This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/5ea2a6-ff2f-47fd-b7c8-f4f45043b8bc/1/p3tNEFqlxNZemaq2926tWJ5ih8w.mft File: p3tNEFqlxNZemaq2926tWJ5ih8w.mft (raw, json) Hash identifier: 78s6HPKbSfK3U8f130m2nc2x+aZmpc0cpvqc0lB4Ym0= Subject key identifier: B4:81:FD:8F:8A:53:39:BE:3A:FF:9B:58:53:67:63:D6:4C:F2:F8:33 Authority key identifier: A7:7B:4D:10:5A:A5:C4:D6:5E:99:AA:B6:F7:6E:AD:58:9E:62:87:CC Certificate issuer: /CN=a77b4d105aa5c4d65e99aab6f76ead589e6287cc Certificate serial: 019B5DC1151191F12EA88B2FDB1478CCE575 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p3tNEFqlxNZemaq2926tWJ5ih8w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/5ea2a6-ff2f-47fd-b7c8-f4f45043b8bc/1/p3tNEFqlxNZemaq2926tWJ5ih8w.mft Manifest number: 0596 Signing time: Sat 27 Dec 2025 03:01:33 +0000 Manifest this update: Sat 27 Dec 2025 03:01:33 +0000 Manifest next update: Sun 28 Dec 2025 03:01:33 +0000 Files and hashes: 1: p3tNEFqlxNZemaq2926tWJ5ih8w.crl (hash: j49Q+sVIV3BhuTmGIfB95Fz0LzZRYV0s52e5DkKxkxU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/5ea2a6-ff2f-47fd-b7c8-f4f45043b8bc/1/p3tNEFqlxNZemaq2926tWJ5ih8w.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/5ea2a6-ff2f-47fd-b7c8-f4f45043b8bc/1/p3tNEFqlxNZemaq2926tWJ5ih8w.mft rsync://rpki.ripe.net/repository/DEFAULT/p3tNEFqlxNZemaq2926tWJ5ih8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:c1:15:11:91:f1:2e:a8:8b:2f:db:14:78:cc:e5:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a77b4d105aa5c4d65e99aab6f76ead589e6287cc Validity Not Before: Dec 27 03:01:33 2025 GMT Not After : Dec 28 03:01:33 2025 GMT Subject: CN=b481fd8f8a5339be3aff9b58536763d64cf2f833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0b:83:2d:42:4b:76:85:b3:73:09:e9:3c:0d: 26:50:93:63:af:0c:1f:c2:7b:b1:50:87:73:9f:56: 3f:aa:52:27:01:7a:90:15:6c:25:5a:88:b4:8b:c5: de:30:7e:75:6f:17:9b:c9:e7:6d:8c:0a:d9:15:11: ab:bc:4e:98:f6:fc:6a:55:1d:6d:b5:77:d3:e2:5e: a3:2d:c9:42:98:6f:1d:8c:32:d2:4c:7d:2d:81:b3: b3:c1:31:6e:6f:ab:20:df:cd:ce:f4:0d:4e:74:49: d3:2f:b8:9a:ff:47:dc:b5:76:d6:4a:8a:bd:06:05: da:4c:2d:a4:17:07:4d:58:bd:0b:ff:b9:be:3a:a0: f5:18:9f:cb:46:56:71:23:71:74:c2:7e:d8:95:87: f6:63:26:ed:be:6a:07:93:b6:a4:5a:03:98:91:1c: b3:bb:e4:3b:39:e2:08:3c:75:a7:67:53:39:51:2c: ce:04:fa:82:4b:ed:03:1a:60:1d:4c:d7:b7:12:e6: 8f:9c:97:2f:f1:74:b3:1a:e8:7e:81:a6:f5:a1:31: 0a:0a:c7:41:b8:d2:f9:f1:8b:6b:4a:06:1c:e3:91: 24:9f:bc:14:d2:6f:de:f0:00:4e:82:cf:4c:95:33: 68:0c:7a:a0:e9:4f:3a:55:98:f0:78:5c:b4:51:91: d8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:81:FD:8F:8A:53:39:BE:3A:FF:9B:58:53:67:63:D6:4C:F2:F8:33 X509v3 Authority Key Identifier: keyid:A7:7B:4D:10:5A:A5:C4:D6:5E:99:AA:B6:F7:6E:AD:58:9E:62:87:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p3tNEFqlxNZemaq2926tWJ5ih8w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5ea2a6-ff2f-47fd-b7c8-f4f45043b8bc/1/p3tNEFqlxNZemaq2926tWJ5ih8w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5ea2a6-ff2f-47fd-b7c8-f4f45043b8bc/1/p3tNEFqlxNZemaq2926tWJ5ih8w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:8b:c5:36:5a:2d:bb:dc:04:ed:56:24:42:9e:88:d2:bc:44: a6:99:9d:75:65:f5:bd:28:54:09:7b:a3:c0:95:79:12:1f:a9: 23:82:59:de:4d:b8:64:9b:71:94:ee:30:4c:d7:11:af:a8:5a: 07:ad:4d:ce:f5:5b:0d:4b:7b:5c:2e:57:d2:c0:15:fa:9f:51: 1a:33:ce:96:94:10:34:84:dc:32:96:46:5c:44:20:48:e9:56: da:a6:9e:4d:7d:6c:70:54:83:f6:d3:a2:b9:d0:22:fc:cf:47: 46:6a:00:44:19:5b:e7:96:34:4a:d8:13:22:52:c6:3a:59:29: 4a:69:98:06:34:d4:23:7d:48:7f:e3:12:95:df:e3:99:0b:7a: 97:38:07:18:72:d7:8c:4b:4a:f1:33:e4:49:e8:92:4f:d5:71: 8c:f7:78:73:c0:64:1c:31:05:86:8e:03:4a:30:67:db:ca:f3: 99:03:f5:2b:5a:a2:92:cb:56:1b:88:e0:98:2b:09:af:c6:a0: fc:05:53:54:1e:ff:a1:4e:58:33:f2:86:5f:f9:4f:50:6b:c8: 28:e9:42:53:4d:8d:d4:12:95:fd:1b:51:a0:ca:9f:87:4d:62: 36:70:e9:fc:e9:75:47:61:84:5a:82:ba:0d:88:49:df:4f:da: 95:a0:4c:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdwRURkfEuqIsv2xR4zOV1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3N2I0ZDEwNWFhNWM0ZDY1ZTk5YWFiNmY3NmVhZDU4OWU2 Mjg3Y2MwHhcNMjUxMjI3MDMwMTMzWhcNMjUxMjI4MDMwMTMzWjAzMTEwLwYDVQQD EyhiNDgxZmQ4ZjhhNTMzOWJlM2FmZjliNTg1MzY3NjNkNjRjZjJmODMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvguDLUJLdoWzcwnpPA0mUJNjrwwf wnuxUIdzn1Y/qlInAXqQFWwlWoi0i8XeMH51bxebyedtjArZFRGrvE6Y9vxqVR1t tXfT4l6jLclCmG8djDLSTH0tgbOzwTFub6sg383O9A1OdEnTL7ia/0fctXbWSoq9 BgXaTC2kFwdNWL0L/7m+OqD1GJ/LRlZxI3F0wn7YlYf2YybtvmoHk7akWgOYkRyz u+Q7OeIIPHWnZ1M5USzOBPqCS+0DGmAdTNe3EuaPnJcv8XSzGuh+gab1oTEKCsdB uNL58YtrSgYc45Ekn7wU0m/e8ABOgs9MlTNoDHqg6U86VZjweFy0UZHYGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLSB/Y+KUzm+Ov+bWFNnY9ZM8vgzMB8GA1UdIwQY MBaAFKd7TRBapcTWXpmqtvdurVieYofMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDN0TkVGcWx4TlplbWFxMjkyNnRXSjVpaDh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81ZWEyYTYtZmYyZi00N2ZkLWI3Yzgt ZjRmNDUwNDNiOGJjLzEvcDN0TkVGcWx4TlplbWFxMjkyNnRXSjVpaDh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC81ZWEyYTYtZmYyZi00N2ZkLWI3YzgtZjRmNDUwNDNiOGJj LzEvcDN0TkVGcWx4TlplbWFxMjkyNnRXSjVpaDh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW4vFNlot u9wE7VYkQp6I0rxEppmddWX1vShUCXujwJV5Eh+pI4JZ3k24ZJtxlO4wTNcRr6ha B61NzvVbDUt7XC5X0sAV+p9RGjPOlpQQNITcMpZGXEQgSOlW2qaeTX1scFSD9tOi udAi/M9HRmoARBlb55Y0StgTIlLGOlkpSmmYBjTUI31If+MSld/jmQt6lzgHGHLX jEtK8TPkSeiST9VxjPd4c8BkHDEFho4DSjBn28rzmQP1K1qikstWG4jgmCsJr8ag /AVTVB7/oU5YM/KGX/lPUGvIKOlCU02N1BKV/RtRoMqfh01iNnDp/Ol1R2GEWoK6 DYhJ30/alaBMdQ== -----END CERTIFICATE-----Generated at Sat Dec 27 06:17:02 2025 by rpki-client