This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft File: Pv3irXEjs6hgCAWIBbsQFva3P7A.mft (raw, json) Hash identifier: xVQpK4VQeLy+0WnDZhHCBhXQwRa3UJq99jSpZPHg2N0= Subject key identifier: C0:0F:F1:BE:D6:0D:48:42:36:07:A6:4B:CE:9C:99:43:A6:3C:F1:7B Authority key identifier: 3E:FD:E2:AD:71:23:B3:A8:60:08:05:88:05:BB:10:16:F6:B7:3F:B0 Certificate issuer: /CN=3efde2ad7123b3a86008058805bb1016f6b73fb0 Certificate serial: 019B26641813CAD66B50F2D7E191979AB4B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft Manifest number: 1306 Signing time: Tue 16 Dec 2025 09:00:52 +0000 Manifest this update: Tue 16 Dec 2025 09:00:52 +0000 Manifest next update: Wed 17 Dec 2025 09:00:52 +0000 Files and hashes: 1: Pv3irXEjs6hgCAWIBbsQFva3P7A.crl (hash: fU0rpeJ4kcrya1PDPRdi0ob0qwqKQSlohnaU4XSmy/Y=) 2: T5aiE1hBQ7IRSCWrSsHsYtBRcAg.roa (hash: 309chVwaxlsKtPuysVWOW95E7n0FUrlzdRWGLRMTzgM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.crl rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:64:18:13:ca:d6:6b:50:f2:d7:e1:91:97:9a:b4:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3efde2ad7123b3a86008058805bb1016f6b73fb0 Validity Not Before: Dec 16 09:00:52 2025 GMT Not After : Dec 17 09:00:52 2025 GMT Subject: CN=c00ff1bed60d48423607a64bce9c9943a63cf17b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6f:cb:6b:86:2a:5e:30:e8:e8:fa:1c:bb:f3: 4f:20:51:53:7a:b7:19:2c:2e:47:9f:8b:2e:51:3f: 0a:e7:7b:a2:c6:1c:ef:88:ae:83:a3:b0:52:0b:cd: a4:2f:61:e7:66:0d:6b:5e:bd:1f:16:79:2c:a4:e8: 24:bb:ea:e2:0c:fe:39:d9:0b:f3:2b:af:4d:e1:16: a0:54:3e:96:8c:55:a1:d9:d7:7d:40:e6:d1:34:8a: c3:5e:b0:84:8d:5a:91:74:a1:47:eb:bc:cf:ed:64: 67:24:b1:bc:46:a4:25:47:2a:3e:b7:9e:b9:a9:0b: fc:92:cd:4a:09:90:d2:92:4d:a9:44:51:95:3d:48: d8:9b:98:ec:db:3e:42:83:a3:4a:18:8a:d9:36:bd: 47:69:9d:4b:08:5e:59:b4:fb:61:23:60:77:a7:04: ac:3b:f1:83:ed:ac:dc:3e:96:9f:2a:f9:39:fa:3c: 32:31:b6:e1:e5:e7:f6:10:4f:19:5c:28:7d:f5:94: cd:60:61:00:21:20:9b:b1:33:ba:5c:f6:64:42:f7: d5:a1:6d:b0:96:f0:a1:bc:af:07:9e:d0:9c:6f:0a: a6:da:6d:b1:78:2c:19:ca:3e:64:34:33:74:35:a6: ee:64:a9:df:5e:29:6b:79:6f:e0:6a:e2:08:88:a4: a4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:0F:F1:BE:D6:0D:48:42:36:07:A6:4B:CE:9C:99:43:A6:3C:F1:7B X509v3 Authority Key Identifier: keyid:3E:FD:E2:AD:71:23:B3:A8:60:08:05:88:05:BB:10:16:F6:B7:3F:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:54:15:76:7d:25:6e:ff:b8:a9:a3:80:c8:dd:ca:97:e1:d9: 0d:2e:2a:32:d9:78:bd:7b:76:8d:31:50:96:2a:7e:13:0c:6c: 71:c9:25:9c:8f:10:98:1f:d9:66:2e:69:1e:62:be:3d:d6:5d: 1e:70:11:dc:9e:ee:e0:fe:64:b5:73:44:7c:44:9f:bf:cc:9b: aa:2e:5a:fd:81:e7:12:78:09:40:ec:f7:fa:41:a8:1c:cb:fa: 42:46:50:a0:17:66:13:b5:9e:b9:3b:f0:61:56:96:ec:5f:5f: 4c:93:4e:92:e9:8f:2b:87:ca:58:47:9c:f1:41:2a:d1:13:1e: fd:85:9e:8a:77:64:e6:40:7b:3d:8a:b0:0b:99:fa:37:f6:c7: 47:15:8c:31:fd:ea:36:4d:af:2b:6b:54:80:51:e8:1f:de:0a: 7f:54:37:ce:f4:00:e9:46:1a:be:ce:aa:fa:e9:31:bf:5b:b3: 31:51:46:95:98:bd:d5:3e:c5:f3:c7:ba:71:ba:36:1a:93:79: 9a:dc:5e:43:62:e4:06:6e:32:12:9c:fa:ac:9f:06:4f:12:36: 75:c9:36:5c:ba:f6:ce:91:90:5c:2d:41:82:fc:17:ac:63:40: 83:ce:a2:0e:ba:2f:10:b8:ab:48:f7:1d:74:5f:71:3c:97:72: 48:ad:17:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmZBgTytZrUPLX4ZGXmrS5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZmRlMmFkNzEyM2IzYTg2MDA4MDU4ODA1YmIxMDE2ZjZi NzNmYjAwHhcNMjUxMjE2MDkwMDUyWhcNMjUxMjE3MDkwMDUyWjAzMTEwLwYDVQQD EyhjMDBmZjFiZWQ2MGQ0ODQyMzYwN2E2NGJjZTljOTk0M2E2M2NmMTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2G/La4YqXjDo6Pocu/NPIFFTercZ LC5Hn4suUT8K53uixhzviK6Do7BSC82kL2HnZg1rXr0fFnkspOgku+riDP452Qvz K69N4RagVD6WjFWh2dd9QObRNIrDXrCEjVqRdKFH67zP7WRnJLG8RqQlRyo+t565 qQv8ks1KCZDSkk2pRFGVPUjYm5js2z5Cg6NKGIrZNr1HaZ1LCF5ZtPthI2B3pwSs O/GD7azcPpafKvk5+jwyMbbh5ef2EE8ZXCh99ZTNYGEAISCbsTO6XPZkQvfVoW2w lvChvK8HntCcbwqm2m2xeCwZyj5kNDN0NabuZKnfXilreW/gauIIiKSkJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMAP8b7WDUhCNgemS86cmUOmPPF7MB8GA1UdIwQY MBaAFD794q1xI7OoYAgFiAW7EBb2tz+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHYzaXJYRWpzNmhnQ0FXSUJic1FGdmEzUDdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9kNjE3OWYtNGJkYS00ODcxLTg5Nzct YzgwZDMzYTI2NTM1LzEvUHYzaXJYRWpzNmhnQ0FXSUJic1FGdmEzUDdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9kNjE3OWYtNGJkYS00ODcxLTg5NzctYzgwZDMzYTI2NTM1 LzEvUHYzaXJYRWpzNmhnQ0FXSUJic1FGdmEzUDdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi1QVdn0l bv+4qaOAyN3Kl+HZDS4qMtl4vXt2jTFQlip+EwxsccklnI8QmB/ZZi5pHmK+PdZd HnAR3J7u4P5ktXNEfESfv8ybqi5a/YHnEngJQOz3+kGoHMv6QkZQoBdmE7WeuTvw YVaW7F9fTJNOkumPK4fKWEec8UEq0RMe/YWeindk5kB7PYqwC5n6N/bHRxWMMf3q Nk2vK2tUgFHoH94Kf1Q3zvQA6UYavs6q+ukxv1uzMVFGlZi91T7F88e6cbo2GpN5 mtxeQ2LkBm4yEpz6rJ8GTxI2dck2XLr2zpGQXC1BgvwXrGNAg86iDrovELirSPcd dF9xPJdySK0XYQ== -----END CERTIFICATE-----Generated at Tue Dec 16 17:56:34 2025 by rpki-client