This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft File: P98IRZEZlp1LnBf1qF6ScyxVF9E.mft (raw, json) Hash identifier: 2txsefhLf5uzxpF9//NhW5RyVHld7cxG47jZG0oWz2Y= Subject key identifier: D4:B2:A6:C9:4D:88:FF:A2:8D:A8:CE:67:E3:EA:EC:FE:44:82:90:28 Authority key identifier: 3F:DF:08:45:91:19:96:9D:4B:9C:17:F5:A8:5E:92:73:2C:55:17:D1 Certificate issuer: /CN=3fdf08459119969d4b9c17f5a85e92732c5517d1 Certificate serial: 019B533D1AD25EA4E1595AAB20A6951D7F8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft Manifest number: 177B Signing time: Thu 25 Dec 2025 02:01:12 +0000 Manifest this update: Thu 25 Dec 2025 02:01:12 +0000 Manifest next update: Fri 26 Dec 2025 02:01:12 +0000 Files and hashes: 1: P98IRZEZlp1LnBf1qF6ScyxVF9E.crl (hash: Dc4LRdS9gXz1PehQWIWiOP5+dy+g5qLVPFTioNOC0Qs=) 2: qHPsdBiuTYXVZwMEuexg2CV5_Rc.roa (hash: okNXh+NCN1SYoCMfp10oC5B+Is3b/qKgY4b94Oq45BU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:3d:1a:d2:5e:a4:e1:59:5a:ab:20:a6:95:1d:7f:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fdf08459119969d4b9c17f5a85e92732c5517d1 Validity Not Before: Dec 25 02:01:12 2025 GMT Not After : Dec 26 02:01:12 2025 GMT Subject: CN=d4b2a6c94d88ffa28da8ce67e3eaecfe44829028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e1:e5:12:c7:85:5f:b5:ef:6b:48:7c:4b:ae: 1d:13:9a:60:42:ba:94:d4:7e:1b:29:bf:ed:03:f8: 7c:e5:31:4d:2b:3c:ac:79:d6:33:73:e0:fe:eb:f1: 70:80:1e:62:f2:64:da:03:b1:90:72:6b:be:17:d2: 50:8f:26:e9:50:77:ef:39:57:df:e5:14:f4:04:0f: 18:9c:92:94:f9:2b:40:d9:87:a8:69:62:a2:a8:b0: 1a:0f:0f:c9:91:e5:82:e8:23:19:b3:22:67:5e:a9: c5:c0:d2:12:9f:90:3b:cc:e3:2d:97:ab:2f:fc:bc: 40:44:86:30:21:71:af:a4:79:e6:8f:2f:44:93:c4: 1c:1f:83:1d:8b:30:ff:10:ca:3e:1c:44:af:cf:06: 7e:a4:d0:c7:c3:c9:0b:96:3c:bd:52:e9:f9:17:7f: be:f7:6a:80:b2:c8:6c:c2:1d:b6:2f:58:e1:76:62: 60:b0:1c:31:17:80:70:f6:22:a7:87:ab:da:7c:60: 17:1c:ac:ac:3c:6e:9e:70:d9:69:69:6d:05:36:c3: d5:8f:34:57:6c:86:7b:3e:fd:14:e4:9d:c7:c5:fe: 93:68:bb:19:c5:7b:3d:13:d7:7a:36:10:26:6f:92: f5:21:dc:41:12:89:1c:8f:a0:67:89:ab:d6:51:cc: 81:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B2:A6:C9:4D:88:FF:A2:8D:A8:CE:67:E3:EA:EC:FE:44:82:90:28 X509v3 Authority Key Identifier: keyid:3F:DF:08:45:91:19:96:9D:4B:9C:17:F5:A8:5E:92:73:2C:55:17:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:45:69:6a:7c:bd:5f:42:ff:2c:fe:c9:1a:d6:2f:53:ca:64: ec:0b:fa:08:8a:8d:b7:09:d2:a3:7a:2c:b7:f0:f6:cb:2d:68: 21:3f:cc:c6:a1:29:7a:18:75:20:16:62:ee:ae:d9:f9:0c:a9: 42:72:ac:8e:03:b4:6a:dd:4d:e8:57:cf:d9:7e:db:4d:8d:12: 0e:18:4b:23:c2:aa:0e:cc:af:79:d1:49:5d:3c:cb:fa:ba:19: eb:1d:d2:2c:95:06:aa:7c:84:2e:d6:3e:bb:ca:f3:46:a4:a9: 3f:42:e0:41:c1:1f:e0:04:12:d9:b3:a2:be:24:4c:fc:c4:d4: af:2d:53:e9:9f:f5:45:37:47:17:4f:54:15:f0:7a:ac:f3:66: 54:8c:d8:81:82:a5:a7:97:14:68:9b:37:1a:88:ab:3a:71:a1: 05:14:7a:7b:b3:e0:00:85:e9:a5:fe:4a:9a:f9:0f:aa:11:c1: 15:a0:0d:0e:cb:4f:8c:16:74:da:f4:21:79:8d:37:f6:5b:b1: 0e:8e:7e:ac:1e:24:3b:ea:94:ed:92:af:33:f5:1e:a3:13:6f: f6:91:18:8f:59:55:3f:d0:e0:0d:32:ca:43:af:21:b4:ed:e1: 2f:e0:0a:1e:58:25:43:fe:e1:01:d8:8f:ea:c1:f7:e1:ed:5b: 82:24:29:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTPRrSXqThWVqrIKaVHX+NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZGYwODQ1OTExOTk2OWQ0YjljMTdmNWE4NWU5MjczMmM1 NTE3ZDEwHhcNMjUxMjI1MDIwMTEyWhcNMjUxMjI2MDIwMTEyWjAzMTEwLwYDVQQD EyhkNGIyYTZjOTRkODhmZmEyOGRhOGNlNjdlM2VhZWNmZTQ0ODI5MDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOHlEseFX7Xva0h8S64dE5pgQrqU 1H4bKb/tA/h85TFNKzysedYzc+D+6/FwgB5i8mTaA7GQcmu+F9JQjybpUHfvOVff 5RT0BA8YnJKU+StA2YeoaWKiqLAaDw/JkeWC6CMZsyJnXqnFwNISn5A7zOMtl6sv /LxARIYwIXGvpHnmjy9Ek8QcH4MdizD/EMo+HESvzwZ+pNDHw8kLljy9Uun5F3++ 92qAsshswh22L1jhdmJgsBwxF4Bw9iKnh6vafGAXHKysPG6ecNlpaW0FNsPVjzRX bIZ7Pv0U5J3Hxf6TaLsZxXs9E9d6NhAmb5L1IdxBEokcj6BniavWUcyBaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNSypslNiP+ijajOZ+Pq7P5EgpAoMB8GA1UdIwQY MBaAFD/fCEWRGZadS5wX9aheknMsVRfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDk4SVJaRVpscDFMbkJmMXFGNlNjeXhWRjlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi81NjQ1Y2ItZjBiYS00NGZjLWJhOTMt NzM2OWYyY2E1YjNiLzEvUDk4SVJaRVpscDFMbkJmMXFGNlNjeXhWRjlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi81NjQ1Y2ItZjBiYS00NGZjLWJhOTMtNzM2OWYyY2E1YjNi LzEvUDk4SVJaRVpscDFMbkJmMXFGNlNjeXhWRjlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI0Vpany9 X0L/LP7JGtYvU8pk7Av6CIqNtwnSo3ost/D2yy1oIT/MxqEpehh1IBZi7q7Z+Qyp QnKsjgO0at1N6FfP2X7bTY0SDhhLI8KqDsyvedFJXTzL+roZ6x3SLJUGqnyELtY+ u8rzRqSpP0LgQcEf4AQS2bOiviRM/MTUry1T6Z/1RTdHF09UFfB6rPNmVIzYgYKl p5cUaJs3GoirOnGhBRR6e7PgAIXppf5KmvkPqhHBFaANDstPjBZ02vQheY039lux Do5+rB4kO+qU7ZKvM/UeoxNv9pEYj1lVP9DgDTLKQ68htO3hL+AKHlglQ/7hAdiP 6sH34e1bgiQpUQ== -----END CERTIFICATE-----Generated at Thu Dec 25 03:00:26 2025 by rpki-client