This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.mft File: P9WU69efjdhbR5LpUzvkaBaohgY.mft (raw, json) Hash identifier: Qmnn1uKCu6+xoRhc/BAFqtUi2KeHklvUSMemOJRvivk= Subject key identifier: 61:FE:20:81:73:41:4E:60:77:EB:95:24:80:E4:03:F6:6A:BE:58:5C Authority key identifier: 3F:D5:94:EB:D7:9F:8D:D8:5B:47:92:E9:53:3B:E4:68:16:A8:86:06 Certificate issuer: /CN=3fd594ebd79f8dd85b4792e9533be46816a88606 Certificate serial: 019B3231CBCF2FD567DC37D4851DA8D12D0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9WU69efjdhbR5LpUzvkaBaohgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.mft Manifest number: 1301 Signing time: Thu 18 Dec 2025 16:01:22 +0000 Manifest this update: Thu 18 Dec 2025 16:01:22 +0000 Manifest next update: Fri 19 Dec 2025 16:01:22 +0000 Files and hashes: 1: P9WU69efjdhbR5LpUzvkaBaohgY.crl (hash: jz4PX4BffC5pgrwfrX41qTVM5RsOvU0zxT1G0gPdtVw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.crl rsync://rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.mft rsync://rpki.ripe.net/repository/DEFAULT/P9WU69efjdhbR5LpUzvkaBaohgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:cb:cf:2f:d5:67:dc:37:d4:85:1d:a8:d1:2d:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd594ebd79f8dd85b4792e9533be46816a88606 Validity Not Before: Dec 18 16:01:22 2025 GMT Not After : Dec 19 16:01:22 2025 GMT Subject: CN=61fe208173414e6077eb952480e403f66abe585c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3d:0e:27:1f:e7:55:fa:48:59:53:8f:53:f0: 77:ba:bd:bd:4e:3a:c1:8f:da:c3:94:3f:b5:5b:55: 9d:74:97:07:f2:d5:e4:57:0e:90:54:24:79:c0:3c: 81:f0:db:b3:05:dc:c1:99:c3:f4:73:85:b7:95:97: b6:a7:b2:93:0c:95:e5:3b:03:85:82:14:f5:9d:91: 67:d5:dc:4a:0e:4d:57:14:cf:a4:59:7b:8f:1f:87: d7:bc:9a:07:75:84:75:e7:b3:3a:45:b1:fe:f4:e0: d0:35:97:0d:fa:60:9a:ff:00:b2:fd:dc:ac:56:6b: 46:74:0d:72:78:28:b3:65:36:3b:d2:cf:75:4a:b0: 97:76:ea:6e:59:d5:fc:41:ec:ea:97:a9:30:2d:4e: 74:b9:68:e5:e6:b2:6b:54:f0:97:23:e5:c0:aa:1f: ac:b5:71:f7:c7:ee:18:e6:1a:a5:c1:c5:c0:e3:a9: 86:d0:ef:07:62:cf:a3:38:9f:7b:9e:77:2e:1e:58: 90:1a:18:be:86:95:e0:e0:ff:b9:74:35:f0:11:e8: 96:f5:91:0e:47:2e:c6:22:f6:1a:3c:53:24:38:f9: 2f:8a:3c:6f:aa:76:96:c0:bf:62:24:5c:41:30:4d: 78:eb:05:cd:3f:2b:ae:3c:2e:c6:59:bc:15:ff:b6: ae:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:FE:20:81:73:41:4E:60:77:EB:95:24:80:E4:03:F6:6A:BE:58:5C X509v3 Authority Key Identifier: keyid:3F:D5:94:EB:D7:9F:8D:D8:5B:47:92:E9:53:3B:E4:68:16:A8:86:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9WU69efjdhbR5LpUzvkaBaohgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:dc:c1:83:f6:7e:3a:1b:80:14:0b:02:ae:a7:5d:bd:83:21: 63:5d:3f:9b:9b:a4:0d:1b:e6:bc:85:23:e1:5d:4b:a8:a6:cd: df:53:20:c3:24:a2:62:4e:06:c6:d0:40:f3:df:d7:36:84:7d: 0f:61:5c:bd:e1:e3:8c:47:6a:fc:ca:4c:80:29:9b:1b:e4:04: c6:db:a2:70:27:45:f9:58:a1:40:cf:41:b1:21:0c:04:84:c9: a7:6d:f9:17:4b:86:45:76:ab:81:51:b8:34:61:28:99:15:94: 40:8d:a7:23:45:99:19:4d:67:61:a8:a4:95:f2:aa:c2:ce:52: f2:d6:fd:85:6b:3e:49:ba:69:db:7a:bb:73:b8:1b:43:d2:87: a1:cc:05:65:b0:fd:7a:51:35:97:af:90:af:63:a6:a7:04:2d: 35:0c:ff:97:39:57:0f:be:d6:f2:9c:db:70:d1:a3:5b:dc:3b: e3:64:89:77:08:2a:32:2c:d5:6d:b0:74:0a:cc:22:5f:b0:76: 1e:dd:ea:63:80:0e:3e:e4:eb:23:49:dc:db:da:77:d8:c2:c4: bc:10:e1:b2:ef:e7:9a:f5:2c:e0:df:df:78:65:af:15:06:63: a4:27:39:33:d0:d3:15:a4:f6:8e:d0:ae:18:23:ba:d7:72:2e: 9c:82:c8:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMcvPL9Vn3DfUhR2o0S0OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDU5NGViZDc5ZjhkZDg1YjQ3OTJlOTUzM2JlNDY4MTZh ODg2MDYwHhcNMjUxMjE4MTYwMTIyWhcNMjUxMjE5MTYwMTIyWjAzMTEwLwYDVQQD Eyg2MWZlMjA4MTczNDE0ZTYwNzdlYjk1MjQ4MGU0MDNmNjZhYmU1ODVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwD0OJx/nVfpIWVOPU/B3ur29TjrB j9rDlD+1W1WddJcH8tXkVw6QVCR5wDyB8NuzBdzBmcP0c4W3lZe2p7KTDJXlOwOF ghT1nZFn1dxKDk1XFM+kWXuPH4fXvJoHdYR157M6RbH+9ODQNZcN+mCa/wCy/dys VmtGdA1yeCizZTY70s91SrCXdupuWdX8Qezql6kwLU50uWjl5rJrVPCXI+XAqh+s tXH3x+4Y5hqlwcXA46mG0O8HYs+jOJ97nncuHliQGhi+hpXg4P+5dDXwEeiW9ZEO Ry7GIvYaPFMkOPkvijxvqnaWwL9iJFxBME146wXNPyuuPC7GWbwV/7auDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGH+IIFzQU5gd+uVJIDkA/ZqvlhcMB8GA1UdIwQY MBaAFD/VlOvXn43YW0eS6VM75GgWqIYGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlXVTY5ZWZqZGhiUjVMcFV6dmthQmFvaGdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zMGE4NmQtYjk3Mi00MTVlLWI4ZmEt NjYyNDY5MWY2ZjEzLzEvUDlXVTY5ZWZqZGhiUjVMcFV6dmthQmFvaGdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8zMGE4NmQtYjk3Mi00MTVlLWI4ZmEtNjYyNDY5MWY2ZjEz LzEvUDlXVTY5ZWZqZGhiUjVMcFV6dmthQmFvaGdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkNzBg/Z+ OhuAFAsCrqddvYMhY10/m5ukDRvmvIUj4V1LqKbN31MgwySiYk4GxtBA89/XNoR9 D2FcveHjjEdq/MpMgCmbG+QExtuicCdF+VihQM9BsSEMBITJp235F0uGRXargVG4 NGEomRWUQI2nI0WZGU1nYaiklfKqws5S8tb9hWs+Sbpp23q7c7gbQ9KHocwFZbD9 elE1l6+Qr2OmpwQtNQz/lzlXD77W8pzbcNGjW9w742SJdwgqMizVbbB0CswiX7B2 Ht3qY4AOPuTrI0nc29p32MLEvBDhsu/nmvUs4N/feGWvFQZjpCc5M9DTFaT2jtCu GCO613IunILI4w== -----END CERTIFICATE-----Generated at Thu Dec 18 21:51:34 2025 by rpki-client