This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft File: pJuD9b3hodyT3mlHaDfp46N3l68.mft (raw, json) Hash identifier: H/w3BLuN3qjyl+LPYlEwau3r37Ld4aXcV24PVLn9zPA= Subject key identifier: F4:9D:D3:B5:43:A1:7A:F9:36:C8:47:F4:2D:57:D1:D1:D0:2A:1D:FD Authority key identifier: A4:9B:83:F5:BD:E1:A1:DC:93:DE:69:47:68:37:E9:E3:A3:77:97:AF Certificate issuer: /CN=a49b83f5bde1a1dc93de69476837e9e3a37797af Certificate serial: 019B2F2FF23F193B686013DD7E8163AAB612 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 02:00:29 +0000 Manifest this update: Thu 18 Dec 2025 02:00:29 +0000 Manifest next update: Fri 19 Dec 2025 02:00:29 +0000 Files and hashes: 1: ivIvX3ybfrEo6-_TJQtybec7lto.roa (hash: AYMx34pgwR2VT7P45blq8Gv6Ax5FOOQvXf8mR5QOiWI=) 2: pJuD9b3hodyT3mlHaDfp46N3l68.crl (hash: vUc/+wGwZSw3ov5MZCQdtEQMINn/9y2kHVzZtoeJAhA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:2f:f2:3f:19:3b:68:60:13:dd:7e:81:63:aa:b6:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a49b83f5bde1a1dc93de69476837e9e3a37797af Validity Not Before: Dec 18 02:00:29 2025 GMT Not After : Dec 19 02:00:29 2025 GMT Subject: CN=f49dd3b543a17af936c847f42d57d1d1d02a1dfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:81:cd:d3:a4:14:e0:ea:9f:75:00:b8:36:cc: da:e6:8e:2a:ca:54:ca:62:ad:d8:37:6e:bf:3e:f3: 0b:63:93:7d:4b:51:d5:29:de:f7:9a:0d:27:33:6d: 60:ea:ff:85:90:b4:b0:f4:d3:de:7e:06:2b:32:b2: aa:e3:ba:6c:54:aa:54:3a:64:b3:4e:a3:eb:93:a5: f5:81:b1:90:76:29:d0:ed:c4:a1:c9:bc:79:89:ab: cc:88:48:37:40:6f:00:df:36:f7:a3:6a:38:f3:5d: fe:1b:df:60:bc:d4:2b:72:a2:0a:49:b6:70:67:cd: 73:23:a2:60:ef:b2:e8:32:ad:c2:2a:f5:f2:d5:4b: 4e:f2:3d:a0:1b:8e:bf:d7:3f:0c:bd:d4:50:d4:bf: 43:9e:59:ba:b7:62:7b:bd:bc:ca:7c:62:43:70:9b: 43:b6:e8:8f:62:49:d5:48:dc:b9:61:73:59:ed:a3: ec:48:42:a0:87:1d:cb:92:67:f3:63:19:61:0c:dc: 63:fa:37:ca:85:07:9c:ce:3a:67:9a:b4:24:ec:25: 91:d6:2a:27:69:68:08:89:3c:84:4e:60:3c:94:a4: 59:dc:88:f0:ac:e2:e9:9f:af:de:5f:3f:75:ae:07: 42:0d:50:c8:08:5d:12:79:8d:79:18:29:57:e6:b8: b8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:9D:D3:B5:43:A1:7A:F9:36:C8:47:F4:2D:57:D1:D1:D0:2A:1D:FD X509v3 Authority Key Identifier: keyid:A4:9B:83:F5:BD:E1:A1:DC:93:DE:69:47:68:37:E9:E3:A3:77:97:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:14:11:bc:3b:b4:94:ba:d4:56:2e:f5:07:3f:90:f5:3d:cf: f1:41:64:d0:9f:7a:65:e2:34:ca:f5:e4:35:99:a7:ef:06:82: e7:11:cf:84:eb:68:f2:75:41:0f:60:c2:d6:68:ca:49:50:a8: 14:fa:ca:42:fe:f4:3e:ce:b4:6c:dd:2d:08:f7:de:3d:1a:f4: 48:26:7f:2f:b9:cf:9b:58:26:58:c2:40:13:6d:1b:b2:1a:07: 78:92:4a:50:66:d4:f4:78:bb:23:fb:7e:90:c6:b4:0f:8b:e2: 3b:e3:e3:38:1e:f1:0e:bf:5d:5c:be:95:cc:48:9b:e1:a7:2c: 6f:28:d3:37:76:92:b3:45:fd:57:22:e1:09:ad:eb:e9:e7:ed: be:6d:7a:a2:25:57:73:d3:44:69:db:d2:0b:bc:1c:1e:09:c4: 13:9d:25:b6:58:67:1c:3a:01:96:cb:bc:5a:d6:21:08:14:4c: c1:5f:08:56:a9:29:98:75:56:13:11:59:9d:d7:44:42:44:90: 67:e5:0d:f3:a0:8c:78:e0:9d:c6:33:0e:1f:b9:3f:c4:b3:f1: 76:db:cb:aa:9a:28:84:74:53:73:6e:24:41:6f:72:08:fd:95: 4c:ed:7f:4e:a7:82:95:e8:a2:d1:9f:49:4c:40:5e:ed:99:c8: 38:ae:ca:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvL/I/GTtoYBPdfoFjqrYSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0OWI4M2Y1YmRlMWExZGM5M2RlNjk0NzY4MzdlOWUzYTM3 Nzk3YWYwHhcNMjUxMjE4MDIwMDI5WhcNMjUxMjE5MDIwMDI5WjAzMTEwLwYDVQQD EyhmNDlkZDNiNTQzYTE3YWY5MzZjODQ3ZjQyZDU3ZDFkMWQwMmExZGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoHN06QU4OqfdQC4Nsza5o4qylTK Yq3YN26/PvMLY5N9S1HVKd73mg0nM21g6v+FkLSw9NPefgYrMrKq47psVKpUOmSz TqPrk6X1gbGQdinQ7cShybx5iavMiEg3QG8A3zb3o2o4813+G99gvNQrcqIKSbZw Z81zI6Jg77LoMq3CKvXy1UtO8j2gG46/1z8MvdRQ1L9Dnlm6t2J7vbzKfGJDcJtD tuiPYknVSNy5YXNZ7aPsSEKghx3LkmfzYxlhDNxj+jfKhQeczjpnmrQk7CWR1ion aWgIiTyETmA8lKRZ3IjwrOLpn6/eXz91rgdCDVDICF0SeY15GClX5ri4UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPSd07VDoXr5NshH9C1X0dHQKh39MB8GA1UdIwQY MBaAFKSbg/W94aHck95pR2g36eOjd5evMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEp1RDliM2hvZHlUM21sSGFEZnA0Nk4zbDY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9hZDFjNjktY2U1Ni00ZWRhLTg3ZWEt OTg3NzE5ZWU2YTBjLzEvcEp1RDliM2hvZHlUM21sSGFEZnA0Nk4zbDY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9hZDFjNjktY2U1Ni00ZWRhLTg3ZWEtOTg3NzE5ZWU2YTBj LzEvcEp1RDliM2hvZHlUM21sSGFEZnA0Nk4zbDY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAhQRvDu0 lLrUVi71Bz+Q9T3P8UFk0J96ZeI0yvXkNZmn7waC5xHPhOto8nVBD2DC1mjKSVCo FPrKQv70Ps60bN0tCPfePRr0SCZ/L7nPm1gmWMJAE20bshoHeJJKUGbU9Hi7I/t+ kMa0D4viO+PjOB7xDr9dXL6VzEib4acsbyjTN3aSs0X9VyLhCa3r6eftvm16oiVX c9NEadvSC7wcHgnEE50ltlhnHDoBlsu8WtYhCBRMwV8IVqkpmHVWExFZnddEQkSQ Z+UN86CMeOCdxjMOH7k/xLPxdtvLqpoohHRTc24kQW9yCP2VTO1/TqeCleii0Z9J TEBe7ZnIOK7K7A== -----END CERTIFICATE-----Generated at Thu Dec 18 06:57:06 2025 by rpki-client