This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft File: P_xBJyHAxuekxXZ66YxFId71FQE.mft (raw, json) Hash identifier: jF8YocdW8FK2gWH5wK0T/kSEfv3ANoXbuFDbjoXbWqg= Subject key identifier: 1B:F1:61:E4:BB:05:AB:54:CC:0C:72:6A:98:B3:13:F7:CA:66:28:CB Authority key identifier: 3F:FC:41:27:21:C0:C6:E7:A4:C5:76:7A:E9:8C:45:21:DE:F5:15:01 Certificate issuer: /CN=3ffc412721c0c6e7a4c5767ae98c4521def51501 Certificate serial: 019B3155503943F01771B09387161593DA4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft Manifest number: 168E Signing time: Thu 18 Dec 2025 12:00:33 +0000 Manifest this update: Thu 18 Dec 2025 12:00:33 +0000 Manifest next update: Fri 19 Dec 2025 12:00:33 +0000 Files and hashes: 1: P_xBJyHAxuekxXZ66YxFId71FQE.crl (hash: xeP15/CH37diuCsUTuvOPmMSCdNA2T3HH7Z6tVNZQ8k=) 2: nmitwXvuuY6MKgCsxEX1cJcowok.roa (hash: oh69tebd8y4Ws34XumPPpVkiRFbzbzoksJJOP2JTe+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.crl rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:55:50:39:43:f0:17:71:b0:93:87:16:15:93:da:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ffc412721c0c6e7a4c5767ae98c4521def51501 Validity Not Before: Dec 18 12:00:33 2025 GMT Not After : Dec 19 12:00:33 2025 GMT Subject: CN=1bf161e4bb05ab54cc0c726a98b313f7ca6628cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6c:50:90:7d:71:df:97:20:28:6d:51:5b:5c: 55:7c:87:d9:3f:d7:fc:ad:dc:5c:c7:2d:31:7b:79: 0e:03:cd:fa:05:5e:dd:81:36:dd:9a:c9:43:98:6f: 90:68:8c:46:57:b9:16:3c:a0:08:92:ff:96:1c:40: 48:d7:45:9d:f4:99:c0:42:09:30:2d:6f:76:3e:04: 85:75:ad:6f:2d:ae:84:50:50:d9:d1:19:34:61:5f: ca:ce:b1:83:1b:06:79:f9:e4:a1:02:03:7c:5c:67: b5:5b:9c:f9:94:32:7b:c8:66:c8:83:98:7b:88:32: c7:3b:3d:2f:e8:49:6d:78:42:ad:c2:b7:8a:18:f8: b2:67:24:b8:2b:64:b9:59:06:93:0a:f1:29:e2:26: 32:25:7a:e2:75:5c:17:6a:80:58:aa:ca:f1:c4:3a: d4:62:e9:15:7a:87:c5:de:0c:dc:51:63:3b:e5:73: 85:f6:56:95:36:7e:32:bb:df:67:bb:93:62:b6:a3: ea:12:cb:07:1a:3f:47:8f:57:23:af:b9:10:24:f6: 99:59:ac:a3:50:86:50:a6:66:3b:ce:4a:de:ec:80: 7c:ae:97:2b:98:42:bc:07:f5:f0:41:76:c2:f8:d4: 26:9e:5b:a3:05:dc:7c:a5:2f:e3:be:96:9f:8f:f4: 19:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:F1:61:E4:BB:05:AB:54:CC:0C:72:6A:98:B3:13:F7:CA:66:28:CB X509v3 Authority Key Identifier: keyid:3F:FC:41:27:21:C0:C6:E7:A4:C5:76:7A:E9:8C:45:21:DE:F5:15:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:aa:f1:77:45:01:90:f2:3c:ad:ac:52:2e:22:cb:f2:88:d7: 5f:a3:ab:fd:9b:36:e9:28:7c:22:8c:f0:5c:d2:bf:06:c1:59: 24:44:86:d0:2f:61:48:5a:92:c4:ff:be:29:0b:b5:e8:13:a1: 5d:d2:1c:e9:2b:2f:59:38:02:ce:1d:8f:87:0a:8b:0a:0c:83: 43:be:03:4d:3d:4a:cd:07:17:69:3a:2d:a9:9a:e3:df:b2:8d: 55:07:7f:c2:ed:ca:00:53:03:be:0d:e1:e2:d5:cf:da:eb:cf: 9f:c3:e9:b4:be:92:cc:0e:c2:54:48:93:15:7b:8a:8c:6e:b5: 0f:ab:f1:2f:84:27:e5:a1:d8:0f:0e:d6:33:0f:a2:2c:93:92: 14:7b:c6:f1:83:80:8f:ff:75:61:af:a8:2c:fe:e4:25:ba:db: bf:9e:98:c2:fd:b3:f2:95:ae:04:e1:66:d2:d5:e6:83:29:f2: 52:35:96:cb:da:75:93:7c:eb:d3:e6:7d:c0:9c:2f:e7:f8:ae: f1:ed:b3:85:df:57:c6:8d:72:57:7d:63:d7:e2:af:81:dd:22: 58:10:cf:cd:8f:50:0c:78:a2:a9:2d:33:4e:95:8b:0a:7f:a2: a2:6d:94:dd:1c:d6:5b:b9:0e:23:c7:6b:e5:7c:9d:59:50:fc: 08:df:a3:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVVA5Q/AXcbCThxYVk9pMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZmM0MTI3MjFjMGM2ZTdhNGM1NzY3YWU5OGM0NTIxZGVm NTE1MDEwHhcNMjUxMjE4MTIwMDMzWhcNMjUxMjE5MTIwMDMzWjAzMTEwLwYDVQQD EygxYmYxNjFlNGJiMDVhYjU0Y2MwYzcyNmE5OGIzMTNmN2NhNjYyOGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGxQkH1x35cgKG1RW1xVfIfZP9f8 rdxcxy0xe3kOA836BV7dgTbdmslDmG+QaIxGV7kWPKAIkv+WHEBI10Wd9JnAQgkw LW92PgSFda1vLa6EUFDZ0Rk0YV/KzrGDGwZ5+eShAgN8XGe1W5z5lDJ7yGbIg5h7 iDLHOz0v6ElteEKtwreKGPiyZyS4K2S5WQaTCvEp4iYyJXridVwXaoBYqsrxxDrU YukVeofF3gzcUWM75XOF9laVNn4yu99nu5NitqPqEssHGj9Hj1cjr7kQJPaZWayj UIZQpmY7zkre7IB8rpcrmEK8B/XwQXbC+NQmnlujBdx8pS/jvpafj/QZbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBvxYeS7BatUzAxyapizE/fKZijLMB8GA1UdIwQY MBaAFD/8QSchwMbnpMV2eumMRSHe9RUBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUF94Qkp5SEF4dWVreFhaNjZZeEZJZDcxRlFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jZDkwYjktZmE4OC00YmQ5LWE3ZDUt MjIxMThiMzYxNDkwLzEvUF94Qkp5SEF4dWVreFhaNjZZeEZJZDcxRlFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9jZDkwYjktZmE4OC00YmQ5LWE3ZDUtMjIxMThiMzYxNDkw LzEvUF94Qkp5SEF4dWVreFhaNjZZeEZJZDcxRlFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfarxd0UB kPI8raxSLiLL8ojXX6Or/Zs26Sh8IozwXNK/BsFZJESG0C9hSFqSxP++KQu16BOh XdIc6SsvWTgCzh2PhwqLCgyDQ74DTT1KzQcXaTotqZrj37KNVQd/wu3KAFMDvg3h 4tXP2uvPn8PptL6SzA7CVEiTFXuKjG61D6vxL4Qn5aHYDw7WMw+iLJOSFHvG8YOA j/91Ya+oLP7kJbrbv56Ywv2z8pWuBOFm0tXmgynyUjWWy9p1k3zr0+Z9wJwv5/iu 8e2zhd9Xxo1yV31j1+Kvgd0iWBDPzY9QDHiiqS0zTpWLCn+iom2U3RzWW7kOI8dr 5XydWVD8CN+jmw== -----END CERTIFICATE-----Generated at Thu Dec 18 19:09:18 2025 by rpki-client