This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft File: p3l5GlNwwc1X5JPZSfke-82mYX4.mft (raw, json) Hash identifier: UKrNEoA2ixw7aIOc+tHN24AheBoG+ouRiEmB03RonwY= Subject key identifier: 9D:62:46:E6:5D:B6:46:87:94:D3:45:F7:82:CC:3C:43:8A:0D:4A:BE Authority key identifier: A7:79:79:1A:53:70:C1:CD:57:E4:93:D9:49:F9:1E:FB:CD:A6:61:7E Certificate issuer: /CN=a779791a5370c1cd57e493d949f91efbcda6617e Certificate serial: 019AF19B19C44E0C4D62FBEA39CE04925A69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p3l5GlNwwc1X5JPZSfke-82mYX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft Manifest number: 0C04 Signing time: Sat 06 Dec 2025 03:01:04 +0000 Manifest this update: Sat 06 Dec 2025 03:01:04 +0000 Manifest next update: Sun 07 Dec 2025 03:01:04 +0000 Files and hashes: 1: p3l5GlNwwc1X5JPZSfke-82mYX4.crl (hash: /tgcfI34JBK1j3UuR9Ey7qHLXgO9sPqswNjTfl53xzo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.crl rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft rsync://rpki.ripe.net/repository/DEFAULT/p3l5GlNwwc1X5JPZSfke-82mYX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:19:c4:4e:0c:4d:62:fb:ea:39:ce:04:92:5a:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a779791a5370c1cd57e493d949f91efbcda6617e Validity Not Before: Dec 6 03:01:04 2025 GMT Not After : Dec 7 03:01:04 2025 GMT Subject: CN=9d6246e65db6468794d345f782cc3c438a0d4abe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:77:87:d9:33:f1:3b:21:05:88:29:ff:6e:87: ec:ee:ff:28:25:ba:68:6d:7b:cf:c2:5d:1a:57:26: 89:11:f1:81:95:95:69:c1:92:98:7c:da:dc:5c:53: 53:e3:cf:4b:ec:cb:4a:f7:26:72:ac:3c:3b:d2:e5: 0b:3b:bf:95:28:51:30:6f:52:06:6f:a7:64:f1:3f: cf:b6:56:6a:72:0e:0c:c4:65:23:4d:b7:c9:05:72: 67:c7:e1:c1:a0:7e:b5:90:c6:2d:73:94:58:01:c6: f4:fb:1a:6d:dd:4e:70:87:5b:86:c1:2d:ce:e5:57: 99:e8:f8:e8:cd:5a:3f:ff:77:af:13:8b:45:37:4f: ed:33:41:98:a1:fe:ed:78:a6:b1:bd:1d:96:2a:e5: f3:c7:65:5d:b1:f7:bc:9c:4f:ac:51:87:51:1f:e9: 95:7f:ee:2c:72:bb:0b:79:e0:bf:94:86:45:73:91: 5d:78:74:da:53:88:2a:6f:55:6f:f1:2d:b8:ba:1e: ce:d9:bf:8f:f5:b0:21:b7:66:81:54:2e:d6:61:41: 50:a0:62:8e:ac:6b:69:c0:ba:a8:28:dd:21:3d:db: 9e:a7:49:ff:7d:69:1e:bd:41:77:c5:39:e3:c0:18: ac:dd:bb:92:e7:2d:b5:5b:0d:83:1b:ac:b7:30:4f: cd:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:62:46:E6:5D:B6:46:87:94:D3:45:F7:82:CC:3C:43:8A:0D:4A:BE X509v3 Authority Key Identifier: keyid:A7:79:79:1A:53:70:C1:CD:57:E4:93:D9:49:F9:1E:FB:CD:A6:61:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p3l5GlNwwc1X5JPZSfke-82mYX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:65:3c:66:a1:9c:48:1d:57:84:04:17:b0:40:56:db:ab:e7: 43:fb:77:3e:4a:e0:29:97:08:f4:c9:6d:c2:b2:e2:39:ca:01: d6:1b:3c:fa:c7:b9:92:0c:b7:32:16:ff:42:98:15:d1:48:c4: 03:71:ea:8d:56:fe:b6:cf:89:ca:1a:17:94:a4:58:fd:44:64: 00:ed:ab:b2:14:d3:68:6b:7c:b3:3c:ed:9f:0f:f5:21:5d:b5: e9:55:7e:8b:e4:8e:91:cc:28:78:48:1a:fb:38:b3:c1:6e:5a: 46:6b:45:e3:8f:ff:32:68:43:b2:f0:e9:33:c1:91:d7:6d:55: 93:2c:87:91:94:65:a6:61:f7:c9:a8:49:4a:e7:d0:cc:95:1d: 3b:e4:b5:87:53:f4:eb:da:23:3c:a2:36:18:d4:fd:cc:06:73: aa:9c:17:3b:c0:78:ba:5f:4a:69:36:3b:78:5e:e1:15:b7:50: 0a:35:b3:30:fc:c1:53:1b:62:b9:e1:04:7c:1e:1f:5f:c1:9f: da:57:2a:c0:32:7a:05:5e:a6:70:0d:7d:46:24:66:7b:32:d7: 90:87:5d:ba:ce:1a:4d:fd:38:2a:7a:c2:b1:4e:cc:5f:6d:93: e7:bd:c3:39:d0:c2:4e:17:08:95:23:b0:15:e5:2f:dd:ac:db: e5:88:e2:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmxnETgxNYvvqOc4EklppMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3Nzk3OTFhNTM3MGMxY2Q1N2U0OTNkOTQ5ZjkxZWZiY2Rh NjYxN2UwHhcNMjUxMjA2MDMwMTA0WhcNMjUxMjA3MDMwMTA0WjAzMTEwLwYDVQQD Eyg5ZDYyNDZlNjVkYjY0Njg3OTRkMzQ1Zjc4MmNjM2M0MzhhMGQ0YWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtneH2TPxOyEFiCn/bofs7v8oJbpo bXvPwl0aVyaJEfGBlZVpwZKYfNrcXFNT489L7MtK9yZyrDw70uULO7+VKFEwb1IG b6dk8T/PtlZqcg4MxGUjTbfJBXJnx+HBoH61kMYtc5RYAcb0+xpt3U5wh1uGwS3O 5VeZ6PjozVo//3evE4tFN0/tM0GYof7teKaxvR2WKuXzx2Vdsfe8nE+sUYdRH+mV f+4scrsLeeC/lIZFc5FdeHTaU4gqb1Vv8S24uh7O2b+P9bAht2aBVC7WYUFQoGKO rGtpwLqoKN0hPduep0n/fWkevUF3xTnjwBis3buS5y21Ww2DG6y3ME/NgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ1iRuZdtkaHlNNF94LMPEOKDUq+MB8GA1UdIwQY MBaAFKd5eRpTcMHNV+ST2Un5HvvNpmF+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDNsNUdsTnd3YzFYNUpQWlNma2UtODJtWVg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC80ZWViMjktNWJkZC00OGI2LTk5NTQt NGQ4YWNjYmE2OWRjLzEvcDNsNUdsTnd3YzFYNUpQWlNma2UtODJtWVg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC80ZWViMjktNWJkZC00OGI2LTk5NTQtNGQ4YWNjYmE2OWRj LzEvcDNsNUdsTnd3YzFYNUpQWlNma2UtODJtWVg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXGU8ZqGc SB1XhAQXsEBW26vnQ/t3PkrgKZcI9MltwrLiOcoB1hs8+se5kgy3Mhb/QpgV0UjE A3HqjVb+ts+JyhoXlKRY/URkAO2rshTTaGt8szztnw/1IV216VV+i+SOkcwoeEga +zizwW5aRmtF44//MmhDsvDpM8GR121VkyyHkZRlpmH3yahJSufQzJUdO+S1h1P0 69ojPKI2GNT9zAZzqpwXO8B4ul9KaTY7eF7hFbdQCjWzMPzBUxtiueEEfB4fX8Gf 2lcqwDJ6BV6mcA19RiRmezLXkIddus4aTf04KnrCsU7MX22T573DOdDCThcIlSOw FeUv3azb5Yji/A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:47:49 2025 by rpki-client