This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.mft File: PI0Z2SQBkcNql0ti35PCIUNtm90.mft (raw, json) Hash identifier: Ul744nB+mF77Tu+kqFtFofm8vPo84sxKKIEEwvlzK4M= Subject key identifier: 84:37:5E:C4:03:1B:99:A3:02:36:FF:25:F2:15:B0:33:AD:D2:E8:32 Authority key identifier: 3C:8D:19:D9:24:01:91:C3:6A:97:4B:62:DF:93:C2:21:43:6D:9B:DD Certificate issuer: /CN=3c8d19d9240191c36a974b62df93c221436d9bdd Certificate serial: 019B6CC5CA67C2AE3B33EF2055710DF332DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PI0Z2SQBkcNql0ti35PCIUNtm90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.mft Manifest number: 0BDB Signing time: Tue 30 Dec 2025 01:01:00 +0000 Manifest this update: Tue 30 Dec 2025 01:01:00 +0000 Manifest next update: Wed 31 Dec 2025 01:01:00 +0000 Files and hashes: 1: PI0Z2SQBkcNql0ti35PCIUNtm90.crl (hash: Oald2ccAu1iZocvkrfB4XNcYOGJYsS2kL+HBklRYDlA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.crl rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.mft rsync://rpki.ripe.net/repository/DEFAULT/PI0Z2SQBkcNql0ti35PCIUNtm90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 23:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c5:ca:67:c2:ae:3b:33:ef:20:55:71:0d:f3:32:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c8d19d9240191c36a974b62df93c221436d9bdd Validity Not Before: Dec 30 01:01:00 2025 GMT Not After : Dec 31 01:01:00 2025 GMT Subject: CN=84375ec4031b99a30236ff25f215b033add2e832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3e:b5:bd:f8:4d:f8:c8:4b:b6:3f:d1:5d:86: 67:c9:35:e0:57:4c:16:2a:c4:41:c1:59:50:ad:46: bb:45:51:ee:88:b6:af:3a:3c:40:40:26:8b:fe:a9: e2:27:f4:b1:d9:ac:31:50:c1:2b:44:61:a1:a4:c9: 66:63:e7:ea:cc:d2:dc:e4:1a:52:18:fe:5f:a9:c0: df:1f:09:62:64:fe:cb:20:8c:4f:10:8f:9e:c4:30: 4a:57:26:04:d4:03:b5:54:45:49:d4:09:06:ba:ec: ab:74:f5:43:67:67:7e:5b:3b:ac:64:be:2c:4e:e2: 08:99:9b:37:7d:b1:26:17:54:4c:ee:70:a9:b8:aa: 20:9a:7c:f8:2c:74:d3:2e:d3:f0:da:12:81:24:56: ff:dd:a6:02:80:6a:a8:57:74:87:15:40:81:e0:0d: bd:5f:77:3d:46:66:f4:78:cc:78:b5:5d:a9:b9:b3: e9:05:d7:06:cf:13:fc:b6:7f:c5:0f:74:13:d0:3d: 3a:a7:22:8c:73:8a:7f:5c:7c:d3:53:25:2f:3f:ef: bb:c9:0c:db:b1:58:68:8f:2b:5b:29:0f:80:75:6a: ff:b5:ad:9c:64:59:b9:86:aa:c9:a5:45:15:88:4a: 02:5f:10:49:fd:5d:d6:23:4f:52:89:9b:b1:08:b1: e6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:37:5E:C4:03:1B:99:A3:02:36:FF:25:F2:15:B0:33:AD:D2:E8:32 X509v3 Authority Key Identifier: keyid:3C:8D:19:D9:24:01:91:C3:6A:97:4B:62:DF:93:C2:21:43:6D:9B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PI0Z2SQBkcNql0ti35PCIUNtm90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:9f:15:77:2c:6b:12:35:18:69:e3:d3:ba:8d:82:dc:ee:1e: 3c:f6:56:09:a9:d3:cb:2f:b5:f5:f0:07:e2:09:2c:48:9f:41: 78:64:1e:3b:0a:d0:14:9c:71:6a:49:59:c2:c6:c3:e8:14:5b: 00:7f:c2:f6:e3:af:dc:a2:7a:4c:78:ee:79:4c:88:b5:21:0b: ea:32:75:4c:76:c2:77:6c:ef:f5:d4:2b:f7:79:09:43:00:7e: fd:39:88:c4:6a:04:92:00:3c:30:57:cc:05:f8:b5:54:ba:52: 15:e8:48:a8:4e:1f:19:50:8b:b3:23:ff:71:a2:77:c0:c7:46: 99:f2:ce:1b:01:aa:d7:87:37:dc:7c:ec:35:fd:29:76:48:27: f0:8a:57:2e:fa:4c:7c:c0:9c:7b:6b:e3:df:a1:fb:fe:d3:9b: 64:73:38:b8:9d:af:8b:da:21:73:bd:78:5c:bc:74:82:a8:63: 79:f2:ff:86:c8:bf:70:9e:25:c2:b8:6d:a5:82:1a:30:c0:7a: e0:39:38:58:f9:6c:4a:24:55:be:85:fb:76:59:03:66:35:6b: 9f:7f:85:e7:0b:c7:53:76:a6:52:25:15:f3:6d:5b:9c:e3:b0: d1:b1:66:aa:e3:46:39:da:7b:b0:2c:a0:1b:b1:e6:44:a8:9e: 4b:10:71:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxcpnwq47M+8gVXEN8zLbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjOGQxOWQ5MjQwMTkxYzM2YTk3NGI2MmRmOTNjMjIxNDM2 ZDliZGQwHhcNMjUxMjMwMDEwMTAwWhcNMjUxMjMxMDEwMTAwWjAzMTEwLwYDVQQD Eyg4NDM3NWVjNDAzMWI5OWEzMDIzNmZmMjVmMjE1YjAzM2FkZDJlODMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxT61vfhN+MhLtj/RXYZnyTXgV0wW KsRBwVlQrUa7RVHuiLavOjxAQCaL/qniJ/Sx2awxUMErRGGhpMlmY+fqzNLc5BpS GP5fqcDfHwliZP7LIIxPEI+exDBKVyYE1AO1VEVJ1AkGuuyrdPVDZ2d+WzusZL4s TuIImZs3fbEmF1RM7nCpuKogmnz4LHTTLtPw2hKBJFb/3aYCgGqoV3SHFUCB4A29 X3c9Rmb0eMx4tV2pubPpBdcGzxP8tn/FD3QT0D06pyKMc4p/XHzTUyUvP++7yQzb sVhojytbKQ+AdWr/ta2cZFm5hqrJpUUViEoCXxBJ/V3WI09SiZuxCLHmQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIQ3XsQDG5mjAjb/JfIVsDOt0ugyMB8GA1UdIwQY MBaAFDyNGdkkAZHDapdLYt+TwiFDbZvdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEkwWjJTUUJrY05xbDB0aTM1UENJVU50bTkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS84MDBlMzktZjliMS00ZjhkLTljMTAt MTAzNTdiODdjYjIzLzEvUEkwWjJTUUJrY05xbDB0aTM1UENJVU50bTkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS84MDBlMzktZjliMS00ZjhkLTljMTAtMTAzNTdiODdjYjIz LzEvUEkwWjJTUUJrY05xbDB0aTM1UENJVU50bTkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc58Vdyxr EjUYaePTuo2C3O4ePPZWCanTyy+19fAH4gksSJ9BeGQeOwrQFJxxaklZwsbD6BRb AH/C9uOv3KJ6THjueUyItSEL6jJ1THbCd2zv9dQr93kJQwB+/TmIxGoEkgA8MFfM Bfi1VLpSFehIqE4fGVCLsyP/caJ3wMdGmfLOGwGq14c33HzsNf0pdkgn8IpXLvpM fMCce2vj36H7/tObZHM4uJ2vi9ohc714XLx0gqhjefL/hsi/cJ4lwrhtpYIaMMB6 4Dk4WPlsSiRVvoX7dlkDZjVrn3+F5wvHU3amUiUV821bnOOw0bFmquNGOdp7sCyg G7HmRKieSxBx1A== -----END CERTIFICATE-----Generated at Tue Dec 30 04:53:32 2025 by rpki-client