This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft File: P1amMzFVLvkdigAFozjsmC3zfIs.mft (raw, json) Hash identifier: WRWkHWETg3BTL07P7Rm3MkL/947LF7O5feFjcaL2R14= Subject key identifier: DD:A5:B8:17:FB:59:79:22:69:48:8D:26:6E:78:C6:47:6F:0F:B2:D0 Authority key identifier: 3F:56:A6:33:31:55:2E:F9:1D:8A:00:05:A3:38:EC:98:2D:F3:7C:8B Certificate issuer: /CN=3f56a63331552ef91d8a0005a338ec982df37c8b Certificate serial: 019B3DFE8BE5F5CA9569BE3F3D814E2CEBA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1amMzFVLvkdigAFozjsmC3zfIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft Manifest number: 1193 Signing time: Sat 20 Dec 2025 23:00:50 +0000 Manifest this update: Sat 20 Dec 2025 23:00:50 +0000 Manifest next update: Sun 21 Dec 2025 23:00:50 +0000 Files and hashes: 1: P1amMzFVLvkdigAFozjsmC3zfIs.crl (hash: CVMfx1NJ0mI+oET3tPXdtZJpPsrw0qOTZhe+GwqLfaE=) 2: i_E14tU_jnnkTSG9INpa9JShg9E.roa (hash: ZqQOvQcYLRY+mr+wSPe0ltP607X6tGik7hBPTVxfXqk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft rsync://rpki.ripe.net/repository/DEFAULT/P1amMzFVLvkdigAFozjsmC3zfIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:8b:e5:f5:ca:95:69:be:3f:3d:81:4e:2c:eb:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f56a63331552ef91d8a0005a338ec982df37c8b Validity Not Before: Dec 20 23:00:50 2025 GMT Not After : Dec 21 23:00:50 2025 GMT Subject: CN=dda5b817fb59792269488d266e78c6476f0fb2d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6f:e1:f0:e5:da:fd:9b:1e:12:c9:c3:e8:37: 46:ae:aa:e7:39:85:56:ef:6f:f6:fa:50:0c:23:b1: 45:26:a7:d8:3d:93:8c:d3:ae:b1:0b:92:f4:b5:9e: 5c:7c:78:e3:96:f1:89:51:57:19:ed:61:62:2c:b6: 50:cb:89:a9:3e:e5:7f:c6:28:d3:3b:e0:5f:79:d1: b1:19:62:c4:80:7e:f3:84:1c:b0:65:7d:89:31:d5: d2:ef:3f:26:da:d5:b7:7f:9b:bb:a0:2f:f9:48:33: 60:a4:e7:e1:f7:4c:42:60:94:4f:7e:c0:c0:94:c1: ad:fc:e7:41:e7:92:71:9c:e3:93:b7:9e:4f:e7:1b: d5:92:5c:2b:1e:bc:e2:ac:31:22:21:1d:fa:c8:e4: c4:ec:ef:81:bc:9d:a6:73:d0:d5:6d:ad:84:45:db: 40:99:3a:f1:a1:3f:0d:f4:ee:5c:b8:5d:b7:65:1e: 85:de:0c:5e:4c:45:8d:e7:e3:19:74:c3:62:8e:8d: be:4c:2e:9d:74:c7:51:b3:7e:31:78:43:c5:54:d1: 96:67:8a:19:17:bb:b3:04:a7:c6:bd:74:42:bd:72: d4:48:bd:5c:2e:91:1a:d8:f4:ca:0d:16:dc:8c:dc: 39:ef:a9:e0:1c:79:4f:0c:50:2b:3f:59:3d:38:24: 81:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:A5:B8:17:FB:59:79:22:69:48:8D:26:6E:78:C6:47:6F:0F:B2:D0 X509v3 Authority Key Identifier: keyid:3F:56:A6:33:31:55:2E:F9:1D:8A:00:05:A3:38:EC:98:2D:F3:7C:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1amMzFVLvkdigAFozjsmC3zfIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:34:83:f0:38:a2:00:47:71:0c:b4:f3:fe:f7:d2:9a:d4:ca: f5:ef:d7:c1:54:14:c5:5d:b7:f6:58:71:e6:66:2f:eb:48:e9: 69:45:f1:e3:f3:bc:ee:f6:f4:0e:d7:e9:00:68:fe:19:29:26: bd:6c:88:47:bc:6c:f2:48:d6:e3:c6:13:a3:b4:8c:b9:15:c2: 4a:74:93:8e:df:37:7d:8b:3a:a3:4f:ef:66:47:9a:fd:da:b9: 74:cc:eb:f9:87:43:c2:e9:f3:dd:bb:ed:8e:75:f8:19:5c:64: ad:63:88:e4:ab:73:6d:0d:98:5d:80:82:4d:61:1b:79:34:31: eb:b8:ec:c6:c6:f9:1e:ad:a4:ee:a8:ff:e8:dd:39:06:40:44: 86:c5:29:4b:35:55:de:4d:88:05:5e:ef:09:6d:44:9f:01:4f: f7:02:15:76:9d:a8:0c:08:43:af:8f:9a:44:f2:59:99:4a:2c: b3:fa:64:33:b1:1b:ed:20:28:f9:b1:10:04:fe:3d:da:f8:95: f7:ac:96:16:ad:3b:e8:79:0a:24:40:7f:a7:56:0a:d2:08:31: 50:22:28:bb:3b:0e:d8:1e:57:83:59:f8:ee:f4:c0:65:50:8e: c8:72:5c:44:b9:4e:6d:5c:51:36:13:61:f9:6c:47:48:de:fd: 9b:b1:38:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/ovl9cqVab4/PYFOLOupMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmNTZhNjMzMzE1NTJlZjkxZDhhMDAwNWEzMzhlYzk4MmRm MzdjOGIwHhcNMjUxMjIwMjMwMDUwWhcNMjUxMjIxMjMwMDUwWjAzMTEwLwYDVQQD EyhkZGE1YjgxN2ZiNTk3OTIyNjk0ODhkMjY2ZTc4YzY0NzZmMGZiMmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3G/h8OXa/ZseEsnD6DdGrqrnOYVW 72/2+lAMI7FFJqfYPZOM066xC5L0tZ5cfHjjlvGJUVcZ7WFiLLZQy4mpPuV/xijT O+BfedGxGWLEgH7zhBywZX2JMdXS7z8m2tW3f5u7oC/5SDNgpOfh90xCYJRPfsDA lMGt/OdB55JxnOOTt55P5xvVklwrHrzirDEiIR36yOTE7O+BvJ2mc9DVba2ERdtA mTrxoT8N9O5cuF23ZR6F3gxeTEWN5+MZdMNijo2+TC6ddMdRs34xeEPFVNGWZ4oZ F7uzBKfGvXRCvXLUSL1cLpEa2PTKDRbcjNw576ngHHlPDFArP1k9OCSBkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN2luBf7WXkiaUiNJm54xkdvD7LQMB8GA1UdIwQY MBaAFD9WpjMxVS75HYoABaM47Jgt83yLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDFhbU16RlZMdmtkaWdBRm96anNtQzN6ZklzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8yYjE3OWMtMmQyZC00NDIzLWI2ZDYt YjA4MzdhN2Q0NjQxLzEvUDFhbU16RlZMdmtkaWdBRm96anNtQzN6ZklzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC8yYjE3OWMtMmQyZC00NDIzLWI2ZDYtYjA4MzdhN2Q0NjQx LzEvUDFhbU16RlZMdmtkaWdBRm96anNtQzN6ZklzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArzSD8Dii AEdxDLTz/vfSmtTK9e/XwVQUxV239lhx5mYv60jpaUXx4/O87vb0DtfpAGj+GSkm vWyIR7xs8kjW48YTo7SMuRXCSnSTjt83fYs6o0/vZkea/dq5dMzr+YdDwunz3bvt jnX4GVxkrWOI5KtzbQ2YXYCCTWEbeTQx67jsxsb5Hq2k7qj/6N05BkBEhsUpSzVV 3k2IBV7vCW1EnwFP9wIVdp2oDAhDr4+aRPJZmUoss/pkM7Eb7SAo+bEQBP492viV 96yWFq076HkKJEB/p1YK0ggxUCIouzsO2B5Xg1n47vTAZVCOyHJcRLlObVxRNhNh +WxHSN79m7E4Jw== -----END CERTIFICATE-----Generated at Sun Dec 21 01:45:38 2025 by rpki-client