This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft File: P2U3Wk029crhof4kWKOAUmz-22o.mft (raw, json) Hash identifier: 6Vbo3IL1Uhd3K4caVAB+6qqQfnfVDbaQ746LPgF/XLs= Subject key identifier: 16:44:E5:EF:F4:BF:BF:EB:74:81:C0:DD:AD:D5:EF:EA:EE:C2:90:26 Authority key identifier: 3F:65:37:5A:4D:36:F5:CA:E1:A1:FE:24:58:A3:80:52:6C:FE:DB:6A Certificate issuer: /CN=3f65375a4d36f5cae1a1fe2458a380526cfedb6a Certificate serial: 019B3E6C1BF4070DCE7B440ECA020B2FF60E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft Manifest number: 02E7 Signing time: Sun 21 Dec 2025 01:00:30 +0000 Manifest this update: Sun 21 Dec 2025 01:00:30 +0000 Manifest next update: Mon 22 Dec 2025 01:00:30 +0000 Files and hashes: 1: 9-o0NLiGvlKmMx-qIL22lBoBavY.roa (hash: x3fjMZ9f1cmTHw/gRrQuIfz02fOQCT025xB0UcuPW+Y=) 2: P2U3Wk029crhof4kWKOAUmz-22o.crl (hash: b0lyW1kwf+ctEKsrZW70pkkthK1wpNzfVoafMQ/cEro=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:1b:f4:07:0d:ce:7b:44:0e:ca:02:0b:2f:f6:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f65375a4d36f5cae1a1fe2458a380526cfedb6a Validity Not Before: Dec 21 01:00:30 2025 GMT Not After : Dec 22 01:00:30 2025 GMT Subject: CN=1644e5eff4bfbfeb7481c0ddadd5efeaeec29026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:1b:fe:b0:99:08:06:64:09:01:c1:e3:24:ab: 5b:f2:1f:9b:02:cf:d1:2a:d0:04:d2:ac:ee:d9:6d: c6:f2:34:62:ae:ff:45:4c:f0:5d:06:37:f7:2a:55: 9b:76:b8:af:cb:4f:d0:a7:25:99:09:0d:b4:dc:00: 97:7b:8b:9d:0b:4a:d8:d2:ed:1b:4f:b9:da:e6:c0: 14:10:65:a3:7a:90:48:6f:25:4a:6d:56:3a:74:85: d1:f0:90:6a:d0:8d:49:cf:82:36:54:17:05:77:bb: 02:ce:9b:49:f5:a0:19:15:af:c4:c5:32:8a:04:bd: d1:39:19:e3:ce:9f:e1:1e:97:19:6f:ee:a9:18:3b: 4d:73:41:ee:d3:5c:23:9c:d6:a5:eb:00:96:4d:e9: ca:f4:2b:b4:d4:d8:20:1a:78:e6:bf:42:ee:15:05: 7a:e7:e1:75:83:7f:94:04:89:7b:87:72:34:a9:87: b9:0c:9d:39:b7:a9:57:a2:23:23:05:39:a9:a5:bf: 4c:d9:5b:e5:8a:d9:d5:af:d4:14:0a:6e:74:e5:ac: 2f:a0:37:64:c6:bb:11:f5:85:4d:d8:39:74:cb:4f: a9:d5:5f:eb:41:77:81:f7:eb:a3:a0:8a:21:d0:66: 16:29:ad:1e:62:67:ca:bc:25:d8:3b:7d:fa:e8:e4: 31:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:44:E5:EF:F4:BF:BF:EB:74:81:C0:DD:AD:D5:EF:EA:EE:C2:90:26 X509v3 Authority Key Identifier: keyid:3F:65:37:5A:4D:36:F5:CA:E1:A1:FE:24:58:A3:80:52:6C:FE:DB:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:b0:c5:97:17:d5:25:7f:25:e0:95:0f:23:c7:f4:2a:76:22: ea:93:88:e5:2a:5b:4f:13:84:7a:c6:31:e1:7b:17:69:08:6a: 98:9e:6c:e4:14:bc:28:85:c5:07:71:b2:b7:88:a9:2c:bb:a9: 45:ea:6f:71:68:b4:31:2f:9f:bd:6e:9d:9c:32:47:ce:c2:d8: e4:e8:ef:4e:b3:15:6f:98:a6:47:13:54:25:a1:20:9b:1e:64: f9:6c:88:a3:b8:af:03:43:65:b8:43:67:a4:ea:8d:43:97:32: c8:04:6a:98:c5:d8:7c:c9:20:fc:bd:10:5f:fd:be:f6:1f:32: 2b:50:e7:c8:4a:b6:f4:5b:84:24:5d:a3:c6:18:a6:8e:33:1e: b6:e1:a2:78:fb:30:1b:c7:f6:79:fb:11:61:64:80:1f:1d:19: c2:41:fe:bc:05:4d:0a:8b:08:2e:6d:e6:e3:13:c1:dd:20:74: 4e:74:a1:52:a4:b4:79:94:01:4b:df:13:90:44:9a:7d:5a:91: 1a:88:88:4e:80:49:24:62:f4:24:e2:ec:77:4b:08:e3:be:15: fb:2c:e7:8b:4f:83:7f:b9:02:e5:76:39:c2:9c:e1:52:66:e2: 5c:e0:94:a0:f3:07:44:85:d7:08:8b:97:1c:22:96:63:2b:73: ad:4b:39:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bBv0Bw3Oe0QOygILL/YOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmNjUzNzVhNGQzNmY1Y2FlMWExZmUyNDU4YTM4MDUyNmNm ZWRiNmEwHhcNMjUxMjIxMDEwMDMwWhcNMjUxMjIyMDEwMDMwWjAzMTEwLwYDVQQD EygxNjQ0ZTVlZmY0YmZiZmViNzQ4MWMwZGRhZGQ1ZWZlYWVlYzI5MDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Rv+sJkIBmQJAcHjJKtb8h+bAs/R KtAE0qzu2W3G8jRirv9FTPBdBjf3KlWbdrivy0/QpyWZCQ203ACXe4udC0rY0u0b T7na5sAUEGWjepBIbyVKbVY6dIXR8JBq0I1Jz4I2VBcFd7sCzptJ9aAZFa/ExTKK BL3RORnjzp/hHpcZb+6pGDtNc0Hu01wjnNal6wCWTenK9Cu01NggGnjmv0LuFQV6 5+F1g3+UBIl7h3I0qYe5DJ05t6lXoiMjBTmppb9M2VvlitnVr9QUCm505awvoDdk xrsR9YVN2Dl0y0+p1V/rQXeB9+ujoIoh0GYWKa0eYmfKvCXYO3366OQxKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBZE5e/0v7/rdIHA3a3V7+ruwpAmMB8GA1UdIwQY MBaAFD9lN1pNNvXK4aH+JFijgFJs/ttqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDJVM1drMDI5Y3Job2Y0a1dLT0FVbXotMjJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS82ZDE5MzAtNjgxNS00ODdmLWFiZTkt ZTI4MTZlZTZiYTU2LzEvUDJVM1drMDI5Y3Job2Y0a1dLT0FVbXotMjJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS82ZDE5MzAtNjgxNS00ODdmLWFiZTktZTI4MTZlZTZiYTU2 LzEvUDJVM1drMDI5Y3Job2Y0a1dLT0FVbXotMjJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAybDFlxfV JX8l4JUPI8f0KnYi6pOI5SpbTxOEesYx4XsXaQhqmJ5s5BS8KIXFB3Gyt4ipLLup RepvcWi0MS+fvW6dnDJHzsLY5OjvTrMVb5imRxNUJaEgmx5k+WyIo7ivA0NluENn pOqNQ5cyyARqmMXYfMkg/L0QX/2+9h8yK1DnyEq29FuEJF2jxhimjjMetuGiePsw G8f2efsRYWSAHx0ZwkH+vAVNCosILm3m4xPB3SB0TnShUqS0eZQBS98TkESafVqR GoiIToBJJGL0JOLsd0sI474V+yzni0+Df7kC5XY5wpzhUmbiXOCUoPMHRIXXCIuX HCKWYytzrUs5Eg== -----END CERTIFICATE-----Generated at Sun Dec 21 07:43:46 2025 by rpki-client