This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft File: pBM1JPJKSooh1GwGwQJfQPNK0no.mft (raw, json) Hash identifier: PDn1DTB56VW/oAgBvosC3QLk5erLVnWEjtx+160HylY= Subject key identifier: F2:A2:3C:C7:A1:44:9B:BF:F6:AB:D7:23:16:63:7F:85:47:CC:12:B4 Authority key identifier: A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A Certificate issuer: /CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a Certificate serial: 019B4A03C17DC401A926078D008080F6F863 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft Manifest number: 1790 Signing time: Tue 23 Dec 2025 07:01:58 +0000 Manifest this update: Tue 23 Dec 2025 07:01:58 +0000 Manifest next update: Wed 24 Dec 2025 07:01:58 +0000 Files and hashes: 1: hDhJ2OmuACmi7Q_Pysi0Uy5-CBg.roa (hash: IpPR6/fjcqfY1Wb9zSV7h6VOKADAG8xAFr0zyQ+Kgzs=) 2: pBM1JPJKSooh1GwGwQJfQPNK0no.crl (hash: a5M1xh2AGUNspN/UWKBLbbvu23a0XOjci+Tg4tiIx+0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:03:c1:7d:c4:01:a9:26:07:8d:00:80:80:f6:f8:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a Validity Not Before: Dec 23 07:01:58 2025 GMT Not After : Dec 24 07:01:58 2025 GMT Subject: CN=f2a23cc7a1449bbff6abd72316637f8547cc12b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:8d:35:f7:f8:92:e9:9c:e5:af:17:fd:32:bd: ac:69:d9:1f:e5:33:b5:2b:7f:2f:14:dc:3d:85:ba: 4f:51:0f:a5:20:c1:43:ae:99:48:43:13:fb:5e:f7: f6:ec:28:3e:e6:73:bb:6a:f0:62:68:ff:57:66:4f: 93:95:91:3f:33:d5:de:66:87:a0:91:dc:d8:77:75: a7:97:37:83:3e:03:cd:c3:0a:0b:3e:a1:b8:d7:16: b3:46:00:27:08:13:5a:39:6a:c6:6e:23:76:eb:ae: bb:58:b6:18:83:41:ab:36:66:44:38:67:62:f2:14: a4:36:6f:af:62:96:ad:d5:01:0b:b5:90:68:f8:65: f1:9a:2b:2c:1a:ed:ad:f2:6b:5c:c7:8d:97:3e:5c: b0:4b:70:44:2e:19:ef:8a:fc:bf:ef:be:2e:b7:83: 79:81:fb:ab:46:69:21:1f:b0:f0:a8:30:ad:2b:57: 59:9d:0d:14:79:c6:80:82:5c:e6:75:e1:bd:f2:43: 06:42:41:0c:c6:bd:cc:15:eb:da:d3:8d:ec:c4:0a: 22:02:f6:b7:2c:04:49:76:bc:3e:88:79:d3:4d:39: 8a:ff:76:30:c1:dc:87:ca:a2:68:a1:43:b6:56:04: 14:49:fe:e6:21:68:ef:d8:be:a6:1a:2a:6d:ea:25: 07:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A2:3C:C7:A1:44:9B:BF:F6:AB:D7:23:16:63:7F:85:47:CC:12:B4 X509v3 Authority Key Identifier: keyid:A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:e0:de:08:d9:7b:93:da:6d:6e:d6:0f:52:49:97:dd:37:29: 7e:70:11:2f:99:f0:e7:97:df:26:cc:ed:47:8f:9f:2e:b9:d8: 01:60:3d:7a:ec:e0:b8:f0:d8:d4:9b:b2:87:9f:0f:6f:c9:ff: 9f:f9:62:a2:49:1d:a9:65:a7:c2:c4:96:54:b6:55:a0:a6:57: c6:ae:89:23:aa:b8:7f:a7:30:a1:cc:08:a2:01:5b:2b:e5:d1: c4:f1:a3:87:5b:db:42:0d:8a:88:17:d3:e7:69:f0:6c:fd:44: 6d:22:8c:41:c7:9a:a6:13:40:85:c3:d1:97:29:cd:fe:1b:c1: 1d:79:24:ec:b0:b6:50:8e:dc:1f:ce:0a:99:de:92:cb:ca:e9: b8:98:12:0d:95:e7:ea:99:6d:16:44:2b:50:84:35:7d:27:8f: 71:fe:06:56:54:bb:4f:d8:91:5d:3e:eb:95:2e:73:9b:3b:f5: 38:b1:ce:72:f0:e4:72:f1:9d:77:a0:c5:89:6c:27:cd:f0:a3: 5f:3e:b4:17:93:18:14:35:c5:a1:a9:83:12:99:36:6e:ae:2e: 39:6f:af:22:61:d1:a1:6d:fb:90:66:c0:fc:87:86:98:d8:a6: 18:0b:4c:73:be:32:8f:3b:cb:20:9f:b5:df:4f:cd:a6:3b:52: 74:4d:a6:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKA8F9xAGpJgeNAICA9vhjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MTMzNTI0ZjI0YTRhOGEyMWQ0NmMwNmMxMDI1ZjQwZjM0 YWQyN2EwHhcNMjUxMjIzMDcwMTU4WhcNMjUxMjI0MDcwMTU4WjAzMTEwLwYDVQQD EyhmMmEyM2NjN2ExNDQ5YmJmZjZhYmQ3MjMxNjYzN2Y4NTQ3Y2MxMmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8o019/iS6Zzlrxf9Mr2sadkf5TO1 K38vFNw9hbpPUQ+lIMFDrplIQxP7Xvf27Cg+5nO7avBiaP9XZk+TlZE/M9XeZoeg kdzYd3WnlzeDPgPNwwoLPqG41xazRgAnCBNaOWrGbiN26667WLYYg0GrNmZEOGdi 8hSkNm+vYpat1QELtZBo+GXxmissGu2t8mtcx42XPlywS3BELhnvivy/774ut4N5 gfurRmkhH7DwqDCtK1dZnQ0UecaAglzmdeG98kMGQkEMxr3MFeva043sxAoiAva3 LARJdrw+iHnTTTmK/3YwwdyHyqJooUO2VgQUSf7mIWjv2L6mGipt6iUHLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKiPMehRJu/9qvXIxZjf4VHzBK0MB8GA1UdIwQY MBaAFKQTNSTySkqKIdRsBsECX0DzStJ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEJNMUpQSktTb29oMUd3R3dRSmZRUE5LMG5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zYzI0YmUtMjY2ZS00NTIyLTk3ZDYt N2Q5ZTYyYWZjNDQ0LzEvcEJNMUpQSktTb29oMUd3R3dRSmZRUE5LMG5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8zYzI0YmUtMjY2ZS00NTIyLTk3ZDYtN2Q5ZTYyYWZjNDQ0 LzEvcEJNMUpQSktTb29oMUd3R3dRSmZRUE5LMG5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMeDeCNl7 k9ptbtYPUkmX3TcpfnARL5nw55ffJsztR4+fLrnYAWA9euzguPDY1Juyh58Pb8n/ n/liokkdqWWnwsSWVLZVoKZXxq6JI6q4f6cwocwIogFbK+XRxPGjh1vbQg2KiBfT 52nwbP1EbSKMQceaphNAhcPRlynN/hvBHXkk7LC2UI7cH84Kmd6Sy8rpuJgSDZXn 6pltFkQrUIQ1fSePcf4GVlS7T9iRXT7rlS5zmzv1OLHOcvDkcvGdd6DFiWwnzfCj Xz60F5MYFDXFoamDEpk2bq4uOW+vImHRoW37kGbA/IeGmNimGAtMc74yjzvLIJ+1 30/NpjtSdE2mwA== -----END CERTIFICATE-----Generated at Tue Dec 23 11:21:29 2025 by rpki-client