This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft File: P1vEQBQoW28-KHKuz11PM-Jozos.mft (raw, json) Hash identifier: bCy5PVG4p/eddA1scxQLLO4bFMEzR5NUpvvqko76rAI= Subject key identifier: 28:54:35:32:0A:29:01:88:18:93:BB:C8:00:93:24:77:89:03:23:78 Authority key identifier: 3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B Certificate issuer: /CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b Certificate serial: 019B6844278AB90F3A8BE9D6B21DC0279A89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft Manifest number: 089D Signing time: Mon 29 Dec 2025 04:00:55 +0000 Manifest this update: Mon 29 Dec 2025 04:00:55 +0000 Manifest next update: Tue 30 Dec 2025 04:00:55 +0000 Files and hashes: 1: AcEkQsHgOk9cJvafcwY_24-gqJU.roa (hash: P0WFMbng9Ro3ND0yeTy1ArY8fd/+6N/p4Vx6hJOnIpk=) 2: AhGacAZRO8Gx3hNBgiDjl4oZgqI.roa (hash: /EpJOq122VUgjLXObaWDOaWwB7lmX3CrZN3WS11mATY=) 3: P1vEQBQoW28-KHKuz11PM-Jozos.crl (hash: /ntRnIrES2dv7JpfGzKB3EddQuNgogRXKDrEhcQc5XM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 21:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:44:27:8a:b9:0f:3a:8b:e9:d6:b2:1d:c0:27:9a:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b Validity Not Before: Dec 29 04:00:55 2025 GMT Not After : Dec 30 04:00:55 2025 GMT Subject: CN=285435320a2901881893bbc80093247789032378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:38:38:be:24:f2:cf:aa:fd:26:de:46:8a:81: c9:94:95:cb:86:6f:29:57:cb:00:74:8e:9f:e4:af: d9:93:0d:15:f8:29:e7:51:1f:5b:6a:c8:56:09:41: c6:1c:2f:32:77:34:72:b1:4a:be:3c:11:9a:1d:03: 40:2f:17:ed:19:57:ee:90:dc:cb:b1:ec:f2:a1:f7: 6f:e5:43:c2:56:24:d5:1f:29:2b:a2:1b:e4:ad:e2: 2d:cb:10:e6:45:e4:dc:2d:fc:1c:4b:c2:b6:b9:fa: 63:f2:9a:b0:33:cd:85:30:71:da:63:c0:4f:ee:5a: ae:d5:0f:77:00:61:16:32:e8:13:5f:b8:5d:60:83: 5e:70:d0:25:9f:6a:a0:54:ba:0c:07:54:b5:79:39: 85:bc:06:bd:f7:23:4f:34:47:ff:3f:cb:01:af:62: 66:ac:2b:8a:43:ee:14:bd:e3:04:07:26:3c:ac:9e: ad:64:d1:5f:65:3a:73:05:76:c9:33:95:76:d9:10: d2:7a:d6:ce:0e:2f:df:1c:f2:d7:a8:0a:e3:68:7a: c2:42:0f:a3:29:fa:3e:59:ff:55:69:ea:6b:a4:e3: 16:35:a1:b7:fe:84:02:86:8d:a8:55:f0:12:df:43: a1:78:e2:49:6d:f9:d4:87:3e:8e:43:d1:24:47:d1: dc:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:54:35:32:0A:29:01:88:18:93:BB:C8:00:93:24:77:89:03:23:78 X509v3 Authority Key Identifier: keyid:3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:53:42:bf:f1:78:0f:a2:bf:6a:87:20:d3:2b:03:be:3a:3c: 3e:6c:8b:b5:7a:2e:59:64:28:37:e8:72:49:be:70:da:7e:a6: e1:ca:1d:c2:64:2c:7f:8b:9c:4f:2f:98:bf:95:9b:17:c6:c6: 24:23:9b:22:e8:2e:0c:c2:65:5f:5f:c5:c8:df:5b:cf:09:9b: 7a:07:7e:da:b2:ec:e9:ac:3d:be:1f:74:17:f9:e8:fa:39:1a: 6d:94:fa:68:4f:8a:09:e0:6e:5a:b4:b0:0b:3f:0f:d1:64:d0: b1:45:8e:91:65:22:ed:80:76:cd:8c:1f:07:b4:a9:1a:c8:08: b3:f9:46:27:b9:3d:29:ff:88:0c:40:7c:be:d0:3a:48:99:cc: 72:34:a6:95:13:ae:2e:fa:cc:62:46:62:17:b2:0e:44:68:88: 06:a6:eb:06:94:05:93:c2:31:3c:50:48:8a:e2:7d:e0:c2:99: 79:c3:54:38:ff:e6:4c:88:fc:b9:da:40:eb:d7:86:65:c6:dc: 4f:37:89:15:ad:98:d0:0d:74:59:87:98:0b:44:8d:ad:70:ac: 2d:f5:e3:f8:5b:50:00:6d:c6:65:c5:14:35:e2:0b:16:69:54: 17:86:1f:0d:7c:94:5c:df:31:e8:35:d2:85:15:5e:d7:c8:f4: 86:d3:9e:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtoRCeKuQ86i+nWsh3AJ5qJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmNWJjNDQwMTQyODViNmYzZTI4NzJhZWNmNWQ0ZjMzZTI2 OGNlOGIwHhcNMjUxMjI5MDQwMDU1WhcNMjUxMjMwMDQwMDU1WjAzMTEwLwYDVQQD EygyODU0MzUzMjBhMjkwMTg4MTg5M2JiYzgwMDkzMjQ3Nzg5MDMyMzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTg4viTyz6r9Jt5GioHJlJXLhm8p V8sAdI6f5K/Zkw0V+CnnUR9bashWCUHGHC8ydzRysUq+PBGaHQNALxftGVfukNzL sezyofdv5UPCViTVHykrohvkreItyxDmReTcLfwcS8K2ufpj8pqwM82FMHHaY8BP 7lqu1Q93AGEWMugTX7hdYINecNAln2qgVLoMB1S1eTmFvAa99yNPNEf/P8sBr2Jm rCuKQ+4UveMEByY8rJ6tZNFfZTpzBXbJM5V22RDSetbODi/fHPLXqArjaHrCQg+j Kfo+Wf9VaeprpOMWNaG3/oQCho2oVfAS30OheOJJbfnUhz6OQ9EkR9HcawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFChUNTIKKQGIGJO7yACTJHeJAyN4MB8GA1UdIwQY MBaAFD9bxEAUKFtvPihyrs9dTzPiaM6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDF2RVFCUW9XMjgtS0hLdXoxMVBNLUpvem9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zMjI2OTMtZTU4Yi00OGUyLWJkZDkt MDI5NTNjZTYzODQzLzEvUDF2RVFCUW9XMjgtS0hLdXoxMVBNLUpvem9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8zMjI2OTMtZTU4Yi00OGUyLWJkZDktMDI5NTNjZTYzODQz LzEvUDF2RVFCUW9XMjgtS0hLdXoxMVBNLUpvem9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANVNCv/F4 D6K/aocg0ysDvjo8PmyLtXouWWQoN+hySb5w2n6m4codwmQsf4ucTy+Yv5WbF8bG JCObIuguDMJlX1/FyN9bzwmbegd+2rLs6aw9vh90F/no+jkabZT6aE+KCeBuWrSw Cz8P0WTQsUWOkWUi7YB2zYwfB7SpGsgIs/lGJ7k9Kf+IDEB8vtA6SJnMcjSmlROu LvrMYkZiF7IORGiIBqbrBpQFk8IxPFBIiuJ94MKZecNUOP/mTIj8udpA69eGZcbc TzeJFa2Y0A10WYeYC0SNrXCsLfXj+FtQAG3GZcUUNeILFmlUF4YfDXyUXN8x6DXS hRVe18j0htOeQQ== -----END CERTIFICATE-----Generated at Mon Dec 29 06:50:45 2025 by rpki-client