This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft File: Pv3irXEjs6hgCAWIBbsQFva3P7A.mft (raw, json) Hash identifier: E4CgdIJY5fKK6o9w2Wtp62/vUmePdveo3Fd8NnTyNxk= Subject key identifier: 60:C4:EF:0E:F1:98:4F:21:9E:5C:AC:2C:02:0A:D1:86:E5:21:93:3B Authority key identifier: 3E:FD:E2:AD:71:23:B3:A8:60:08:05:88:05:BB:10:16:F6:B7:3F:B0 Certificate issuer: /CN=3efde2ad7123b3a86008058805bb1016f6b73fb0 Certificate serial: 019B2852DEB7D2B110F86909C2B4C17051C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft Manifest number: 1307 Signing time: Tue 16 Dec 2025 18:01:18 +0000 Manifest this update: Tue 16 Dec 2025 18:01:18 +0000 Manifest next update: Wed 17 Dec 2025 18:01:18 +0000 Files and hashes: 1: Pv3irXEjs6hgCAWIBbsQFva3P7A.crl (hash: Qq26+qbsd5/+J3K1LedaNJumEMp5/Zn3q4npiSmEjqo=) 2: T5aiE1hBQ7IRSCWrSsHsYtBRcAg.roa (hash: 309chVwaxlsKtPuysVWOW95E7n0FUrlzdRWGLRMTzgM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.crl rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:52:de:b7:d2:b1:10:f8:69:09:c2:b4:c1:70:51:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3efde2ad7123b3a86008058805bb1016f6b73fb0 Validity Not Before: Dec 16 18:01:18 2025 GMT Not After : Dec 17 18:01:18 2025 GMT Subject: CN=60c4ef0ef1984f219e5cac2c020ad186e521933b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8c:4e:c8:a6:88:f9:3a:d2:45:18:6b:d8:41: c0:89:8a:64:2b:66:96:10:93:83:a5:ff:ff:f3:f8: 78:1a:ac:72:02:34:a1:e5:77:ac:2b:57:c0:25:4d: 68:48:63:ed:90:80:ef:06:3c:d6:fa:d7:35:66:ba: ee:1d:ce:78:36:12:be:fc:f6:71:5f:58:54:36:5a: ab:be:00:1d:3b:93:d7:ee:8e:55:80:0f:22:27:26: dd:f2:d7:32:58:ff:50:fd:3c:f6:f1:9d:e3:a5:a4: 20:af:8c:ba:a5:d2:d7:84:e2:28:fb:4e:70:c3:9c: 13:ef:9e:2b:89:0b:52:50:c5:e6:f0:e4:1a:05:32: f3:83:d5:8a:8d:7e:c0:d6:ae:d5:b3:48:41:59:ff: f9:c9:1f:c4:5e:2a:9f:f7:59:1d:eb:72:d7:f2:67: b8:1d:e5:7e:0c:61:15:a8:66:2c:48:15:4c:19:06: ae:c2:7c:04:08:e3:f8:b5:38:8b:0d:9c:b0:66:ed: b1:c9:e1:fc:7e:2f:db:5f:29:6d:68:9d:b0:9b:c6: 98:ed:5e:67:3b:7c:73:49:cf:cc:d2:ac:47:54:2f: 71:d9:0a:7c:38:0d:93:88:c2:1e:ec:ee:35:b5:72: 37:43:88:a8:fa:16:95:c2:31:e8:bb:21:94:f0:7c: 11:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C4:EF:0E:F1:98:4F:21:9E:5C:AC:2C:02:0A:D1:86:E5:21:93:3B X509v3 Authority Key Identifier: keyid:3E:FD:E2:AD:71:23:B3:A8:60:08:05:88:05:BB:10:16:F6:B7:3F:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:a0:aa:0d:9a:77:8a:6b:8f:bb:b8:20:bc:81:35:26:be:7b: 2c:9a:be:55:01:41:53:ef:62:8b:bd:f8:cd:96:f0:83:a8:73: 97:15:b0:e8:bd:ef:3e:e5:d7:bf:1b:e9:d8:fd:40:67:51:8a: 0d:09:d4:3d:ea:9c:0b:fe:c3:03:18:a0:f4:9e:dd:7f:07:ba: 52:88:dc:e0:21:1b:31:75:e2:3f:9b:bf:a4:8a:d0:ac:49:86: ef:ea:6d:73:c4:a6:9a:5c:70:16:66:96:87:12:05:56:8f:7e: 2e:f0:d2:6e:23:e9:26:54:81:7a:4b:68:94:2e:72:cf:79:d0: c1:01:10:20:da:ec:6a:04:e6:66:2d:5a:5e:09:12:eb:38:65: 7c:97:fe:2a:61:d8:49:ac:43:40:67:15:fd:98:dd:6c:58:53: 8f:17:9c:04:08:e5:3f:a7:43:8a:f2:02:28:09:ef:42:51:0f: 89:97:57:8f:f0:b7:66:9d:9f:04:18:cd:8b:14:dc:5f:2a:85: 04:d0:e3:bf:d0:48:44:ae:c0:63:d9:2e:11:66:4c:65:1c:bc: 24:84:34:df:49:9d:1d:74:06:23:46:c9:67:12:33:3f:a4:bf: 9a:c4:16:80:a7:e8:2c:b5:14:e7:58:bd:24:6e:18:2f:2d:2e: e2:16:a1:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoUt630rEQ+GkJwrTBcFHBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZmRlMmFkNzEyM2IzYTg2MDA4MDU4ODA1YmIxMDE2ZjZi NzNmYjAwHhcNMjUxMjE2MTgwMTE4WhcNMjUxMjE3MTgwMTE4WjAzMTEwLwYDVQQD Eyg2MGM0ZWYwZWYxOTg0ZjIxOWU1Y2FjMmMwMjBhZDE4NmU1MjE5MzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooxOyKaI+TrSRRhr2EHAiYpkK2aW EJODpf//8/h4GqxyAjSh5XesK1fAJU1oSGPtkIDvBjzW+tc1ZrruHc54NhK+/PZx X1hUNlqrvgAdO5PX7o5VgA8iJybd8tcyWP9Q/Tz28Z3jpaQgr4y6pdLXhOIo+05w w5wT754riQtSUMXm8OQaBTLzg9WKjX7A1q7Vs0hBWf/5yR/EXiqf91kd63LX8me4 HeV+DGEVqGYsSBVMGQauwnwECOP4tTiLDZywZu2xyeH8fi/bXyltaJ2wm8aY7V5n O3xzSc/M0qxHVC9x2Qp8OA2TiMIe7O41tXI3Q4io+haVwjHouyGU8HwRkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGDE7w7xmE8hnlysLAIK0YblIZM7MB8GA1UdIwQY MBaAFD794q1xI7OoYAgFiAW7EBb2tz+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHYzaXJYRWpzNmhnQ0FXSUJic1FGdmEzUDdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9kNjE3OWYtNGJkYS00ODcxLTg5Nzct YzgwZDMzYTI2NTM1LzEvUHYzaXJYRWpzNmhnQ0FXSUJic1FGdmEzUDdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9kNjE3OWYtNGJkYS00ODcxLTg5NzctYzgwZDMzYTI2NTM1 LzEvUHYzaXJYRWpzNmhnQ0FXSUJic1FGdmEzUDdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP6CqDZp3 imuPu7ggvIE1Jr57LJq+VQFBU+9ii734zZbwg6hzlxWw6L3vPuXXvxvp2P1AZ1GK DQnUPeqcC/7DAxig9J7dfwe6Uojc4CEbMXXiP5u/pIrQrEmG7+ptc8SmmlxwFmaW hxIFVo9+LvDSbiPpJlSBektolC5yz3nQwQEQINrsagTmZi1aXgkS6zhlfJf+KmHY SaxDQGcV/ZjdbFhTjxecBAjlP6dDivICKAnvQlEPiZdXj/C3Zp2fBBjNixTcXyqF BNDjv9BIRK7AY9kuEWZMZRy8JIQ030mdHXQGI0bJZxIzP6S/msQWgKfoLLUU51i9 JG4YLy0u4hahlw== -----END CERTIFICATE-----Generated at Tue Dec 16 20:55:07 2025 by rpki-client