This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft File: Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft (raw, json) Hash identifier: 0Nnhg4AdmXC4ko8kxbja+Y11HO706iTueTc0k5yIM7w= Subject key identifier: CB:F7:C2:68:64:3D:FC:09:98:A9:38:6B:49:ED:E2:36:A3:1D:AD:93 Authority key identifier: 3E:3D:1C:21:A7:7A:0B:0F:7F:0C:E6:63:3E:13:E0:C5:7B:ED:B0:8B Certificate issuer: /CN=3e3d1c21a77a0b0f7f0ce6633e13e0c57bedb08b Certificate serial: 019B4AA779C03F200CB2FA75A095FF49FDD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft Manifest number: 14C7 Signing time: Tue 23 Dec 2025 10:00:48 +0000 Manifest this update: Tue 23 Dec 2025 10:00:48 +0000 Manifest next update: Wed 24 Dec 2025 10:00:48 +0000 Files and hashes: 1: Gw9xXGUQ6gOLxmD3uhPbHUjxqdY.roa (hash: iN7hsvC2N6zVGHZJzHIWk+L6xeaF90AdvlMynpLLSsQ=) 2: Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl (hash: x850w6JYNX+PsI+B2v4fkcpCPFOiKe7LR56i8YFdzdA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 10:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:a7:79:c0:3f:20:0c:b2:fa:75:a0:95:ff:49:fd:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e3d1c21a77a0b0f7f0ce6633e13e0c57bedb08b Validity Not Before: Dec 23 10:00:48 2025 GMT Not After : Dec 24 10:00:48 2025 GMT Subject: CN=cbf7c268643dfc0998a9386b49ede236a31dad93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e7:f4:3a:ed:7e:2a:ce:51:1c:e0:ca:4e:ac: 72:95:d2:64:50:e4:bc:72:d8:a3:d6:ab:51:a6:65: 50:88:60:60:b6:7e:b4:b9:00:38:1d:6d:c5:14:1c: 15:56:fd:3c:b1:b4:5c:b8:5d:e0:ca:56:0c:97:bb: d1:1f:c5:02:5b:f2:e8:69:d1:3c:ac:ac:7e:af:6b: b9:a4:b9:d1:a8:63:c0:0b:1d:62:ee:8d:2a:b1:2f: d1:68:cc:05:22:be:dc:26:f4:27:06:0f:f7:66:35: 4b:bd:fe:1a:7c:d9:b1:7a:5c:18:06:18:a2:df:99: 15:4a:42:12:6b:f9:da:72:31:b3:02:0c:70:76:49: ff:b6:0b:7c:b0:8d:df:e2:7e:a8:96:59:dd:2c:ee: 42:29:3e:14:5e:59:80:89:5e:8f:62:0f:c7:38:b9: d7:d4:c3:4c:25:1f:dc:b5:38:b6:19:75:b2:bc:6e: 8f:63:68:b4:a4:1b:ac:25:2b:e9:2d:d1:05:94:cf: 20:d4:dc:0f:9a:ff:21:c8:9e:1d:a8:0e:05:62:74: 46:50:b2:25:63:ac:4a:87:90:19:bc:9d:73:75:ff: 8e:2f:cc:d8:a0:b3:0f:9a:01:80:6a:12:46:18:60: b0:c0:2a:5e:8e:d7:f8:df:8d:92:e1:34:99:92:f7: 30:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F7:C2:68:64:3D:FC:09:98:A9:38:6B:49:ED:E2:36:A3:1D:AD:93 X509v3 Authority Key Identifier: keyid:3E:3D:1C:21:A7:7A:0B:0F:7F:0C:E6:63:3E:13:E0:C5:7B:ED:B0:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:a5:06:ce:47:32:b1:26:e1:29:c2:88:86:f8:5a:a9:52:a9: 08:41:00:d5:13:f7:e9:d7:61:ec:af:8c:44:5a:12:34:0c:6e: 4c:ae:91:81:cf:e4:7a:1a:0b:64:12:4e:22:1a:84:51:39:dc: a5:50:1e:1c:5b:c6:07:6a:43:2e:09:49:91:d4:e0:89:d4:51: 68:d1:a6:ac:a8:71:e3:b5:0e:06:7d:fd:4a:7a:1e:0b:a1:70: 3f:b7:d8:5c:30:41:9d:b8:da:dc:7b:32:b7:48:45:af:f1:b2: a0:a2:5b:b2:5d:e1:a9:26:ac:69:0f:c2:a3:ba:b5:5a:e7:be: ff:96:bb:e3:bb:b8:3d:2c:08:f6:60:41:93:1b:1b:64:e5:c9: fd:e9:d0:a2:ac:d4:22:c2:0b:82:55:e7:8e:ab:cb:f7:78:12: 34:8f:4a:c6:df:e1:6d:0b:a1:c6:8d:82:49:34:1d:b4:84:c6: 8b:5e:4e:d2:fa:2a:06:07:15:69:69:44:66:7b:9a:cf:8b:9c: e5:7a:bb:1a:c3:65:c8:27:4e:f6:95:45:90:65:01:44:11:39: a4:f8:18:25:34:ad:88:c1:e0:56:a2:47:a7:36:3d:52:23:fb: b4:ab:1b:24:2d:2f:05:d7:96:c9:97:02:96:f1:d5:de:f8:3a: 86:8a:18:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKp3nAPyAMsvp1oJX/Sf3TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlM2QxYzIxYTc3YTBiMGY3ZjBjZTY2MzNlMTNlMGM1N2Jl ZGIwOGIwHhcNMjUxMjIzMTAwMDQ4WhcNMjUxMjI0MTAwMDQ4WjAzMTEwLwYDVQQD EyhjYmY3YzI2ODY0M2RmYzA5OThhOTM4NmI0OWVkZTIzNmEzMWRhZDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOf0Ou1+Ks5RHODKTqxyldJkUOS8 ctij1qtRpmVQiGBgtn60uQA4HW3FFBwVVv08sbRcuF3gylYMl7vRH8UCW/LoadE8 rKx+r2u5pLnRqGPACx1i7o0qsS/RaMwFIr7cJvQnBg/3ZjVLvf4afNmxelwYBhii 35kVSkISa/nacjGzAgxwdkn/tgt8sI3f4n6ollndLO5CKT4UXlmAiV6PYg/HOLnX 1MNMJR/ctTi2GXWyvG6PY2i0pBusJSvpLdEFlM8g1NwPmv8hyJ4dqA4FYnRGULIl Y6xKh5AZvJ1zdf+OL8zYoLMPmgGAahJGGGCwwCpejtf4342S4TSZkvcwGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMv3wmhkPfwJmKk4a0nt4jajHa2TMB8GA1UdIwQY MBaAFD49HCGnegsPfwzmYz4T4MV77bCLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGowY0lhZDZDdzlfRE9aalBoUGd4WHZ0c0lzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8wZTllMDAtNDZlNi00ODYzLTkzMjAt MDk4ZjI1OThlNWUzLzEvUGowY0lhZDZDdzlfRE9aalBoUGd4WHZ0c0lzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8wZTllMDAtNDZlNi00ODYzLTkzMjAtMDk4ZjI1OThlNWUz LzEvUGowY0lhZDZDdzlfRE9aalBoUGd4WHZ0c0lzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABaUGzkcy sSbhKcKIhvhaqVKpCEEA1RP36ddh7K+MRFoSNAxuTK6Rgc/kehoLZBJOIhqEUTnc pVAeHFvGB2pDLglJkdTgidRRaNGmrKhx47UOBn39SnoeC6FwP7fYXDBBnbja3Hsy t0hFr/GyoKJbsl3hqSasaQ/Co7q1Wue+/5a747u4PSwI9mBBkxsbZOXJ/enQoqzU IsILglXnjqvL93gSNI9Kxt/hbQuhxo2CSTQdtITGi15O0voqBgcVaWlEZnuaz4uc 5Xq7GsNlyCdO9pVFkGUBRBE5pPgYJTStiMHgVqJHpzY9UiP7tKsbJC0vBdeWyZcC lvHV3vg6hooY4Q== -----END CERTIFICATE-----Generated at Tue Dec 23 16:52:37 2025 by rpki-client