This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft File: P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft (raw, json) Hash identifier: FCLUErgvvkdJqfZTS0a8FhbnA+2mVO8Y/dnXqKWa5Qk= Subject key identifier: 12:62:71:D7:54:0D:73:66:2F:FD:6F:F0:C5:31:61:D5:07:D4:5C:EB Authority key identifier: 3F:F7:78:93:46:A9:F9:29:15:F1:F7:5B:10:AF:94:F9:7B:6E:24:FA Certificate issuer: /CN=3ff7789346a9f92915f1f75b10af94f97b6e24fa Certificate serial: 019B766D447F4A4CE962CE809942B309126E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft Manifest number: 172A Signing time: Wed 31 Dec 2025 22:00:30 +0000 Manifest this update: Wed 31 Dec 2025 22:00:30 +0000 Manifest next update: Thu 01 Jan 2026 22:00:30 +0000 Files and hashes: 1: P_d4k0ap-SkV8fdbEK-U-XtuJPo.crl (hash: BwWOhIdvqlYT0ZVYmccQXzHM7lPwpruO/VcD0bjlAn0=) 2: dfyn6nhNR8JQy6SGJlUvEZfvkyM.roa (hash: k281u51pv38AcL8abAJjlmfLN2hampMY0v32cElp30w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft rsync://rpki.ripe.net/repository/DEFAULT/P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:6d:44:7f:4a:4c:e9:62:ce:80:99:42:b3:09:12:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ff7789346a9f92915f1f75b10af94f97b6e24fa Validity Not Before: Dec 31 22:00:30 2025 GMT Not After : Jan 1 22:00:30 2026 GMT Subject: CN=126271d7540d73662ffd6ff0c53161d507d45ceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f6:ba:04:46:4e:12:11:6b:90:35:a8:16:d6: bd:68:50:9f:66:02:9c:cb:2d:ef:d6:f2:82:08:3c: 59:9d:c6:30:7d:d7:1f:5c:70:d8:b6:35:7a:6e:87: ac:5b:04:65:bc:3c:db:fd:94:8d:57:2a:2f:4c:c5: 50:93:8c:3f:b4:73:24:13:28:19:20:04:b3:42:13: 50:3f:54:03:8f:18:39:2e:f3:6c:11:e0:eb:36:83: 20:24:81:66:3d:26:57:7b:aa:a7:cb:28:41:9c:45: ff:9b:29:e6:78:f4:f2:63:3e:4c:76:6e:da:eb:c4: 36:57:4b:49:cc:31:df:54:d9:1b:03:29:35:8d:a3: 53:15:93:bd:45:92:e6:cf:58:1f:6d:30:87:0c:77: 51:55:48:e7:8a:fa:9c:0a:d5:ad:e3:5c:b0:ed:56: 5f:28:f6:63:22:02:0b:de:cd:63:a6:35:8f:58:dc: ea:7a:43:bc:bc:51:dd:30:b5:7f:22:a3:a9:eb:8d: 4d:ae:22:e4:c5:e9:ba:c7:f1:4c:5f:bc:48:ed:96: a2:a8:9b:a5:d9:ba:d5:4e:a3:62:03:82:30:8e:6a: a0:0a:98:d0:a3:42:ab:80:0b:0a:e2:f8:88:e7:2e: 89:0c:9e:30:1f:c1:55:35:20:fe:6a:13:46:a4:f4: 13:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:62:71:D7:54:0D:73:66:2F:FD:6F:F0:C5:31:61:D5:07:D4:5C:EB X509v3 Authority Key Identifier: keyid:3F:F7:78:93:46:A9:F9:29:15:F1:F7:5B:10:AF:94:F9:7B:6E:24:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:7a:78:39:4c:55:37:39:4f:6a:b2:30:1b:e1:ee:19:9e:51: e8:6e:bf:74:e1:5b:e6:1a:e7:df:5e:2c:94:a2:cc:7c:7e:25: be:66:90:53:8d:5b:80:e9:55:df:47:6a:d7:b5:ba:54:21:88: 02:d2:5a:a6:c5:5f:dd:0c:b3:92:82:6f:85:15:25:a0:9e:18: 4e:69:db:36:ec:a8:e7:41:7f:f3:6c:cb:bc:64:46:e9:49:33: 03:26:bf:e6:3b:f4:ef:a2:59:26:e2:c5:90:ac:f3:64:9d:c0: 55:cd:26:3c:dc:c3:61:5c:d1:c4:3a:0d:15:e6:1d:17:76:92: 05:41:98:c7:35:1c:3e:4f:eb:92:9f:48:4a:85:20:90:dd:79: 96:b6:f6:b6:97:6a:bd:3c:5c:85:ec:be:97:6e:54:c9:97:5a: d2:3e:fb:49:59:d1:d5:76:7c:fa:d6:e7:f9:cf:f3:ec:d3:41: 60:85:58:64:45:5e:d6:43:5a:1c:fe:a4:91:fa:84:6a:76:34: cd:83:ff:35:2b:b4:cd:55:f4:b9:9b:c3:be:41:58:38:31:2e: 7e:05:ae:6b:bb:01:82:d2:b7:6c:f5:2a:ff:4a:15:6b:9f:8c: 8c:49:3d:f7:d2:0e:59:fe:dd:fe:1d:b1:5d:10:da:9a:98:9b: 71:31:6a:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt2bUR/SkzpYs6AmUKzCRJuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZjc3ODkzNDZhOWY5MjkxNWYxZjc1YjEwYWY5NGY5N2I2 ZTI0ZmEwHhcNMjUxMjMxMjIwMDMwWhcNMjYwMTAxMjIwMDMwWjAzMTEwLwYDVQQD EygxMjYyNzFkNzU0MGQ3MzY2MmZmZDZmZjBjNTMxNjFkNTA3ZDQ1Y2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/a6BEZOEhFrkDWoFta9aFCfZgKc yy3v1vKCCDxZncYwfdcfXHDYtjV6boesWwRlvDzb/ZSNVyovTMVQk4w/tHMkEygZ IASzQhNQP1QDjxg5LvNsEeDrNoMgJIFmPSZXe6qnyyhBnEX/mynmePTyYz5Mdm7a 68Q2V0tJzDHfVNkbAyk1jaNTFZO9RZLmz1gfbTCHDHdRVUjnivqcCtWt41yw7VZf KPZjIgIL3s1jpjWPWNzqekO8vFHdMLV/IqOp641NriLkxem6x/FMX7xI7ZaiqJul 2brVTqNiA4IwjmqgCpjQo0KrgAsK4viI5y6JDJ4wH8FVNSD+ahNGpPQTCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBJicddUDXNmL/1v8MUxYdUH1FzrMB8GA1UdIwQY MBaAFD/3eJNGqfkpFfH3WxCvlPl7biT6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUF9kNGswYXAtU2tWOGZkYkVLLVUtWHR1SlBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80ODFhMzUtMjQzNC00NmUzLWFlZTEt YWUxMzA1MzEzM2NiLzEvUF9kNGswYXAtU2tWOGZkYkVLLVUtWHR1SlBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi80ODFhMzUtMjQzNC00NmUzLWFlZTEtYWUxMzA1MzEzM2Ni LzEvUF9kNGswYXAtU2tWOGZkYkVLLVUtWHR1SlBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcHp4OUxV NzlParIwG+HuGZ5R6G6/dOFb5hrn314slKLMfH4lvmaQU41bgOlV30dq17W6VCGI AtJapsVf3QyzkoJvhRUloJ4YTmnbNuyo50F/82zLvGRG6UkzAya/5jv076JZJuLF kKzzZJ3AVc0mPNzDYVzRxDoNFeYdF3aSBUGYxzUcPk/rkp9ISoUgkN15lrb2tpdq vTxchey+l25UyZda0j77SVnR1XZ8+tbn+c/z7NNBYIVYZEVe1kNaHP6kkfqEanY0 zYP/NSu0zVX0uZvDvkFYODEufgWua7sBgtK3bPUq/0oVa5+MjEk999IOWf7d/h2x XRDampibcTFqog== -----END CERTIFICATE-----Generated at Thu Jan 1 02:51:04 2026 by rpki-client