This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft File: p3l5GlNwwc1X5JPZSfke-82mYX4.mft (raw, json) Hash identifier: 7gLTBTzHaoXcViRGcXzN2celsShQxIFlbzHi6N5j9Us= Subject key identifier: 00:CB:4C:B7:F4:D0:C6:3E:EA:44:31:0A:C5:BC:3E:3E:AD:8C:E2:0B Authority key identifier: A7:79:79:1A:53:70:C1:CD:57:E4:93:D9:49:F9:1E:FB:CD:A6:61:7E Certificate issuer: /CN=a779791a5370c1cd57e493d949f91efbcda6617e Certificate serial: 019B33441CBCA2406616F74F2F895F19A7A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p3l5GlNwwc1X5JPZSfke-82mYX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft Manifest number: 0C26 Signing time: Thu 18 Dec 2025 21:01:00 +0000 Manifest this update: Thu 18 Dec 2025 21:01:00 +0000 Manifest next update: Fri 19 Dec 2025 21:01:00 +0000 Files and hashes: 1: p3l5GlNwwc1X5JPZSfke-82mYX4.crl (hash: o047gl/RZL/HRAQdF3s4KLDfdu09qO2zyVo6XVr4xRU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.crl rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft rsync://rpki.ripe.net/repository/DEFAULT/p3l5GlNwwc1X5JPZSfke-82mYX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:1c:bc:a2:40:66:16:f7:4f:2f:89:5f:19:a7:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a779791a5370c1cd57e493d949f91efbcda6617e Validity Not Before: Dec 18 21:01:00 2025 GMT Not After : Dec 19 21:01:00 2025 GMT Subject: CN=00cb4cb7f4d0c63eea44310ac5bc3e3ead8ce20b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1f:38:87:7c:d0:ca:be:2f:ba:be:b7:30:a2: c2:dc:db:16:c1:83:6d:7d:28:ad:00:8b:d5:21:4b: 3a:de:8f:1c:66:66:f2:c8:0b:9a:ea:2d:a4:c1:42: 30:34:94:f0:2c:75:72:aa:aa:1f:38:0f:d9:c9:85: d4:db:03:fa:9a:0e:6d:8f:8c:36:a0:9b:b0:71:f9: 44:c5:2a:4a:a0:e2:27:e9:56:19:08:8b:be:ad:a8: 53:1e:b1:9d:f6:8f:ed:8f:f0:69:aa:c0:86:b6:46: a5:f6:8e:bc:a9:21:7a:b9:f5:3a:d2:01:ac:46:a0: ea:89:72:61:cd:44:61:d6:4d:d8:aa:76:46:e0:fc: 36:c8:69:53:a7:1d:53:5f:d7:d6:17:3d:a5:a6:55: da:0f:21:b3:ac:ee:ef:24:94:df:0f:be:e3:29:d9: 8f:6c:5d:e7:3d:01:50:75:65:85:c5:49:ea:5f:fe: 10:bf:f4:b7:28:f8:d2:b7:af:40:46:b6:4d:85:ce: 53:49:4f:1e:40:15:1d:ae:b1:75:6c:32:90:40:d6: 4d:30:57:fa:b9:fe:a3:fb:e4:6b:14:46:b6:07:da: fe:da:b5:38:3e:d6:9f:43:7e:a9:71:d8:e5:d0:d6: a3:23:c5:50:43:19:1f:5a:14:51:ce:fd:ee:6d:fe: 54:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:CB:4C:B7:F4:D0:C6:3E:EA:44:31:0A:C5:BC:3E:3E:AD:8C:E2:0B X509v3 Authority Key Identifier: keyid:A7:79:79:1A:53:70:C1:CD:57:E4:93:D9:49:F9:1E:FB:CD:A6:61:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p3l5GlNwwc1X5JPZSfke-82mYX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:8f:39:42:62:8b:48:a9:80:4c:6a:9a:1c:85:1f:24:cf:27: 34:b4:97:84:f2:05:e0:83:0f:e2:84:c1:2d:1b:07:bf:20:30: d9:96:b0:ac:c8:f3:47:ae:7c:37:f0:90:7e:58:30:21:96:45: 90:7d:95:12:51:ab:2b:7e:67:24:f7:e6:40:64:bd:5e:f6:6a: 79:26:f3:5b:71:46:94:c1:24:eb:29:36:0e:7e:27:29:5f:7d: ad:7c:d2:f6:80:47:a0:86:e9:3c:21:ef:c8:a7:d5:15:22:69: 9c:d3:f4:e7:64:54:51:b6:b0:be:d8:bf:2c:d7:46:eb:de:42: a4:8d:8c:a0:4e:ba:3d:38:71:a8:c7:f7:5f:54:95:55:20:26: 5e:4c:a9:e9:ca:ab:ae:0a:63:d4:c3:f8:50:55:07:99:91:38: bf:95:fd:67:89:52:02:24:d4:ea:30:0d:c1:64:1a:84:8b:50: 16:70:7c:3b:d1:9d:6c:a3:09:95:c4:e5:b0:5f:eb:89:24:98: fe:e0:8a:08:b9:70:2e:f1:7b:46:bd:e8:78:2f:44:df:1a:cf: 57:01:cf:0d:27:c3:8d:a7:b5:b9:19:71:b6:ac:30:e6:00:ce: e4:4a:15:f6:d2:12:30:a2:1a:10:c9:4a:17:b9:c3:4f:b6:b3: 72:28:46:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRBy8okBmFvdPL4lfGaelMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3Nzk3OTFhNTM3MGMxY2Q1N2U0OTNkOTQ5ZjkxZWZiY2Rh NjYxN2UwHhcNMjUxMjE4MjEwMTAwWhcNMjUxMjE5MjEwMTAwWjAzMTEwLwYDVQQD EygwMGNiNGNiN2Y0ZDBjNjNlZWE0NDMxMGFjNWJjM2UzZWFkOGNlMjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqR84h3zQyr4vur63MKLC3NsWwYNt fSitAIvVIUs63o8cZmbyyAua6i2kwUIwNJTwLHVyqqofOA/ZyYXU2wP6mg5tj4w2 oJuwcflExSpKoOIn6VYZCIu+rahTHrGd9o/tj/BpqsCGtkal9o68qSF6ufU60gGs RqDqiXJhzURh1k3YqnZG4Pw2yGlTpx1TX9fWFz2lplXaDyGzrO7vJJTfD77jKdmP bF3nPQFQdWWFxUnqX/4Qv/S3KPjSt69ARrZNhc5TSU8eQBUdrrF1bDKQQNZNMFf6 uf6j++RrFEa2B9r+2rU4PtafQ36pcdjl0NajI8VQQxkfWhRRzv3ubf5UnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFADLTLf00MY+6kQxCsW8Pj6tjOILMB8GA1UdIwQY MBaAFKd5eRpTcMHNV+ST2Un5HvvNpmF+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDNsNUdsTnd3YzFYNUpQWlNma2UtODJtWVg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC80ZWViMjktNWJkZC00OGI2LTk5NTQt NGQ4YWNjYmE2OWRjLzEvcDNsNUdsTnd3YzFYNUpQWlNma2UtODJtWVg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC80ZWViMjktNWJkZC00OGI2LTk5NTQtNGQ4YWNjYmE2OWRj LzEvcDNsNUdsTnd3YzFYNUpQWlNma2UtODJtWVg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJY85QmKL SKmATGqaHIUfJM8nNLSXhPIF4IMP4oTBLRsHvyAw2ZawrMjzR658N/CQflgwIZZF kH2VElGrK35nJPfmQGS9XvZqeSbzW3FGlMEk6yk2Dn4nKV99rXzS9oBHoIbpPCHv yKfVFSJpnNP052RUUbawvti/LNdG695CpI2MoE66PThxqMf3X1SVVSAmXkyp6cqr rgpj1MP4UFUHmZE4v5X9Z4lSAiTU6jANwWQahItQFnB8O9GdbKMJlcTlsF/riSSY /uCKCLlwLvF7Rr3oeC9E3xrPVwHPDSfDjae1uRlxtqww5gDO5EoV9tISMKIaEMlK F7nDT7azcihGKw== -----END CERTIFICATE-----Generated at Fri Dec 19 00:16:00 2025 by rpki-client