This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft File: pqjzQ2_YPor2EPIWgImW6QrKx10.mft (raw, json) Hash identifier: LvrH3f0GMKHW4DF8FqDeshqfs2Y91XE0COh37eDtwvE= Subject key identifier: 51:3F:B0:76:B6:93:FB:93:B2:40:53:5B:C4:15:51:D3:BD:7A:8B:BD Authority key identifier: A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D Certificate issuer: /CN=a6a8f3436fd83e8af610f216808996e90acac75d Certificate serial: 019B35D71466A9550A7AFF1DAAA4DB9386C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft Manifest number: 0341 Signing time: Fri 19 Dec 2025 09:00:46 +0000 Manifest this update: Fri 19 Dec 2025 09:00:46 +0000 Manifest next update: Sat 20 Dec 2025 09:00:46 +0000 Files and hashes: 1: 02-uNoM21bjmlG-lE4agOekpdKo.roa (hash: i3b0MZOpH3uEgzpNG0t5Zhkr23yS2t5mSf33Dy8+wNQ=) 2: pqjzQ2_YPor2EPIWgImW6QrKx10.crl (hash: CTopN6eSKrQQKITbCWd+JjZSf7EPF6o1DA170j1KXj4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:14:66:a9:55:0a:7a:ff:1d:aa:a4:db:93:86:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6a8f3436fd83e8af610f216808996e90acac75d Validity Not Before: Dec 19 09:00:46 2025 GMT Not After : Dec 20 09:00:46 2025 GMT Subject: CN=513fb076b693fb93b240535bc41551d3bd7a8bbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3a:9b:55:94:4e:bb:2e:d7:3e:81:db:1d:6c: 38:f4:a6:66:28:2d:5a:49:f3:90:e4:00:26:bb:7e: 3d:60:c1:a4:c7:a8:ab:0f:96:86:61:37:07:9c:e5: d3:34:18:16:fc:3a:3f:83:3d:0c:73:a6:e8:bc:b9: 9e:d3:cb:1d:46:1d:24:50:8a:e7:ec:3d:7a:fd:00: e4:91:39:2c:e9:c6:7b:54:f8:64:c1:ac:6d:f3:20: 2a:7e:24:31:8e:b7:42:b9:96:a0:ec:e1:2c:d6:a2: f9:11:a0:28:4a:8b:70:4c:44:17:96:0c:7d:de:8f: bf:1d:62:dc:d6:b8:e1:5c:34:ce:18:7d:8b:8b:8e: 9e:7b:00:de:92:5c:3e:c1:3b:78:de:87:17:ed:22: 95:88:6b:6a:52:01:70:1c:df:0b:bc:c7:32:6f:18: b6:9f:ce:c0:9a:ce:75:f2:f0:be:72:28:80:64:af: 40:02:c4:ac:45:14:15:24:63:ae:70:ae:e8:2d:04: bf:71:fa:c0:4c:63:ba:68:5c:7f:1e:38:23:67:1e: 28:7c:29:3f:2c:19:2f:ff:56:76:c4:75:8b:b1:a8: d7:1b:0c:7b:50:4d:42:64:a1:18:c4:b8:a4:4f:30: 99:bc:3d:b4:fc:cd:d0:82:2f:b2:95:ae:7e:1e:00: ba:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:3F:B0:76:B6:93:FB:93:B2:40:53:5B:C4:15:51:D3:BD:7A:8B:BD X509v3 Authority Key Identifier: keyid:A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:9a:24:2e:9b:5a:7b:cc:f6:e6:21:ee:c1:f3:cc:58:6f:d5: f0:b6:dd:08:d9:e1:6d:32:7c:bb:f6:05:96:5b:14:93:0c:4a: 3b:26:d9:36:f1:87:12:63:0a:df:6c:67:d3:f8:cf:85:44:86: 08:c7:77:bd:2d:6f:2c:d0:91:cd:aa:50:84:94:d4:d4:b5:ca: ec:c1:4d:f1:84:0b:f2:9d:cd:19:1b:b8:5e:23:a2:88:c3:5b: 81:46:ea:e2:11:64:01:0c:10:0d:8f:90:f1:b1:07:db:e1:93: 45:ac:a4:a6:94:1a:f3:ef:5a:6f:bc:39:32:87:81:84:b5:e4: e4:ef:55:a7:56:f8:f1:28:c5:a5:9c:0f:55:57:72:03:fc:23: c8:e2:5b:47:ac:c0:19:71:54:82:2c:74:a8:a7:2c:e2:ee:e5: e7:5a:43:ce:ed:5e:6a:11:56:cc:24:21:97:5e:c3:55:5b:9a: f6:c7:90:b0:27:19:81:64:ce:9c:72:bd:1f:50:d5:ca:12:6f: 82:9f:4d:eb:8e:9e:15:0b:a6:d0:ed:4b:b1:ad:89:2f:1f:77: 93:ab:20:aa:60:d6:45:14:5d:1b:b7:e4:25:39:ba:ce:c7:de: b1:69:81:3b:9e:58:19:84:2b:32:a7:30:0c:a9:93:8a:05:b1: 64:eb:25:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs11xRmqVUKev8dqqTbk4bIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2YThmMzQzNmZkODNlOGFmNjEwZjIxNjgwODk5NmU5MGFj YWM3NWQwHhcNMjUxMjE5MDkwMDQ2WhcNMjUxMjIwMDkwMDQ2WjAzMTEwLwYDVQQD Eyg1MTNmYjA3NmI2OTNmYjkzYjI0MDUzNWJjNDE1NTFkM2JkN2E4YmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTqbVZROuy7XPoHbHWw49KZmKC1a SfOQ5AAmu349YMGkx6irD5aGYTcHnOXTNBgW/Do/gz0Mc6bovLme08sdRh0kUIrn 7D16/QDkkTks6cZ7VPhkwaxt8yAqfiQxjrdCuZag7OEs1qL5EaAoSotwTEQXlgx9 3o+/HWLc1rjhXDTOGH2Li46eewDeklw+wTt43ocX7SKViGtqUgFwHN8LvMcybxi2 n87Ams518vC+ciiAZK9AAsSsRRQVJGOucK7oLQS/cfrATGO6aFx/HjgjZx4ofCk/ LBkv/1Z2xHWLsajXGwx7UE1CZKEYxLikTzCZvD20/M3Qgi+yla5+HgC6OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFE/sHa2k/uTskBTW8QVUdO9eou9MB8GA1UdIwQY MBaAFKao80Nv2D6K9hDyFoCJlukKysddMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHFqelEyX1lQb3IyRVBJV2dJbVc2UXJLeDEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi81YjE2NTctYWJmMC00ZDM2LWE4OTIt YWJlNWM4ZTJiYWQ2LzEvcHFqelEyX1lQb3IyRVBJV2dJbVc2UXJLeDEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi81YjE2NTctYWJmMC00ZDM2LWE4OTItYWJlNWM4ZTJiYWQ2 LzEvcHFqelEyX1lQb3IyRVBJV2dJbVc2UXJLeDEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjZokLpta e8z25iHuwfPMWG/V8LbdCNnhbTJ8u/YFllsUkwxKOybZNvGHEmMK32xn0/jPhUSG CMd3vS1vLNCRzapQhJTU1LXK7MFN8YQL8p3NGRu4XiOiiMNbgUbq4hFkAQwQDY+Q 8bEH2+GTRaykppQa8+9ab7w5MoeBhLXk5O9Vp1b48SjFpZwPVVdyA/wjyOJbR6zA GXFUgix0qKcs4u7l51pDzu1eahFWzCQhl17DVVua9seQsCcZgWTOnHK9H1DVyhJv gp9N646eFQum0O1Lsa2JLx93k6sgqmDWRRRdG7fkJTm6zsfesWmBO55YGYQrMqcw DKmTigWxZOslAg== -----END CERTIFICATE-----Generated at Fri Dec 19 10:20:11 2025 by rpki-client