This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft File: Pv3irXEjs6hgCAWIBbsQFva3P7A.mft (raw, json) Hash identifier: sxcB+yyJRWjGNzsl039tYyO9EujLA38SedIZPcSipgU= Subject key identifier: 6B:45:37:A8:59:A8:66:7C:E9:23:E6:C9:DA:1A:32:19:BC:5B:16:33 Authority key identifier: 3E:FD:E2:AD:71:23:B3:A8:60:08:05:88:05:BB:10:16:F6:B7:3F:B0 Certificate issuer: /CN=3efde2ad7123b3a86008058805bb1016f6b73fb0 Certificate serial: 019B416DC9FD56C671A36ADDBAD25D2DE8B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft Manifest number: 1314 Signing time: Sun 21 Dec 2025 15:01:12 +0000 Manifest this update: Sun 21 Dec 2025 15:01:12 +0000 Manifest next update: Mon 22 Dec 2025 15:01:12 +0000 Files and hashes: 1: Pv3irXEjs6hgCAWIBbsQFva3P7A.crl (hash: XiHlXMSkm8XxhfnWf3Z0+t30J39zDbsn76UwuwDxeR4=) 2: T5aiE1hBQ7IRSCWrSsHsYtBRcAg.roa (hash: 309chVwaxlsKtPuysVWOW95E7n0FUrlzdRWGLRMTzgM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.crl rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:c9:fd:56:c6:71:a3:6a:dd:ba:d2:5d:2d:e8:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3efde2ad7123b3a86008058805bb1016f6b73fb0 Validity Not Before: Dec 21 15:01:12 2025 GMT Not After : Dec 22 15:01:12 2025 GMT Subject: CN=6b4537a859a8667ce923e6c9da1a3219bc5b1633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9e:e4:85:da:c9:2f:4e:71:c3:0b:f6:d9:e6: 84:28:73:d8:01:61:59:92:00:48:a5:bb:ee:0a:60: 20:67:e6:8a:8a:7d:9c:8e:c6:27:80:f0:33:4c:84: 3c:d1:b7:d8:75:25:95:27:f5:62:11:32:7d:7b:14: 76:87:0d:28:7a:ce:9c:fa:fe:68:a0:53:89:31:b4: da:c1:fa:52:48:f0:a7:df:ea:26:55:1d:16:ac:81: 50:d9:38:32:ae:4e:7c:77:e4:2c:ef:4c:84:7c:69: ff:32:87:ea:44:d7:20:d0:98:21:e2:f1:e6:79:77: 08:60:f6:a1:96:e3:ff:4b:31:a6:c4:78:b1:c1:8c: f6:fb:06:6b:cc:fa:9c:97:13:4d:ea:f5:a4:ac:20: 72:31:00:55:6f:30:40:f3:b4:f3:cc:91:f0:dd:b8: d8:7d:91:3c:b8:a6:9f:3d:b5:b1:ee:c3:2e:cc:e7: 79:18:a7:14:da:65:42:ed:ca:34:b9:a8:b3:63:37: 54:d3:43:e3:0a:f8:fa:90:8a:4c:b1:fe:cf:a3:a1: ac:3b:3c:08:50:18:70:a7:b1:2d:17:f6:f0:0d:11: f1:ef:05:35:61:0e:f1:5c:b7:43:d9:a8:1c:3c:f7: 0b:97:f1:2a:aa:b6:5a:8a:71:33:73:05:14:3b:31: 29:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:45:37:A8:59:A8:66:7C:E9:23:E6:C9:DA:1A:32:19:BC:5B:16:33 X509v3 Authority Key Identifier: keyid:3E:FD:E2:AD:71:23:B3:A8:60:08:05:88:05:BB:10:16:F6:B7:3F:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:33:59:aa:b3:15:29:e7:82:77:e6:2a:eb:04:1b:80:05:af: cc:47:96:c1:67:2b:f7:c0:73:82:11:98:3a:42:8c:23:4b:6c: 81:7c:f4:fa:de:f2:a5:47:15:fb:50:ce:ec:49:85:4a:dd:22: 39:f3:ab:43:0f:48:a9:45:b9:ad:bd:9d:7b:c5:e4:09:00:ba: 03:f6:cc:94:52:e8:04:f0:2e:d4:51:2f:60:b4:85:0d:7a:2e: 5d:b6:8a:f1:52:82:55:d0:7d:74:83:35:e4:83:6c:ef:5d:d0: 00:67:b7:4e:04:b1:1e:61:4e:6f:d4:30:4d:1e:c7:07:a1:68: 19:9f:3c:5e:4b:66:e1:ee:4f:72:db:62:0f:8a:96:e7:29:71: 48:7b:6a:33:cf:58:fe:4a:7a:7c:44:71:92:70:2a:68:82:56: 3f:ea:06:77:96:b4:37:e3:da:23:af:26:10:83:cd:d9:7d:8f: 44:0c:51:f1:dd:91:97:f8:5f:0e:54:be:a5:40:97:32:b8:94: a5:78:4d:e2:dd:09:7b:30:a1:c7:7e:f8:6a:aa:6f:1a:ce:29: a3:7d:11:c2:d4:cd:cf:63:24:67:6f:14:72:b2:25:39:5f:0c: f6:7c:2e:d8:73:b0:8a:c9:95:3c:bd:3b:67:0b:73:43:ac:de: 08:4a:42:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbcn9VsZxo2rdutJdLeizMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZmRlMmFkNzEyM2IzYTg2MDA4MDU4ODA1YmIxMDE2ZjZi NzNmYjAwHhcNMjUxMjIxMTUwMTEyWhcNMjUxMjIyMTUwMTEyWjAzMTEwLwYDVQQD Eyg2YjQ1MzdhODU5YTg2NjdjZTkyM2U2YzlkYTFhMzIxOWJjNWIxNjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZ7khdrJL05xwwv22eaEKHPYAWFZ kgBIpbvuCmAgZ+aKin2cjsYngPAzTIQ80bfYdSWVJ/ViETJ9exR2hw0oes6c+v5o oFOJMbTawfpSSPCn3+omVR0WrIFQ2Tgyrk58d+Qs70yEfGn/MofqRNcg0Jgh4vHm eXcIYPahluP/SzGmxHixwYz2+wZrzPqclxNN6vWkrCByMQBVbzBA87TzzJHw3bjY fZE8uKafPbWx7sMuzOd5GKcU2mVC7co0uaizYzdU00PjCvj6kIpMsf7Po6GsOzwI UBhwp7EtF/bwDRHx7wU1YQ7xXLdD2agcPPcLl/EqqrZainEzcwUUOzEpGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGtFN6hZqGZ86SPmydoaMhm8WxYzMB8GA1UdIwQY MBaAFD794q1xI7OoYAgFiAW7EBb2tz+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHYzaXJYRWpzNmhnQ0FXSUJic1FGdmEzUDdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9kNjE3OWYtNGJkYS00ODcxLTg5Nzct YzgwZDMzYTI2NTM1LzEvUHYzaXJYRWpzNmhnQ0FXSUJic1FGdmEzUDdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9kNjE3OWYtNGJkYS00ODcxLTg5NzctYzgwZDMzYTI2NTM1 LzEvUHYzaXJYRWpzNmhnQ0FXSUJic1FGdmEzUDdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZTNZqrMV KeeCd+Yq6wQbgAWvzEeWwWcr98BzghGYOkKMI0tsgXz0+t7ypUcV+1DO7EmFSt0i OfOrQw9IqUW5rb2de8XkCQC6A/bMlFLoBPAu1FEvYLSFDXouXbaK8VKCVdB9dIM1 5INs713QAGe3TgSxHmFOb9QwTR7HB6FoGZ88Xktm4e5PcttiD4qW5ylxSHtqM89Y /kp6fERxknAqaIJWP+oGd5a0N+PaI68mEIPN2X2PRAxR8d2Rl/hfDlS+pUCXMriU pXhN4t0JezChx374aqpvGs4po30RwtTNz2MkZ28UcrIlOV8M9nwu2HOwismVPL07 ZwtzQ6zeCEpCJA== -----END CERTIFICATE-----Generated at Sun Dec 21 20:54:02 2025 by rpki-client