This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft File: PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft (raw, json) Hash identifier: H6ebNesC7xUH37ZvmTRWqee5iDZHKEkDRp4xSaNr99E= Subject key identifier: 4E:9C:D5:D8:63:52:DD:36:A6:21:EE:41:ED:9B:90:3E:C3:9C:CB:55 Authority key identifier: 3C:02:09:4C:22:10:D8:B2:17:15:F9:8D:F8:59:8B:35:32:08:D1:0C Certificate issuer: /CN=3c02094c2210d8b21715f98df8598b353208d10c Certificate serial: 019B5862E3D84B8DC6521A6A6582943111D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft Manifest number: 1232 Signing time: Fri 26 Dec 2025 02:00:34 +0000 Manifest this update: Fri 26 Dec 2025 02:00:34 +0000 Manifest next update: Sat 27 Dec 2025 02:00:34 +0000 Files and hashes: 1: CufUT2fMUqvz9LGxO18OZgdQp_g.roa (hash: G2fcMqhZShi/pIW7MbvdKjfohzkmwJAvDqVZX+1pdMQ=) 2: PAIJTCIQ2LIXFfmN-FmLNTII0Qw.crl (hash: g2wCp8luKFy/3JWpQr1SHjmF6r729uNXa24QrBF9VPc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft rsync://rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:62:e3:d8:4b:8d:c6:52:1a:6a:65:82:94:31:11:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c02094c2210d8b21715f98df8598b353208d10c Validity Not Before: Dec 26 02:00:34 2025 GMT Not After : Dec 27 02:00:34 2025 GMT Subject: CN=4e9cd5d86352dd36a621ee41ed9b903ec39ccb55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:01:17:2e:8e:3e:7e:bb:e9:b2:e5:f0:1e:c0: 1a:d3:76:88:ec:36:ec:fc:ca:7b:80:05:09:68:1f: f3:3c:bf:af:24:76:be:2c:74:a7:a3:ec:65:95:91: 50:32:1c:c3:3e:dc:42:cf:9a:94:21:8a:f2:5f:00: e2:50:71:4a:a8:de:83:67:4c:7f:99:35:7c:3c:c4: 74:30:16:7e:49:27:34:2e:0f:64:6b:bd:c5:3d:5d: f1:d7:7a:be:53:cc:71:79:b7:1a:65:6d:c3:e3:28: d3:37:8c:41:1d:f1:39:92:b4:56:68:b4:e4:57:5b: f0:bf:57:5e:bc:b7:7c:f0:e4:23:05:7d:7c:5c:1a: 9e:40:73:5f:a5:b5:06:69:16:28:0a:7e:48:b0:6b: ec:e6:d0:50:5b:57:f2:58:2c:7b:e4:bc:86:00:4b: 3c:a8:f4:a7:5a:8f:4e:26:87:bd:15:41:ac:75:e3: 00:5a:3f:da:dd:92:83:2d:f3:2f:3d:5d:86:26:b8: fd:7f:c5:c3:fb:89:36:be:3e:9d:f3:e0:90:1c:19: aa:48:ea:d3:a1:f7:3d:d3:a7:2b:1d:82:e6:b3:38: fb:2f:3d:37:50:db:28:a1:be:fd:13:8e:5c:bb:29: 7f:ab:f0:e4:d1:27:2c:db:cb:8c:c5:88:5f:d5:64: 81:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:9C:D5:D8:63:52:DD:36:A6:21:EE:41:ED:9B:90:3E:C3:9C:CB:55 X509v3 Authority Key Identifier: keyid:3C:02:09:4C:22:10:D8:B2:17:15:F9:8D:F8:59:8B:35:32:08:D1:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:fb:02:a9:0b:82:6d:f1:8e:79:ab:d9:bd:e3:55:a7:22:ab: b5:92:cd:9c:9f:3d:a4:b6:60:13:33:c0:6d:32:60:b1:e1:51: 48:56:22:c9:82:e0:f6:8c:95:81:91:41:a7:b2:8f:a9:1c:d3: c8:fb:a5:32:60:1c:85:0f:95:a3:cd:0f:0f:02:9e:b9:33:10: c8:a3:7c:b8:3b:12:f0:0e:2f:0a:48:de:96:15:9f:3a:a8:90: e6:89:90:88:d9:16:fd:3b:a9:e5:d3:eb:1c:b4:ca:0e:c4:25: 0a:bb:ff:a1:b8:76:ae:43:6d:f3:0e:54:98:aa:9d:b7:09:23: a9:bd:89:58:ce:f0:b0:1f:66:79:08:1d:fb:34:f9:69:6d:96: 5e:a3:f9:eb:82:db:4c:f3:27:c1:09:70:56:f3:68:2d:a3:d3: 29:b4:7a:76:f9:8a:8f:b7:17:73:2f:aa:6b:8b:a4:d5:5d:0d: 4a:92:28:d1:28:5a:68:49:00:b4:d2:93:9c:fe:ce:f3:01:48: 6e:ff:75:d6:ab:95:d8:7b:90:06:56:54:f5:09:e3:d6:ab:bb: d8:23:b1:21:3e:f8:70:87:a4:e8:0c:90:86:9f:76:7b:a0:6b: dd:1c:8a:ae:c1:de:f2:bf:3a:b8:9a:b5:32:9e:4a:f4:e9:de: 3e:fa:5a:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtYYuPYS43GUhpqZYKUMRHWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMDIwOTRjMjIxMGQ4YjIxNzE1Zjk4ZGY4NTk4YjM1MzIw OGQxMGMwHhcNMjUxMjI2MDIwMDM0WhcNMjUxMjI3MDIwMDM0WjAzMTEwLwYDVQQD Eyg0ZTljZDVkODYzNTJkZDM2YTYyMWVlNDFlZDliOTAzZWMzOWNjYjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAEXLo4+frvpsuXwHsAa03aI7Dbs /Mp7gAUJaB/zPL+vJHa+LHSno+xllZFQMhzDPtxCz5qUIYryXwDiUHFKqN6DZ0x/ mTV8PMR0MBZ+SSc0Lg9ka73FPV3x13q+U8xxebcaZW3D4yjTN4xBHfE5krRWaLTk V1vwv1devLd88OQjBX18XBqeQHNfpbUGaRYoCn5IsGvs5tBQW1fyWCx75LyGAEs8 qPSnWo9OJoe9FUGsdeMAWj/a3ZKDLfMvPV2GJrj9f8XD+4k2vj6d8+CQHBmqSOrT ofc906crHYLmszj7Lz03UNsoob79E45cuyl/q/Dk0Scs28uMxYhf1WSBVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE6c1dhjUt02piHuQe2bkD7DnMtVMB8GA1UdIwQY MBaAFDwCCUwiENiyFxX5jfhZizUyCNEMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEFJSlRDSVEyTElYRmZtTi1GbUxOVElJMFF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS85ODNjMmMtZGRhYi00MjJiLWJjZDIt MTczNzRiZmZiNzFhLzEvUEFJSlRDSVEyTElYRmZtTi1GbUxOVElJMFF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS85ODNjMmMtZGRhYi00MjJiLWJjZDItMTczNzRiZmZiNzFh LzEvUEFJSlRDSVEyTElYRmZtTi1GbUxOVElJMFF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOPsCqQuC bfGOeavZveNVpyKrtZLNnJ89pLZgEzPAbTJgseFRSFYiyYLg9oyVgZFBp7KPqRzT yPulMmAchQ+Vo80PDwKeuTMQyKN8uDsS8A4vCkjelhWfOqiQ5omQiNkW/Tup5dPr HLTKDsQlCrv/obh2rkNt8w5UmKqdtwkjqb2JWM7wsB9meQgd+zT5aW2WXqP564Lb TPMnwQlwVvNoLaPTKbR6dvmKj7cXcy+qa4uk1V0NSpIo0ShaaEkAtNKTnP7O8wFI bv911quV2HuQBlZU9Qnj1qu72COxIT74cIek6AyQhp92e6Br3RyKrsHe8r86uJq1 Mp5K9OnePvpatg== -----END CERTIFICATE-----Generated at Fri Dec 26 03:10:31 2025 by rpki-client