This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft File: P_xBJyHAxuekxXZ66YxFId71FQE.mft (raw, json) Hash identifier: NediCFXKfVPGV6sob495wz2u2joKpP9vBzYjfLZrqnc= Subject key identifier: E5:54:7B:26:5D:67:00:03:07:BC:00:23:3B:9F:93:9A:EE:41:51:C8 Authority key identifier: 3F:FC:41:27:21:C0:C6:E7:A4:C5:76:7A:E9:8C:45:21:DE:F5:15:01 Certificate issuer: /CN=3ffc412721c0c6e7a4c5767ae98c4521def51501 Certificate serial: 019AF19A97B8813F8935310DB709E525A3DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft Manifest number: 166D Signing time: Sat 06 Dec 2025 03:00:31 +0000 Manifest this update: Sat 06 Dec 2025 03:00:31 +0000 Manifest next update: Sun 07 Dec 2025 03:00:31 +0000 Files and hashes: 1: P_xBJyHAxuekxXZ66YxFId71FQE.crl (hash: k8xQAwDMF9rGD27lZblQHEhpMmWFP3qcqUaRvjIGnOY=) 2: nmitwXvuuY6MKgCsxEX1cJcowok.roa (hash: oh69tebd8y4Ws34XumPPpVkiRFbzbzoksJJOP2JTe+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.crl rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:97:b8:81:3f:89:35:31:0d:b7:09:e5:25:a3:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ffc412721c0c6e7a4c5767ae98c4521def51501 Validity Not Before: Dec 6 03:00:31 2025 GMT Not After : Dec 7 03:00:31 2025 GMT Subject: CN=e5547b265d67000307bc00233b9f939aee4151c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:1f:84:1d:45:66:a4:79:21:f3:04:ea:e6:3a: e1:23:01:ca:00:09:be:33:75:4c:6d:f3:c1:7e:91: c5:3e:3f:fd:04:bb:45:29:38:f5:11:ab:3b:91:3b: e6:0d:51:8e:44:09:85:1f:f5:aa:57:2e:3f:d7:64: c9:3a:fd:46:fd:2c:36:58:ff:ab:f2:16:6f:62:d9: 0d:15:db:75:66:ed:15:70:95:1a:5b:5d:bd:2c:f5: 10:ec:3e:3c:6e:41:5e:97:ee:15:2f:f4:63:2b:00: 6e:e5:91:2b:b7:d6:8f:26:3a:49:75:34:07:59:1b: e4:59:1b:ba:7b:fb:b7:b4:6e:9d:fd:fd:6b:a1:e1: a6:7e:54:6f:f8:37:fc:29:9f:f0:8e:68:98:c7:b3: 37:c5:40:35:cc:fe:36:b8:1c:46:93:71:5f:85:bd: 66:a0:2c:9d:ce:8f:a1:e8:0b:0f:52:e2:59:19:49: 36:08:d6:d1:de:45:3d:57:ef:e3:b0:b5:8b:0f:6e: 2e:bc:78:c6:43:b0:9d:62:e8:39:f4:9c:30:3c:1f: 28:e6:a1:81:d4:98:91:0e:af:dd:43:b9:11:da:f9: db:59:50:dd:77:69:cd:82:10:c1:67:98:90:5e:32: f9:ef:39:10:af:5d:65:53:70:88:c7:c2:49:47:80: 4d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:54:7B:26:5D:67:00:03:07:BC:00:23:3B:9F:93:9A:EE:41:51:C8 X509v3 Authority Key Identifier: keyid:3F:FC:41:27:21:C0:C6:E7:A4:C5:76:7A:E9:8C:45:21:DE:F5:15:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:cd:88:12:83:86:d0:52:a2:a0:d4:0b:40:ef:6e:06:d0:f1: 58:55:bc:c4:9b:6f:7f:12:3f:2a:45:a0:d7:78:f9:31:f3:eb: 4b:57:01:3a:bd:97:f8:5a:ae:d3:7c:d3:eb:5a:21:d5:3b:7d: 0d:25:95:ec:49:e8:ea:ff:46:77:fe:5b:46:f8:f5:8f:9b:6b: ea:77:33:a1:17:ab:7c:45:f1:9c:9f:ee:ea:25:66:c0:df:d3: 5a:6a:e3:13:3e:b0:01:16:5b:6f:3c:c4:02:12:1e:af:ed:cd: e1:01:85:49:2d:c2:91:aa:8c:42:3f:8d:c4:44:7a:b9:6a:09: 7f:22:94:91:b7:9c:f1:33:15:d7:f6:9b:b7:f5:44:9c:c6:22: b4:6f:24:6b:bb:10:47:78:9e:ec:3f:eb:3b:de:3b:ef:34:d3: 9e:41:13:f1:1f:2d:71:a4:a7:42:f1:dd:50:4a:d9:20:cb:21: 96:c8:58:8a:12:1a:63:b8:41:b4:2b:76:5a:fd:a8:a1:ab:f8: 1a:d2:b0:88:7e:77:ec:d8:51:10:59:cf:31:6b:92:c1:3d:01: 09:a4:44:7d:cf:04:ae:16:0e:b5:59:51:4d:b0:f9:28:57:69: 82:97:b3:e1:39:5d:e2:77:58:14:d6:61:79:b9:35:32:17:39: 18:af:cd:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmpe4gT+JNTENtwnlJaPfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZmM0MTI3MjFjMGM2ZTdhNGM1NzY3YWU5OGM0NTIxZGVm NTE1MDEwHhcNMjUxMjA2MDMwMDMxWhcNMjUxMjA3MDMwMDMxWjAzMTEwLwYDVQQD EyhlNTU0N2IyNjVkNjcwMDAzMDdiYzAwMjMzYjlmOTM5YWVlNDE1MWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4R+EHUVmpHkh8wTq5jrhIwHKAAm+ M3VMbfPBfpHFPj/9BLtFKTj1Eas7kTvmDVGORAmFH/WqVy4/12TJOv1G/Sw2WP+r 8hZvYtkNFdt1Zu0VcJUaW129LPUQ7D48bkFel+4VL/RjKwBu5ZErt9aPJjpJdTQH WRvkWRu6e/u3tG6d/f1roeGmflRv+Df8KZ/wjmiYx7M3xUA1zP42uBxGk3Ffhb1m oCydzo+h6AsPUuJZGUk2CNbR3kU9V+/jsLWLD24uvHjGQ7CdYug59JwwPB8o5qGB 1JiRDq/dQ7kR2vnbWVDdd2nNghDBZ5iQXjL57zkQr11lU3CIx8JJR4BNfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOVUeyZdZwADB7wAIzufk5ruQVHIMB8GA1UdIwQY MBaAFD/8QSchwMbnpMV2eumMRSHe9RUBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUF94Qkp5SEF4dWVreFhaNjZZeEZJZDcxRlFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jZDkwYjktZmE4OC00YmQ5LWE3ZDUt MjIxMThiMzYxNDkwLzEvUF94Qkp5SEF4dWVreFhaNjZZeEZJZDcxRlFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9jZDkwYjktZmE4OC00YmQ5LWE3ZDUtMjIxMThiMzYxNDkw LzEvUF94Qkp5SEF4dWVreFhaNjZZeEZJZDcxRlFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd82IEoOG 0FKioNQLQO9uBtDxWFW8xJtvfxI/KkWg13j5MfPrS1cBOr2X+Fqu03zT61oh1Tt9 DSWV7Eno6v9Gd/5bRvj1j5tr6nczoRerfEXxnJ/u6iVmwN/TWmrjEz6wARZbbzzE AhIer+3N4QGFSS3CkaqMQj+NxER6uWoJfyKUkbec8TMV1/abt/VEnMYitG8ka7sQ R3ie7D/rO9477zTTnkET8R8tcaSnQvHdUErZIMshlshYihIaY7hBtCt2Wv2ooav4 GtKwiH537NhREFnPMWuSwT0BCaREfc8ErhYOtVlRTbD5KFdpgpez4Tld4ndYFNZh ebk1Mhc5GK/Ndw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:32 2025 by rpki-client