This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft File: P98IRZEZlp1LnBf1qF6ScyxVF9E.mft (raw, json) Hash identifier: hpEzRLTVUQDKVyu+10HBN7CqKxVdFOX1Q3rcdCmmtiI= Subject key identifier: 84:14:1E:B1:4C:90:3A:83:C8:C0:10:5B:C6:0B:2F:AA:F1:C1:4F:E2 Authority key identifier: 3F:DF:08:45:91:19:96:9D:4B:9C:17:F5:A8:5E:92:73:2C:55:17:D1 Certificate issuer: /CN=3fdf08459119969d4b9c17f5a85e92732c5517d1 Certificate serial: 019B3FED2DDDA68B48E484B97D7587FE9901 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft Manifest number: 1771 Signing time: Sun 21 Dec 2025 08:01:06 +0000 Manifest this update: Sun 21 Dec 2025 08:01:06 +0000 Manifest next update: Mon 22 Dec 2025 08:01:06 +0000 Files and hashes: 1: P98IRZEZlp1LnBf1qF6ScyxVF9E.crl (hash: CYz7PjmAt6ehI0vxf3eLt9arG8BwTlM0CnOmNG/3QtM=) 2: qHPsdBiuTYXVZwMEuexg2CV5_Rc.roa (hash: okNXh+NCN1SYoCMfp10oC5B+Is3b/qKgY4b94Oq45BU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 08:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ed:2d:dd:a6:8b:48:e4:84:b9:7d:75:87:fe:99:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fdf08459119969d4b9c17f5a85e92732c5517d1 Validity Not Before: Dec 21 08:01:06 2025 GMT Not After : Dec 22 08:01:06 2025 GMT Subject: CN=84141eb14c903a83c8c0105bc60b2faaf1c14fe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:39:b2:c6:e1:b3:9c:3d:81:94:ed:14:c5:8b: 85:3a:9d:da:eb:7e:91:49:fd:e9:c1:53:7f:b8:84: 35:83:06:1a:54:65:8e:35:2f:02:74:93:84:0d:67: 24:71:54:a5:8b:9a:6d:d6:8a:bd:f4:47:11:c1:5a: 46:2f:4c:a5:d9:91:9e:6f:b7:e1:f2:7f:c7:cf:7a: 0d:10:d7:d6:73:ec:f8:fb:e2:51:17:68:f6:f6:90: cd:38:2d:4b:7a:d6:0a:0c:5a:cf:12:dc:57:08:da: c0:ac:59:b4:1b:c0:f6:9a:4e:f0:97:20:93:45:36: da:ac:7c:8f:d5:d9:60:6a:93:f3:ff:80:13:81:54: 4b:c9:45:e7:89:e8:f4:8b:d5:ef:38:71:38:e4:37: 86:d2:12:c8:78:b7:61:56:5e:a3:c8:bb:70:88:61: 1b:52:fa:30:91:6e:55:e4:ea:2d:6e:f4:7e:c0:bc: f1:1f:ea:cc:85:29:4c:e6:f1:34:ad:33:44:22:e7: e5:f4:40:a4:11:e1:f8:36:79:44:06:13:35:75:9c: 25:e2:df:dc:53:88:f3:97:2e:11:97:ec:3c:38:15: 0f:bb:57:f9:ce:fe:93:a5:12:2f:6c:0e:ab:48:cb: bf:3e:4b:71:f2:1c:8e:7c:19:09:cf:2f:70:c6:d9: 4b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:14:1E:B1:4C:90:3A:83:C8:C0:10:5B:C6:0B:2F:AA:F1:C1:4F:E2 X509v3 Authority Key Identifier: keyid:3F:DF:08:45:91:19:96:9D:4B:9C:17:F5:A8:5E:92:73:2C:55:17:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:96:e2:3c:55:a2:f0:50:77:57:85:6e:cc:1e:3a:1b:93:bf: 01:8d:97:ab:3a:c4:4b:c4:98:72:65:c0:ce:6f:a8:19:47:44: 6e:24:5b:02:59:d4:6c:d8:0a:ab:25:61:68:54:16:38:8d:93: 92:48:7d:b9:7b:28:56:cc:72:b3:37:c0:ae:30:6c:c6:29:53: e1:da:3a:a8:2a:f6:c7:94:e1:75:7b:31:7f:75:00:cf:aa:cf: f1:39:12:1b:ce:51:0e:dc:cd:f7:b7:67:04:88:6c:7d:7c:3d: d1:b2:30:b1:f0:b5:e3:e5:70:a9:f8:4b:e7:86:c1:f3:5d:d2: a5:86:96:dd:a0:3e:62:90:91:63:ee:72:3a:83:21:0c:08:29: ad:19:2a:69:79:d7:e3:14:7f:c3:98:13:46:1a:de:6e:29:a2: 16:b6:0f:43:5c:db:24:5a:0e:0e:e8:c0:51:0d:20:2b:1b:a2: b8:c5:a8:04:22:7c:08:59:c5:37:70:88:90:ab:5c:21:88:d8: 26:5d:ee:e6:00:f0:a5:7f:86:1e:f0:1a:52:c6:f8:9b:09:ad: e0:ef:d2:7a:b7:48:3d:50:7a:16:8a:c2:a8:fc:ff:59:8c:bb: 9f:d0:65:43:ce:9a:a6:68:3d:e4:83:18:16:88:9c:9a:95:21: fc:3c:07:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7S3dpotI5IS5fXWH/pkBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZGYwODQ1OTExOTk2OWQ0YjljMTdmNWE4NWU5MjczMmM1 NTE3ZDEwHhcNMjUxMjIxMDgwMTA2WhcNMjUxMjIyMDgwMTA2WjAzMTEwLwYDVQQD Eyg4NDE0MWViMTRjOTAzYTgzYzhjMDEwNWJjNjBiMmZhYWYxYzE0ZmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTmyxuGznD2BlO0UxYuFOp3a636R Sf3pwVN/uIQ1gwYaVGWONS8CdJOEDWckcVSli5pt1oq99EcRwVpGL0yl2ZGeb7fh 8n/Hz3oNENfWc+z4++JRF2j29pDNOC1LetYKDFrPEtxXCNrArFm0G8D2mk7wlyCT RTbarHyP1dlgapPz/4ATgVRLyUXniej0i9XvOHE45DeG0hLIeLdhVl6jyLtwiGEb UvowkW5V5OotbvR+wLzxH+rMhSlM5vE0rTNEIufl9ECkEeH4NnlEBhM1dZwl4t/c U4jzly4Rl+w8OBUPu1f5zv6TpRIvbA6rSMu/Pktx8hyOfBkJzy9wxtlL+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIQUHrFMkDqDyMAQW8YLL6rxwU/iMB8GA1UdIwQY MBaAFD/fCEWRGZadS5wX9aheknMsVRfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDk4SVJaRVpscDFMbkJmMXFGNlNjeXhWRjlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi81NjQ1Y2ItZjBiYS00NGZjLWJhOTMt NzM2OWYyY2E1YjNiLzEvUDk4SVJaRVpscDFMbkJmMXFGNlNjeXhWRjlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi81NjQ1Y2ItZjBiYS00NGZjLWJhOTMtNzM2OWYyY2E1YjNi LzEvUDk4SVJaRVpscDFMbkJmMXFGNlNjeXhWRjlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApJbiPFWi 8FB3V4VuzB46G5O/AY2XqzrES8SYcmXAzm+oGUdEbiRbAlnUbNgKqyVhaFQWOI2T kkh9uXsoVsxyszfArjBsxilT4do6qCr2x5ThdXsxf3UAz6rP8TkSG85RDtzN97dn BIhsfXw90bIwsfC14+VwqfhL54bB813SpYaW3aA+YpCRY+5yOoMhDAgprRkqaXnX 4xR/w5gTRhrebimiFrYPQ1zbJFoODujAUQ0gKxuiuMWoBCJ8CFnFN3CIkKtcIYjY Jl3u5gDwpX+GHvAaUsb4mwmt4O/SerdIPVB6ForCqPz/WYy7n9BlQ86apmg95IMY FoicmpUh/DwHhQ== -----END CERTIFICATE-----Generated at Sun Dec 21 15:59:46 2025 by rpki-client