This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.mft File: PkJOJFpkMkpocx3SbzDGhbqopng.mft (raw, json) Hash identifier: 3oC6jo3fYLpl/UlC89NXfWFJK75I2STWEFVyB5z1spo= Subject key identifier: 8A:98:6A:89:03:9E:44:4E:25:9A:F0:B7:59:AE:5D:F7:94:BB:45:C3 Authority key identifier: 3E:42:4E:24:5A:64:32:4A:68:73:1D:D2:6F:30:C6:85:BA:A8:A6:78 Certificate issuer: /CN=3e424e245a64324a68731dd26f30c685baa8a678 Certificate serial: 019B40918646F5AF9A1718A41E2E93F3F1A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PkJOJFpkMkpocx3SbzDGhbqopng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 11:00:37 +0000 Manifest this update: Sun 21 Dec 2025 11:00:37 +0000 Manifest next update: Mon 22 Dec 2025 11:00:37 +0000 Files and hashes: 1: 9BKbZIRd9-X7DwnbmN0tiFBfwDk.roa (hash: sc6ZIVElHs/p3IrdFGLfeuXuK5hZseBYNoiFQsWbBIY=) 2: PkJOJFpkMkpocx3SbzDGhbqopng.crl (hash: wtUIT6A0e2mwxoRbdca8dIosGfKbRNqiNiKomPqGC9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.mft rsync://rpki.ripe.net/repository/DEFAULT/PkJOJFpkMkpocx3SbzDGhbqopng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:86:46:f5:af:9a:17:18:a4:1e:2e:93:f3:f1:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e424e245a64324a68731dd26f30c685baa8a678 Validity Not Before: Dec 21 11:00:37 2025 GMT Not After : Dec 22 11:00:37 2025 GMT Subject: CN=8a986a89039e444e259af0b759ae5df794bb45c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f2:15:56:5a:bd:33:e1:f9:cb:a2:3d:51:29: e5:96:63:a9:30:a9:57:7c:04:43:6e:66:8c:19:ff: ec:7e:6e:b0:4b:5a:0a:8f:18:22:ad:e6:ba:3d:e8: 15:be:60:a7:1b:70:99:ac:be:d3:37:dd:6e:da:cb: 4f:1c:00:ee:e5:68:11:57:84:0d:76:7b:33:49:c3: d1:3d:b5:7e:5a:69:7c:ef:55:15:6a:aa:d4:80:44: 84:1c:1c:2f:bb:a3:8a:02:0b:05:68:c3:e9:f7:ec: 0b:6e:6c:c1:31:53:51:bc:bb:b9:81:d9:1f:86:1a: 15:ed:98:0d:d7:b9:ee:11:56:f9:69:6b:84:5c:1f: 15:d5:62:9c:71:24:0e:b3:cb:11:49:3c:db:6a:48: 3d:d4:ee:49:17:0a:db:55:ee:08:92:94:15:3f:12: e4:90:d3:5c:a3:ba:1a:7d:fd:5a:96:a6:92:7b:71: 3b:ea:f7:70:db:0d:46:f7:2e:12:90:9c:72:4a:86: 76:b2:57:9d:e3:17:43:2b:26:ca:22:3b:89:f6:61: 9d:a6:ea:ed:3a:00:fa:4c:e4:a4:be:ee:61:42:eb: 98:64:12:70:9d:16:52:ad:a6:c9:d3:9f:93:c6:19: 4e:a2:54:00:59:5d:a4:43:b7:93:62:77:7c:a7:e6: fb:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:98:6A:89:03:9E:44:4E:25:9A:F0:B7:59:AE:5D:F7:94:BB:45:C3 X509v3 Authority Key Identifier: keyid:3E:42:4E:24:5A:64:32:4A:68:73:1D:D2:6F:30:C6:85:BA:A8:A6:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkJOJFpkMkpocx3SbzDGhbqopng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:43:2f:b3:3b:44:98:23:ba:f4:61:99:ee:a9:39:2e:f0:dc: a2:ea:da:0a:27:98:5b:1a:79:ef:b9:16:ff:b4:cb:14:64:8d: 61:0d:05:a3:cc:6b:31:d6:d8:46:20:e1:6c:41:8e:ec:2b:44: cf:f2:8e:87:d4:0d:13:b0:43:0c:c2:f2:4b:7b:fd:ff:a1:81: ee:d9:64:42:29:84:6e:e0:4d:b0:f4:ef:4b:35:73:ae:97:72: a3:f6:86:96:3e:78:d6:ac:f2:21:a3:62:7c:a8:90:2e:12:9e: 14:fd:b8:09:bc:05:a8:7c:d8:da:c2:f5:ed:bc:97:87:e1:9a: ae:57:53:6b:82:31:43:4f:53:b2:f3:d0:81:5c:4f:8f:00:35: 33:91:5b:b8:78:d3:30:b7:c0:2e:1e:a0:46:f0:ab:29:b2:47: 0e:f9:f7:9d:72:ae:48:19:1b:02:6d:16:70:b0:ae:ff:2b:8b: 92:2a:6a:54:02:86:b5:94:63:f9:70:ab:9e:5b:5b:03:b9:93: 92:8e:e6:9d:11:b2:3d:d3:22:39:88:02:82:1e:0a:ab:1a:60: fa:3c:ce:d5:bf:62:c9:a3:77:e1:e7:85:84:e1:94:e5:02:36: 67:ae:bf:04:ad:f3:5a:6d:7e:b8:1e:92:c0:c7:ab:91:cd:c1: 1c:ed:3f:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkYZG9a+aFxikHi6T8/GoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNDI0ZTI0NWE2NDMyNGE2ODczMWRkMjZmMzBjNjg1YmFh OGE2NzgwHhcNMjUxMjIxMTEwMDM3WhcNMjUxMjIyMTEwMDM3WjAzMTEwLwYDVQQD Eyg4YTk4NmE4OTAzOWU0NDRlMjU5YWYwYjc1OWFlNWRmNzk0YmI0NWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/IVVlq9M+H5y6I9USnllmOpMKlX fARDbmaMGf/sfm6wS1oKjxgirea6PegVvmCnG3CZrL7TN91u2stPHADu5WgRV4QN dnszScPRPbV+Wml871UVaqrUgESEHBwvu6OKAgsFaMPp9+wLbmzBMVNRvLu5gdkf hhoV7ZgN17nuEVb5aWuEXB8V1WKccSQOs8sRSTzbakg91O5JFwrbVe4IkpQVPxLk kNNco7oaff1alqaSe3E76vdw2w1G9y4SkJxySoZ2sled4xdDKybKIjuJ9mGdpurt OgD6TOSkvu5hQuuYZBJwnRZSrabJ05+TxhlOolQAWV2kQ7eTYnd8p+b7yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIqYaokDnkROJZrwt1muXfeUu0XDMB8GA1UdIwQY MBaAFD5CTiRaZDJKaHMd0m8wxoW6qKZ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGtKT0pGcGtNa3BvY3gzU2J6REdoYnFvcG5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8xMDAyYzEtMDBiYy00MzA4LWI1NWQt NTRkYTA0NjhmZGFkLzEvUGtKT0pGcGtNa3BvY3gzU2J6REdoYnFvcG5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8xMDAyYzEtMDBiYy00MzA4LWI1NWQtNTRkYTA0NjhmZGFk LzEvUGtKT0pGcGtNa3BvY3gzU2J6REdoYnFvcG5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS0MvsztE mCO69GGZ7qk5LvDcouraCieYWxp577kW/7TLFGSNYQ0Fo8xrMdbYRiDhbEGO7CtE z/KOh9QNE7BDDMLyS3v9/6GB7tlkQimEbuBNsPTvSzVzrpdyo/aGlj541qzyIaNi fKiQLhKeFP24CbwFqHzY2sL17byXh+GarldTa4IxQ09TsvPQgVxPjwA1M5FbuHjT MLfALh6gRvCrKbJHDvn3nXKuSBkbAm0WcLCu/yuLkipqVAKGtZRj+XCrnltbA7mT ko7mnRGyPdMiOYgCgh4Kqxpg+jzO1b9iyaN34eeFhOGU5QI2Z66/BK3zWm1+uB6S wMerkc3BHO0/aQ== -----END CERTIFICATE-----Generated at Sun Dec 21 17:15:07 2025 by rpki-client