This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft File: pJxODPXI27tqZ88dovMfQWJ0n90.mft (raw, json) Hash identifier: syOYNPJrM2LewEjF3LgCLv64z97CCXH4u3hlOerysDY= Subject key identifier: 19:00:5A:A6:1A:0E:AA:84:2E:1F:18:32:1F:B0:A0:9B:2A:AA:41:84 Authority key identifier: A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD Certificate issuer: /CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd Certificate serial: 019B2B1C84F784C4CBD03B8B16A4568AE189 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft Manifest number: 1797 Signing time: Wed 17 Dec 2025 07:00:47 +0000 Manifest this update: Wed 17 Dec 2025 07:00:47 +0000 Manifest next update: Thu 18 Dec 2025 07:00:47 +0000 Files and hashes: 1: oTERYQxbfcdAepRJdL-H3PXCPnk.roa (hash: BUX480Cq0/FWcz+EdrT0tY5q1vVSAi6pm1ula8qFGn4=) 2: pJxODPXI27tqZ88dovMfQWJ0n90.crl (hash: OE/aC3WZEKcmXPZCiSyz63a+Wkp51ZV8fZMV/XnX0bo=) 3: wsY5k4qqG0xYHV0_JKKO-MLN1Lc.roa (hash: f/706SBS64fiaR4N+7m+WUBpo55cQMTVv5UqqvUPZQs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1c:84:f7:84:c4:cb:d0:3b:8b:16:a4:56:8a:e1:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd Validity Not Before: Dec 17 07:00:47 2025 GMT Not After : Dec 18 07:00:47 2025 GMT Subject: CN=19005aa61a0eaa842e1f18321fb0a09b2aaa4184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f4:29:94:bf:e2:f0:52:c7:5a:e3:6c:76:bb: 1f:54:b9:c2:27:d8:fc:2c:15:80:68:0a:b3:5e:24: 15:92:1e:a1:02:0b:31:f9:a8:52:f5:8d:6f:27:ce: 9b:6f:78:e6:cb:de:a7:20:bd:4b:48:89:ed:9d:99: a1:fd:34:44:d6:29:1d:12:8e:94:d5:ec:e0:dd:ed: e8:6a:e2:12:f8:62:94:c8:e1:0c:a5:43:6b:e5:eb: c8:ad:b8:23:4c:3f:07:6e:d1:13:0e:b0:c6:fc:d7: 37:32:e5:39:ac:54:af:8c:97:1d:a4:fa:9c:99:49: 9b:39:1f:72:8e:5f:ef:44:aa:13:47:2d:ea:2d:bf: b4:ff:59:56:dc:8f:db:42:5f:24:3e:90:c3:e0:14: 1a:a0:0c:4d:24:50:3f:5b:a7:ca:5b:a0:0b:ee:fb: e9:e3:94:2d:22:36:d1:25:2b:6a:47:f4:f8:5c:ac: ee:62:44:be:86:52:28:7a:02:31:2a:e6:56:8b:2d: 42:ca:41:aa:2d:6b:ac:28:76:de:78:5b:df:a7:20: 57:f8:c6:2f:ed:58:f6:a0:f3:94:f7:86:6f:56:1b: 3d:9f:ef:55:88:7b:83:25:4a:0a:f9:0a:c2:2d:af: 68:fd:4d:60:13:c9:1d:78:32:28:66:d7:44:20:8a: 01:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:00:5A:A6:1A:0E:AA:84:2E:1F:18:32:1F:B0:A0:9B:2A:AA:41:84 X509v3 Authority Key Identifier: keyid:A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:76:f2:e3:b2:9c:52:d6:17:18:f0:6c:b5:cc:d5:2a:73:bc: 36:f1:ee:f9:34:3b:d4:28:74:3a:61:e3:62:12:fa:7f:32:43: 6b:80:76:77:fe:64:f8:71:8a:8e:ab:77:28:a4:c3:40:60:25: 59:a4:61:89:3f:57:13:ca:92:5f:6b:ac:d8:47:8c:2a:c7:bb: a3:ae:f4:1e:14:05:c4:c0:3f:79:ff:35:e5:ef:af:f0:6e:62: 49:40:15:4c:74:8f:e8:26:a2:62:43:e7:9e:ad:c6:b6:ce:b7: e7:67:b0:b7:34:2c:87:0f:15:65:c1:e1:35:a0:48:71:8c:3c: c5:27:35:1c:63:93:97:ed:f1:0d:08:48:4f:09:76:66:8f:63: 8b:24:5f:5f:34:25:b3:47:3c:70:82:9b:64:dc:a5:03:2f:38: 2a:ca:f1:75:6c:c0:12:15:23:ae:35:41:2a:31:be:a4:b7:91: f8:55:b9:1c:c7:9e:86:f9:ce:5c:f7:cb:83:a0:53:2a:ee:00: 9a:16:d1:37:ff:44:46:4d:4c:1f:55:c6:0b:3a:24:ab:32:dc: 45:69:0b:b2:77:b1:36:3a:c9:51:e4:90:0b:fe:f4:91:bd:29: 60:c8:a1:7c:e8:95:9c:6c:22:e9:15:a8:7c:c8:32:b8:74:e4: 73:08:59:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHIT3hMTL0DuLFqRWiuGJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0OWM0ZTBjZjVjOGRiYmI2YTY3Y2YxZGEyZjMxZjQxNjI3 NDlmZGQwHhcNMjUxMjE3MDcwMDQ3WhcNMjUxMjE4MDcwMDQ3WjAzMTEwLwYDVQQD EygxOTAwNWFhNjFhMGVhYTg0MmUxZjE4MzIxZmIwYTA5YjJhYWE0MTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvQplL/i8FLHWuNsdrsfVLnCJ9j8 LBWAaAqzXiQVkh6hAgsx+ahS9Y1vJ86bb3jmy96nIL1LSIntnZmh/TRE1ikdEo6U 1ezg3e3oauIS+GKUyOEMpUNr5evIrbgjTD8HbtETDrDG/Nc3MuU5rFSvjJcdpPqc mUmbOR9yjl/vRKoTRy3qLb+0/1lW3I/bQl8kPpDD4BQaoAxNJFA/W6fKW6AL7vvp 45QtIjbRJStqR/T4XKzuYkS+hlIoegIxKuZWiy1CykGqLWusKHbeeFvfpyBX+MYv 7Vj2oPOU94ZvVhs9n+9ViHuDJUoK+QrCLa9o/U1gE8kdeDIoZtdEIIoBowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBkAWqYaDqqELh8YMh+woJsqqkGEMB8GA1UdIwQY MBaAFKScTgz1yNu7amfPHaLzH0FidJ/dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEp4T0RQWEkyN3RxWjg4ZG92TWZRV0owbjkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC85ZTE5YzYtZGVmZC00NTVmLTkwYTMt ODhlZDhkNzcxN2E0LzEvcEp4T0RQWEkyN3RxWjg4ZG92TWZRV0owbjkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC85ZTE5YzYtZGVmZC00NTVmLTkwYTMtODhlZDhkNzcxN2E0 LzEvcEp4T0RQWEkyN3RxWjg4ZG92TWZRV0owbjkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACHby47Kc UtYXGPBstczVKnO8NvHu+TQ71Ch0OmHjYhL6fzJDa4B2d/5k+HGKjqt3KKTDQGAl WaRhiT9XE8qSX2us2EeMKse7o670HhQFxMA/ef815e+v8G5iSUAVTHSP6CaiYkPn nq3Gts6352ewtzQshw8VZcHhNaBIcYw8xSc1HGOTl+3xDQhITwl2Zo9jiyRfXzQl s0c8cIKbZNylAy84KsrxdWzAEhUjrjVBKjG+pLeR+FW5HMeehvnOXPfLg6BTKu4A mhbRN/9ERk1MH1XGCzokqzLcRWkLsnexNjrJUeSQC/70kb0pYMihfOiVnGwi6RWo fMgyuHTkcwhZqw== -----END CERTIFICATE-----Generated at Wed Dec 17 13:26:36 2025 by rpki-client