This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
File: P1vEQBQoW28-KHKuz11PM-Jozos.mft (raw, json)
Hash identifier: DqdOdNEc8I1XhiuhfMI1diWuXH4RCkR10EeMUSNhN+0=
Subject key identifier: 77:7C:72:76:2D:A9:4B:82:F2:70:79:CF:E6:8B:EF:CA:9D:09:15:DF
Authority key identifier: 3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B
Certificate issuer: /CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b
Certificate serial: 019B39EB431611E24764CBD74A3C8DA1BE23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
Manifest number: 0885
Signing time: Sat 20 Dec 2025 04:01:17 +0000
Manifest this update: Sat 20 Dec 2025 04:01:17 +0000
Manifest next update: Sun 21 Dec 2025 04:01:17 +0000
Files and hashes: 1: AcEkQsHgOk9cJvafcwY_24-gqJU.roa (hash: P0WFMbng9Ro3ND0yeTy1ArY8fd/+6N/p4Vx6hJOnIpk=)
2: AhGacAZRO8Gx3hNBgiDjl4oZgqI.roa (hash: /EpJOq122VUgjLXObaWDOaWwB7lmX3CrZN3WS11mATY=)
3: P1vEQBQoW28-KHKuz11PM-Jozos.crl (hash: C784passF08mUH/1M/z8YAq8vf06Py2b6JxF8d6fALw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:39:eb:43:16:11:e2:47:64:cb:d7:4a:3c:8d:a1:be:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b
Validity
Not Before: Dec 20 04:01:17 2025 GMT
Not After : Dec 21 04:01:17 2025 GMT
Subject: CN=777c72762da94b82f27079cfe68befca9d0915df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f0:4c:ea:57:83:e5:68:b2:83:f6:1f:5f:58:
15:6a:21:c9:6e:0b:13:d3:41:f0:0a:ba:5d:e9:9b:
1c:39:73:71:50:a6:a0:f4:9c:24:9a:1f:7e:45:d3:
c7:13:fc:c8:a8:7a:ba:26:b9:4d:20:c3:f4:2e:3d:
a8:93:fc:9d:b9:3d:78:bc:fd:00:4c:96:84:95:5b:
58:8b:c0:4e:cf:06:30:44:c7:10:e4:18:bd:80:25:
e4:0b:eb:3a:90:78:32:90:ba:bd:7d:ed:a2:9d:1e:
c0:d0:36:65:54:fd:18:88:6b:f5:e2:ff:4e:85:78:
cf:3e:20:9a:b1:4d:57:8a:07:26:43:1e:c6:d6:9c:
1c:cf:3c:72:25:2a:1b:c4:e3:ad:58:e4:15:3d:f0:
57:3d:c0:14:c6:52:17:be:10:54:91:d5:97:c9:7a:
49:f5:50:39:18:0d:41:72:42:5c:7c:68:6c:03:33:
89:25:42:9a:82:3f:3c:b1:f3:2d:76:a8:f6:9d:e9:
fc:b9:bc:ab:dc:95:b8:4b:bb:ef:ac:22:09:21:1b:
92:d7:0b:08:26:95:ea:ab:54:0d:42:91:b8:83:fc:
4b:91:ec:c4:90:46:38:80:bb:ca:1e:6c:da:98:ea:
aa:62:93:cc:de:1c:91:0b:6f:72:d9:bd:b2:76:49:
19:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:7C:72:76:2D:A9:4B:82:F2:70:79:CF:E6:8B:EF:CA:9D:09:15:DF
X509v3 Authority Key Identifier:
keyid:3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:30:71:66:99:b6:a3:03:c0:3e:f3:84:79:9c:1f:07:6a:00:
99:8f:de:fe:09:8c:ee:9b:2f:0d:4c:a0:dd:76:30:51:0f:40:
48:fe:c5:b9:f7:4f:2e:2f:e3:13:c8:91:e7:6a:ac:e2:6c:17:
62:97:a5:5e:d2:c2:9f:f7:82:1c:74:c4:8f:b5:ff:cc:e8:ea:
52:ef:7d:6c:e7:a0:53:5a:35:16:33:32:49:d7:f1:66:b7:07:
37:6f:d6:74:e1:91:6a:91:bb:8e:80:ec:9e:13:32:f4:14:71:
9a:5b:d9:41:9e:75:5f:01:11:88:1f:54:f0:46:b5:62:b7:25:
00:b1:e0:9a:66:a4:c3:1a:65:eb:e9:5b:ae:21:c6:ec:43:ef:
63:00:96:02:a6:5f:02:d1:d8:41:72:7f:8b:88:49:87:d5:48:
4e:f5:a1:73:22:2e:13:7b:de:e9:eb:39:51:a2:2f:9b:d6:b4:
a3:25:96:3a:a9:1e:bf:36:89:35:f6:58:d3:6d:41:fe:a7:ec:
37:36:08:22:98:76:80:cf:06:6b:1c:34:3a:12:76:5f:01:92:
6c:43:61:d2:e7:6f:69:7d:86:a0:3e:fc:8d:99:60:e6:90:d7:
17:78:6c:cb:8a:12:1a:b7:71:7c:74:0d:cd:30:97:d4:ae:7e:
80:9f:fe:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 13:57:34 2025 by rpki-client