This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft File: Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft (raw, json) Hash identifier: hAIpYN1AcSmvVZe5y1Ze+SibPZvbk3k+ffunmEE0bZA= Subject key identifier: 02:AA:86:18:F7:7B:A1:5E:43:46:4A:BD:DA:6B:5C:C6:75:41:C0:FD Authority key identifier: 3E:3D:1C:21:A7:7A:0B:0F:7F:0C:E6:63:3E:13:E0:C5:7B:ED:B0:8B Certificate issuer: /CN=3e3d1c21a77a0b0f7f0ce6633e13e0c57bedb08b Certificate serial: 019B3D2393F2F7D6A134633495D6B4B4D98C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft Manifest number: 14C0 Signing time: Sat 20 Dec 2025 19:01:40 +0000 Manifest this update: Sat 20 Dec 2025 19:01:40 +0000 Manifest next update: Sun 21 Dec 2025 19:01:40 +0000 Files and hashes: 1: Gw9xXGUQ6gOLxmD3uhPbHUjxqdY.roa (hash: iN7hsvC2N6zVGHZJzHIWk+L6xeaF90AdvlMynpLLSsQ=) 2: Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl (hash: +qqR6YmvKniYKeZIcWCeHxljOy+ULTDxkgiQViGEmxo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:93:f2:f7:d6:a1:34:63:34:95:d6:b4:b4:d9:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e3d1c21a77a0b0f7f0ce6633e13e0c57bedb08b Validity Not Before: Dec 20 19:01:40 2025 GMT Not After : Dec 21 19:01:40 2025 GMT Subject: CN=02aa8618f77ba15e43464abdda6b5cc67541c0fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ca:9a:c2:c8:4a:34:5f:c8:dd:e3:90:90:2f: 1f:56:5e:5e:b8:51:eb:ac:94:3b:4b:cb:cb:82:e9: bf:a2:08:be:ce:68:ea:0b:c9:db:b4:d0:b1:ba:e1: c7:d1:a9:28:4e:c8:cc:ab:bc:b2:2c:2c:72:b4:a3: d2:07:29:ec:7f:9b:49:dd:5e:38:e9:7b:61:2a:8b: 04:21:a7:1d:fc:cc:26:85:d0:2e:f4:e0:06:18:1b: 27:46:b1:7d:f3:8e:a3:b9:d2:86:1a:ef:7e:9c:d7: 43:a7:17:52:5e:81:2c:7b:ba:10:67:11:4f:f1:05: 6f:eb:80:4a:f9:c5:86:f1:31:cc:9a:f6:08:13:e6: 23:e2:a1:db:48:fe:fa:bf:fe:55:63:78:10:b0:a3: ca:cc:9c:7c:72:ba:0c:84:09:7b:89:95:60:a8:08: 90:80:2e:ae:5f:0d:69:f9:77:f4:6a:89:e9:bb:e0: 46:d0:cc:74:fd:e5:78:84:40:27:d8:28:41:31:96: 0d:48:a7:8b:74:9a:95:e2:c3:64:2f:51:fc:c1:aa: 19:20:7f:79:74:3c:53:24:8b:5c:6d:96:1e:f1:ab: 29:a8:52:a4:c9:ee:18:d6:6e:04:5d:63:cb:f3:41: b9:b8:73:c7:f0:81:67:fb:e2:3e:27:f5:c3:4b:04: c4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:AA:86:18:F7:7B:A1:5E:43:46:4A:BD:DA:6B:5C:C6:75:41:C0:FD X509v3 Authority Key Identifier: keyid:3E:3D:1C:21:A7:7A:0B:0F:7F:0C:E6:63:3E:13:E0:C5:7B:ED:B0:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:87:14:f6:98:c1:d6:5c:c3:fd:6c:de:8a:66:27:a2:03:64: 99:79:5f:f5:e8:16:22:59:24:8c:a4:0c:2b:76:03:bc:2c:57: b5:a4:25:1e:a1:b2:8b:f4:ff:11:1d:7f:9f:6e:53:9f:0a:28: 24:a2:e7:d7:6d:6c:7f:6f:16:41:55:0d:d9:68:27:39:04:29: b4:25:e8:67:ef:2a:ac:ca:36:79:51:4c:af:ea:5b:33:1a:cc: 1f:f2:19:3a:aa:11:88:47:10:60:be:e7:3e:7d:69:c4:28:8a: e3:ae:ef:81:b9:05:6c:d5:13:b9:cf:67:b8:17:e5:49:d5:0a: 5c:7e:93:cc:67:09:5f:80:8e:69:72:2f:07:be:a9:e8:e2:f3: 96:fd:7f:10:32:6c:d8:45:f1:08:31:64:d3:58:ce:e4:ba:e2: 0d:48:03:60:70:9b:cd:66:74:5e:cc:3d:b6:4b:79:e4:54:cb: d3:ec:63:56:66:45:0d:01:cd:48:aa:d3:bf:75:d7:2e:34:f2: e2:1e:0d:40:fc:15:6f:17:dc:fd:92:91:71:2d:63:10:b8:a9: 3f:f5:88:1f:09:36:d4:01:71:17:90:60:02:9a:3c:24:7a:e3: 2f:d8:1d:15:26:d8:c1:8c:d3:e8:60:ad:0d:5f:37:9a:64:57: 11:96:90:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9I5Py99ahNGM0lda0tNmMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlM2QxYzIxYTc3YTBiMGY3ZjBjZTY2MzNlMTNlMGM1N2Jl ZGIwOGIwHhcNMjUxMjIwMTkwMTQwWhcNMjUxMjIxMTkwMTQwWjAzMTEwLwYDVQQD EygwMmFhODYxOGY3N2JhMTVlNDM0NjRhYmRkYTZiNWNjNjc1NDFjMGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsqawshKNF/I3eOQkC8fVl5euFHr rJQ7S8vLgum/ogi+zmjqC8nbtNCxuuHH0akoTsjMq7yyLCxytKPSBynsf5tJ3V44 6XthKosEIacd/MwmhdAu9OAGGBsnRrF9846judKGGu9+nNdDpxdSXoEse7oQZxFP 8QVv64BK+cWG8THMmvYIE+Yj4qHbSP76v/5VY3gQsKPKzJx8croMhAl7iZVgqAiQ gC6uXw1p+Xf0aonpu+BG0Mx0/eV4hEAn2ChBMZYNSKeLdJqV4sNkL1H8waoZIH95 dDxTJItcbZYe8aspqFKkye4Y1m4EXWPL80G5uHPH8IFn++I+J/XDSwTEeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAKqhhj3e6FeQ0ZKvdprXMZ1QcD9MB8GA1UdIwQY MBaAFD49HCGnegsPfwzmYz4T4MV77bCLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGowY0lhZDZDdzlfRE9aalBoUGd4WHZ0c0lzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8wZTllMDAtNDZlNi00ODYzLTkzMjAt MDk4ZjI1OThlNWUzLzEvUGowY0lhZDZDdzlfRE9aalBoUGd4WHZ0c0lzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8wZTllMDAtNDZlNi00ODYzLTkzMjAtMDk4ZjI1OThlNWUz LzEvUGowY0lhZDZDdzlfRE9aalBoUGd4WHZ0c0lzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIIcU9pjB 1lzD/WzeimYnogNkmXlf9egWIlkkjKQMK3YDvCxXtaQlHqGyi/T/ER1/n25Tnwoo JKLn121sf28WQVUN2WgnOQQptCXoZ+8qrMo2eVFMr+pbMxrMH/IZOqoRiEcQYL7n Pn1pxCiK467vgbkFbNUTuc9nuBflSdUKXH6TzGcJX4COaXIvB76p6OLzlv1/EDJs 2EXxCDFk01jO5LriDUgDYHCbzWZ0Xsw9tkt55FTL0+xjVmZFDQHNSKrTv3XXLjTy 4h4NQPwVbxfc/ZKRcS1jELipP/WIHwk21AFxF5BgApo8JHrjL9gdFSbYwYzT6GCt DV83mmRXEZaQ9w== -----END CERTIFICATE-----Generated at Sun Dec 21 04:06:40 2025 by rpki-client