01:33 +0000 Manifest next update: Sat 06 Dec 2025 14:01:33 +0000 Files and hashes: 1: Eg6f3oV_tmh90tuvdcGS4z7md3o.roa (hash: +iCyWfpNRgku+keY+1TZvk0pjaW3ZowUvCSdJVvHiXs=) 2: PjMt0plMbuiUNhWKLqwfSCkizSo.crl (hash: 8jwMW/mGErUrl2CKu/kNkywPPTv02wYx2fEVR0RhFP4=) 3: hvAcV0p--qlqSvXjrIPln93SWWk.roa (hash: TjRxZCcsv470SMx3GoJIYlzXG8w9x5IPVw3HcGg4jOI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft rsync://rpki.ripe.net/repository/DEFAULT/PjMt0plMbuiUNhWKLqwfSCkizSo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 14:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:d1:6d:31:47:15:c0:11:fa:7a:fb:49:63:2c:e7:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e332dd2994c6ee89436158a2eac1f482922cd2a Validity Not Before: Dec 5 14:01:33 2025 GMT Not After : Dec 6 14:01:33 2025 GMT Subject: CN=7a0dfdacfe4b278f105c50ea8020f4c80fa49391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:91:86:49:6c:63:43:9c:a0:0e:ca:8c:ee:e8: 6a:f0:6b:72:53:fb:7e:42:fa:8f:de:bf:8f:3c:0d: 69:d7:aa:58:4b:11:b6:0e:71:bc:36:10:f7:62:73: ac:aa:f1:6e:e4:56:62:8d:00:04:6e:85:7c:25:e4: 4b:17:ac:d1:7f:26:e4:fa:5f:ae:15:d4:89:f7:74: c2:92:fa:a6:a0:e1:08:48:85:ae:33:0b:45:57:85: 29:90:7c:8d:81:06:2c:40:c5:ce:60:26:d8:cd:c7: 5b:89:fd:86:97:74:65:d6:1a:1d:a7:40:9f:84:be: 7c:3a:29:4b:b0:04:3d:86:be:cb:0f:9f:2a:a7:54: f7:2c:0a:83:db:5c:99:46:9c:4d:38:0f:7a:2e:f4: e6:7b:18:28:8f:0b:21:6a:e6:57:9a:3d:06:9a:de: 9f:45:14:a7:b4:29:4a:dd:82:47:7e:80:b2:d3:29: cb:b5:da:19:ef:a8:2a:c6:b5:91:97:95:d3:fc:18: 58:22:80:e3:d3:6a:6f:c9:1a:0c:2f:d7:a2:b0:24: f5:a6:ce:03:7e:f0:dc:7e:88:31:04:11:d4:44:3d: 4c:60:40:28:b3:51:02:9b:e5:68:30:ef:60:94:89: f8:af:d1:7e:44:14:62:0b:65:84:bb:8e:7e:46:10: 6a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:0D:FD:AC:FE:4B:27:8F:10:5C:50:EA:80:20:F4:C8:0F:A4:93:91 X509v3 Authority Key Identifier: keyid:3E:33:2D:D2:99:4C:6E:E8:94:36:15:8A:2E:AC:1F:48:29:22:CD:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjMt0plMbuiUNhWKLqwfSCkizSo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:b3:4c:c1:0d:0c:f2:9b:53:b5:dd:96:34:75:13:8c:7c:0e: ca:ea:02:3a:7e:e9:8f:d8:55:56:2c:b5:bd:41:c1:07:9d:4e: af:31:7a:12:77:ab:ad:ba:a2:a5:86:19:26:1c:74:37:98:7c: 29:0e:63:a5:b0:2d:cd:6a:d3:f3:b0:a7:09:d6:f2:d4:31:6b: 8d:49:46:c9:9c:b0:1c:d9:a4:12:3a:6b:43:08:24:1c:14:07: 7a:d3:6c:11:7f:89:8b:a4:0c:12:96:2a:18:18:04:42:88:3b: 84:d8:01:d8:7c:99:62:e5:2c:51:ce:7a:2f:25:ec:cf:f8:05: 88:6b:c0:ce:74:0a:4e:9f:9d:3b:aa:7a:f1:0a:8d:b9:0c:d5: 53:30:24:20:99:5f:f4:7a:2e:da:3c:a2:c4:a8:20:a2:c3:fd: 08:f0:3e:8a:27:fd:fe:da:2a:e2:89:df:26:d0:23:51:8f:8b: 81:1c:04:0f:30:13:99:fa:ee:d8:ec:88:59:28:fd:5c:85:af: 5f:95:c6:9f:18:01:c2:46:7b:9f:3d:c7:00:17:bc:1b:ca:92: 19:d3:1c:53:f9:8d:08:f4:e4:3d:bf:10:e9:10:70:5c:a3:92: ce:8e:76:b4:d2:5c:4d:77:c5:c5:b4:3b:7e:56:79:61:0c:b6: fe:f8:6d:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZru0W0xRxXAEfp6+0ljLOf1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMzMyZGQyOTk0YzZlZTg5NDM2MTU4YTJlYWMxZjQ4Mjky MmNkMmEwHhcNMjUxMjA1MTQwMTMzWhcNMjUxMjA2MTQwMTMzWjAzMTEwLwYDVQQD Eyg3YTBkZmRhY2ZlNGIyNzhmMTA1YzUwZWE4MDIwZjRjODBmYTQ5MzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppGGSWxjQ5ygDsqM7uhq8GtyU/t+ QvqP3r+PPA1p16pYSxG2DnG8NhD3YnOsqvFu5FZijQAEboV8JeRLF6zRfybk+l+u FdSJ93TCkvqmoOEISIWuMwtFV4UpkHyNgQYsQMXOYCbYzcdbif2Gl3Rl1hodp0Cf hL58OilLsAQ9hr7LD58qp1T3LAqD21yZRpxNOA96LvTmexgojwshauZXmj0Gmt6f RRSntClK3YJHfoCy0ynLtdoZ76gqxrWRl5XT/BhYIoDj02pvyRoML9eisCT1ps4D fvDcfogxBBHURD1MYEAos1ECm+VoMO9glIn4r9F+RBRiC2WEu45+RhBq5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHoN/az+SyePEFxQ6oAg9MgPpJORMB8GA1UdIwQY MBaAFD4zLdKZTG7olDYVii6sH0gpIs0qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGpNdDBwbE1idWlVTmhXS0xxd2ZTQ2tpelNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82MDhlMjEtNmE0MC00NzExLTljODMt ZDAyNGFkNGI3YmViLzEvUGpNdDBwbE1idWlVTmhXS0xxd2ZTQ2tpelNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC82MDhlMjEtNmE0MC00NzExLTljODMtZDAyNGFkNGI3YmVi LzEvUGpNdDBwbE1idWlVTmhXS0xxd2ZTQ2tpelNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHLNMwQ0M 8ptTtd2WNHUTjHwOyuoCOn7pj9hVViy1vUHBB51OrzF6EnerrbqipYYZJhx0N5h8 KQ5jpbAtzWrT87CnCdby1DFrjUlGyZywHNmkEjprQwgkHBQHetNsEX+Ji6QMEpYq GBgEQog7hNgB2HyZYuUsUc56LyXsz/gFiGvAznQKTp+dO6p68QqNuQzVUzAkIJlf 9Hou2jyixKggosP9CPA+iif9/toq4onfJtAjUY+LgRwEDzATmfru2OyIWSj9XIWv X5XGnxgBwkZ7nz3HABe8G8qSGdMcU/mNCPTkPb8Q6RBwXKOSzo52tNJcTXfFxbQ7 flZ5YQy2/vht+A== -----END CERTIFICATE-----Generated at Fri Dec 5 23:02:58 2025 by rpki-client