This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft File: P1KMlfYICrE8sEl4PpJE0z2cSzI.mft (raw, json) Hash identifier: Gv2ljVIaMJyLg8QQ/eYDNrZ9OobV+g2/nX90bk1o+Gc= Subject key identifier: CF:94:57:19:58:F0:E0:F8:45:37:30:83:E3:4D:F1:08:92:5F:DB:09 Authority key identifier: 3F:52:8C:95:F6:08:0A:B1:3C:B0:49:78:3E:92:44:D3:3D:9C:4B:32 Certificate issuer: /CN=3f528c95f6080ab13cb049783e9244d33d9c4b32 Certificate serial: 019B3BD96B239E38E1882B253715696A3B7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1KMlfYICrE8sEl4PpJE0z2cSzI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft Manifest number: 169A Signing time: Sat 20 Dec 2025 13:01:02 +0000 Manifest this update: Sat 20 Dec 2025 13:01:02 +0000 Manifest next update: Sun 21 Dec 2025 13:01:02 +0000 Files and hashes: 1: P1KMlfYICrE8sEl4PpJE0z2cSzI.crl (hash: JnIHsCuC7ZlEtcwhftryF8vl8mNxIJXj7Z+V8cYASDA=) 2: w5HnLtF4Me5n7OHUmGug2mAnL6U.roa (hash: AsJuclUazy6myQDlUyLOaCVJ9azdwtM7AhIo+Ahv/h8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.crl rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft rsync://rpki.ripe.net/repository/DEFAULT/P1KMlfYICrE8sEl4PpJE0z2cSzI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:6b:23:9e:38:e1:88:2b:25:37:15:69:6a:3b:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f528c95f6080ab13cb049783e9244d33d9c4b32 Validity Not Before: Dec 20 13:01:02 2025 GMT Not After : Dec 21 13:01:02 2025 GMT Subject: CN=cf94571958f0e0f845373083e34df108925fdb09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:fe:88:a8:d7:43:8f:b1:3a:bc:f4:c8:ff:ad: 1b:45:54:a4:1f:b5:71:7d:18:b5:1a:05:a0:3c:4b: be:da:97:d6:7e:27:58:b6:02:83:2f:16:ce:ac:19: 36:cc:32:4b:08:f1:cc:cb:f0:19:d9:73:92:c5:ae: 17:98:1d:d0:91:04:ab:e3:5a:27:c4:35:27:9f:a2: 06:ef:b9:b8:0d:8f:fa:eb:20:5f:18:9d:43:8b:90: 4a:3a:a5:51:aa:ea:7c:8e:ae:e9:d6:61:3b:ea:1d: 9b:ba:41:f8:2c:c9:31:0d:a1:18:41:2f:80:0c:90: 8e:6f:54:8e:77:3b:db:89:64:c5:84:8e:bb:67:98: e1:2d:26:5f:b8:10:e6:8c:33:7e:4e:64:78:e5:f4: 51:1e:0d:57:06:bf:9f:a8:d3:9f:81:d2:6e:9d:ab: ee:14:d1:f8:b3:13:80:08:3d:46:b7:07:2f:17:81: b5:c7:9b:b2:2c:bf:6b:6e:76:60:45:b7:76:c3:43: dc:6a:ce:8e:68:75:b2:37:63:ef:11:c4:c8:25:32: fc:3c:66:6e:5d:1e:0b:f2:03:92:5e:18:50:7a:44: 75:96:09:36:fa:5c:49:89:7d:db:a2:3c:aa:15:0d: af:5d:64:7f:4e:eb:28:3d:73:6f:18:8f:84:cb:20: e3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:94:57:19:58:F0:E0:F8:45:37:30:83:E3:4D:F1:08:92:5F:DB:09 X509v3 Authority Key Identifier: keyid:3F:52:8C:95:F6:08:0A:B1:3C:B0:49:78:3E:92:44:D3:3D:9C:4B:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1KMlfYICrE8sEl4PpJE0z2cSzI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:c8:21:9b:77:bf:fd:7e:f6:3a:7b:7f:ed:94:51:65:f2:00: 94:60:ee:9d:ff:fa:7d:0c:18:3f:d8:4b:d9:ec:82:2d:ce:ee: 90:84:55:c5:c6:5e:81:d4:98:3b:1c:8a:c6:ce:54:31:aa:c0: 69:6f:e4:f1:b9:32:47:56:8c:5f:a9:c7:b3:a7:4f:46:e4:64: 78:07:87:c6:6b:4c:56:4f:1d:3c:f0:09:70:92:9a:7d:fb:fe: 91:d0:21:cf:fb:e6:62:9c:a0:e2:45:10:ed:4e:ee:fd:21:b3: 69:6b:32:6b:42:58:34:b0:50:8f:49:52:46:ba:ce:41:70:b9: 0d:04:cf:3b:57:49:54:90:81:d6:3e:55:35:60:85:ee:72:47: 0f:6a:e5:7c:59:95:a9:a6:f6:54:70:86:11:ef:e6:a9:55:77: 1b:d5:02:f5:e1:da:46:61:57:54:35:8e:dd:b2:4f:4c:26:5c: 1f:a0:f2:69:f8:23:73:7b:5b:ea:7f:53:eb:97:c1:51:ec:67: f2:a5:2a:f1:18:7e:ea:a2:f9:f9:44:89:14:80:71:57:22:89: bf:e4:04:25:d1:f4:3b:57:59:28:65:89:45:dd:6d:a7:16:c8: 26:67:a9:6e:f7:48:39:ef:25:07:ec:59:e0:ef:5c:81:10:1c: 0d:6c:47:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72WsjnjjhiCslNxVpajt8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmNTI4Yzk1ZjYwODBhYjEzY2IwNDk3ODNlOTI0NGQzM2Q5 YzRiMzIwHhcNMjUxMjIwMTMwMTAyWhcNMjUxMjIxMTMwMTAyWjAzMTEwLwYDVQQD EyhjZjk0NTcxOTU4ZjBlMGY4NDUzNzMwODNlMzRkZjEwODkyNWZkYjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkP6IqNdDj7E6vPTI/60bRVSkH7Vx fRi1GgWgPEu+2pfWfidYtgKDLxbOrBk2zDJLCPHMy/AZ2XOSxa4XmB3QkQSr41on xDUnn6IG77m4DY/66yBfGJ1Di5BKOqVRqup8jq7p1mE76h2bukH4LMkxDaEYQS+A DJCOb1SOdzvbiWTFhI67Z5jhLSZfuBDmjDN+TmR45fRRHg1XBr+fqNOfgdJunavu FNH4sxOACD1GtwcvF4G1x5uyLL9rbnZgRbd2w0Pcas6OaHWyN2PvEcTIJTL8PGZu XR4L8gOSXhhQekR1lgk2+lxJiX3bojyqFQ2vXWR/TusoPXNvGI+EyyDjgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+UVxlY8OD4RTcwg+NN8QiSX9sJMB8GA1UdIwQY MBaAFD9SjJX2CAqxPLBJeD6SRNM9nEsyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDFLTWxmWUlDckU4c0VsNFBwSkUwejJjU3pJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9jMmZkZjItMmEwYS00NDNmLWI3ZTAt YTViZGJiMTQ1YTc4LzEvUDFLTWxmWUlDckU4c0VsNFBwSkUwejJjU3pJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9jMmZkZjItMmEwYS00NDNmLWI3ZTAtYTViZGJiMTQ1YTc4 LzEvUDFLTWxmWUlDckU4c0VsNFBwSkUwejJjU3pJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAicghm3e/ /X72Ont/7ZRRZfIAlGDunf/6fQwYP9hL2eyCLc7ukIRVxcZegdSYOxyKxs5UMarA aW/k8bkyR1aMX6nHs6dPRuRkeAeHxmtMVk8dPPAJcJKaffv+kdAhz/vmYpyg4kUQ 7U7u/SGzaWsya0JYNLBQj0lSRrrOQXC5DQTPO1dJVJCB1j5VNWCF7nJHD2rlfFmV qab2VHCGEe/mqVV3G9UC9eHaRmFXVDWO3bJPTCZcH6Dyafgjc3tb6n9T65fBUexn 8qUq8Rh+6qL5+USJFIBxVyKJv+QEJdH0O1dZKGWJRd1tpxbIJmepbvdIOe8lB+xZ 4O9cgRAcDWxHeA== -----END CERTIFICATE-----Generated at Sat Dec 20 18:51:33 2025 by rpki-client