This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft File: pJuD9b3hodyT3mlHaDfp46N3l68.mft (raw, json) Hash identifier: OBcTgEypACVuug2Eke0keJkEdU7OWQAsoH8s0poEsiM= Subject key identifier: 72:B8:FA:12:95:E5:7B:9F:FE:D3:E5:F2:09:C5:3C:BF:B9:BA:C2:9C Authority key identifier: A4:9B:83:F5:BD:E1:A1:DC:93:DE:69:47:68:37:E9:E3:A3:77:97:AF Certificate issuer: /CN=a49b83f5bde1a1dc93de69476837e9e3a37797af Certificate serial: 019B34FB1D1326689665DF6A03F18826B656 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 05:00:30 +0000 Manifest this update: Fri 19 Dec 2025 05:00:30 +0000 Manifest next update: Sat 20 Dec 2025 05:00:30 +0000 Files and hashes: 1: ivIvX3ybfrEo6-_TJQtybec7lto.roa (hash: AYMx34pgwR2VT7P45blq8Gv6Ax5FOOQvXf8mR5QOiWI=) 2: pJuD9b3hodyT3mlHaDfp46N3l68.crl (hash: MjXt9tI1LLAdETzGD/gRKdy9NIEmBEK8l+UGLIEJsF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 05:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:1d:13:26:68:96:65:df:6a:03:f1:88:26:b6:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a49b83f5bde1a1dc93de69476837e9e3a37797af Validity Not Before: Dec 19 05:00:30 2025 GMT Not After : Dec 20 05:00:30 2025 GMT Subject: CN=72b8fa1295e57b9ffed3e5f209c53cbfb9bac29c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d6:ed:d7:0a:11:68:21:f8:7e:0a:a0:fd:e4: f2:ff:98:29:ff:44:25:b5:2d:33:21:77:b4:ce:9a: bd:a4:af:26:d5:63:e1:dc:04:88:90:41:9f:1d:48: 4e:4d:68:e5:5f:89:4a:3f:3c:71:7b:a2:81:6b:ba: c7:76:9f:41:5f:4a:f0:e2:5d:c5:06:dd:fb:48:58: 3d:9c:04:69:7d:f1:c0:e1:c0:be:6e:b8:6e:45:86: bd:17:32:a7:be:99:4a:1f:8f:d6:24:93:2b:f5:b9: 41:44:ce:7b:af:fc:04:91:b6:a9:e0:f4:35:91:08: 21:b5:70:9b:2f:1d:92:8a:3a:08:7d:dc:8f:f6:4d: cd:9e:ac:af:50:25:74:f9:6a:9f:5a:03:18:9e:27: ff:b1:25:59:99:92:ce:b3:4f:a9:56:92:6e:99:91: ad:23:bc:bf:2f:93:a9:bd:2e:e3:dc:7f:c9:e5:28: 31:80:2c:d8:95:36:04:76:6b:f5:8d:55:f2:04:5a: 64:7e:ff:1d:3a:b5:c6:b6:27:dc:ab:b1:89:11:62: b7:e4:1c:ee:c9:2c:be:bf:c9:e2:c2:20:90:39:5e: 6a:04:60:2e:e9:36:33:ec:4a:4d:19:c3:24:ec:40: bd:42:dd:2f:30:62:25:8d:29:14:60:32:a0:e7:c2: a4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:B8:FA:12:95:E5:7B:9F:FE:D3:E5:F2:09:C5:3C:BF:B9:BA:C2:9C X509v3 Authority Key Identifier: keyid:A4:9B:83:F5:BD:E1:A1:DC:93:DE:69:47:68:37:E9:E3:A3:77:97:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:b1:a5:5b:11:5f:e7:7a:ee:9e:15:ce:a7:18:29:9d:76:95: 71:b6:4d:1c:a1:27:9c:50:79:f5:5c:a6:2a:05:5e:59:78:8b: 43:4f:55:16:19:01:df:40:ab:64:f5:6a:a4:b6:6a:90:eb:3f: ec:db:e1:60:7f:3c:ee:24:86:b6:f2:e8:4f:3d:7d:a7:31:41: 88:83:89:6e:a6:05:26:0e:6d:69:5e:b3:d2:6f:b4:f6:b2:ad: ca:5e:30:de:a8:4c:ca:92:97:9a:86:46:38:12:be:16:94:86: 3b:d6:23:a9:6c:21:6a:ee:11:93:96:c0:e2:c1:4b:39:e9:5f: b1:e0:9a:d4:52:47:c6:7a:b0:46:a9:27:00:2b:8d:00:c7:42: 4c:eb:36:63:b4:20:44:07:bc:87:9a:46:f2:31:fe:51:80:ce: 5c:bb:38:a2:26:1d:90:5b:ff:19:08:30:41:e5:1f:e5:50:b9: 4b:dc:a8:fa:9d:d8:ce:18:4c:ee:fd:b1:0e:a0:c6:19:ec:1c: ec:91:c9:f3:23:e6:67:a7:c9:1b:05:b1:90:fd:4a:64:a7:52: 51:81:2a:37:fb:54:ed:0b:b8:c1:2a:3d:52:a0:af:bb:c1:69: 97:5e:c7:d6:71:9c:5a:dc:b2:c3:db:4f:83:18:c9:71:05:29: 52:63:b8:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+x0TJmiWZd9qA/GIJrZWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0OWI4M2Y1YmRlMWExZGM5M2RlNjk0NzY4MzdlOWUzYTM3 Nzk3YWYwHhcNMjUxMjE5MDUwMDMwWhcNMjUxMjIwMDUwMDMwWjAzMTEwLwYDVQQD Eyg3MmI4ZmExMjk1ZTU3YjlmZmVkM2U1ZjIwOWM1M2NiZmI5YmFjMjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9bt1woRaCH4fgqg/eTy/5gp/0Ql tS0zIXe0zpq9pK8m1WPh3ASIkEGfHUhOTWjlX4lKPzxxe6KBa7rHdp9BX0rw4l3F Bt37SFg9nARpffHA4cC+brhuRYa9FzKnvplKH4/WJJMr9blBRM57r/wEkbap4PQ1 kQghtXCbLx2SijoIfdyP9k3NnqyvUCV0+WqfWgMYnif/sSVZmZLOs0+pVpJumZGt I7y/L5OpvS7j3H/J5SgxgCzYlTYEdmv1jVXyBFpkfv8dOrXGtifcq7GJEWK35Bzu ySy+v8niwiCQOV5qBGAu6TYz7EpNGcMk7EC9Qt0vMGIljSkUYDKg58KkowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHK4+hKV5Xuf/tPl8gnFPL+5usKcMB8GA1UdIwQY MBaAFKSbg/W94aHck95pR2g36eOjd5evMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEp1RDliM2hvZHlUM21sSGFEZnA0Nk4zbDY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9hZDFjNjktY2U1Ni00ZWRhLTg3ZWEt OTg3NzE5ZWU2YTBjLzEvcEp1RDliM2hvZHlUM21sSGFEZnA0Nk4zbDY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9hZDFjNjktY2U1Ni00ZWRhLTg3ZWEtOTg3NzE5ZWU2YTBj LzEvcEp1RDliM2hvZHlUM21sSGFEZnA0Nk4zbDY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR7GlWxFf 53runhXOpxgpnXaVcbZNHKEnnFB59VymKgVeWXiLQ09VFhkB30CrZPVqpLZqkOs/ 7NvhYH887iSGtvLoTz19pzFBiIOJbqYFJg5taV6z0m+09rKtyl4w3qhMypKXmoZG OBK+FpSGO9YjqWwhau4Rk5bA4sFLOelfseCa1FJHxnqwRqknACuNAMdCTOs2Y7Qg RAe8h5pG8jH+UYDOXLs4oiYdkFv/GQgwQeUf5VC5S9yo+p3YzhhM7v2xDqDGGewc 7JHJ8yPmZ6fJGwWxkP1KZKdSUYEqN/tU7Qu4wSo9UqCvu8Fpl17H1nGcWtyyw9tP gxjJcQUpUmO4RQ== -----END CERTIFICATE-----Generated at Fri Dec 19 09:58:23 2025 by rpki-client