This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft File: PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft (raw, json) Hash identifier: gF3blI6OLcRCrLhEkkVhSTZMzChD/Uv98FyWzfIYFm8= Subject key identifier: 14:7F:2D:20:D9:DC:6A:09:A2:17:9E:0B:5C:14:5B:29:BB:EA:52:23 Authority key identifier: 3C:02:09:4C:22:10:D8:B2:17:15:F9:8D:F8:59:8B:35:32:08:D1:0C Certificate issuer: /CN=3c02094c2210d8b21715f98df8598b353208d10c Certificate serial: 019B56750D84544E55AC6928F6E711A331C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft Manifest number: 1231 Signing time: Thu 25 Dec 2025 17:01:10 +0000 Manifest this update: Thu 25 Dec 2025 17:01:10 +0000 Manifest next update: Fri 26 Dec 2025 17:01:10 +0000 Files and hashes: 1: CufUT2fMUqvz9LGxO18OZgdQp_g.roa (hash: G2fcMqhZShi/pIW7MbvdKjfohzkmwJAvDqVZX+1pdMQ=) 2: PAIJTCIQ2LIXFfmN-FmLNTII0Qw.crl (hash: c1A+LWodJoFHy+FqramPOeJSLt33yh0KblSR4R3Z+us=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft rsync://rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 17:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:75:0d:84:54:4e:55:ac:69:28:f6:e7:11:a3:31:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c02094c2210d8b21715f98df8598b353208d10c Validity Not Before: Dec 25 17:01:10 2025 GMT Not After : Dec 26 17:01:10 2025 GMT Subject: CN=147f2d20d9dc6a09a2179e0b5c145b29bbea5223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:55:7c:2e:db:61:b2:a2:08:15:8f:c5:9c:6f: d7:73:3a:1c:05:e6:48:56:bf:e1:83:1a:13:95:3c: 23:88:6d:bf:ae:41:24:12:eb:fe:86:0e:e2:da:5d: 99:f1:c8:3e:1f:38:b7:8c:28:d2:22:3f:ee:8a:3e: a4:79:b3:da:c7:9d:3f:95:6e:4c:c1:5f:db:ef:62: bc:fe:ca:0f:ce:e2:90:e7:64:af:f0:60:c7:3d:f2: 19:2c:16:d6:8e:43:ec:38:d7:cb:5a:01:c3:c7:2e: 03:38:4f:5c:6d:fc:92:30:aa:c2:3a:4a:18:ae:90: 89:af:e0:54:19:d2:8b:15:de:ed:be:dd:03:3a:8c: 5f:30:e5:22:0e:2c:96:b4:56:b6:c5:df:a2:03:e9: 88:96:bc:16:f5:5b:30:24:5e:0a:1f:f2:40:63:39: d0:8d:41:4e:e2:32:b7:76:ec:ea:2c:3a:ea:3a:b2: 54:08:07:b0:73:98:c3:e8:86:e9:ba:1c:23:3e:e7: 3f:c0:b0:b2:8a:20:9c:5e:09:ea:6d:d6:06:5d:20: 8b:22:37:2a:cd:87:09:1c:f7:9b:4a:5e:66:bf:6a: 32:b0:79:68:d6:3c:24:04:f4:97:4b:1a:8f:df:57: 57:ab:0d:cf:7e:68:91:a5:c3:7b:82:50:99:4a:c2: 11:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:7F:2D:20:D9:DC:6A:09:A2:17:9E:0B:5C:14:5B:29:BB:EA:52:23 X509v3 Authority Key Identifier: keyid:3C:02:09:4C:22:10:D8:B2:17:15:F9:8D:F8:59:8B:35:32:08:D1:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:a7:96:a7:8c:9b:6e:05:e0:a6:e2:f3:48:b4:fa:9b:27:b1: f4:84:8c:e6:c6:6e:8d:41:ee:70:83:d8:6b:74:f1:b8:1f:22: b9:69:72:fb:61:ee:09:93:61:f2:c6:81:80:d4:39:ca:f2:b6: 91:b9:0f:b2:b3:1d:5f:43:ca:af:34:71:b6:b7:76:85:07:66: ba:b6:d8:5f:bc:73:cc:7f:14:8b:ac:47:74:9b:7b:a4:66:85: b5:89:92:3d:b6:dd:a0:60:d4:97:c6:ba:18:08:79:b6:1f:91: 8e:02:35:30:c8:bc:e8:06:d9:4e:56:80:fc:04:36:c3:3d:ac: e0:75:8f:22:e9:fe:e2:6b:7d:3a:f7:57:98:36:a4:ca:d8:ba: 20:a7:7f:fc:c3:b3:8f:8b:5e:e3:81:cc:7d:fc:8f:82:97:aa: 22:89:49:42:7c:8d:77:3d:bf:9f:a2:da:43:05:b1:94:e2:bc: 75:27:41:05:b6:de:21:25:b7:88:66:ff:ec:4d:00:c9:0e:4d: 4d:5b:a2:eb:5f:93:56:b8:99:ad:05:2a:b8:2a:f4:b5:ae:b4: c7:f7:e4:c7:b7:cc:c7:1c:b3:5a:c7:cc:69:6b:a4:73:09:90: 49:c2:86:81:11:0b:c8:df:69:c9:cb:28:35:d5:77:54:b4:b7: a6:b7:7d:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWdQ2EVE5VrGko9ucRozHEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMDIwOTRjMjIxMGQ4YjIxNzE1Zjk4ZGY4NTk4YjM1MzIw OGQxMGMwHhcNMjUxMjI1MTcwMTEwWhcNMjUxMjI2MTcwMTEwWjAzMTEwLwYDVQQD EygxNDdmMmQyMGQ5ZGM2YTA5YTIxNzllMGI1YzE0NWIyOWJiZWE1MjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlV8LtthsqIIFY/FnG/XczocBeZI Vr/hgxoTlTwjiG2/rkEkEuv+hg7i2l2Z8cg+Hzi3jCjSIj/uij6kebPax50/lW5M wV/b72K8/soPzuKQ52Sv8GDHPfIZLBbWjkPsONfLWgHDxy4DOE9cbfySMKrCOkoY rpCJr+BUGdKLFd7tvt0DOoxfMOUiDiyWtFa2xd+iA+mIlrwW9VswJF4KH/JAYznQ jUFO4jK3duzqLDrqOrJUCAewc5jD6IbpuhwjPuc/wLCyiiCcXgnqbdYGXSCLIjcq zYcJHPebSl5mv2oysHlo1jwkBPSXSxqP31dXqw3PfmiRpcN7glCZSsIRRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBR/LSDZ3GoJoheeC1wUWym76lIjMB8GA1UdIwQY MBaAFDwCCUwiENiyFxX5jfhZizUyCNEMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEFJSlRDSVEyTElYRmZtTi1GbUxOVElJMFF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS85ODNjMmMtZGRhYi00MjJiLWJjZDIt MTczNzRiZmZiNzFhLzEvUEFJSlRDSVEyTElYRmZtTi1GbUxOVElJMFF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS85ODNjMmMtZGRhYi00MjJiLWJjZDItMTczNzRiZmZiNzFh LzEvUEFJSlRDSVEyTElYRmZtTi1GbUxOVElJMFF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVqeWp4yb bgXgpuLzSLT6myex9ISM5sZujUHucIPYa3TxuB8iuWly+2HuCZNh8saBgNQ5yvK2 kbkPsrMdX0PKrzRxtrd2hQdmurbYX7xzzH8Ui6xHdJt7pGaFtYmSPbbdoGDUl8a6 GAh5th+RjgI1MMi86AbZTlaA/AQ2wz2s4HWPIun+4mt9OvdXmDakyti6IKd//MOz j4te44HMffyPgpeqIolJQnyNdz2/n6LaQwWxlOK8dSdBBbbeISW3iGb/7E0AyQ5N TVui61+TVriZrQUquCr0ta60x/fkx7fMxxyzWsfMaWukcwmQScKGgRELyN9pycso NdV3VLS3prd9OA== -----END CERTIFICATE-----Generated at Fri Dec 26 01:33:14 2025 by rpki-client