This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft File: PJMfJlqEcdMs6ESdnhhvDccRSno.mft (raw, json) Hash identifier: y/OvpQav6tuIJSYYg2n/D5RqKE0zzsyWTCsWrcrCTUw= Subject key identifier: 3F:7A:63:01:CA:06:43:95:CC:29:5B:BA:2D:01:D4:D7:9D:B8:9F:5D Authority key identifier: 3C:93:1F:26:5A:84:71:D3:2C:E8:44:9D:9E:18:6F:0D:C7:11:4A:7A Certificate issuer: /CN=3c931f265a8471d32ce8449d9e186f0dc7114a7a Certificate serial: 019B6F5903D6C3253DCF7AD988B7D0DEFDBF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft Manifest number: 14A0 Signing time: Tue 30 Dec 2025 13:01:03 +0000 Manifest this update: Tue 30 Dec 2025 13:01:03 +0000 Manifest next update: Wed 31 Dec 2025 13:01:03 +0000 Files and hashes: 1: PJMfJlqEcdMs6ESdnhhvDccRSno.crl (hash: By2gDAqO85skGK19C/fPO3To1/7HinC3EnIl3DFpUtA=) 2: PkJhyt9pT1uGvNEkXULDRnIoKM8.roa (hash: GnXTwsBZIxIhJPycvbpoXf49+cV9ppIdazG5Z3GlNBg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.crl rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 13:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:59:03:d6:c3:25:3d:cf:7a:d9:88:b7:d0:de:fd:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c931f265a8471d32ce8449d9e186f0dc7114a7a Validity Not Before: Dec 30 13:01:03 2025 GMT Not After : Dec 31 13:01:03 2025 GMT Subject: CN=3f7a6301ca064395cc295bba2d01d4d79db89f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:6e:56:fa:17:2d:d9:5d:79:6f:96:b3:ad:5d: 20:84:85:f0:93:1d:c1:3c:3a:2e:8d:cc:35:2f:f7: 46:a3:6c:71:6e:88:3a:f2:86:86:07:a3:f1:10:1e: 67:0e:3d:3b:8d:ec:40:53:a1:9e:ee:a8:4b:f7:ba: 69:b6:b3:32:94:f7:9a:12:e8:af:b0:80:ee:8a:82: 51:e8:89:17:54:1e:e8:aa:4a:cd:ee:21:81:2b:7f: 9d:0f:cc:5c:fd:e1:7e:0c:c3:74:49:2a:1a:99:8c: 93:ee:14:90:60:31:13:85:b3:ae:0d:92:5f:8d:d4: 33:c6:d7:0f:38:2e:db:4d:74:13:05:e6:81:83:75: 59:d3:6c:c9:75:d8:d0:9b:f6:14:e9:a4:62:35:2f: a5:6b:0c:52:11:ed:9a:aa:5c:2b:99:8e:2f:8a:46: b5:2b:78:1b:98:5f:b0:51:de:26:ad:0e:71:57:39: 22:38:34:99:e0:40:7f:08:f9:19:7b:1e:f5:fe:b5: 52:37:8f:be:24:06:d8:b3:cf:9e:e5:02:fb:59:a3: 83:06:e2:3d:16:de:5c:e5:7b:63:b4:e3:5a:8e:62: aa:b1:4e:e4:8a:e1:8d:7f:38:bc:f6:bd:bb:c0:df: ae:40:96:81:2d:8a:20:74:7a:71:7d:61:8c:2d:b2: 9f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:7A:63:01:CA:06:43:95:CC:29:5B:BA:2D:01:D4:D7:9D:B8:9F:5D X509v3 Authority Key Identifier: keyid:3C:93:1F:26:5A:84:71:D3:2C:E8:44:9D:9E:18:6F:0D:C7:11:4A:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:09:8f:4e:c3:9b:60:bf:ca:9e:47:97:f4:30:b4:0d:9f:82: e3:23:90:7d:40:9d:02:32:ac:16:a3:cc:b0:1e:1e:01:9f:2c: 7d:60:bf:b8:0d:61:71:72:86:2d:17:27:de:e8:0b:ec:10:b0: e0:7d:20:52:b2:cf:66:e2:a0:f4:30:59:e6:be:26:f9:0c:2f: c7:5d:77:4f:80:12:7a:ef:4b:f7:21:c7:b6:6c:61:d9:43:99: cf:b0:52:08:44:4d:95:7b:f1:e2:d2:a3:0b:0c:ab:46:e7:9d: 2e:7b:e4:42:df:fd:d6:b3:80:b1:ee:45:9b:7d:83:8f:66:73: 7f:2c:4e:4a:55:b9:5e:ec:20:cb:a6:06:cc:3a:0b:24:e6:9a: 8c:03:9d:8c:4d:e8:4d:91:dc:3c:88:de:3c:cf:ce:f1:80:1e: be:d5:1f:38:d8:f7:3b:70:99:5c:03:9a:06:e7:09:f4:19:f8: b7:4c:c9:b5:aa:0e:2a:20:c4:f1:32:ed:1a:24:a6:47:b8:d5: 52:4d:1c:ff:f2:90:06:a8:53:3b:36:39:28:fd:4d:ca:5a:43: 89:e9:b7:79:90:2a:42:ba:04:15:14:95:48:7b:85:09:3c:66: 59:f5:63:77:a0:a1:cb:15:d4:02:f5:0c:a9:30:22:bf:1c:d9: c9:c9:13:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtvWQPWwyU9z3rZiLfQ3v2/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjOTMxZjI2NWE4NDcxZDMyY2U4NDQ5ZDllMTg2ZjBkYzcx MTRhN2EwHhcNMjUxMjMwMTMwMTAzWhcNMjUxMjMxMTMwMTAzWjAzMTEwLwYDVQQD EygzZjdhNjMwMWNhMDY0Mzk1Y2MyOTViYmEyZDAxZDRkNzlkYjg5ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6G5W+hct2V15b5azrV0ghIXwkx3B PDoujcw1L/dGo2xxbog68oaGB6PxEB5nDj07jexAU6Ge7qhL97pptrMylPeaEuiv sIDuioJR6IkXVB7oqkrN7iGBK3+dD8xc/eF+DMN0SSoamYyT7hSQYDEThbOuDZJf jdQzxtcPOC7bTXQTBeaBg3VZ02zJddjQm/YU6aRiNS+lawxSEe2aqlwrmY4vika1 K3gbmF+wUd4mrQ5xVzkiODSZ4EB/CPkZex71/rVSN4++JAbYs8+e5QL7WaODBuI9 Ft5c5XtjtONajmKqsU7kiuGNfzi89r27wN+uQJaBLYogdHpxfWGMLbKfoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD96YwHKBkOVzClbui0B1NeduJ9dMB8GA1UdIwQY MBaAFDyTHyZahHHTLOhEnZ4Ybw3HEUp6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEpNZkpscUVjZE1zNkVTZG5oaHZEY2NSU25vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9iNTBiZGEtNjg5OS00ZWVmLWEyMzEt NWUwMDI2MzAzNjI5LzEvUEpNZkpscUVjZE1zNkVTZG5oaHZEY2NSU25vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9iNTBiZGEtNjg5OS00ZWVmLWEyMzEtNWUwMDI2MzAzNjI5 LzEvUEpNZkpscUVjZE1zNkVTZG5oaHZEY2NSU25vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASAmPTsOb YL/KnkeX9DC0DZ+C4yOQfUCdAjKsFqPMsB4eAZ8sfWC/uA1hcXKGLRcn3ugL7BCw 4H0gUrLPZuKg9DBZ5r4m+Qwvx113T4ASeu9L9yHHtmxh2UOZz7BSCERNlXvx4tKj CwyrRuedLnvkQt/91rOAse5Fm32Dj2ZzfyxOSlW5Xuwgy6YGzDoLJOaajAOdjE3o TZHcPIjePM/O8YAevtUfONj3O3CZXAOaBucJ9Bn4t0zJtaoOKiDE8TLtGiSmR7jV Uk0c//KQBqhTOzY5KP1NylpDiem3eZAqQroEFRSVSHuFCTxmWfVjd6ChyxXUAvUM qTAivxzZyckTEg== -----END CERTIFICATE-----Generated at Tue Dec 30 16:27:16 2025 by rpki-client