This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft File: P3lU2IwK4_Y5hpe_38GVanU-g9g.mft (raw, json) Hash identifier: ZFFIJn06ld/nQ6DoKXEWmWS1EjdWwMkYJAfIA1x9mjU= Subject key identifier: A1:E4:E7:1C:31:AD:41:63:3E:3F:02:B9:EB:8E:08:E5:EE:69:B5:EF Authority key identifier: 3F:79:54:D8:8C:0A:E3:F6:39:86:97:BF:DF:C1:95:6A:75:3E:83:D8 Certificate issuer: /CN=3f7954d88c0ae3f6398697bfdfc1956a753e83d8 Certificate serial: 019B43256BCAE8A8DEF5F313078DCF5E1007 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft Manifest number: 1764 Signing time: Sun 21 Dec 2025 23:01:24 +0000 Manifest this update: Sun 21 Dec 2025 23:01:24 +0000 Manifest next update: Mon 22 Dec 2025 23:01:24 +0000 Files and hashes: 1: P3lU2IwK4_Y5hpe_38GVanU-g9g.crl (hash: GN1pc8ekq32BCtaqDhXBTRKQv+LQbWXa+F2WaqjCpSs=) 2: rf7Y9BfnjDYuwCtely2bugyEpys.roa (hash: 9y+7Sb1Y7U3Xr15ca0JClSv0KalX6Si92Kt+rNAmTHY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:25:6b:ca:e8:a8:de:f5:f3:13:07:8d:cf:5e:10:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f7954d88c0ae3f6398697bfdfc1956a753e83d8 Validity Not Before: Dec 21 23:01:24 2025 GMT Not After : Dec 22 23:01:24 2025 GMT Subject: CN=a1e4e71c31ad41633e3f02b9eb8e08e5ee69b5ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:86:70:f0:f3:31:81:4d:51:44:62:18:1a:80: fb:9e:e6:24:d9:74:93:6d:f7:e8:1c:6c:da:74:8e: 05:ab:ee:ae:06:98:64:c5:2d:33:9f:81:80:70:ac: 4c:31:b2:07:5a:43:8f:d4:79:35:30:8d:8e:03:f9: 65:03:5c:48:5f:77:98:fd:51:7e:e9:ca:e2:9a:8c: d4:fa:2b:c5:6f:46:3e:70:2a:56:5b:12:8a:f4:62: f6:9f:a5:01:c3:59:5f:6e:5b:23:23:98:13:69:4e: 81:43:21:ac:eb:19:86:99:e1:64:08:0a:4e:d5:cd: 42:27:35:83:d4:fe:3c:00:0d:0a:32:94:8e:b3:2d: 2c:85:9b:16:9e:4e:09:0d:5a:09:7c:92:92:0c:f1: 63:8b:8d:3a:13:b1:4f:0d:e3:43:f7:39:77:0a:fc: fc:ab:b9:e2:b1:61:a4:dc:5f:da:80:ab:72:0a:1f: e1:c8:bc:d6:8a:2c:99:00:c7:9f:0e:2b:08:7e:69: 73:fd:c9:60:db:68:56:53:cd:12:86:60:d4:a7:07: 70:38:b3:3c:91:72:98:8b:a2:b0:56:4b:e9:0e:a6: 31:92:a3:ea:ae:ec:5e:7a:84:8c:80:2c:f7:0a:ad: 39:6c:26:a7:8d:27:34:b1:2b:1e:05:5a:5f:ca:52: 13:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:E4:E7:1C:31:AD:41:63:3E:3F:02:B9:EB:8E:08:E5:EE:69:B5:EF X509v3 Authority Key Identifier: keyid:3F:79:54:D8:8C:0A:E3:F6:39:86:97:BF:DF:C1:95:6A:75:3E:83:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:5a:f1:eb:f9:84:94:61:c4:b2:0a:64:5c:b3:2e:8f:d5:ec: e0:a2:c7:1c:58:fe:04:23:05:0f:b6:48:87:dd:0c:28:6c:6d: 17:b3:2c:4d:11:4a:4a:f8:d5:5e:68:53:92:ed:a5:c6:6f:35: 0a:97:8f:a1:a2:1c:3b:f7:c0:14:44:a6:77:ef:09:06:74:a2: d4:f7:ea:81:e3:9c:04:0f:34:1a:14:97:b8:bd:47:7a:44:cb: 9f:8c:24:02:1f:4b:36:d1:28:a6:b3:aa:2f:42:2b:09:a0:11: c7:5b:a4:17:e0:f7:e8:82:33:91:8f:ff:10:57:ad:47:88:8b: c2:47:28:22:5e:ef:7b:60:14:4e:a4:83:d6:fc:3f:96:c9:1f: 81:98:94:ae:61:bd:66:6c:5c:33:64:05:3f:b1:14:a0:ff:ad: 5e:3f:7c:40:45:64:c7:0d:50:9f:8b:cb:e7:09:42:89:d9:df: 13:75:33:a4:c0:3e:f4:9e:f4:ce:59:2c:c0:0c:1b:a1:8c:b8: 83:d2:51:53:80:14:f2:53:c0:7f:78:9c:cc:b2:4c:46:f1:96: 37:a8:d9:6c:38:3e:19:be:8f:3e:64:20:c3:b1:b9:87:fc:f5: c2:ed:c9:4a:1f:21:7a:9b:97:92:db:2b:4d:88:2f:ff:8c:55: 23:28:2e:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJWvK6Kje9fMTB43PXhAHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmNzk1NGQ4OGMwYWUzZjYzOTg2OTdiZmRmYzE5NTZhNzUz ZTgzZDgwHhcNMjUxMjIxMjMwMTI0WhcNMjUxMjIyMjMwMTI0WjAzMTEwLwYDVQQD EyhhMWU0ZTcxYzMxYWQ0MTYzM2UzZjAyYjllYjhlMDhlNWVlNjliNWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YZw8PMxgU1RRGIYGoD7nuYk2XST bffoHGzadI4Fq+6uBphkxS0zn4GAcKxMMbIHWkOP1Hk1MI2OA/llA1xIX3eY/VF+ 6crimozU+ivFb0Y+cCpWWxKK9GL2n6UBw1lfblsjI5gTaU6BQyGs6xmGmeFkCApO 1c1CJzWD1P48AA0KMpSOsy0shZsWnk4JDVoJfJKSDPFji406E7FPDeND9zl3Cvz8 q7nisWGk3F/agKtyCh/hyLzWiiyZAMefDisIfmlz/clg22hWU80ShmDUpwdwOLM8 kXKYi6KwVkvpDqYxkqPqruxeeoSMgCz3Cq05bCanjSc0sSseBVpfylITRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKHk5xwxrUFjPj8CueuOCOXuabXvMB8GA1UdIwQY MBaAFD95VNiMCuP2OYaXv9/BlWp1PoPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDNsVTJJd0s0X1k1aHBlXzM4R1ZhblUtZzlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy84MmU2NTYtMTRhMy00ZTNhLTlkNmUt YWY0MDYwODZiODliLzEvUDNsVTJJd0s0X1k1aHBlXzM4R1ZhblUtZzlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy84MmU2NTYtMTRhMy00ZTNhLTlkNmUtYWY0MDYwODZiODli LzEvUDNsVTJJd0s0X1k1aHBlXzM4R1ZhblUtZzlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMFrx6/mE lGHEsgpkXLMuj9Xs4KLHHFj+BCMFD7ZIh90MKGxtF7MsTRFKSvjVXmhTku2lxm81 CpePoaIcO/fAFESmd+8JBnSi1PfqgeOcBA80GhSXuL1HekTLn4wkAh9LNtEoprOq L0IrCaARx1ukF+D36IIzkY//EFetR4iLwkcoIl7ve2AUTqSD1vw/lskfgZiUrmG9 ZmxcM2QFP7EUoP+tXj98QEVkxw1Qn4vL5wlCidnfE3UzpMA+9J70zlkswAwboYy4 g9JRU4AU8lPAf3iczLJMRvGWN6jZbDg+Gb6PPmQgw7G5h/z1wu3JSh8hepuXktsr TYgv/4xVIyguwA== -----END CERTIFICATE-----Generated at Mon Dec 22 03:22:37 2025 by rpki-client