This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft File: P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft (raw, json) Hash identifier: N1VZwG4fCNkEnfV50JtiPvK9yrZ2b2MXEPUHBgRO66k= Subject key identifier: FB:AF:1F:09:17:4E:14:25:46:6A:B2:B2:FD:52:7A:F6:5C:C1:CD:ED Authority key identifier: 3F:B7:8C:D1:A3:10:C9:9D:63:77:14:0E:52:8A:A3:E6:E0:DC:AB:9F Certificate issuer: /CN=3fb78cd1a310c99d6377140e528aa3e6e0dcab9f Certificate serial: 019B4324F0378E0320570745344A8AA866DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P7eM0aMQyZ1jdxQOUoqj5uDcq58.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft Manifest number: 02C1 Signing time: Sun 21 Dec 2025 23:00:52 +0000 Manifest this update: Sun 21 Dec 2025 23:00:52 +0000 Manifest next update: Mon 22 Dec 2025 23:00:52 +0000 Files and hashes: 1: P7eM0aMQyZ1jdxQOUoqj5uDcq58.crl (hash: HjSXx+2ajRZeN5gCAWPUInGb0lnHK34HAPb4LUu/SpM=) 2: tO945n8IOH4m4HY-IByza0kUANU.roa (hash: 1Y70k1PM1fySvFZtbmtzuB2FgWQvwNTM4axab3kjR2A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft rsync://rpki.ripe.net/repository/DEFAULT/P7eM0aMQyZ1jdxQOUoqj5uDcq58.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:24:f0:37:8e:03:20:57:07:45:34:4a:8a:a8:66:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fb78cd1a310c99d6377140e528aa3e6e0dcab9f Validity Not Before: Dec 21 23:00:52 2025 GMT Not After : Dec 22 23:00:52 2025 GMT Subject: CN=fbaf1f09174e1425466ab2b2fd527af65cc1cded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ce:fd:6f:9d:35:a5:5e:cb:d9:08:a9:1b:22: b0:7e:ab:06:5d:2d:23:17:23:43:7f:68:b4:7b:b2: 3b:b5:59:cc:b3:f1:bb:90:cb:7e:ac:4c:e0:05:32: 6f:77:c9:f4:51:b5:2d:9c:b1:fc:61:2f:3a:a3:36: 0e:ec:cc:4c:e1:d6:34:3f:b1:9d:a7:a1:99:a9:42: 0a:0b:3c:90:80:b3:79:25:7a:05:bc:93:1a:d5:fb: 8a:15:26:ff:b1:88:8d:15:17:e9:4c:82:0e:bc:f2: 2b:e1:05:8f:f8:af:d9:bc:e1:43:46:52:b2:35:a2: 59:b3:3f:67:be:67:24:27:62:4c:6c:3c:81:14:ac: ef:fd:67:f9:42:65:5c:c9:eb:b4:a6:1d:ef:8c:9c: 34:4d:37:f1:8f:c8:0b:50:da:66:ce:48:68:22:3a: 0f:13:7b:fe:3d:d9:1b:af:ec:5e:88:e3:52:a6:26: b3:c8:72:43:b8:93:ee:42:6f:2f:3a:e8:58:45:d8: d8:e1:06:07:1c:3e:72:52:f7:ff:9e:9f:6b:8f:42: 3f:b2:b4:8a:6f:d8:e5:a5:dc:aa:da:87:c4:d3:b7: 06:cc:8a:23:5d:e2:a1:c6:65:9d:9c:4b:07:a3:02: 72:9a:7f:fa:e7:cf:ca:43:7a:cb:75:f8:ba:3e:06: 5a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:AF:1F:09:17:4E:14:25:46:6A:B2:B2:FD:52:7A:F6:5C:C1:CD:ED X509v3 Authority Key Identifier: keyid:3F:B7:8C:D1:A3:10:C9:9D:63:77:14:0E:52:8A:A3:E6:E0:DC:AB:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P7eM0aMQyZ1jdxQOUoqj5uDcq58.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:e3:d6:12:1b:a3:0c:51:7e:cd:7d:24:6a:61:51:a0:d6:bc: 3e:84:04:33:73:92:d0:46:b9:7b:31:e7:c9:1f:92:95:ff:80: cd:df:33:0f:dd:b5:7c:1f:ff:0a:6b:bd:ff:ef:e4:78:de:a2: 85:44:23:6c:31:de:76:01:75:9a:01:97:d2:88:2d:4a:04:3d: bd:6c:7f:17:66:28:e1:1e:c8:e1:53:7f:07:7f:52:37:52:42: c2:b2:38:03:02:0f:a7:5b:bc:b4:3a:78:9d:73:bc:2b:d4:1a: cc:8f:49:8e:6b:57:64:0e:d9:26:56:81:c1:e0:7e:e6:47:7c: ba:a0:23:94:0d:2b:5b:d3:b4:57:1c:3e:d6:45:2e:b7:8f:aa: 9e:f3:06:9e:81:60:49:35:84:f2:b2:9e:c4:6b:ba:e9:8d:40: ef:11:df:4d:77:5e:c2:79:10:51:79:e0:4d:a1:35:5d:84:e9: d9:af:70:e6:1b:bf:36:bb:fb:22:ce:80:66:fa:84:3e:95:96: 27:0c:a6:16:f5:1d:e2:0d:b7:e9:f5:2a:28:6d:df:7f:a7:5e: 0c:69:2e:14:dc:b3:10:c3:3a:fa:e2:18:8b:2b:00:59:45:24: 08:a3:bf:3e:de:00:91:d3:48:36:23:cb:4c:6f:8c:e1:cd:fa: 00:69:63:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJPA3jgMgVwdFNEqKqGbdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmYjc4Y2QxYTMxMGM5OWQ2Mzc3MTQwZTUyOGFhM2U2ZTBk Y2FiOWYwHhcNMjUxMjIxMjMwMDUyWhcNMjUxMjIyMjMwMDUyWjAzMTEwLwYDVQQD EyhmYmFmMWYwOTE3NGUxNDI1NDY2YWIyYjJmZDUyN2FmNjVjYzFjZGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm879b501pV7L2QipGyKwfqsGXS0j FyNDf2i0e7I7tVnMs/G7kMt+rEzgBTJvd8n0UbUtnLH8YS86ozYO7MxM4dY0P7Gd p6GZqUIKCzyQgLN5JXoFvJMa1fuKFSb/sYiNFRfpTIIOvPIr4QWP+K/ZvOFDRlKy NaJZsz9nvmckJ2JMbDyBFKzv/Wf5QmVcyeu0ph3vjJw0TTfxj8gLUNpmzkhoIjoP E3v+Pdkbr+xeiONSpiazyHJDuJPuQm8vOuhYRdjY4QYHHD5yUvf/np9rj0I/srSK b9jlpdyq2ofE07cGzIojXeKhxmWdnEsHowJymn/658/KQ3rLdfi6PgZaxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPuvHwkXThQlRmqysv1SevZcwc3tMB8GA1UdIwQY MBaAFD+3jNGjEMmdY3cUDlKKo+bg3KufMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDdlTTBhTVF5WjFqZHhRT1VvcWo1dURjcTU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8zMjNjM2YtYWFiMy00Njg0LTgxYzct YzU4MTUxMThlNTJmLzEvUDdlTTBhTVF5WjFqZHhRT1VvcWo1dURjcTU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8zMjNjM2YtYWFiMy00Njg0LTgxYzctYzU4MTUxMThlNTJm LzEvUDdlTTBhTVF5WjFqZHhRT1VvcWo1dURjcTU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ+PWEhuj DFF+zX0kamFRoNa8PoQEM3OS0Ea5ezHnyR+Slf+Azd8zD921fB//Cmu9/+/keN6i hUQjbDHedgF1mgGX0ogtSgQ9vWx/F2Yo4R7I4VN/B39SN1JCwrI4AwIPp1u8tDp4 nXO8K9QazI9JjmtXZA7ZJlaBweB+5kd8uqAjlA0rW9O0Vxw+1kUut4+qnvMGnoFg STWE8rKexGu66Y1A7xHfTXdewnkQUXngTaE1XYTp2a9w5hu/Nrv7Is6AZvqEPpWW JwymFvUd4g236fUqKG3ff6deDGkuFNyzEMM6+uIYiysAWUUkCKO/Pt4AkdNINiPL TG+M4c36AGlj5Q== -----END CERTIFICATE-----Generated at Mon Dec 22 02:52:05 2025 by rpki-client