This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft File: pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft (raw, json) Hash identifier: cVFnnL4IWCd071MBAza5PGBdGD32e8vdAtKdC63Sgj8= Subject key identifier: EC:BB:3A:9B:85:82:C4:EF:A9:48:7A:40:D1:5C:3C:E4:B0:7B:72:4B Authority key identifier: A6:30:75:CB:B7:EB:16:93:EE:71:BC:90:E5:F7:3D:AD:C2:25:D9:1A Certificate issuer: /CN=a63075cbb7eb1693ee71bc90e5f73dadc225d91a Certificate serial: 019B3C7FBB18E30542C6E7070EEC1E30CCB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 16:02:42 +0000 Manifest this update: Sat 20 Dec 2025 16:02:42 +0000 Manifest next update: Sun 21 Dec 2025 16:02:42 +0000 Files and hashes: 1: pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl (hash: T4sx4D27l780Hd0Ppl+D2JMGpJxPeu8hqA4KeZdT3hg=) 2: t403LtXkOSW8w7w_vK-2ppXvWVA.roa (hash: kUS7ckaNEkh4qS4uYt0WI3yhqZiJYbt1KK2dO98adJY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:bb:18:e3:05:42:c6:e7:07:0e:ec:1e:30:cc:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a63075cbb7eb1693ee71bc90e5f73dadc225d91a Validity Not Before: Dec 20 16:02:42 2025 GMT Not After : Dec 21 16:02:42 2025 GMT Subject: CN=ecbb3a9b8582c4efa9487a40d15c3ce4b07b724b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:c2:13:3f:82:30:c2:ef:d0:00:cc:74:b0:8d: 7b:9f:e3:63:30:56:92:2e:49:47:84:16:2c:bd:db: 2a:d5:5e:a2:65:5c:fd:ad:e9:49:3d:b6:9e:ac:c9: b2:62:89:aa:28:22:3e:97:e2:b9:81:50:2c:6f:70: 3a:6d:01:12:fc:99:9d:0c:50:ef:b8:0c:25:54:2e: ea:23:d6:3f:db:7c:37:a1:54:a0:30:99:13:02:61: ae:07:27:ab:e2:23:35:e6:41:b1:b0:64:d6:ee:ef: ea:f8:6c:30:1c:23:4e:11:5c:25:d9:f6:68:f0:41: fb:b7:f4:8e:06:4a:62:ee:fa:29:c2:1f:0d:c4:25: 16:11:02:ef:28:b4:4a:f4:e7:91:68:92:86:4b:cb: c8:ca:37:31:2f:c7:53:ac:7a:33:62:81:71:d0:12: 5b:a4:22:87:52:43:4b:40:00:ec:38:66:e7:52:8c: 93:35:0c:1b:6f:67:dc:17:b8:b8:42:2c:e0:71:3b: 17:15:c9:3f:19:3f:03:d9:58:29:df:47:f6:e9:7c: 45:87:e1:e2:97:d4:e8:11:bf:d2:3f:8c:2a:d2:59: cb:1b:cc:66:05:71:56:45:25:0d:51:59:41:c2:f2: a9:e9:53:76:86:6d:88:0c:84:95:b9:4c:53:98:45: 0b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:BB:3A:9B:85:82:C4:EF:A9:48:7A:40:D1:5C:3C:E4:B0:7B:72:4B X509v3 Authority Key Identifier: keyid:A6:30:75:CB:B7:EB:16:93:EE:71:BC:90:E5:F7:3D:AD:C2:25:D9:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:3a:35:f5:b1:00:60:c4:98:70:89:2a:06:15:61:29:84:b5: a6:d7:04:44:0c:60:ae:52:3b:e9:85:54:7c:cf:de:e8:4b:c8: ea:66:57:3b:52:19:51:c9:ff:c4:c6:73:03:c3:6a:fe:fd:7b: ff:6e:79:bb:75:b6:14:d8:b0:31:0a:cc:e8:49:1d:a2:8f:69: 6b:9c:34:35:92:83:30:00:b5:56:a8:fa:da:be:f8:9f:74:5a: 5f:ac:3d:1b:54:09:a1:8d:92:15:ba:30:6c:08:ef:30:88:c3: 6d:dc:df:e6:87:25:d5:19:04:ee:dc:ec:6a:5e:99:b6:65:1b: 5a:68:24:5b:71:c6:d4:58:bf:a6:42:b6:27:17:8c:a4:51:fa: eb:76:1c:24:ed:ef:3a:c0:7b:9d:41:1a:ee:14:45:3e:9d:5e: 50:da:d0:17:21:aa:5e:ff:49:6e:f2:34:4c:39:65:00:c2:f1: ae:d1:09:78:a5:2e:8c:db:4a:a0:55:a5:63:2c:a3:df:cc:b7: db:63:63:63:4c:ba:30:55:ee:7b:54:b4:da:29:e7:4c:52:45: 87:36:61:18:1f:27:8e:6f:f7:dd:15:4e:cc:00:fb:27:23:26: 04:32:fd:9a:01:d5:0c:dd:35:1e:d2:40:f8:e4:22:1c:16:4b: 67:eb:b7:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f7sY4wVCxucHDuweMMy2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MzA3NWNiYjdlYjE2OTNlZTcxYmM5MGU1ZjczZGFkYzIy NWQ5MWEwHhcNMjUxMjIwMTYwMjQyWhcNMjUxMjIxMTYwMjQyWjAzMTEwLwYDVQQD EyhlY2JiM2E5Yjg1ODJjNGVmYTk0ODdhNDBkMTVjM2NlNGIwN2I3MjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7MITP4Iwwu/QAMx0sI17n+NjMFaS LklHhBYsvdsq1V6iZVz9relJPbaerMmyYomqKCI+l+K5gVAsb3A6bQES/JmdDFDv uAwlVC7qI9Y/23w3oVSgMJkTAmGuByer4iM15kGxsGTW7u/q+GwwHCNOEVwl2fZo 8EH7t/SOBkpi7vopwh8NxCUWEQLvKLRK9OeRaJKGS8vIyjcxL8dTrHozYoFx0BJb pCKHUkNLQADsOGbnUoyTNQwbb2fcF7i4QizgcTsXFck/GT8D2Vgp30f26XxFh+Hi l9ToEb/SP4wq0lnLG8xmBXFWRSUNUVlBwvKp6VN2hm2IDISVuUxTmEULzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOy7OpuFgsTvqUh6QNFcPOSwe3JLMB8GA1UdIwQY MBaAFKYwdcu36xaT7nG8kOX3Pa3CJdkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGpCMXk3ZnJGcFB1Y2J5UTVmYzlyY0lsMlJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9iYmU5ZmYtMjM2NS00OWM4LTk4ZDYt ZTcxYzMxN2EzZmE4LzEvcGpCMXk3ZnJGcFB1Y2J5UTVmYzlyY0lsMlJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9iYmU5ZmYtMjM2NS00OWM4LTk4ZDYtZTcxYzMxN2EzZmE4 LzEvcGpCMXk3ZnJGcFB1Y2J5UTVmYzlyY0lsMlJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPTo19bEA YMSYcIkqBhVhKYS1ptcERAxgrlI76YVUfM/e6EvI6mZXO1IZUcn/xMZzA8Nq/v17 /255u3W2FNiwMQrM6Ekdoo9pa5w0NZKDMAC1Vqj62r74n3RaX6w9G1QJoY2SFbow bAjvMIjDbdzf5ocl1RkE7tzsal6ZtmUbWmgkW3HG1Fi/pkK2JxeMpFH663YcJO3v OsB7nUEa7hRFPp1eUNrQFyGqXv9JbvI0TDllAMLxrtEJeKUujNtKoFWlYyyj38y3 22NjY0y6MFXue1S02innTFJFhzZhGB8njm/33RVOzAD7JyMmBDL9mgHVDN01HtJA +OQiHBZLZ+u3kg== -----END CERTIFICATE-----Generated at Sun Dec 21 00:43:48 2025 by rpki-client