This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft File: pBM1JPJKSooh1GwGwQJfQPNK0no.mft (raw, json) Hash identifier: zZ83GI3hQOGtyk4Ww/xEPhgoP2W8NxseUya8UsGgbpU= Subject key identifier: 08:F8:1B:ED:64:86:6E:DF:5A:B7:D5:AF:2E:B1:10:E3:CB:CE:C3:96 Authority key identifier: A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A Certificate issuer: /CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a Certificate serial: 019B4BF1CEF982C29CADE69F3755A94386B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft Manifest number: 1791 Signing time: Tue 23 Dec 2025 16:01:36 +0000 Manifest this update: Tue 23 Dec 2025 16:01:36 +0000 Manifest next update: Wed 24 Dec 2025 16:01:36 +0000 Files and hashes: 1: hDhJ2OmuACmi7Q_Pysi0Uy5-CBg.roa (hash: IpPR6/fjcqfY1Wb9zSV7h6VOKADAG8xAFr0zyQ+Kgzs=) 2: pBM1JPJKSooh1GwGwQJfQPNK0no.crl (hash: opbWVQ7MrergyGQGCntOn78rpSyHE6Bh7mku9W4D8FY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 16:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f1:ce:f9:82:c2:9c:ad:e6:9f:37:55:a9:43:86:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a Validity Not Before: Dec 23 16:01:36 2025 GMT Not After : Dec 24 16:01:36 2025 GMT Subject: CN=08f81bed64866edf5ab7d5af2eb110e3cbcec396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:b6:f5:6d:ad:c0:f8:25:71:55:2f:e5:f7:ff: 68:6f:e3:d2:47:e6:74:4c:63:d4:86:4d:9a:32:80: 26:a3:e0:ee:b5:65:db:37:34:b8:13:b1:cf:e0:7f: a1:fb:68:f7:2e:fe:a8:85:15:00:9c:9a:ca:ba:af: ad:ce:58:06:3c:1a:88:c5:b2:1d:3e:9d:cf:6e:fa: ea:18:dd:10:c3:23:80:26:b4:71:d6:19:34:8b:f1: 50:29:bb:19:99:bf:81:f5:f8:3f:d0:e1:59:b3:49: f0:d3:03:2f:e4:27:62:7a:a6:d9:cf:84:60:10:90: 2e:11:21:b5:1a:09:68:16:a1:d8:dc:58:20:e3:04: 4d:5f:94:e0:85:4c:8e:da:11:0a:25:80:7c:00:36: 23:5f:eb:ed:cf:5d:4d:32:dd:a9:bc:13:cb:50:91: b1:ad:08:5e:d6:98:08:63:eb:49:a3:ff:e5:87:4a: cc:a1:77:77:c5:58:5b:db:ad:73:60:05:1a:8d:0d: 75:4f:81:aa:03:5f:d8:e9:0b:af:9d:8c:8b:9d:25: dd:38:f9:3f:d0:09:03:cf:cb:d3:d3:aa:72:d9:ce: 90:24:6e:3c:d5:15:db:47:fc:8f:75:b0:2d:24:ad: 9d:71:b7:7d:50:8a:c7:c2:37:98:b2:af:50:3c:b4: f6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F8:1B:ED:64:86:6E:DF:5A:B7:D5:AF:2E:B1:10:E3:CB:CE:C3:96 X509v3 Authority Key Identifier: keyid:A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:92:8b:6c:c0:6c:3f:c6:53:77:c4:6f:25:fc:47:ac:45:33: 2f:9d:9b:f6:61:1c:f7:22:ff:e4:16:e2:1a:cd:d9:ab:d4:a1: db:cc:1b:d0:00:7d:42:d3:d0:a9:5a:98:81:d1:76:f0:69:9a: 32:93:30:a0:10:a8:83:8b:74:72:5b:6f:39:11:44:a4:63:14: 33:bc:29:c6:f9:31:a2:fb:a7:99:1d:7f:c6:73:22:da:cc:2a: 92:62:6d:7e:04:91:36:64:50:51:91:1e:47:ac:a8:6e:91:a4: 47:b4:b3:18:17:8e:01:02:1d:f0:72:3c:bf:1b:c1:db:9f:42: 10:9a:be:ed:7b:df:cb:d2:c6:0e:d9:a6:62:8e:20:23:a5:aa: b0:8c:b9:11:25:38:fc:21:3b:0d:16:93:3f:8d:b2:f0:80:0d: 6d:b7:6a:68:c0:44:dd:48:10:dd:40:6c:db:ac:88:a6:8f:c8: cc:af:f8:d6:9e:39:f9:66:16:54:c4:6a:4a:2a:61:f0:d0:3a: 87:ef:43:39:ea:ca:5d:58:ec:16:67:9e:7b:6a:f1:9f:eb:2d: 14:03:07:91:13:68:33:40:15:b8:10:f3:73:87:b2:47:74:65: 3f:b7:f9:f1:0e:a2:19:e3:65:59:28:4c:fa:30:de:bc:0e:b8: aa:03:30:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8c75gsKcreafN1WpQ4a4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MTMzNTI0ZjI0YTRhOGEyMWQ0NmMwNmMxMDI1ZjQwZjM0 YWQyN2EwHhcNMjUxMjIzMTYwMTM2WhcNMjUxMjI0MTYwMTM2WjAzMTEwLwYDVQQD EygwOGY4MWJlZDY0ODY2ZWRmNWFiN2Q1YWYyZWIxMTBlM2NiY2VjMzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA77b1ba3A+CVxVS/l9/9ob+PSR+Z0 TGPUhk2aMoAmo+DutWXbNzS4E7HP4H+h+2j3Lv6ohRUAnJrKuq+tzlgGPBqIxbId Pp3PbvrqGN0QwyOAJrRx1hk0i/FQKbsZmb+B9fg/0OFZs0nw0wMv5CdieqbZz4Rg EJAuESG1GgloFqHY3Fgg4wRNX5TghUyO2hEKJYB8ADYjX+vtz11NMt2pvBPLUJGx rQhe1pgIY+tJo//lh0rMoXd3xVhb261zYAUajQ11T4GqA1/Y6QuvnYyLnSXdOPk/ 0AkDz8vT06py2c6QJG481RXbR/yPdbAtJK2dcbd9UIrHwjeYsq9QPLT20wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAj4G+1khm7fWrfVry6xEOPLzsOWMB8GA1UdIwQY MBaAFKQTNSTySkqKIdRsBsECX0DzStJ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEJNMUpQSktTb29oMUd3R3dRSmZRUE5LMG5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zYzI0YmUtMjY2ZS00NTIyLTk3ZDYt N2Q5ZTYyYWZjNDQ0LzEvcEJNMUpQSktTb29oMUd3R3dRSmZRUE5LMG5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8zYzI0YmUtMjY2ZS00NTIyLTk3ZDYtN2Q5ZTYyYWZjNDQ0 LzEvcEJNMUpQSktTb29oMUd3R3dRSmZRUE5LMG5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARJKLbMBs P8ZTd8RvJfxHrEUzL52b9mEc9yL/5BbiGs3Zq9Sh28wb0AB9QtPQqVqYgdF28Gma MpMwoBCog4t0cltvORFEpGMUM7wpxvkxovunmR1/xnMi2swqkmJtfgSRNmRQUZEe R6yobpGkR7SzGBeOAQId8HI8vxvB259CEJq+7Xvfy9LGDtmmYo4gI6WqsIy5ESU4 /CE7DRaTP42y8IANbbdqaMBE3UgQ3UBs26yIpo/IzK/41p45+WYWVMRqSiph8NA6 h+9DOerKXVjsFmeee2rxn+stFAMHkRNoM0AVuBDzc4eyR3RlP7f58Q6iGeNlWShM +jDevA64qgMwng== -----END CERTIFICATE-----Generated at Wed Dec 24 02:19:10 2025 by rpki-client