This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft File: p3l5GlNwwc1X5JPZSfke-82mYX4.mft (raw, json) Hash identifier: a8UqbYk40EB/Po0X847crrDGK1FSDwkRGFanNc2dvaQ= Subject key identifier: FD:74:6A:CF:64:EA:08:15:7F:CE:5C:19:65:81:0C:B6:76:11:1E:3C Authority key identifier: A7:79:79:1A:53:70:C1:CD:57:E4:93:D9:49:F9:1E:FB:CD:A6:61:7E Certificate issuer: /CN=a779791a5370c1cd57e493d949f91efbcda6617e Certificate serial: 019B657A00660528A6FDED8016C2F6689406 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p3l5GlNwwc1X5JPZSfke-82mYX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft Manifest number: 0C40 Signing time: Sun 28 Dec 2025 15:00:52 +0000 Manifest this update: Sun 28 Dec 2025 15:00:52 +0000 Manifest next update: Mon 29 Dec 2025 15:00:52 +0000 Files and hashes: 1: p3l5GlNwwc1X5JPZSfke-82mYX4.crl (hash: JNH8YmucJ0bELcndPT+YCr5WhX3eGmGQVIQjvyFG588=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.crl rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft rsync://rpki.ripe.net/repository/DEFAULT/p3l5GlNwwc1X5JPZSfke-82mYX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:7a:00:66:05:28:a6:fd:ed:80:16:c2:f6:68:94:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a779791a5370c1cd57e493d949f91efbcda6617e Validity Not Before: Dec 28 15:00:52 2025 GMT Not After : Dec 29 15:00:52 2025 GMT Subject: CN=fd746acf64ea08157fce5c1965810cb676111e3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:17:01:b2:78:81:fc:59:8e:e7:af:3c:fc:e1: 9d:2b:b7:38:9a:b5:58:b9:84:c8:7c:b5:ac:3e:6a: 3e:e6:a1:73:69:c1:0e:43:98:e8:05:1b:65:ad:1a: f7:5a:5a:a1:19:6a:e9:d9:da:7b:c8:4f:24:8c:47: 88:3b:bf:b3:11:a5:d1:63:00:15:c9:1c:81:a3:2b: c7:84:b4:81:32:77:58:8b:9c:af:6d:d7:89:1e:c6: 0e:48:35:79:7e:1f:d2:f8:5c:36:6e:f6:7a:65:1a: a5:fa:43:49:c1:da:5c:88:6f:67:ab:08:0a:18:38: 9e:54:3a:f1:c5:49:52:7f:b8:67:5d:ec:18:99:c8: ed:17:15:8a:c3:65:01:ca:bb:0d:53:1e:12:48:a5: 53:bc:21:53:d7:97:b0:81:29:4d:88:96:f9:dd:98: 44:f6:ae:ee:40:6d:a7:06:de:57:f3:b9:9f:71:ba: fe:30:ef:79:b8:27:70:5c:55:6e:55:28:9c:03:2b: 7b:9f:6a:0b:3a:4b:6b:b9:3f:8a:f3:a0:73:66:ce: 07:f3:a0:fe:60:83:47:69:b3:c8:f5:90:02:12:1e: 37:37:22:72:f8:fd:c6:f1:a5:7d:73:85:6d:9a:49: f8:90:b4:c3:67:42:ef:ba:6c:05:39:4a:bb:d2:40: 1c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:74:6A:CF:64:EA:08:15:7F:CE:5C:19:65:81:0C:B6:76:11:1E:3C X509v3 Authority Key Identifier: keyid:A7:79:79:1A:53:70:C1:CD:57:E4:93:D9:49:F9:1E:FB:CD:A6:61:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p3l5GlNwwc1X5JPZSfke-82mYX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:46:d0:89:c4:22:2d:b9:56:c3:17:77:e2:5a:0b:5a:54:94: 33:71:ca:b5:83:06:8b:14:f8:af:ae:4c:0c:19:34:cc:6d:5e: e7:28:f3:b8:2b:ca:c8:69:36:15:b4:14:6c:1b:f9:3e:c0:30: 97:52:39:f9:ed:c9:09:0c:ea:23:bc:e8:12:23:b8:f1:cc:7c: f6:66:b1:90:57:49:38:34:12:a1:63:90:96:05:c0:cd:d7:89: 14:96:47:c5:16:6e:3d:60:d0:1d:6a:80:c1:a2:2e:f2:76:f9: 34:99:d9:ee:59:89:2f:34:5e:43:c5:c0:f6:c7:96:3f:f7:32: 54:d5:07:d1:20:34:f8:56:ea:42:99:0f:a7:e6:d8:9b:5a:b6: 1c:a3:8f:6f:9e:86:f1:29:9f:8c:49:19:58:4f:37:53:ce:7c: 00:2c:8b:ee:6e:e4:b0:fb:9b:ea:7d:a5:78:b8:23:51:22:5f: a4:b1:14:7a:eb:fb:e0:61:30:6d:b1:e4:53:0f:0c:6c:9f:b9: e7:a0:8f:18:b2:62:5b:fa:a8:44:03:aa:0d:10:1b:a9:f2:b9: d2:c6:18:4c:a6:04:39:01:bf:c1:fa:57:7d:77:63:2f:9d:08: 62:c2:f7:45:5a:8e:37:a0:0e:13:7d:78:4f:b8:9b:51:3e:de: 88:03:6f:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlegBmBSim/e2AFsL2aJQGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3Nzk3OTFhNTM3MGMxY2Q1N2U0OTNkOTQ5ZjkxZWZiY2Rh NjYxN2UwHhcNMjUxMjI4MTUwMDUyWhcNMjUxMjI5MTUwMDUyWjAzMTEwLwYDVQQD EyhmZDc0NmFjZjY0ZWEwODE1N2ZjZTVjMTk2NTgxMGNiNjc2MTExZTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BcBsniB/FmO5688/OGdK7c4mrVY uYTIfLWsPmo+5qFzacEOQ5joBRtlrRr3WlqhGWrp2dp7yE8kjEeIO7+zEaXRYwAV yRyBoyvHhLSBMndYi5yvbdeJHsYOSDV5fh/S+Fw2bvZ6ZRql+kNJwdpciG9nqwgK GDieVDrxxUlSf7hnXewYmcjtFxWKw2UByrsNUx4SSKVTvCFT15ewgSlNiJb53ZhE 9q7uQG2nBt5X87mfcbr+MO95uCdwXFVuVSicAyt7n2oLOktruT+K86BzZs4H86D+ YINHabPI9ZACEh43NyJy+P3G8aV9c4Vtmkn4kLTDZ0LvumwFOUq70kAcPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP10as9k6ggVf85cGWWBDLZ2ER48MB8GA1UdIwQY MBaAFKd5eRpTcMHNV+ST2Un5HvvNpmF+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDNsNUdsTnd3YzFYNUpQWlNma2UtODJtWVg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC80ZWViMjktNWJkZC00OGI2LTk5NTQt NGQ4YWNjYmE2OWRjLzEvcDNsNUdsTnd3YzFYNUpQWlNma2UtODJtWVg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC80ZWViMjktNWJkZC00OGI2LTk5NTQtNGQ4YWNjYmE2OWRj LzEvcDNsNUdsTnd3YzFYNUpQWlNma2UtODJtWVg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABUbQicQi LblWwxd34loLWlSUM3HKtYMGixT4r65MDBk0zG1e5yjzuCvKyGk2FbQUbBv5PsAw l1I5+e3JCQzqI7zoEiO48cx89maxkFdJODQSoWOQlgXAzdeJFJZHxRZuPWDQHWqA waIu8nb5NJnZ7lmJLzReQ8XA9seWP/cyVNUH0SA0+FbqQpkPp+bYm1q2HKOPb56G 8SmfjEkZWE83U858ACyL7m7ksPub6n2leLgjUSJfpLEUeuv74GEwbbHkUw8MbJ+5 56CPGLJiW/qoRAOqDRAbqfK50sYYTKYEOQG/wfpXfXdjL50IYsL3RVqON6AOE314 T7ibUT7eiANvwQ== -----END CERTIFICATE-----Generated at Sun Dec 28 20:17:49 2025 by rpki-client