This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
File: pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft (raw, json)
Hash identifier: 5n5ZmdwS+gP8kDj1lyJewU+2B83o1AtFpAMmWD3zz78=
Subject key identifier: CC:8E:CA:76:FF:EF:51:F3:7A:B5:FA:80:71:48:B3:B9:8C:83:18:0C
Authority key identifier: A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4
Certificate issuer: /CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
Certificate serial: 019B4DDF90527D31BFB791A2B0647F903419
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
Manifest number: 1796
Signing time: Wed 24 Dec 2025 01:00:55 +0000
Manifest this update: Wed 24 Dec 2025 01:00:55 +0000
Manifest next update: Thu 25 Dec 2025 01:00:55 +0000
Files and hashes: 1: 1-Rh4xR4UjkOh8VqSY4pK4d1pRds.roa (hash: x3ETC4RsRxr7b/UEU+/7lhOsihrtUte3yh6z17TAj9w=)
2: GISiwDWwkN55w-OPn4qwRSweA84.roa (hash: HIcUUP5vEFNT3gS3RcoPzA6F9bPL2QzZ521VNaxnhks=)
3: kT-9aZ8PqlfT-VcjyzgIGjoK45k.roa (hash: GXEy5f6ZMAPtdjysI4zwNtCcC/imdXdb1ZPEUBC58HA=)
4: lXukILbe6VXJ7h_Wf9WW21z12mw.roa (hash: +Zzql9kBnSussoen1LHmVUwZhXfkIG96Hh/jt0AAOuY=)
5: llr3G6G5AM7M10tmA9xFiPTyO0Y.roa (hash: iQGQsp8WoDcGM5vwoYe4dx6kdl9hCiwMrIHoYkwEWK0=)
6: pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl (hash: cqTT6xScs7S02x+2RTKKeC2pZumvPJsqTxNaCGtAI3Q=)
7: rKCFva5BURgPwYBY7AhhhAP1WfI.roa (hash: yPJLL1iPDAh4jC5sDkvBCraLd8BwdjLiqxgvyLndKHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Dec 2025 01:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:4d:df:90:52:7d:31:bf:b7:91:a2:b0:64:7f:90:34:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
Validity
Not Before: Dec 24 01:00:55 2025 GMT
Not After : Dec 25 01:00:55 2025 GMT
Subject: CN=cc8eca76ffef51f37ab5fa807148b3b98c83180c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6e:3d:eb:61:3b:35:07:80:b8:33:53:d1:40:
e2:13:08:c9:1f:8c:0a:73:9d:22:12:55:51:70:be:
ed:19:9b:15:24:9e:b5:73:3b:b8:c8:d3:7a:63:c2:
75:6f:8f:cf:72:c1:d8:c3:f0:21:80:56:0f:cd:d2:
d2:03:50:08:82:3a:e9:85:1d:ee:ab:ac:5a:15:b4:
88:42:96:55:dc:75:01:14:29:0c:51:71:5b:7d:67:
5d:c8:9e:36:25:a4:3d:fa:7b:86:d8:67:fa:c8:80:
76:8a:97:40:f4:c6:f6:39:03:85:ed:35:09:08:79:
83:ee:62:d6:3b:70:a1:b5:ca:ab:d3:92:bf:23:2e:
b5:8f:c7:bb:c7:ee:86:9f:80:b8:d0:cb:58:bd:35:
a1:78:26:ae:b9:0b:c5:26:a7:e5:f0:d5:f0:65:e8:
fd:3b:1a:54:f1:d0:65:4f:56:23:d3:a2:eb:7d:a8:
81:9e:54:99:5e:3d:0c:f0:30:5a:de:bd:da:68:ad:
90:8c:30:4d:5b:47:77:15:0d:47:eb:1e:58:1f:2c:
8f:a9:cb:ad:36:0e:f7:4e:2a:25:2f:d6:ef:b9:04:
3a:57:bc:26:3c:d2:0a:d5:46:50:e6:6c:69:65:db:
5a:94:31:37:ef:04:ff:47:c4:12:75:98:b3:9f:13:
99:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8E:CA:76:FF:EF:51:F3:7A:B5:FA:80:71:48:B3:B9:8C:83:18:0C
X509v3 Authority Key Identifier:
keyid:A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:bf:51:56:51:b3:fe:81:2b:06:b4:e5:82:f7:bf:e9:4d:a7:
e5:89:9b:06:c6:c8:a9:a4:56:52:12:7c:e5:60:e1:ee:d7:1a:
86:f4:97:30:38:45:67:c4:9a:b2:b6:07:1a:22:86:6a:fc:32:
df:cd:b8:5f:50:92:25:f3:a6:06:f8:c8:8c:21:17:f5:d2:6d:
6f:bf:e3:41:f2:34:2a:70:d6:7d:d3:18:83:8c:09:c6:45:64:
ab:97:e2:19:61:3c:8c:8d:ef:ae:99:ca:07:36:c8:32:72:56:
9b:3a:a4:c8:7a:51:0f:3b:6e:3b:ea:4e:e6:f2:40:59:32:e2:
1d:1c:a1:8a:bc:f7:5a:9d:78:0d:54:99:e6:5e:bd:66:03:c8:
c5:84:ab:d1:d7:2e:ad:2a:38:fa:ef:9b:98:94:47:d0:5f:17:
06:ea:4b:83:70:ea:58:53:f2:a1:64:0d:e4:40:5b:21:c6:44:
45:65:07:cf:de:9d:6e:83:60:cb:66:fc:47:5a:c7:da:ba:68:
8d:d4:e7:d0:b8:4a:90:7b:4a:7c:e0:d8:e8:70:8c:69:9b:2b:
2f:74:49:d2:ac:ea:60:33:11:cb:b1:1f:82:ba:54:96:1f:11:
28:86:5c:30:4a:7c:15:cc:73:7f:7b:d3:26:76:b2:99:bb:98:
ce:ad:e3:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtN35BSfTG/t5GisGR/kDQZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0OTk5MDNkYWI4NWY2YTU5NzcyYjNlZGZkNGJmMGU0OTFh
ZjU3YzQwHhcNMjUxMjI0MDEwMDU1WhcNMjUxMjI1MDEwMDU1WjAzMTEwLwYDVQQD
EyhjYzhlY2E3NmZmZWY1MWYzN2FiNWZhODA3MTQ4YjNiOThjODMxODBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1G4962E7NQeAuDNT0UDiEwjJH4wK
c50iElVRcL7tGZsVJJ61czu4yNN6Y8J1b4/PcsHYw/AhgFYPzdLSA1AIgjrphR3u
q6xaFbSIQpZV3HUBFCkMUXFbfWddyJ42JaQ9+nuG2Gf6yIB2ipdA9Mb2OQOF7TUJ
CHmD7mLWO3Chtcqr05K/Iy61j8e7x+6Gn4C40MtYvTWheCauuQvFJqfl8NXwZej9
OxpU8dBlT1Yj06LrfaiBnlSZXj0M8DBa3r3aaK2QjDBNW0d3FQ1H6x5YHyyPqcut
Ng73TiolL9bvuQQ6V7wmPNIK1UZQ5mxpZdtalDE37wT/R8QSdZiznxOZ2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMyOynb/71HzerX6gHFIs7mMgxgMMB8GA1UdIwQY
MBaAFKSZkD2rhfall3Kz7f1L8OSRr1fEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEptUVBhdUY5cVdYY3JQdF9Vdnc1Skd2VjhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC84ZWRhOWEtZDEzYy00NDMwLThjZjQt
NTdlYzEyZTg2NDFlLzEvcEptUVBhdUY5cVdYY3JQdF9Vdnc1Skd2VjhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC84ZWRhOWEtZDEzYy00NDMwLThjZjQtNTdlYzEyZTg2NDFl
LzEvcEptUVBhdUY5cVdYY3JQdF9Vdnc1Skd2VjhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmb9RVlGz
/oErBrTlgve/6U2n5YmbBsbIqaRWUhJ85WDh7tcahvSXMDhFZ8SasrYHGiKGavwy
3824X1CSJfOmBvjIjCEX9dJtb7/jQfI0KnDWfdMYg4wJxkVkq5fiGWE8jI3vrpnK
BzbIMnJWmzqkyHpRDztuO+pO5vJAWTLiHRyhirz3Wp14DVSZ5l69ZgPIxYSr0dcu
rSo4+u+bmJRH0F8XBupLg3DqWFPyoWQN5EBbIcZERWUHz96dboNgy2b8R1rH2rpo
jdTn0LhKkHtKfODY6HCMaZsrL3RJ0qzqYDMRy7EfgrpUlh8RKIZcMEp8Fcxzf3vT
JnaymbuYzq3jnw==
-----END CERTIFICATE-----
Generated at Wed Dec 24 11:31:09 2025 by rpki-client