This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft File: pBM1JPJKSooh1GwGwQJfQPNK0no.mft (raw, json) Hash identifier: 1VpHUfcJ36kkx81JFiD75c1kWCJXQ0AowT05W1IBkog= Subject key identifier: 90:AC:F9:36:85:D8:B5:1C:BB:E2:E0:AD:11:23:25:6C:AE:6A:26:21 Authority key identifier: A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A Certificate issuer: /CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a Certificate serial: 019B3E6D4892BAD33AF8DF2D26EC1F8FDBE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 01:01:47 +0000 Manifest this update: Sun 21 Dec 2025 01:01:47 +0000 Manifest next update: Mon 22 Dec 2025 01:01:47 +0000 Files and hashes: 1: hDhJ2OmuACmi7Q_Pysi0Uy5-CBg.roa (hash: IpPR6/fjcqfY1Wb9zSV7h6VOKADAG8xAFr0zyQ+Kgzs=) 2: pBM1JPJKSooh1GwGwQJfQPNK0no.crl (hash: hdlLC7qOu5D7mbDMbRU8QRCxvOmzbJY88tP+vnKqsSM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:48:92:ba:d3:3a:f8:df:2d:26:ec:1f:8f:db:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a Validity Not Before: Dec 21 01:01:47 2025 GMT Not After : Dec 22 01:01:47 2025 GMT Subject: CN=90acf93685d8b51cbbe2e0ad1123256cae6a2621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d5:d1:c2:5e:d0:9c:23:f0:0d:c4:85:71:28: 7b:4d:73:5c:88:8c:d4:a3:ba:8c:99:b5:50:7c:49: b8:19:15:49:84:19:e9:34:18:96:f5:80:d1:ba:d9: 11:2e:8f:16:52:cc:a9:2d:4d:eb:e4:60:1e:a3:9c: fb:d1:90:b8:93:ec:32:c0:1c:bb:1d:ad:ad:7a:c3: e5:3a:de:5b:41:74:d4:23:2c:5b:2f:c3:62:3e:a0: e2:45:b7:0e:b2:90:e2:b8:bb:28:47:40:58:48:79: 41:40:4c:e8:a3:81:fc:80:5c:d7:4f:ed:68:38:bb: cb:53:2b:6a:13:bb:fd:c3:a9:0f:00:63:a4:4b:60: 83:e8:9f:54:bf:63:b4:69:4f:6f:4f:d2:51:1d:27: 97:b5:e7:67:fb:1f:3f:f4:e1:f3:cc:80:e0:2a:12: 40:aa:40:d9:de:d2:22:a4:9c:4d:36:6d:70:64:fc: 84:b2:c0:61:7d:39:27:4f:2a:8a:be:6a:70:ba:ee: 5f:53:49:ef:2e:5d:4a:a4:1f:c8:49:fc:ba:d0:01: 42:ef:69:09:29:ed:00:b7:39:81:94:5e:f5:a7:1a: 7b:db:ab:a7:6e:51:a8:91:94:76:b3:db:42:8e:56: 4d:83:1e:29:9b:d2:8b:f7:ee:bb:97:2e:2b:58:2a: c3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:AC:F9:36:85:D8:B5:1C:BB:E2:E0:AD:11:23:25:6C:AE:6A:26:21 X509v3 Authority Key Identifier: keyid:A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:ba:49:1c:5b:e7:bf:7f:92:1d:a8:30:bb:cd:23:1f:cd:25: a1:2b:1f:ae:6d:2a:8a:7c:37:22:96:ff:13:8a:a8:ab:83:16: 32:c5:35:49:76:36:6b:e7:b7:4b:95:c7:51:38:7d:55:6b:0b: c4:6d:c2:78:a3:89:df:a2:ea:10:ed:7c:68:c4:f2:43:6f:9d: 8b:40:af:b1:d1:ed:a7:be:58:28:2b:a7:9a:36:64:aa:ab:2d: c3:49:f6:b0:c0:3c:92:75:b8:03:b4:50:10:60:91:e1:97:54: fb:60:49:7a:9f:e7:95:18:04:c1:f3:2e:7c:c4:a2:01:01:ab: 80:87:50:a1:b8:2a:c2:2b:53:d9:d6:0b:2e:ef:f5:d7:d5:66: 67:ee:0c:3c:aa:7f:16:3e:d4:ba:22:53:64:01:c9:47:b5:7b: 68:75:10:2d:de:90:1d:2a:b9:54:e7:a9:b2:e5:c5:42:22:87: 01:3e:90:3d:0e:6d:e8:fa:1e:1a:72:1b:e2:27:23:86:58:2e: c7:77:ca:43:f0:d4:7d:f3:c4:93:09:e3:74:40:69:b2:63:36: 6c:0b:33:19:02:0d:a6:2f:4c:37:bc:dc:7b:53:4f:ca:a4:75: 14:6d:89:56:29:a7:ba:ad:c5:e3:05:a8:a7:79:5d:b4:34:1f: a6:2d:9d:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bUiSutM6+N8tJuwfj9vlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MTMzNTI0ZjI0YTRhOGEyMWQ0NmMwNmMxMDI1ZjQwZjM0 YWQyN2EwHhcNMjUxMjIxMDEwMTQ3WhcNMjUxMjIyMDEwMTQ3WjAzMTEwLwYDVQQD Eyg5MGFjZjkzNjg1ZDhiNTFjYmJlMmUwYWQxMTIzMjU2Y2FlNmEyNjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdXRwl7QnCPwDcSFcSh7TXNciIzU o7qMmbVQfEm4GRVJhBnpNBiW9YDRutkRLo8WUsypLU3r5GAeo5z70ZC4k+wywBy7 Ha2tesPlOt5bQXTUIyxbL8NiPqDiRbcOspDiuLsoR0BYSHlBQEzoo4H8gFzXT+1o OLvLUytqE7v9w6kPAGOkS2CD6J9Uv2O0aU9vT9JRHSeXtedn+x8/9OHzzIDgKhJA qkDZ3tIipJxNNm1wZPyEssBhfTknTyqKvmpwuu5fU0nvLl1KpB/ISfy60AFC72kJ Ke0AtzmBlF71pxp726unblGokZR2s9tCjlZNgx4pm9KL9+67ly4rWCrDewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJCs+TaF2LUcu+LgrREjJWyuaiYhMB8GA1UdIwQY MBaAFKQTNSTySkqKIdRsBsECX0DzStJ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEJNMUpQSktTb29oMUd3R3dRSmZRUE5LMG5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zYzI0YmUtMjY2ZS00NTIyLTk3ZDYt N2Q5ZTYyYWZjNDQ0LzEvcEJNMUpQSktTb29oMUd3R3dRSmZRUE5LMG5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8zYzI0YmUtMjY2ZS00NTIyLTk3ZDYtN2Q5ZTYyYWZjNDQ0 LzEvcEJNMUpQSktTb29oMUd3R3dRSmZRUE5LMG5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH7pJHFvn v3+SHagwu80jH80loSsfrm0qinw3Ipb/E4qoq4MWMsU1SXY2a+e3S5XHUTh9VWsL xG3CeKOJ36LqEO18aMTyQ2+di0CvsdHtp75YKCunmjZkqqstw0n2sMA8knW4A7RQ EGCR4ZdU+2BJep/nlRgEwfMufMSiAQGrgIdQobgqwitT2dYLLu/119VmZ+4MPKp/ Fj7UuiJTZAHJR7V7aHUQLd6QHSq5VOepsuXFQiKHAT6QPQ5t6PoeGnIb4icjhlgu x3fKQ/DUffPEkwnjdEBpsmM2bAszGQINpi9MN7zce1NPyqR1FG2JVimnuq3F4wWo p3ldtDQfpi2dOg== -----END CERTIFICATE-----Generated at Sun Dec 21 08:18:55 2025 by rpki-client