This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft File: P1KMlfYICrE8sEl4PpJE0z2cSzI.mft (raw, json) Hash identifier: f7OBsmMeLin6mnWWEJYjvSWIF9Rgr3brgSyg3NRuyds= Subject key identifier: 61:AF:23:8F:BF:5C:B1:2D:37:07:68:7E:A6:03:7B:DE:AA:E4:D9:2C Authority key identifier: 3F:52:8C:95:F6:08:0A:B1:3C:B0:49:78:3E:92:44:D3:3D:9C:4B:32 Certificate issuer: /CN=3f528c95f6080ab13cb049783e9244d33d9c4b32 Certificate serial: 019AF277007DBCE3B17B486FF07E1BF08748 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1KMlfYICrE8sEl4PpJE0z2cSzI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft Manifest number: 1674 Signing time: Sat 06 Dec 2025 07:01:16 +0000 Manifest this update: Sat 06 Dec 2025 07:01:16 +0000 Manifest next update: Sun 07 Dec 2025 07:01:16 +0000 Files and hashes: 1: P1KMlfYICrE8sEl4PpJE0z2cSzI.crl (hash: scg86jyOEYbCcag0rZ85KJi2iH0ZtRr4XUah/NaZJoU=) 2: w5HnLtF4Me5n7OHUmGug2mAnL6U.roa (hash: AsJuclUazy6myQDlUyLOaCVJ9azdwtM7AhIo+Ahv/h8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.crl rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft rsync://rpki.ripe.net/repository/DEFAULT/P1KMlfYICrE8sEl4PpJE0z2cSzI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:00:7d:bc:e3:b1:7b:48:6f:f0:7e:1b:f0:87:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f528c95f6080ab13cb049783e9244d33d9c4b32 Validity Not Before: Dec 6 07:01:16 2025 GMT Not After : Dec 7 07:01:16 2025 GMT Subject: CN=61af238fbf5cb12d3707687ea6037bdeaae4d92c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2c:fc:e4:33:12:7c:02:5d:ae:a1:b5:c2:14: f9:21:68:98:f1:d9:81:0c:b0:b0:ac:85:d9:25:56: 15:c4:59:b4:0f:8e:2d:2b:5c:d6:d9:45:f0:e2:4e: d3:6e:2b:80:4a:eb:67:72:2a:f3:e6:dd:b7:42:48: 34:bf:3e:58:ab:69:93:07:e8:91:9a:fd:fe:72:9d: b3:bf:93:fc:c5:48:65:9a:44:47:48:a8:da:a4:f1: 8a:fc:c2:ed:a0:7e:c4:8c:53:09:03:e7:b1:80:6a: 44:17:d6:e9:3d:1c:c1:3e:3e:dd:06:7e:24:2d:d2: 0f:11:31:ba:9d:59:74:b7:fa:93:6c:67:77:0f:b2: e7:d2:2f:5c:e4:17:7f:4d:9a:4e:c9:8c:0f:44:fd: 1d:e5:20:2e:9d:3d:2c:73:e5:dd:38:7a:e0:1f:93: a4:2f:75:f5:ef:d8:27:73:45:b6:53:d0:95:18:5d: 57:36:7f:a0:8e:9a:5b:d6:d2:69:1e:a4:52:9e:4e: 2f:07:96:d9:27:8d:b3:be:75:ae:d9:c8:57:26:c2: df:62:72:ad:bb:a0:27:b2:6e:5c:b4:35:6c:0f:31: 83:b2:fc:7c:a9:f4:7b:4c:70:af:70:e1:5f:ef:eb: 7e:4f:16:af:85:58:4d:14:98:86:9e:87:72:c3:dc: 89:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:AF:23:8F:BF:5C:B1:2D:37:07:68:7E:A6:03:7B:DE:AA:E4:D9:2C X509v3 Authority Key Identifier: keyid:3F:52:8C:95:F6:08:0A:B1:3C:B0:49:78:3E:92:44:D3:3D:9C:4B:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1KMlfYICrE8sEl4PpJE0z2cSzI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:3f:59:11:30:15:01:ac:57:8c:5f:d8:8e:7c:ad:fa:43:26: 69:22:4f:6b:16:40:dd:f1:bc:67:e1:c4:4b:ec:9c:43:d9:37: f1:d5:03:b0:6d:8b:c8:bd:cb:57:0a:0f:56:08:84:18:b7:34: 9e:4e:e9:29:e9:c9:3a:76:9a:29:69:2b:a6:c2:4c:d5:e9:80: bf:35:78:22:26:8c:2c:26:db:c5:47:a9:0d:50:a2:eb:b1:6e: e7:76:e4:a2:8e:d8:91:fe:14:30:a3:bc:17:a0:87:07:47:07: ed:f2:2b:a0:00:d2:4e:67:a5:0f:33:49:7c:81:d0:21:ad:cc: 4a:a7:34:d7:af:3b:a0:75:3b:bd:05:43:e3:db:87:fc:74:1d: 7c:18:f5:c9:f4:68:92:b1:9c:cc:72:04:3b:26:27:ce:ca:9a: 53:cc:41:34:23:4a:25:fb:c7:16:2a:ab:16:05:b7:5a:84:11: 4f:03:d9:5d:6f:11:ee:19:8b:15:24:ac:83:4b:3d:ae:1f:9f: 29:5f:8d:33:b5:63:08:0a:20:90:16:89:8e:e1:de:6f:5a:b9: 7d:6b:a0:bd:91:8e:65:e1:17:22:75:12:b0:3d:e5:06:ce:42: e1:02:af:13:5f:2e:e4:73:ab:bd:5c:25:a2:93:5d:f5:ba:60: 16:1f:1f:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydwB9vOOxe0hv8H4b8IdIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmNTI4Yzk1ZjYwODBhYjEzY2IwNDk3ODNlOTI0NGQzM2Q5 YzRiMzIwHhcNMjUxMjA2MDcwMTE2WhcNMjUxMjA3MDcwMTE2WjAzMTEwLwYDVQQD Eyg2MWFmMjM4ZmJmNWNiMTJkMzcwNzY4N2VhNjAzN2JkZWFhZTRkOTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyz85DMSfAJdrqG1whT5IWiY8dmB DLCwrIXZJVYVxFm0D44tK1zW2UXw4k7TbiuASutncirz5t23Qkg0vz5Yq2mTB+iR mv3+cp2zv5P8xUhlmkRHSKjapPGK/MLtoH7EjFMJA+exgGpEF9bpPRzBPj7dBn4k LdIPETG6nVl0t/qTbGd3D7Ln0i9c5Bd/TZpOyYwPRP0d5SAunT0sc+XdOHrgH5Ok L3X179gnc0W2U9CVGF1XNn+gjppb1tJpHqRSnk4vB5bZJ42zvnWu2chXJsLfYnKt u6Ansm5ctDVsDzGDsvx8qfR7THCvcOFf7+t+TxavhVhNFJiGnodyw9yJBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGGvI4+/XLEtNwdofqYDe96q5NksMB8GA1UdIwQY MBaAFD9SjJX2CAqxPLBJeD6SRNM9nEsyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDFLTWxmWUlDckU4c0VsNFBwSkUwejJjU3pJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9jMmZkZjItMmEwYS00NDNmLWI3ZTAt YTViZGJiMTQ1YTc4LzEvUDFLTWxmWUlDckU4c0VsNFBwSkUwejJjU3pJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9jMmZkZjItMmEwYS00NDNmLWI3ZTAtYTViZGJiMTQ1YTc4 LzEvUDFLTWxmWUlDckU4c0VsNFBwSkUwejJjU3pJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUz9ZETAV AaxXjF/Yjnyt+kMmaSJPaxZA3fG8Z+HES+ycQ9k38dUDsG2LyL3LVwoPVgiEGLc0 nk7pKenJOnaaKWkrpsJM1emAvzV4IiaMLCbbxUepDVCi67Fu53bkoo7Ykf4UMKO8 F6CHB0cH7fIroADSTmelDzNJfIHQIa3MSqc01687oHU7vQVD49uH/HQdfBj1yfRo krGczHIEOyYnzsqaU8xBNCNKJfvHFiqrFgW3WoQRTwPZXW8R7hmLFSSsg0s9rh+f KV+NM7VjCAogkBaJjuHeb1q5fWugvZGOZeEXInUSsD3lBs5C4QKvE18u5HOrvVwl opNd9bpgFh8fdQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:00:32 2025 by rpki-client