This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft File: P98IRZEZlp1LnBf1qF6ScyxVF9E.mft (raw, json) Hash identifier: jmFTEnqwLrmmLMEtu3Zw68GExAxtjUiRGrNAh9vXKAM= Subject key identifier: 78:59:9D:C7:A5:80:E3:E3:02:7A:03:E3:EE:F0:3B:B5:C8:AF:0B:32 Authority key identifier: 3F:DF:08:45:91:19:96:9D:4B:9C:17:F5:A8:5E:92:73:2C:55:17:D1 Certificate issuer: /CN=3fdf08459119969d4b9c17f5a85e92732c5517d1 Certificate serial: 019B62B03A30A1A61D74ECDB1E0F086D6BE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft Manifest number: 1783 Signing time: Sun 28 Dec 2025 02:01:14 +0000 Manifest this update: Sun 28 Dec 2025 02:01:14 +0000 Manifest next update: Mon 29 Dec 2025 02:01:14 +0000 Files and hashes: 1: P98IRZEZlp1LnBf1qF6ScyxVF9E.crl (hash: JGKBUDGBW8mNx0uZzQ9eQ1JzohD3MsnRoySUTXFfm0s=) 2: qHPsdBiuTYXVZwMEuexg2CV5_Rc.roa (hash: okNXh+NCN1SYoCMfp10oC5B+Is3b/qKgY4b94Oq45BU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:b0:3a:30:a1:a6:1d:74:ec:db:1e:0f:08:6d:6b:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fdf08459119969d4b9c17f5a85e92732c5517d1 Validity Not Before: Dec 28 02:01:14 2025 GMT Not After : Dec 29 02:01:14 2025 GMT Subject: CN=78599dc7a580e3e3027a03e3eef03bb5c8af0b32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:48:e8:9c:77:66:22:83:26:cf:07:2d:86:cb: 22:86:b5:b5:e4:3f:b9:78:9d:d9:20:4d:9f:94:f5: ec:b9:46:66:f7:93:6f:49:c9:d5:c1:78:7f:32:b7: e4:20:22:c7:e9:d2:8a:87:27:13:a3:94:3f:ca:66: 8e:e9:2a:90:18:3c:51:63:95:93:3d:bb:41:66:9b: a9:ae:fa:5b:b9:31:c1:ba:db:39:6f:06:37:db:d5: 01:43:af:fe:ae:6d:07:d5:e5:71:31:2a:ef:44:26: 24:b8:8e:7d:1a:ea:d5:31:af:50:e2:16:a5:9c:2c: 06:5e:04:71:2d:c4:03:b6:b1:f6:f9:55:d6:03:c3: 63:f4:b1:90:cf:77:01:57:50:fe:fd:00:11:2b:81: 14:fd:6e:2e:8f:e7:dd:60:3c:97:0b:e0:29:ee:d6: 0a:5e:f2:99:d6:0e:63:bf:b0:70:e2:0b:35:1e:1e: c8:13:9f:b8:72:a3:78:81:23:4e:9f:09:fa:61:9f: 83:e2:ac:6f:13:0c:cc:5e:a7:1f:91:ea:01:f2:a2: d0:a2:c5:f6:3e:ea:1f:e6:5f:28:cb:aa:12:ed:b3: ca:20:d2:2f:9d:c8:c4:75:39:16:f0:e8:50:94:21: 6e:79:fb:1a:85:93:30:56:7c:d6:06:72:ff:92:5f: 46:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:59:9D:C7:A5:80:E3:E3:02:7A:03:E3:EE:F0:3B:B5:C8:AF:0B:32 X509v3 Authority Key Identifier: keyid:3F:DF:08:45:91:19:96:9D:4B:9C:17:F5:A8:5E:92:73:2C:55:17:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:29:66:34:83:97:3f:35:66:50:46:54:6b:e4:dd:c4:98:a9: 24:7b:64:ad:5b:fd:24:7d:b3:23:e2:fe:f8:fb:3f:62:78:a2: 67:06:9f:81:8f:c8:6e:10:87:56:be:78:af:3c:c9:d4:7d:fb: 36:91:f6:1a:5b:41:0a:5f:dc:2d:1d:99:b0:eb:af:78:ee:95: aa:ac:93:b6:c2:d9:c0:96:6a:a4:e2:36:d4:fb:61:84:c5:c9: f4:98:f6:4b:45:a1:80:da:2c:16:a5:b6:55:cf:67:14:09:c0: 46:ce:8a:35:f4:84:1a:05:1f:a2:71:80:33:e0:62:0c:e9:7a: 4d:83:ca:42:8e:73:07:11:27:eb:91:27:17:76:80:c2:81:db: f4:c3:ae:c7:1a:14:e0:d2:c1:ad:d9:0f:a8:3a:6b:ab:d9:34: 20:85:64:15:bc:72:0a:15:4d:93:0d:d6:be:7d:e9:41:e7:a6: 30:5f:7c:96:14:f2:8c:c3:95:d6:f3:99:c9:09:4a:7e:b2:f9: c7:4c:2c:10:c7:c3:6d:58:7a:f5:0d:d9:1b:36:75:b6:ba:25: e7:0c:7d:a8:72:65:69:d8:f0:f1:5c:62:c6:96:e4:7c:24:fa: 8f:e9:a4:c2:50:bc:32:e3:15:18:4d:7c:c9:c2:6c:6b:df:34: b9:2e:1c:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtisDowoaYddOzbHg8IbWviMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZGYwODQ1OTExOTk2OWQ0YjljMTdmNWE4NWU5MjczMmM1 NTE3ZDEwHhcNMjUxMjI4MDIwMTE0WhcNMjUxMjI5MDIwMTE0WjAzMTEwLwYDVQQD Eyg3ODU5OWRjN2E1ODBlM2UzMDI3YTAzZTNlZWYwM2JiNWM4YWYwYjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUjonHdmIoMmzwcthssihrW15D+5 eJ3ZIE2flPXsuUZm95NvScnVwXh/MrfkICLH6dKKhycTo5Q/ymaO6SqQGDxRY5WT PbtBZpuprvpbuTHButs5bwY329UBQ6/+rm0H1eVxMSrvRCYkuI59GurVMa9Q4hal nCwGXgRxLcQDtrH2+VXWA8Nj9LGQz3cBV1D+/QARK4EU/W4uj+fdYDyXC+Ap7tYK XvKZ1g5jv7Bw4gs1Hh7IE5+4cqN4gSNOnwn6YZ+D4qxvEwzMXqcfkeoB8qLQosX2 Puof5l8oy6oS7bPKINIvncjEdTkW8OhQlCFuefsahZMwVnzWBnL/kl9G3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHhZncelgOPjAnoD4+7wO7XIrwsyMB8GA1UdIwQY MBaAFD/fCEWRGZadS5wX9aheknMsVRfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDk4SVJaRVpscDFMbkJmMXFGNlNjeXhWRjlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi81NjQ1Y2ItZjBiYS00NGZjLWJhOTMt NzM2OWYyY2E1YjNiLzEvUDk4SVJaRVpscDFMbkJmMXFGNlNjeXhWRjlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi81NjQ1Y2ItZjBiYS00NGZjLWJhOTMtNzM2OWYyY2E1YjNi LzEvUDk4SVJaRVpscDFMbkJmMXFGNlNjeXhWRjlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALClmNIOX PzVmUEZUa+TdxJipJHtkrVv9JH2zI+L++Ps/YniiZwafgY/IbhCHVr54rzzJ1H37 NpH2GltBCl/cLR2ZsOuveO6VqqyTtsLZwJZqpOI21PthhMXJ9Jj2S0WhgNosFqW2 Vc9nFAnARs6KNfSEGgUfonGAM+BiDOl6TYPKQo5zBxEn65EnF3aAwoHb9MOuxxoU 4NLBrdkPqDprq9k0IIVkFbxyChVNkw3Wvn3pQeemMF98lhTyjMOV1vOZyQlKfrL5 x0wsEMfDbVh69Q3ZGzZ1trol5wx9qHJladjw8VxixpbkfCT6j+mkwlC8MuMVGE18 ycJsa980uS4cpA== -----END CERTIFICATE-----Generated at Sun Dec 28 06:39:48 2025 by rpki-client