This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft File: P2U3Wk029crhof4kWKOAUmz-22o.mft (raw, json) Hash identifier: Y43PK9+QawNX6aUgSrzWrErICHpaKxYqHz8LtT6Nl7Y= Subject key identifier: E6:65:65:BD:7B:A1:5C:59:41:B2:CD:08:F8:CE:75:71:74:AB:36:1D Authority key identifier: 3F:65:37:5A:4D:36:F5:CA:E1:A1:FE:24:58:A3:80:52:6C:FE:DB:6A Certificate issuer: /CN=3f65375a4d36f5cae1a1fe2458a380526cfedb6a Certificate serial: 019B68EA0390746175DFDDA9EA6B4778B87A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft Manifest number: 02FD Signing time: Mon 29 Dec 2025 07:02:05 +0000 Manifest this update: Mon 29 Dec 2025 07:02:05 +0000 Manifest next update: Tue 30 Dec 2025 07:02:05 +0000 Files and hashes: 1: 9-o0NLiGvlKmMx-qIL22lBoBavY.roa (hash: x3fjMZ9f1cmTHw/gRrQuIfz02fOQCT025xB0UcuPW+Y=) 2: P2U3Wk029crhof4kWKOAUmz-22o.crl (hash: is9E4mPzD8LrP1ajFZeS/Al0IMwssmi4OPzvLuKHwvA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 07:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:ea:03:90:74:61:75:df:dd:a9:ea:6b:47:78:b8:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f65375a4d36f5cae1a1fe2458a380526cfedb6a Validity Not Before: Dec 29 07:02:05 2025 GMT Not After : Dec 30 07:02:05 2025 GMT Subject: CN=e66565bd7ba15c5941b2cd08f8ce757174ab361d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:54:77:41:a5:1a:22:ce:ed:e4:00:4f:78:ab: e9:37:84:56:92:53:92:dc:33:bf:8d:30:02:91:4d: 95:d5:bd:98:69:79:22:52:94:e2:19:6c:9f:fe:a7: eb:d8:7b:84:3d:93:2a:c9:a2:f7:01:df:6f:86:fb: 45:69:96:d0:d8:e0:f2:a8:6d:c4:b7:10:c7:45:a1: f6:d3:82:7a:a5:e1:fd:1b:51:65:8b:18:b6:99:eb: 8f:47:a2:3b:58:b4:f8:bf:82:a7:b0:76:3e:e6:b7: 38:c5:b4:db:0a:ce:ba:22:99:6d:39:58:f0:b7:b1: c3:2c:7f:b8:25:b5:2a:41:6f:63:ef:0b:cc:10:9d: e1:e1:22:a8:40:27:34:97:d5:d3:92:ad:af:6f:58: 4e:af:38:d1:9c:89:cf:f7:b9:8b:9a:9f:0f:21:b3: 5a:82:80:34:66:65:cf:42:c2:49:ea:56:60:21:8d: 28:cc:fd:8f:96:1b:18:50:24:98:c2:ef:f5:94:39: 8e:bb:97:37:e4:ad:ec:38:df:74:69:ab:17:57:eb: 89:51:53:e0:5c:af:fa:42:ef:49:97:a8:fa:89:19: b0:09:13:f6:ba:7e:13:b7:3a:6e:a5:3a:78:37:f0: 42:9e:61:52:28:59:66:6a:d6:30:53:ca:ab:99:07: 70:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:65:65:BD:7B:A1:5C:59:41:B2:CD:08:F8:CE:75:71:74:AB:36:1D X509v3 Authority Key Identifier: keyid:3F:65:37:5A:4D:36:F5:CA:E1:A1:FE:24:58:A3:80:52:6C:FE:DB:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:0c:2c:5c:02:fd:d5:34:f2:18:a6:7e:17:a1:4a:bd:04:fe: 64:7e:3d:58:95:83:a9:69:c7:45:8d:53:6a:18:11:c3:ed:80: a4:21:36:04:f7:98:9b:11:1a:58:48:51:c0:41:40:f1:75:06: 29:41:5b:e8:3c:d7:35:f8:b1:a9:4c:ac:21:81:34:a7:4a:91: ef:9d:80:d8:37:2b:63:ca:e5:e3:3c:51:d7:99:d8:1f:4c:e7: d3:91:13:7c:bd:69:e5:67:b8:a7:a4:de:4b:66:a7:eb:4c:c9: 6e:d9:42:03:99:fe:0a:ff:50:60:4f:3d:c3:66:7e:c9:91:54: 3b:9c:e7:12:ed:09:d5:ab:5c:29:e5:50:f8:83:59:e0:79:e2: af:1d:15:84:dc:3f:39:ba:aa:bb:77:5c:e0:8e:ea:c4:f2:64: 62:bc:79:c9:9c:cc:ab:72:87:04:87:ec:35:31:b8:2f:66:e8: 49:3c:82:22:67:bb:a0:d0:b7:7f:8f:47:ff:1f:14:8f:52:df: 8d:16:b4:eb:33:73:54:df:b6:5e:a7:8a:2e:4f:1a:3c:81:40: 12:1d:fc:f8:ec:ef:30:97:45:9a:5b:1a:c2:67:a1:1d:da:4b: 52:d0:52:60:98:11:ad:06:4a:58:c9:6c:a5:7e:e9:b5:89:5a: fb:89:fd:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZto6gOQdGF1392p6mtHeLh6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmNjUzNzVhNGQzNmY1Y2FlMWExZmUyNDU4YTM4MDUyNmNm ZWRiNmEwHhcNMjUxMjI5MDcwMjA1WhcNMjUxMjMwMDcwMjA1WjAzMTEwLwYDVQQD EyhlNjY1NjViZDdiYTE1YzU5NDFiMmNkMDhmOGNlNzU3MTc0YWIzNjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlR3QaUaIs7t5ABPeKvpN4RWklOS 3DO/jTACkU2V1b2YaXkiUpTiGWyf/qfr2HuEPZMqyaL3Ad9vhvtFaZbQ2ODyqG3E txDHRaH204J6peH9G1Flixi2meuPR6I7WLT4v4KnsHY+5rc4xbTbCs66IpltOVjw t7HDLH+4JbUqQW9j7wvMEJ3h4SKoQCc0l9XTkq2vb1hOrzjRnInP97mLmp8PIbNa goA0ZmXPQsJJ6lZgIY0ozP2PlhsYUCSYwu/1lDmOu5c35K3sON90aasXV+uJUVPg XK/6Qu9Jl6j6iRmwCRP2un4TtzpupTp4N/BCnmFSKFlmatYwU8qrmQdw2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOZlZb17oVxZQbLNCPjOdXF0qzYdMB8GA1UdIwQY MBaAFD9lN1pNNvXK4aH+JFijgFJs/ttqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDJVM1drMDI5Y3Job2Y0a1dLT0FVbXotMjJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS82ZDE5MzAtNjgxNS00ODdmLWFiZTkt ZTI4MTZlZTZiYTU2LzEvUDJVM1drMDI5Y3Job2Y0a1dLT0FVbXotMjJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS82ZDE5MzAtNjgxNS00ODdmLWFiZTktZTI4MTZlZTZiYTU2 LzEvUDJVM1drMDI5Y3Job2Y0a1dLT0FVbXotMjJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPgwsXAL9 1TTyGKZ+F6FKvQT+ZH49WJWDqWnHRY1TahgRw+2ApCE2BPeYmxEaWEhRwEFA8XUG KUFb6DzXNfixqUysIYE0p0qR752A2DcrY8rl4zxR15nYH0zn05ETfL1p5We4p6Te S2an60zJbtlCA5n+Cv9QYE89w2Z+yZFUO5znEu0J1atcKeVQ+INZ4Hnirx0VhNw/ Obqqu3dc4I7qxPJkYrx5yZzMq3KHBIfsNTG4L2boSTyCIme7oNC3f49H/x8Uj1Lf jRa06zNzVN+2XqeKLk8aPIFAEh38+OzvMJdFmlsawmehHdpLUtBSYJgRrQZKWMls pX7ptYla+4n9Lw== -----END CERTIFICATE-----Generated at Mon Dec 29 16:23:25 2025 by rpki-client