This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft File: pJuD9b3hodyT3mlHaDfp46N3l68.mft (raw, json) Hash identifier: apzjELWjH9+qSblaCmUYbAfUsEqg8StSe3VzyYzc+Y4= Subject key identifier: B4:35:E2:32:42:5D:30:A2:8B:A4:4E:82:FF:E1:67:6B:E0:EA:00:86 Authority key identifier: A4:9B:83:F5:BD:E1:A1:DC:93:DE:69:47:68:37:E9:E3:A3:77:97:AF Certificate issuer: /CN=a49b83f5bde1a1dc93de69476837e9e3a37797af Certificate serial: 019B2399AA91066399BB204F3204FAAA0401 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft Manifest number: 177C Signing time: Mon 15 Dec 2025 20:00:31 +0000 Manifest this update: Mon 15 Dec 2025 20:00:31 +0000 Manifest next update: Tue 16 Dec 2025 20:00:31 +0000 Files and hashes: 1: ivIvX3ybfrEo6-_TJQtybec7lto.roa (hash: AYMx34pgwR2VT7P45blq8Gv6Ax5FOOQvXf8mR5QOiWI=) 2: pJuD9b3hodyT3mlHaDfp46N3l68.crl (hash: ESsSJ5A5lx1vp6qgZLDQLHMfUY1X+Twwcsb39ucd7E0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:99:aa:91:06:63:99:bb:20:4f:32:04:fa:aa:04:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a49b83f5bde1a1dc93de69476837e9e3a37797af Validity Not Before: Dec 15 20:00:31 2025 GMT Not After : Dec 16 20:00:31 2025 GMT Subject: CN=b435e232425d30a28ba44e82ffe1676be0ea0086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d1:c9:cd:a1:f4:71:c7:ea:39:a5:e0:4d:31: 48:82:71:45:73:79:8b:1a:c3:c6:d7:44:1f:33:0f: a9:31:a2:c7:4c:3a:17:e0:c3:e7:91:a9:b8:ac:3a: aa:61:74:74:05:00:ee:b3:9f:91:5d:70:81:93:a8: d4:9c:1c:87:f1:dc:8a:d5:9b:e3:83:c9:c0:64:dd: bd:0d:7e:07:55:ad:74:61:6d:8d:0b:6a:ab:2b:08: 17:3f:b3:7b:d2:d3:27:dd:aa:e4:ac:f0:36:27:e9: 4e:25:0f:c0:e9:51:69:ca:5c:16:3f:fb:37:48:80: 17:11:ad:6d:db:6e:4e:e9:be:0b:58:7f:55:16:5d: 97:9a:32:72:ef:f3:16:dc:94:a4:78:16:4c:b1:86: c0:ae:ac:86:b5:99:e8:a9:79:22:01:d0:81:9c:a8: fb:69:9d:23:f6:db:0a:18:7a:56:97:07:8d:af:92: 39:2e:aa:ea:90:5f:6b:ea:1f:a7:e4:8d:5c:ed:a3: ce:24:75:85:37:44:bc:18:a6:50:7e:69:e9:c6:95: c6:62:76:b7:6c:4a:c8:2b:7f:18:9a:65:ef:ba:b5: 55:b5:aa:72:b0:be:3f:34:78:ae:81:9d:76:27:c1: f7:37:a8:f4:fe:d4:09:0c:dc:eb:93:98:92:3b:c3: 6f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:35:E2:32:42:5D:30:A2:8B:A4:4E:82:FF:E1:67:6B:E0:EA:00:86 X509v3 Authority Key Identifier: keyid:A4:9B:83:F5:BD:E1:A1:DC:93:DE:69:47:68:37:E9:E3:A3:77:97:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:e5:41:55:81:c4:bf:71:c7:2d:bb:03:a9:b5:74:f5:d4:7a: 86:ca:d2:3f:9c:4c:56:2c:4c:91:16:66:f6:d4:55:c2:b7:a4: ae:67:a4:66:65:0b:e1:3d:48:b6:1c:bf:60:15:37:5b:00:67: 40:e5:fe:39:6f:6a:17:1b:b9:0a:a8:4e:01:c0:23:80:0f:6a: d8:53:d5:aa:e6:a2:59:6a:a3:36:2e:7e:39:40:32:ce:44:85: 66:be:85:bc:a7:2d:7b:e0:16:0b:d7:60:b8:00:79:02:e4:8c: b7:a7:b0:20:1e:f3:8c:97:93:51:47:52:d6:e5:ab:17:e4:2e: 50:49:37:54:ed:40:81:91:82:9b:49:92:9e:01:f0:18:c4:94: dc:00:fd:33:83:c0:de:a2:56:92:ff:39:62:9e:3b:ee:5c:05: 7b:b1:7c:18:25:93:ee:88:dc:52:db:3e:7a:10:d8:b0:00:aa: 9b:3a:b7:22:ad:08:8c:a0:1a:6f:a5:bd:d1:17:7c:27:fb:7e: fa:3b:1f:4a:d8:56:0e:ec:5d:24:6e:b7:51:8c:c4:2a:08:22: a2:42:f6:e3:ab:7b:a5:aa:f0:18:de:04:98:10:f1:90:97:06: c5:b9:05:43:ed:5f:e6:50:5b:bd:37:28:55:e8:0a:3d:38:14: fb:fa:8d:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjmaqRBmOZuyBPMgT6qgQBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0OWI4M2Y1YmRlMWExZGM5M2RlNjk0NzY4MzdlOWUzYTM3 Nzk3YWYwHhcNMjUxMjE1MjAwMDMxWhcNMjUxMjE2MjAwMDMxWjAzMTEwLwYDVQQD EyhiNDM1ZTIzMjQyNWQzMGEyOGJhNDRlODJmZmUxNjc2YmUwZWEwMDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdHJzaH0ccfqOaXgTTFIgnFFc3mL GsPG10QfMw+pMaLHTDoX4MPnkam4rDqqYXR0BQDus5+RXXCBk6jUnByH8dyK1Zvj g8nAZN29DX4HVa10YW2NC2qrKwgXP7N70tMn3arkrPA2J+lOJQ/A6VFpylwWP/s3 SIAXEa1t225O6b4LWH9VFl2XmjJy7/MW3JSkeBZMsYbArqyGtZnoqXkiAdCBnKj7 aZ0j9tsKGHpWlweNr5I5LqrqkF9r6h+n5I1c7aPOJHWFN0S8GKZQfmnpxpXGYna3 bErIK38YmmXvurVVtapysL4/NHiugZ12J8H3N6j0/tQJDNzrk5iSO8NvyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLQ14jJCXTCii6ROgv/hZ2vg6gCGMB8GA1UdIwQY MBaAFKSbg/W94aHck95pR2g36eOjd5evMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEp1RDliM2hvZHlUM21sSGFEZnA0Nk4zbDY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9hZDFjNjktY2U1Ni00ZWRhLTg3ZWEt OTg3NzE5ZWU2YTBjLzEvcEp1RDliM2hvZHlUM21sSGFEZnA0Nk4zbDY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9hZDFjNjktY2U1Ni00ZWRhLTg3ZWEtOTg3NzE5ZWU2YTBj LzEvcEp1RDliM2hvZHlUM21sSGFEZnA0Nk4zbDY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbOVBVYHE v3HHLbsDqbV09dR6hsrSP5xMVixMkRZm9tRVwrekrmekZmUL4T1Ithy/YBU3WwBn QOX+OW9qFxu5CqhOAcAjgA9q2FPVquaiWWqjNi5+OUAyzkSFZr6FvKcte+AWC9dg uAB5AuSMt6ewIB7zjJeTUUdS1uWrF+QuUEk3VO1AgZGCm0mSngHwGMSU3AD9M4PA 3qJWkv85Yp477lwFe7F8GCWT7ojcUts+ehDYsACqmzq3Iq0IjKAab6W90Rd8J/t+ +jsfSthWDuxdJG63UYzEKggiokL246t7parwGN4EmBDxkJcGxbkFQ+1f5lBbvTco VegKPTgU+/qNSw== -----END CERTIFICATE-----Generated at Mon Dec 15 21:51:49 2025 by rpki-client