This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft File: pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft (raw, json) Hash identifier: PwCyYbO/awaB2yLB0NeHhJ5rWuPU0pXN5nNBI72jHS8= Subject key identifier: 33:5A:4C:64:46:CE:3D:BF:E7:20:E8:07:82:71:50:7C:4B:55:1A:4F Authority key identifier: A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF Certificate issuer: /CN=a633725cd5dd91cf190ab3a99526e898357856ef Certificate serial: 019B46267E909005CD8990D4591794429ED0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft Manifest number: 178F Signing time: Mon 22 Dec 2025 13:01:26 +0000 Manifest this update: Mon 22 Dec 2025 13:01:26 +0000 Manifest next update: Tue 23 Dec 2025 13:01:26 +0000 Files and hashes: 1: SMwI-Rnmis2eePW_F_GRyzsQVwc.roa (hash: tdRLxodAQZWX8dKW9xJOxhOQI+ocU2apdjVD9eeaSWc=) 2: jHM5InJQV_3L354P4EcDRlzLqQg.roa (hash: YagEFBVsay86X4xOyFCoWFnHQNGB7P3cKZT9Ojcer8U=) 3: p60T_9BRDnROvd9U0mIYWu3JYG4.roa (hash: CASmZCb6AimtCFSZaoN9/6dcpSXZ9rOo6eQFeAX0PBw=) 4: pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl (hash: qqoJjU+5XSwemN92psV40Fn5IitDumBy+5wwDf/iARE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 13:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:26:7e:90:90:05:cd:89:90:d4:59:17:94:42:9e:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a633725cd5dd91cf190ab3a99526e898357856ef Validity Not Before: Dec 22 13:01:26 2025 GMT Not After : Dec 23 13:01:26 2025 GMT Subject: CN=335a4c6446ce3dbfe720e8078271507c4b551a4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:50:c9:cf:74:1e:d6:31:1e:72:e9:ac:45:dc: ac:fa:42:5a:e0:49:69:f7:d0:5d:9c:a9:10:6a:55: 40:87:e8:8d:c4:7c:d6:88:84:b1:97:32:16:a5:cf: 42:7b:51:66:e9:9f:b3:b0:ea:f0:d5:87:3c:04:08: f8:24:0b:af:8b:eb:7c:82:f3:a7:78:30:19:db:be: 2a:3f:83:13:d2:1e:a0:3c:e5:1b:35:72:d8:22:a3: 3c:6b:63:4d:39:ec:d6:37:22:e8:74:8d:1b:a5:ab: 18:98:a4:e7:86:f1:32:d9:8d:a5:e0:50:bb:2f:75: bf:86:63:12:ad:68:67:08:a3:2c:86:1c:9d:d1:af: 15:ff:08:49:f6:6e:63:48:1c:9d:dd:b6:a9:94:9c: ba:c6:e4:02:b0:d6:ca:6c:c4:c3:2b:b3:f0:01:45: da:0c:3c:b5:12:5c:7b:1a:bc:64:7d:37:ce:4c:73: 01:c2:50:91:1d:72:f9:3a:52:7f:c9:0d:1f:8a:60: 9d:66:11:ae:5c:13:8f:c7:02:8e:40:4f:be:62:29: 95:87:44:fe:86:16:6d:45:94:00:6b:e1:4c:37:2b: bb:b9:c8:d4:ee:0e:bb:1b:de:d1:28:eb:d5:bd:8b: b4:55:3a:20:e6:30:49:93:ab:88:91:93:e5:4e:37: e7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:5A:4C:64:46:CE:3D:BF:E7:20:E8:07:82:71:50:7C:4B:55:1A:4F X509v3 Authority Key Identifier: keyid:A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ca:43:52:bb:2d:fb:08:ff:4b:e4:c5:a9:c4:65:d8:42:b7: fd:24:8f:2c:90:ac:25:8c:8f:44:d2:c7:28:02:3a:3e:f1:b2: e8:59:8e:89:52:78:62:f9:8c:26:12:4a:ca:ff:7d:be:3f:67: be:cb:58:a6:0d:a6:84:85:49:d3:7d:19:1a:9c:15:b4:5f:4a: 35:0c:dc:51:d9:b5:ce:6c:b7:fe:d4:08:e4:e5:b4:3b:87:0e: 42:eb:ac:6e:a9:22:0b:b2:01:10:9c:8d:06:b1:97:63:9e:8d: ad:58:0f:7e:eb:de:14:5a:dd:09:fa:72:53:56:8d:6f:85:d8: 4d:de:d9:f5:3e:70:96:3d:da:9e:9f:ec:48:1a:4e:12:23:c9: d3:84:77:24:4a:d7:66:91:8e:c9:b0:9b:7d:e4:58:8f:d0:58: 5d:97:a7:c6:c8:c8:0a:67:dd:53:59:3d:80:80:05:2e:5e:45: 96:2f:3d:eb:8c:3a:31:de:46:66:ec:8c:8f:69:1d:42:43:ab: 40:e4:0d:fc:21:b5:3d:ca:76:d6:56:3e:75:d1:d5:9a:04:58: fc:7d:a5:c5:e8:f8:03:49:7b:88:87:af:98:26:ad:77:37:57: 43:74:bd:f0:2a:f1:92:63:68:c0:b9:91:e4:23:4d:9a:be:4d: 5e:43:e0:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJn6QkAXNiZDUWReUQp7QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MzM3MjVjZDVkZDkxY2YxOTBhYjNhOTk1MjZlODk4MzU3 ODU2ZWYwHhcNMjUxMjIyMTMwMTI2WhcNMjUxMjIzMTMwMTI2WjAzMTEwLwYDVQQD EygzMzVhNGM2NDQ2Y2UzZGJmZTcyMGU4MDc4MjcxNTA3YzRiNTUxYTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1DJz3Qe1jEecumsRdys+kJa4Elp 99BdnKkQalVAh+iNxHzWiISxlzIWpc9Ce1Fm6Z+zsOrw1Yc8BAj4JAuvi+t8gvOn eDAZ274qP4MT0h6gPOUbNXLYIqM8a2NNOezWNyLodI0bpasYmKTnhvEy2Y2l4FC7 L3W/hmMSrWhnCKMshhyd0a8V/whJ9m5jSByd3baplJy6xuQCsNbKbMTDK7PwAUXa DDy1Elx7GrxkfTfOTHMBwlCRHXL5OlJ/yQ0fimCdZhGuXBOPxwKOQE++YimVh0T+ hhZtRZQAa+FMNyu7ucjU7g67G97RKOvVvYu0VTog5jBJk6uIkZPlTjfnOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDNaTGRGzj2/5yDoB4JxUHxLVRpPMB8GA1UdIwQY MBaAFKYzclzV3ZHPGQqzqZUm6Jg1eFbvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGpOeVhOWGRrYzhaQ3JPcGxTYm9tRFY0VnU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC81Yjg1NmEtYTkwZC00NzkxLTljMTAt YzBiODEzYjRlYzdlLzEvcGpOeVhOWGRrYzhaQ3JPcGxTYm9tRFY0VnU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC81Yjg1NmEtYTkwZC00NzkxLTljMTAtYzBiODEzYjRlYzdl LzEvcGpOeVhOWGRrYzhaQ3JPcGxTYm9tRFY0VnU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX8pDUrst +wj/S+TFqcRl2EK3/SSPLJCsJYyPRNLHKAI6PvGy6FmOiVJ4YvmMJhJKyv99vj9n vstYpg2mhIVJ030ZGpwVtF9KNQzcUdm1zmy3/tQI5OW0O4cOQuusbqkiC7IBEJyN BrGXY56NrVgPfuveFFrdCfpyU1aNb4XYTd7Z9T5wlj3anp/sSBpOEiPJ04R3JErX ZpGOybCbfeRYj9BYXZenxsjICmfdU1k9gIAFLl5Fli8964w6Md5GZuyMj2kdQkOr QOQN/CG1Pcp21lY+ddHVmgRY/H2lxej4A0l7iIevmCatdzdXQ3S98CrxkmNowLmR 5CNNmr5NXkPgwA== -----END CERTIFICATE-----Generated at Mon Dec 22 18:58:17 2025 by rpki-client