This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft File: P9oppIwld1jI5RjuXIsDzNoCR8k.mft (raw, json) Hash identifier: vzEVgA/dU1OMsdy0jmkeGm2nDFDu/uiu9iWwRH82g+w= Subject key identifier: B0:C6:50:BF:C5:3D:3C:F9:72:76:63:33:9A:2E:27:58:BC:33:E6:59 Authority key identifier: 3F:DA:29:A4:8C:25:77:58:C8:E5:18:EE:5C:8B:03:CC:DA:02:47:C9 Certificate issuer: /CN=3fda29a48c257758c8e518ee5c8b03ccda0247c9 Certificate serial: 019B45136BFE355DEE16A432C7A832EE2656 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft Manifest number: 178C Signing time: Mon 22 Dec 2025 08:00:59 +0000 Manifest this update: Mon 22 Dec 2025 08:00:59 +0000 Manifest next update: Tue 23 Dec 2025 08:00:59 +0000 Files and hashes: 1: 8_r7mVCzzc8i5_iqagGhH6oA6lo.roa (hash: NPDOx5bLEHu2ttrvWwMBmay19BA0wMcB6dN9yEUt368=) 2: P9oppIwld1jI5RjuXIsDzNoCR8k.crl (hash: GjIqSEwxR5ZCzTM5mCJTEIIsH9RcHwYPHJV1jjJ57wc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 08:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:13:6b:fe:35:5d:ee:16:a4:32:c7:a8:32:ee:26:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fda29a48c257758c8e518ee5c8b03ccda0247c9 Validity Not Before: Dec 22 08:00:59 2025 GMT Not After : Dec 23 08:00:59 2025 GMT Subject: CN=b0c650bfc53d3cf9727663339a2e2758bc33e659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:37:cf:6d:57:c5:e9:75:4e:3e:95:24:c9:a7: c3:2b:09:7b:5c:8f:d8:0a:66:5e:14:80:84:d3:af: 59:1b:b7:90:d5:b1:0b:3a:df:c3:cd:4f:a1:91:ba: ea:58:5e:e9:94:72:18:e4:b2:39:0a:9e:ee:16:00: 30:d5:71:1e:4c:9e:17:91:83:c2:b9:a7:25:52:c3: 1b:12:26:a0:a4:69:db:79:b6:97:d1:a9:0d:64:2d: ee:fe:b2:1c:3a:bb:bd:ea:2a:bc:ce:a5:b6:fb:f8: 93:09:a3:d4:38:f7:6e:3e:dd:f4:89:a2:f6:ad:19: 2d:94:97:49:62:c3:27:8f:b8:c0:5a:3c:fc:15:b8: 47:b4:ac:97:a4:da:98:48:79:25:57:b9:f5:73:6c: 16:aa:e6:c5:1b:6c:19:31:72:d6:d4:12:4d:55:42: af:ae:eb:1f:91:cf:8c:96:2a:2a:21:16:3f:c0:f6: 7c:b5:3a:95:57:02:3e:0c:b3:b1:44:98:78:1c:19: b4:de:cf:46:aa:91:c3:0e:ec:d4:71:20:bb:71:2d: 45:38:5e:69:24:c6:78:b4:4b:eb:76:08:a3:8b:6f: b4:4b:d9:35:fd:7b:ec:0f:04:56:1b:b1:de:28:10: d6:be:22:3b:a8:76:b6:4d:37:ec:af:fb:32:2b:0d: 4d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:C6:50:BF:C5:3D:3C:F9:72:76:63:33:9A:2E:27:58:BC:33:E6:59 X509v3 Authority Key Identifier: keyid:3F:DA:29:A4:8C:25:77:58:C8:E5:18:EE:5C:8B:03:CC:DA:02:47:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:cb:6e:34:0c:86:42:31:96:31:06:ed:97:79:3e:76:18:87: 4a:cd:b8:92:44:b2:c4:09:cf:4c:f3:74:3e:d6:92:01:fc:2e: 56:a3:3e:6c:32:d3:38:41:1d:e8:51:b1:b6:04:65:ab:2a:37: ec:d6:d9:65:b3:8b:53:bd:44:b2:af:dd:03:41:bc:3d:c2:ce: d1:97:cd:98:9a:d1:c5:61:04:75:ba:0a:b2:44:dd:30:bd:4d: ff:bb:3f:87:c0:d4:a7:9a:d6:6e:73:48:98:ed:1c:c7:dd:9f: 2a:34:f4:e4:c8:e7:eb:94:70:63:56:91:de:45:59:7a:e9:a8: b2:f9:76:ce:18:8b:56:4f:12:78:e1:d0:47:7f:f4:b8:53:5d: 52:fc:70:a3:74:b6:eb:ae:3b:83:5b:04:29:3c:09:f4:54:2e: 79:c1:d6:7a:c0:23:aa:93:c1:7d:a5:0f:39:9c:ae:55:27:91: 61:50:70:fe:e9:0a:1c:57:98:cb:6c:26:21:b0:52:e7:77:47: fb:70:b3:6c:3a:2e:db:bb:fd:e8:c2:1f:60:25:56:15:98:b2: ca:2d:59:37:1f:60:44:ac:af:1e:05:e1:c6:ac:53:da:56:fa: 8a:99:bb:13:f3:e0:4a:b7:5c:83:8b:86:38:75:7f:52:91:e4: 28:3a:d5:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFE2v+NV3uFqQyx6gy7iZWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZGEyOWE0OGMyNTc3NThjOGU1MThlZTVjOGIwM2NjZGEw MjQ3YzkwHhcNMjUxMjIyMDgwMDU5WhcNMjUxMjIzMDgwMDU5WjAzMTEwLwYDVQQD EyhiMGM2NTBiZmM1M2QzY2Y5NzI3NjYzMzM5YTJlMjc1OGJjMzNlNjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6TfPbVfF6XVOPpUkyafDKwl7XI/Y CmZeFICE069ZG7eQ1bELOt/DzU+hkbrqWF7plHIY5LI5Cp7uFgAw1XEeTJ4XkYPC uaclUsMbEiagpGnbebaX0akNZC3u/rIcOru96iq8zqW2+/iTCaPUOPduPt30iaL2 rRktlJdJYsMnj7jAWjz8FbhHtKyXpNqYSHklV7n1c2wWqubFG2wZMXLW1BJNVUKv rusfkc+MlioqIRY/wPZ8tTqVVwI+DLOxRJh4HBm03s9GqpHDDuzUcSC7cS1FOF5p JMZ4tEvrdgiji2+0S9k1/XvsDwRWG7HeKBDWviI7qHa2TTfsr/syKw1NSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLDGUL/FPTz5cnZjM5ouJ1i8M+ZZMB8GA1UdIwQY MBaAFD/aKaSMJXdYyOUY7lyLA8zaAkfJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlvcHBJd2xkMWpJNVJqdVhJc0R6Tm9DUjhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9jMWMwNjMtOWU0OS00MzUzLWI4YmQt OTM3NGYyMWU2NDg4LzEvUDlvcHBJd2xkMWpJNVJqdVhJc0R6Tm9DUjhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9jMWMwNjMtOWU0OS00MzUzLWI4YmQtOTM3NGYyMWU2NDg4 LzEvUDlvcHBJd2xkMWpJNVJqdVhJc0R6Tm9DUjhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK8tuNAyG QjGWMQbtl3k+dhiHSs24kkSyxAnPTPN0PtaSAfwuVqM+bDLTOEEd6FGxtgRlqyo3 7NbZZbOLU71Esq/dA0G8PcLO0ZfNmJrRxWEEdboKskTdML1N/7s/h8DUp5rWbnNI mO0cx92fKjT05Mjn65RwY1aR3kVZeumosvl2zhiLVk8SeOHQR3/0uFNdUvxwo3S2 6647g1sEKTwJ9FQuecHWesAjqpPBfaUPOZyuVSeRYVBw/ukKHFeYy2wmIbBS53dH +3CzbDou27v96MIfYCVWFZiyyi1ZNx9gRKyvHgXhxqxT2lb6ipm7E/PgSrdcg4uG OHV/UpHkKDrVZw== -----END CERTIFICATE-----Generated at Mon Dec 22 13:58:09 2025 by rpki-client