This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft File: pBM1JPJKSooh1GwGwQJfQPNK0no.mft (raw, json) Hash identifier: wP9Xqt2UQY5SIpLw97R9iWXQn+pU6SjeLwrSGzW6TSs= Subject key identifier: 7A:37:40:38:B0:58:9C:CD:29:EB:4D:84:5D:7E:85:E4:24:DD:71:6F Authority key identifier: A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A Certificate issuer: /CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a Certificate serial: 019B1202681023FE251CECB2DCC9D98F76B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft Manifest number: 1773 Signing time: Fri 12 Dec 2025 10:01:46 +0000 Manifest this update: Fri 12 Dec 2025 10:01:46 +0000 Manifest next update: Sat 13 Dec 2025 10:01:46 +0000 Files and hashes: 1: hDhJ2OmuACmi7Q_Pysi0Uy5-CBg.roa (hash: IpPR6/fjcqfY1Wb9zSV7h6VOKADAG8xAFr0zyQ+Kgzs=) 2: pBM1JPJKSooh1GwGwQJfQPNK0no.crl (hash: dAgWTDtOJv55+BRPcG34cFStPEmqgIdQb+vAg7XfNEE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:02:68:10:23:fe:25:1c:ec:b2:dc:c9:d9:8f:76:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a Validity Not Before: Dec 12 10:01:46 2025 GMT Not After : Dec 13 10:01:46 2025 GMT Subject: CN=7a374038b0589ccd29eb4d845d7e85e424dd716f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:38:99:f1:3c:5f:c7:52:ff:63:f1:1c:23:24: ff:35:ad:c1:86:07:1c:12:c7:e8:1b:71:fc:0c:da: c0:fe:61:ba:fc:87:16:1c:de:82:07:7b:38:d9:3d: f6:dd:67:6b:83:47:52:aa:71:eb:88:64:7f:09:40: e0:5a:6c:31:cb:04:c7:20:01:ea:b1:db:d2:cf:fe: 6f:cc:24:3a:12:81:34:8a:23:5d:83:d5:a2:50:7b: 82:f5:db:e8:84:ca:4a:a0:53:80:b6:9d:95:f3:38: 08:1f:c7:ac:db:bc:26:bf:9e:31:51:83:cf:c2:6e: 5c:8f:2b:67:bb:8f:43:51:90:93:77:4b:46:c6:b9: 6d:ff:00:f5:70:a3:7e:43:95:4c:bf:d0:a6:22:1e: 08:4b:b7:a7:64:12:8b:12:b8:d0:e1:8c:58:11:88: 65:76:39:5b:57:07:4b:07:03:fe:82:7b:b3:77:3b: cb:cc:a9:b6:12:f1:44:a9:5c:15:06:01:d3:96:d7: bc:eb:e6:b7:fd:49:89:9e:cc:3d:79:8f:fc:df:d7: 29:aa:66:e4:60:b1:2c:7e:49:08:d6:19:49:70:82: 4d:9c:27:2f:f7:18:ba:73:d5:ab:31:91:2c:3d:4c: f3:e1:d3:81:0f:c2:25:43:82:5a:81:ed:13:2b:00: c3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:37:40:38:B0:58:9C:CD:29:EB:4D:84:5D:7E:85:E4:24:DD:71:6F X509v3 Authority Key Identifier: keyid:A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:0c:0f:be:a0:22:bd:3f:1e:41:03:ad:1d:88:7e:c3:67:6f: 6f:dc:2c:9d:1f:28:4e:bb:8d:67:f0:b6:e9:4f:5a:8c:df:39: 0e:85:15:de:ec:19:87:25:5f:b4:ea:e6:31:aa:b0:08:86:70: e2:c5:e0:86:5a:f2:66:f3:12:0b:60:59:32:b8:03:d3:d0:a2: de:c9:47:77:e4:68:42:de:0c:ed:32:ed:85:b0:aa:28:c2:fb: 66:32:8e:c9:35:e9:bf:c1:4c:ea:a2:1c:ee:42:9d:9f:6a:4b: 39:18:aa:2f:09:62:1b:5d:ce:1c:d2:5c:cb:63:36:32:1d:c3: 46:df:36:91:17:5f:62:e0:8b:8d:a4:d8:64:af:b8:90:a5:9c: c7:89:60:b9:c1:a8:9d:01:49:63:ef:c2:3d:cf:a2:b3:11:81: 3e:71:b4:15:04:9e:a3:0e:a5:03:89:f9:6b:e2:e1:be:d5:cc: 4e:df:7f:69:2d:50:99:98:ce:50:02:9e:d7:d2:2b:c5:dd:bb: 4d:c2:ad:e5:41:e0:21:70:fb:40:80:e3:c4:19:18:54:cc:f9: 95:5f:4a:ff:3a:6d:85:ba:05:50:df:e3:ca:c1:a0:c1:05:e1: b2:3a:26:62:64:59:f6:3e:c0:d3:d6:e8:6c:bb:95:31:2e:04: 47:53:7a:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSAmgQI/4lHOyy3MnZj3a5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MTMzNTI0ZjI0YTRhOGEyMWQ0NmMwNmMxMDI1ZjQwZjM0 YWQyN2EwHhcNMjUxMjEyMTAwMTQ2WhcNMjUxMjEzMTAwMTQ2WjAzMTEwLwYDVQQD Eyg3YTM3NDAzOGIwNTg5Y2NkMjllYjRkODQ1ZDdlODVlNDI0ZGQ3MTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjiZ8Txfx1L/Y/EcIyT/Na3Bhgcc EsfoG3H8DNrA/mG6/IcWHN6CB3s42T323Wdrg0dSqnHriGR/CUDgWmwxywTHIAHq sdvSz/5vzCQ6EoE0iiNdg9WiUHuC9dvohMpKoFOAtp2V8zgIH8es27wmv54xUYPP wm5cjytnu49DUZCTd0tGxrlt/wD1cKN+Q5VMv9CmIh4IS7enZBKLErjQ4YxYEYhl djlbVwdLBwP+gnuzdzvLzKm2EvFEqVwVBgHTlte86+a3/UmJnsw9eY/839cpqmbk YLEsfkkI1hlJcIJNnCcv9xi6c9WrMZEsPUzz4dOBD8IlQ4Jage0TKwDDfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHo3QDiwWJzNKetNhF1+heQk3XFvMB8GA1UdIwQY MBaAFKQTNSTySkqKIdRsBsECX0DzStJ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEJNMUpQSktTb29oMUd3R3dRSmZRUE5LMG5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zYzI0YmUtMjY2ZS00NTIyLTk3ZDYt N2Q5ZTYyYWZjNDQ0LzEvcEJNMUpQSktTb29oMUd3R3dRSmZRUE5LMG5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8zYzI0YmUtMjY2ZS00NTIyLTk3ZDYtN2Q5ZTYyYWZjNDQ0 LzEvcEJNMUpQSktTb29oMUd3R3dRSmZRUE5LMG5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJgwPvqAi vT8eQQOtHYh+w2dvb9wsnR8oTruNZ/C26U9ajN85DoUV3uwZhyVftOrmMaqwCIZw 4sXghlryZvMSC2BZMrgD09Ci3slHd+RoQt4M7TLthbCqKML7ZjKOyTXpv8FM6qIc 7kKdn2pLORiqLwliG13OHNJcy2M2Mh3DRt82kRdfYuCLjaTYZK+4kKWcx4lgucGo nQFJY+/CPc+isxGBPnG0FQSeow6lA4n5a+LhvtXMTt9/aS1QmZjOUAKe19Irxd27 TcKt5UHgIXD7QIDjxBkYVMz5lV9K/zpthboFUN/jysGgwQXhsjomYmRZ9j7A09bo bLuVMS4ER1N6ow== -----END CERTIFICATE-----Generated at Fri Dec 12 13:23:34 2025 by rpki-client