This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft File: pS3-y7QxcCl5YaIbfltKPEfeCVs.mft (raw, json) Hash identifier: w/5e7xMGNOsCU2d8ozP009+APdMsc3ZsybvzFM8h/W8= Subject key identifier: 46:20:F4:1E:C3:94:8D:7C:C8:8D:A8:59:EE:F1:EC:5A:17:AD:D9:1F Authority key identifier: A5:2D:FE:CB:B4:31:70:29:79:61:A2:1B:7E:5B:4A:3C:47:DE:09:5B Certificate issuer: /CN=a52dfecbb43170297961a21b7e5b4a3c47de095b Certificate serial: 019B443950AEEB42A4729338B37B41B81F9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft Manifest number: 099E Signing time: Mon 22 Dec 2025 04:02:45 +0000 Manifest this update: Mon 22 Dec 2025 04:02:45 +0000 Manifest next update: Tue 23 Dec 2025 04:02:45 +0000 Files and hashes: 1: pS3-y7QxcCl5YaIbfltKPEfeCVs.crl (hash: tM9gC3YeEXnDeNjFQKNc+eQI6pMvdOESYI+Fe7DZJlM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:02:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:39:50:ae:eb:42:a4:72:93:38:b3:7b:41:b8:1f:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a52dfecbb43170297961a21b7e5b4a3c47de095b Validity Not Before: Dec 22 04:02:45 2025 GMT Not After : Dec 23 04:02:45 2025 GMT Subject: CN=4620f41ec3948d7cc88da859eef1ec5a17add91f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:86:a4:b3:bc:5f:52:7a:9e:81:38:2e:8c:a5: dc:c5:16:f2:42:d2:61:b8:19:8d:b3:a4:a4:82:52: 73:12:72:d6:08:10:3b:ec:ec:8a:aa:11:d3:55:f9: 16:fc:c1:b9:83:e0:bf:4a:a8:2e:e0:56:ae:34:99: 96:62:6a:70:c5:2c:87:3f:b5:6f:2a:b6:2b:71:85: 92:72:f3:35:2d:e4:f9:b8:45:f9:46:46:2c:a8:f9: 3c:05:4d:7e:c8:81:37:dd:a9:33:4a:44:28:b8:87: ce:e2:e6:0e:57:e6:94:08:1c:bb:ce:36:af:e4:70: a6:28:a7:67:c1:17:22:f3:49:da:9c:0e:9f:fe:df: eb:da:99:b9:5e:bc:55:ac:a9:cd:b1:e9:75:45:09: 97:bb:07:92:0b:c3:51:3c:15:19:29:9d:9c:fb:a9: ea:2c:98:8f:9f:6b:4e:0e:3c:8e:e6:9c:f0:ea:ba: 00:d3:67:8e:15:e6:d7:d7:cd:ba:8f:0b:f9:28:93: fd:6c:46:e5:46:b3:3d:fd:c9:ba:69:c4:25:c7:7c: cc:1e:bf:a4:4e:b1:40:de:55:ce:51:a7:41:06:bc: ee:67:5c:e2:44:10:2d:62:02:7e:ab:de:b9:38:e0: d0:af:26:c1:90:44:e6:f4:15:02:c1:32:47:17:cd: cf:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:20:F4:1E:C3:94:8D:7C:C8:8D:A8:59:EE:F1:EC:5A:17:AD:D9:1F X509v3 Authority Key Identifier: keyid:A5:2D:FE:CB:B4:31:70:29:79:61:A2:1B:7E:5B:4A:3C:47:DE:09:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:ef:96:b8:01:49:7c:11:24:b5:fc:9a:36:2d:63:a4:d9:d3: 6e:57:c8:9c:a9:a5:02:2f:71:74:d1:e8:5c:16:be:1b:91:ba: c5:84:3a:9e:fb:cc:5f:e5:e2:3e:44:95:03:d7:54:51:84:cd: 8b:97:63:eb:bf:58:28:cc:c8:6c:15:ef:a5:b1:94:dc:ce:b2: 87:dc:7f:cf:2e:70:d0:eb:a6:24:78:1a:9b:2a:cf:68:9b:f3: f2:98:d5:6d:c4:20:ef:4c:65:ad:f6:21:e5:c3:60:15:ed:95: bf:f2:46:35:fe:0e:7e:c3:6e:26:e7:7c:e7:1b:90:62:7e:8a: 00:d2:62:d1:1b:db:f4:d7:23:ae:07:ef:37:96:0e:b6:62:11: a8:b0:60:85:39:e3:75:83:8e:98:74:b4:05:85:84:97:e5:51: 2b:e4:29:a9:84:07:88:bb:10:c2:6e:ec:23:c7:65:0a:f0:c3: 87:7b:28:5b:1f:20:d1:b0:eb:65:66:de:f5:fd:4e:20:66:c9: 0e:13:40:8a:8b:d3:69:27:c4:22:88:90:0a:fa:89:2d:21:9e: 30:c5:55:35:97:7d:72:be:1f:31:24:f5:bf:42:c7:7a:d8:70: 6c:4a:5d:37:bb:5d:b2:14:8a:38:83:ff:1e:3d:c7:96:2d:8b: fd:47:c3:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOVCu60KkcpM4s3tBuB+eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MmRmZWNiYjQzMTcwMjk3OTYxYTIxYjdlNWI0YTNjNDdk ZTA5NWIwHhcNMjUxMjIyMDQwMjQ1WhcNMjUxMjIzMDQwMjQ1WjAzMTEwLwYDVQQD Eyg0NjIwZjQxZWMzOTQ4ZDdjYzg4ZGE4NTllZWYxZWM1YTE3YWRkOTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoaks7xfUnqegTgujKXcxRbyQtJh uBmNs6SkglJzEnLWCBA77OyKqhHTVfkW/MG5g+C/Sqgu4FauNJmWYmpwxSyHP7Vv KrYrcYWScvM1LeT5uEX5RkYsqPk8BU1+yIE33akzSkQouIfO4uYOV+aUCBy7zjav 5HCmKKdnwRci80nanA6f/t/r2pm5XrxVrKnNsel1RQmXuweSC8NRPBUZKZ2c+6nq LJiPn2tODjyO5pzw6roA02eOFebX1826jwv5KJP9bEblRrM9/cm6acQlx3zMHr+k TrFA3lXOUadBBrzuZ1ziRBAtYgJ+q965OODQrybBkETm9BUCwTJHF83PnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEYg9B7DlI18yI2oWe7x7FoXrdkfMB8GA1UdIwQY MBaAFKUt/su0MXApeWGiG35bSjxH3glbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFMzLXk3UXhjQ2w1WWFJYmZsdEtQRWZlQ1ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82MzI5MTUtZTdhMS00NjEwLWJmMTUt YmQ1NzkwYTJiYTUwLzEvcFMzLXk3UXhjQ2w1WWFJYmZsdEtQRWZlQ1ZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS82MzI5MTUtZTdhMS00NjEwLWJmMTUtYmQ1NzkwYTJiYTUw LzEvcFMzLXk3UXhjQ2w1WWFJYmZsdEtQRWZlQ1ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGO+WuAFJ fBEktfyaNi1jpNnTblfInKmlAi9xdNHoXBa+G5G6xYQ6nvvMX+XiPkSVA9dUUYTN i5dj679YKMzIbBXvpbGU3M6yh9x/zy5w0OumJHgamyrPaJvz8pjVbcQg70xlrfYh 5cNgFe2Vv/JGNf4OfsNuJud85xuQYn6KANJi0Rvb9NcjrgfvN5YOtmIRqLBghTnj dYOOmHS0BYWEl+VRK+QpqYQHiLsQwm7sI8dlCvDDh3soWx8g0bDrZWbe9f1OIGbJ DhNAiovTaSfEIoiQCvqJLSGeMMVVNZd9cr4fMST1v0LHethwbEpdN7tdshSKOIP/ Hj3Hli2L/UfDvA== -----END CERTIFICATE-----Generated at Mon Dec 22 09:41:18 2025 by rpki-client