This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft File: pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft (raw, json) Hash identifier: E5IkxxxXelVzIVAsHTvPKhmLDM75j0vfcGSNJpa3jUA= Subject key identifier: E3:52:22:82:CE:2F:49:74:D5:5B:13:CA:9A:A5:0E:4B:D4:48:7D:85 Authority key identifier: A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4 Certificate issuer: /CN=a499903dab85f6a59772b3edfd4bf0e491af57c4 Certificate serial: 019B3C7E196EE8834B3833724A159EA957E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft Manifest number: 178D Signing time: Sat 20 Dec 2025 16:00:55 +0000 Manifest this update: Sat 20 Dec 2025 16:00:55 +0000 Manifest next update: Sun 21 Dec 2025 16:00:55 +0000 Files and hashes: 1: 1-Rh4xR4UjkOh8VqSY4pK4d1pRds.roa (hash: x3ETC4RsRxr7b/UEU+/7lhOsihrtUte3yh6z17TAj9w=) 2: GISiwDWwkN55w-OPn4qwRSweA84.roa (hash: HIcUUP5vEFNT3gS3RcoPzA6F9bPL2QzZ521VNaxnhks=) 3: kT-9aZ8PqlfT-VcjyzgIGjoK45k.roa (hash: GXEy5f6ZMAPtdjysI4zwNtCcC/imdXdb1ZPEUBC58HA=) 4: lXukILbe6VXJ7h_Wf9WW21z12mw.roa (hash: +Zzql9kBnSussoen1LHmVUwZhXfkIG96Hh/jt0AAOuY=) 5: llr3G6G5AM7M10tmA9xFiPTyO0Y.roa (hash: iQGQsp8WoDcGM5vwoYe4dx6kdl9hCiwMrIHoYkwEWK0=) 6: pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl (hash: Fryb+DHAbxgZfLzB2aTlxIPLA1gS+xbfPK3+9OLH32g=) 7: rKCFva5BURgPwYBY7AhhhAP1WfI.roa (hash: yPJLL1iPDAh4jC5sDkvBCraLd8BwdjLiqxgvyLndKHU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:19:6e:e8:83:4b:38:33:72:4a:15:9e:a9:57:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a499903dab85f6a59772b3edfd4bf0e491af57c4 Validity Not Before: Dec 20 16:00:55 2025 GMT Not After : Dec 21 16:00:55 2025 GMT Subject: CN=e3522282ce2f4974d55b13ca9aa50e4bd4487d85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b7:35:8e:b5:f7:ab:51:c5:0d:6e:74:02:30: 66:42:7a:69:da:47:3f:2e:9f:24:26:c9:aa:5d:3e: cd:c7:8a:fb:a5:1d:4d:a7:ed:f5:72:ee:96:b7:87: 0e:4a:e5:b6:81:ed:0d:18:b4:dd:d3:72:9d:d2:2e: be:df:28:39:f2:34:7b:45:9b:16:db:8b:7b:12:31: fb:22:fa:04:50:37:8b:c7:43:bf:39:b3:a4:1b:8f: 1b:78:14:b2:2a:25:6d:db:ea:a0:f4:d3:82:ec:37: ab:49:7a:3b:0f:6c:40:51:01:c9:88:f9:cd:3e:f3: de:56:f4:48:ab:59:7c:b8:17:ee:99:eb:eb:8f:c3: 03:cc:e6:8c:02:1c:53:47:3b:6a:c2:57:be:35:60: 97:a0:26:c6:58:f5:3f:28:97:5c:ea:ce:be:1e:2c: 42:62:2b:8f:f6:0a:8d:a4:02:69:cb:81:1a:69:7b: a8:6b:14:56:1f:f4:cf:b6:24:26:22:e1:cf:6a:70: 44:82:59:67:fe:22:24:47:5b:f8:7a:c0:89:d4:a2: d8:85:6d:7f:55:20:ed:c3:a0:57:2e:0f:66:e6:bf: 04:e9:1c:8b:0c:ba:8c:62:ce:18:d2:45:45:14:f5: ae:b0:56:79:45:f5:51:19:1b:47:c1:14:03:52:41: 2c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:52:22:82:CE:2F:49:74:D5:5B:13:CA:9A:A5:0E:4B:D4:48:7D:85 X509v3 Authority Key Identifier: keyid:A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:d2:53:f8:b4:a8:fe:6b:9a:d3:f6:17:bd:d0:cf:e6:5a:bb: 15:f4:38:c8:69:a0:41:18:ca:84:b8:cd:37:4a:78:38:bb:af: a0:b0:38:c8:7b:d2:f0:33:4f:ac:54:77:22:a7:d7:9e:5e:2d: 22:f2:e6:9c:eb:e9:50:ad:cc:03:cc:f0:6b:21:ed:0a:2c:32: c7:01:0e:a8:15:76:0f:4a:cf:45:29:c0:5d:dd:c1:83:36:f5: f6:24:ff:0a:04:d5:66:b9:67:47:bf:4c:28:17:6b:e2:c4:ae: ed:f0:25:ee:0c:81:13:1d:b3:42:fa:fb:db:f4:98:b2:2c:20: fb:7d:33:0e:a9:41:ab:bb:05:14:2f:7e:c0:ce:dd:e1:c8:ed: b0:c0:ec:4c:ba:45:ce:d7:09:98:44:63:69:2c:9f:0b:ee:8b: 13:04:ed:c0:d1:7f:d4:ad:e4:4c:35:a2:d6:e4:20:1f:97:80: 18:b2:c1:00:98:2b:ed:59:07:af:32:7a:8a:4b:08:f3:55:10: 6a:c8:cc:11:da:77:ae:e5:17:1c:ae:6e:cf:2d:86:98:c8:dc: 93:be:2e:76:3e:b2:6d:3b:3c:f6:bf:37:f9:a7:fd:99:89:fc: f2:53:68:7e:48:5e:74:75:9b:87:09:63:de:b9:e2:ac:12:40: db:1f:d7:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fhlu6INLODNyShWeqVfmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0OTk5MDNkYWI4NWY2YTU5NzcyYjNlZGZkNGJmMGU0OTFh ZjU3YzQwHhcNMjUxMjIwMTYwMDU1WhcNMjUxMjIxMTYwMDU1WjAzMTEwLwYDVQQD EyhlMzUyMjI4MmNlMmY0OTc0ZDU1YjEzY2E5YWE1MGU0YmQ0NDg3ZDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bc1jrX3q1HFDW50AjBmQnpp2kc/ Lp8kJsmqXT7Nx4r7pR1Np+31cu6Wt4cOSuW2ge0NGLTd03Kd0i6+3yg58jR7RZsW 24t7EjH7IvoEUDeLx0O/ObOkG48beBSyKiVt2+qg9NOC7DerSXo7D2xAUQHJiPnN PvPeVvRIq1l8uBfumevrj8MDzOaMAhxTRztqwle+NWCXoCbGWPU/KJdc6s6+HixC YiuP9gqNpAJpy4EaaXuoaxRWH/TPtiQmIuHPanBEglln/iIkR1v4esCJ1KLYhW1/ VSDtw6BXLg9m5r8E6RyLDLqMYs4Y0kVFFPWusFZ5RfVRGRtHwRQDUkEs+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFONSIoLOL0l01VsTypqlDkvUSH2FMB8GA1UdIwQY MBaAFKSZkD2rhfall3Kz7f1L8OSRr1fEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEptUVBhdUY5cVdYY3JQdF9Vdnc1Skd2VjhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC84ZWRhOWEtZDEzYy00NDMwLThjZjQt NTdlYzEyZTg2NDFlLzEvcEptUVBhdUY5cVdYY3JQdF9Vdnc1Skd2VjhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC84ZWRhOWEtZDEzYy00NDMwLThjZjQtNTdlYzEyZTg2NDFl LzEvcEptUVBhdUY5cVdYY3JQdF9Vdnc1Skd2VjhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm9JT+LSo /mua0/YXvdDP5lq7FfQ4yGmgQRjKhLjNN0p4OLuvoLA4yHvS8DNPrFR3IqfXnl4t IvLmnOvpUK3MA8zwayHtCiwyxwEOqBV2D0rPRSnAXd3Bgzb19iT/CgTVZrlnR79M KBdr4sSu7fAl7gyBEx2zQvr72/SYsiwg+30zDqlBq7sFFC9+wM7d4cjtsMDsTLpF ztcJmERjaSyfC+6LEwTtwNF/1K3kTDWi1uQgH5eAGLLBAJgr7VkHrzJ6iksI81UQ asjMEdp3ruUXHK5uzy2GmMjck74udj6ybTs89r83+af9mYn88lNofkhedHWbhwlj 3rnirBJA2x/X6w== -----END CERTIFICATE-----Generated at Sat Dec 20 21:32:29 2025 by rpki-client