This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft File: pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft (raw, json) Hash identifier: aPAqGbzo/Hc3z3lnxBk60R4kAQf4xWGpTBeq0/slfss= Subject key identifier: 13:4D:88:96:42:86:2D:28:8F:6A:5E:76:78:36:1F:4D:2C:42:CC:54 Authority key identifier: A6:34:87:82:81:14:4A:46:A8:56:00:3D:62:2F:61:41:EA:4E:00:6F Certificate issuer: /CN=a634878281144a46a856003d622f6141ea4e006f Certificate serial: 019B405AA9263855DB1C4712405C2967ADFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 10:00:41 +0000 Manifest this update: Sun 21 Dec 2025 10:00:41 +0000 Manifest next update: Mon 22 Dec 2025 10:00:41 +0000 Files and hashes: 1: BC9YAXepVvBWb0SpmFLnGsiu_0U.roa (hash: aM6wNA8MxfdfUppHaLmRAdGV0kYIIUvP9jpBwEyPjpo=) 2: _XoxeAXZ_0NOSgriyXyYImr8sp4.roa (hash: 95zz7gDtzubb5S5SZ2yFR8QhWyDigdhIQZqm7xDPB7s=) 3: pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl (hash: Kv+XSta5raksQmZJ1WKrosMsOIJ9xwLHk+YfUsfevUU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5a:a9:26:38:55:db:1c:47:12:40:5c:29:67:ad:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a634878281144a46a856003d622f6141ea4e006f Validity Not Before: Dec 21 10:00:41 2025 GMT Not After : Dec 22 10:00:41 2025 GMT Subject: CN=134d889642862d288f6a5e7678361f4d2c42cc54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:43:16:ba:aa:8c:08:99:e6:e0:62:cc:80:fc: 99:07:c2:c0:30:af:0c:43:cb:7d:04:5e:2a:9b:66: 03:61:58:c8:d3:52:2d:9f:bd:96:2b:91:04:e4:22: a0:6f:f0:da:b0:40:ff:d6:7f:1d:a2:db:eb:8c:23: 95:87:00:b1:96:94:88:b2:e7:26:2f:5c:66:d1:10: 5d:4f:b6:ab:a4:87:73:91:d0:77:65:a6:09:35:4e: cb:8f:9a:83:75:84:b6:f4:ac:65:81:70:80:e8:22: 4f:a1:28:be:e1:7e:5f:b3:88:64:db:e6:d4:c8:4e: c5:d4:03:46:20:47:0f:50:56:14:a1:3f:bc:46:6c: 0e:96:45:2c:9a:96:b6:9b:0a:81:f8:c7:d1:13:67: 13:ba:51:07:30:59:a4:8b:1c:d5:c2:48:68:ad:bf: 5d:29:31:c9:ee:22:3e:cc:43:95:36:74:12:d8:75: 4b:34:a7:23:ec:60:b7:f5:a2:76:ed:df:5b:1c:5f: de:6e:48:53:4b:a0:c2:53:5c:1a:3f:7e:56:6b:0c: 7d:e5:68:98:92:07:88:1e:ee:9d:2d:d2:89:25:1b: 0a:2a:07:53:ac:8e:74:d1:40:3a:0e:d9:c0:96:9e: d3:cb:20:22:aa:57:a8:99:a0:e5:df:d0:97:09:28: 4c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:4D:88:96:42:86:2D:28:8F:6A:5E:76:78:36:1F:4D:2C:42:CC:54 X509v3 Authority Key Identifier: keyid:A6:34:87:82:81:14:4A:46:A8:56:00:3D:62:2F:61:41:EA:4E:00:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:d9:ce:56:2d:34:6d:4a:7f:e2:07:7e:f6:a0:6a:ec:fd:86: 60:57:d1:ef:0b:ee:c9:a0:17:2f:df:55:3d:00:53:0c:e7:cc: 1c:91:55:3a:63:83:b9:4b:c4:9b:94:d3:95:81:94:69:ce:98: f6:e7:fe:a2:65:67:05:8a:9d:6e:f2:5a:3d:ca:df:e4:de:0f: b8:08:e5:11:29:91:35:e6:50:50:c3:96:dd:ef:f0:3a:4c:1d: ae:22:75:70:0d:a9:cf:09:30:25:b3:cf:ba:d6:c3:5b:f1:ec: 6b:69:f0:38:cc:8c:c8:a1:aa:b0:fe:94:7a:f9:43:89:a6:40: 50:22:5f:ab:8a:eb:e9:b8:6f:bc:26:0e:78:9c:46:95:e6:d3: f2:94:e5:54:9e:3b:26:c9:0c:78:af:de:ac:15:06:2a:83:9f: bb:06:cf:68:22:d8:26:85:b8:7e:4c:8a:78:65:ab:6a:91:14: be:7d:e6:19:25:4b:8f:ae:25:1f:80:1b:8e:5b:84:32:a2:d7: 85:32:49:a8:e4:d8:36:38:4a:4a:67:3f:fd:b3:3b:73:81:77: d7:c1:90:fc:18:46:c8:5d:ac:93:84:2d:38:1a:e0:a5:96:c9: fc:27:1b:19:4e:ad:8e:a8:74:d7:a8:ce:d1:ee:ab:a3:5a:ae: 5a:80:57:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWqkmOFXbHEcSQFwpZ63/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MzQ4NzgyODExNDRhNDZhODU2MDAzZDYyMmY2MTQxZWE0 ZTAwNmYwHhcNMjUxMjIxMTAwMDQxWhcNMjUxMjIyMTAwMDQxWjAzMTEwLwYDVQQD EygxMzRkODg5NjQyODYyZDI4OGY2YTVlNzY3ODM2MWY0ZDJjNDJjYzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0MWuqqMCJnm4GLMgPyZB8LAMK8M Q8t9BF4qm2YDYVjI01Itn72WK5EE5CKgb/DasED/1n8dotvrjCOVhwCxlpSIsucm L1xm0RBdT7arpIdzkdB3ZaYJNU7Lj5qDdYS29KxlgXCA6CJPoSi+4X5fs4hk2+bU yE7F1ANGIEcPUFYUoT+8RmwOlkUsmpa2mwqB+MfRE2cTulEHMFmkixzVwkhorb9d KTHJ7iI+zEOVNnQS2HVLNKcj7GC39aJ27d9bHF/ebkhTS6DCU1waP35Wawx95WiY kgeIHu6dLdKJJRsKKgdTrI500UA6DtnAlp7TyyAiqleomaDl39CXCShMZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBNNiJZChi0oj2pedng2H00sQsxUMB8GA1UdIwQY MBaAFKY0h4KBFEpGqFYAPWIvYUHqTgBvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGpTSGdvRVVTa2FvVmdBOVlpOWhRZXBPQUc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9jMzQ1ZjMtYjUzYS00MWJmLTk5NmIt MzRiOGQ5ZGU5NmNhLzEvcGpTSGdvRVVTa2FvVmdBOVlpOWhRZXBPQUc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9jMzQ1ZjMtYjUzYS00MWJmLTk5NmItMzRiOGQ5ZGU5NmNh LzEvcGpTSGdvRVVTa2FvVmdBOVlpOWhRZXBPQUc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUtnOVi00 bUp/4gd+9qBq7P2GYFfR7wvuyaAXL99VPQBTDOfMHJFVOmODuUvEm5TTlYGUac6Y 9uf+omVnBYqdbvJaPcrf5N4PuAjlESmRNeZQUMOW3e/wOkwdriJ1cA2pzwkwJbPP utbDW/Hsa2nwOMyMyKGqsP6UevlDiaZAUCJfq4rr6bhvvCYOeJxGlebT8pTlVJ47 JskMeK/erBUGKoOfuwbPaCLYJoW4fkyKeGWrapEUvn3mGSVLj64lH4AbjluEMqLX hTJJqOTYNjhKSmc//bM7c4F318GQ/BhGyF2sk4QtOBrgpZbJ/CcbGU6tjqh016jO 0e6ro1quWoBXYA== -----END CERTIFICATE-----Generated at Sun Dec 21 19:30:37 2025 by rpki-client