This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.mft File: p2H8O2oE10MHa9KG3oIURfBlTvc.mft (raw, json) Hash identifier: yavf1OJ5e0Os6Ij4B0+SUerHqaqZVK6goL+aKe3FpiQ= Subject key identifier: 46:DF:BD:B8:57:45:F3:87:B2:04:0F:7D:C3:E8:0A:1C:7D:29:1E:4D Authority key identifier: A7:61:FC:3B:6A:04:D7:43:07:6B:D2:86:DE:82:14:45:F0:65:4E:F7 Certificate issuer: /CN=a761fc3b6a04d743076bd286de821445f0654ef7 Certificate serial: 019B3D2385B547887CD8DDD64B2B3920929D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2H8O2oE10MHa9KG3oIURfBlTvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.mft Manifest number: 1717 Signing time: Sat 20 Dec 2025 19:01:36 +0000 Manifest this update: Sat 20 Dec 2025 19:01:36 +0000 Manifest next update: Sun 21 Dec 2025 19:01:36 +0000 Files and hashes: 1: p2H8O2oE10MHa9KG3oIURfBlTvc.crl (hash: rjhmElOx9YUI05vPfpw5HhlqKLDh6ydITGZWiOE3i1Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.crl rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.mft rsync://rpki.ripe.net/repository/DEFAULT/p2H8O2oE10MHa9KG3oIURfBlTvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:85:b5:47:88:7c:d8:dd:d6:4b:2b:39:20:92:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a761fc3b6a04d743076bd286de821445f0654ef7 Validity Not Before: Dec 20 19:01:36 2025 GMT Not After : Dec 21 19:01:36 2025 GMT Subject: CN=46dfbdb85745f387b2040f7dc3e80a1c7d291e4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:99:f7:e8:c4:a3:fc:68:fe:ee:bf:5d:23:f5: 67:21:5d:c4:85:be:de:d4:a1:2a:e3:8f:46:11:ba: 29:2f:ff:8c:eb:cc:bb:c3:fa:7d:2a:7a:9a:a3:3e: 80:c3:fe:f6:46:c3:d5:38:44:12:03:22:81:59:54: 3a:e5:ff:64:a3:bb:7d:38:4b:03:58:fc:9e:11:88: 27:fa:a7:2c:12:4b:37:f8:51:be:7c:d0:95:6d:c4: 41:0c:02:7f:2f:d7:08:1d:d7:a5:ec:a6:37:20:04: 8f:89:7d:3a:77:53:cf:95:6e:6c:e7:68:7c:53:94: ad:3c:12:4a:17:ce:4b:ff:35:e9:17:d1:a1:d4:3d: 6b:1b:9b:ed:e8:91:d8:ef:12:6e:7c:6f:ba:05:c1: f2:24:1f:e3:8c:72:79:7d:70:30:09:2f:dc:6d:d8: a3:d4:f3:db:8e:18:f9:d3:c9:77:d0:39:39:96:3c: 1a:9b:37:4e:cc:ac:ce:f5:c5:dd:30:2d:37:7c:ca: 3f:40:cf:f8:a6:8e:84:45:68:af:49:e3:97:6c:32: d2:20:7c:ae:7d:15:ce:d4:05:3a:23:1b:dc:f7:62: 6e:a0:22:e2:ee:5c:36:cd:ec:49:46:a9:f6:0c:f2: 10:f0:27:08:89:d7:44:c5:45:9f:7b:69:58:43:88: 45:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:DF:BD:B8:57:45:F3:87:B2:04:0F:7D:C3:E8:0A:1C:7D:29:1E:4D X509v3 Authority Key Identifier: keyid:A7:61:FC:3B:6A:04:D7:43:07:6B:D2:86:DE:82:14:45:F0:65:4E:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2H8O2oE10MHa9KG3oIURfBlTvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:fb:8c:c9:3f:17:36:27:d0:ef:3e:84:a6:aa:06:15:da:e8: 22:9a:8e:96:e5:e5:e1:11:82:23:ea:57:d4:b2:e6:ff:89:8f: 46:56:36:8b:84:d6:e3:e6:e9:08:0d:cb:ef:3b:1d:3a:b4:7f: 7c:24:f5:f2:23:77:b5:6d:55:af:3d:ca:f1:18:66:36:a8:2a: 3f:97:1d:ed:39:0a:6f:81:71:84:72:0f:97:d6:a3:70:2b:ac: 44:08:0f:52:8f:cc:47:f3:a6:47:12:aa:ba:3e:65:dd:31:ae: 4f:a4:32:1e:e2:51:fe:dc:3b:5b:24:4d:0a:0c:89:97:8a:75: 9b:70:f3:f7:42:1c:ba:cc:7d:e4:ee:f2:99:1d:c9:4a:14:65: 07:85:7c:88:76:d2:4b:35:95:fc:32:8f:64:80:b9:9a:e6:de: 43:38:26:bf:24:b4:90:1b:88:cd:fa:e9:74:0d:28:53:70:86: 33:48:15:5c:69:7f:ac:79:3a:7c:cc:74:65:d8:bb:08:e8:b9: 7d:a3:66:cb:5e:b9:91:67:74:7c:ba:6a:6f:14:fd:6b:0a:a9: fe:1e:86:ff:43:25:3a:c5:2e:80:26:a4:fb:12:f0:3f:f3:ed: 83:a2:9c:05:7e:65:77:fc:67:a9:d0:22:ec:90:d9:b8:d1:c9: e7:0d:9a:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9I4W1R4h82N3WSys5IJKdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NjFmYzNiNmEwNGQ3NDMwNzZiZDI4NmRlODIxNDQ1ZjA2 NTRlZjcwHhcNMjUxMjIwMTkwMTM2WhcNMjUxMjIxMTkwMTM2WjAzMTEwLwYDVQQD Eyg0NmRmYmRiODU3NDVmMzg3YjIwNDBmN2RjM2U4MGExYzdkMjkxZTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5n36MSj/Gj+7r9dI/VnIV3Ehb7e 1KEq449GEbopL/+M68y7w/p9Knqaoz6Aw/72RsPVOEQSAyKBWVQ65f9ko7t9OEsD WPyeEYgn+qcsEks3+FG+fNCVbcRBDAJ/L9cIHdel7KY3IASPiX06d1PPlW5s52h8 U5StPBJKF85L/zXpF9Gh1D1rG5vt6JHY7xJufG+6BcHyJB/jjHJ5fXAwCS/cbdij 1PPbjhj508l30Dk5ljwamzdOzKzO9cXdMC03fMo/QM/4po6ERWivSeOXbDLSIHyu fRXO1AU6Ixvc92JuoCLi7lw2zexJRqn2DPIQ8CcIiddExUWfe2lYQ4hFWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEbfvbhXRfOHsgQPfcPoChx9KR5NMB8GA1UdIwQY MBaAFKdh/DtqBNdDB2vSht6CFEXwZU73MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDJIOE8yb0UxME1IYTlLRzNvSVVSZkJsVHZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS83MjkzNGUtZmU3My00YTk5LTgxMWYt YTBjZGU3YmE4YmJlLzEvcDJIOE8yb0UxME1IYTlLRzNvSVVSZkJsVHZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS83MjkzNGUtZmU3My00YTk5LTgxMWYtYTBjZGU3YmE4YmJl LzEvcDJIOE8yb0UxME1IYTlLRzNvSVVSZkJsVHZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmvuMyT8X NifQ7z6EpqoGFdroIpqOluXl4RGCI+pX1LLm/4mPRlY2i4TW4+bpCA3L7zsdOrR/ fCT18iN3tW1Vrz3K8RhmNqgqP5cd7TkKb4FxhHIPl9ajcCusRAgPUo/MR/OmRxKq uj5l3TGuT6QyHuJR/tw7WyRNCgyJl4p1m3Dz90Icusx95O7ymR3JShRlB4V8iHbS SzWV/DKPZIC5mubeQzgmvyS0kBuIzfrpdA0oU3CGM0gVXGl/rHk6fMx0Zdi7COi5 faNmy165kWd0fLpqbxT9awqp/h6G/0MlOsUugCak+xLwP/Ptg6KcBX5ld/xnqdAi 7JDZuNHJ5w2aNQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:15:36 2025 by rpki-client