This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft File: P1vEQBQoW28-KHKuz11PM-Jozos.mft (raw, json) Hash identifier: k1lgiSU0Ybb2OwTxDypgYnD9d3qNR40v1kIfHcpX/nQ= Subject key identifier: 0C:5C:08:D7:F2:DB:E5:E0:6B:3E:B0:97:15:CE:A0:F3:93:FB:DB:44 Authority key identifier: 3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B Certificate issuer: /CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b Certificate serial: 019AF276826F9AF242094EC32B2D91224308 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft Manifest number: 0860 Signing time: Sat 06 Dec 2025 07:00:44 +0000 Manifest this update: Sat 06 Dec 2025 07:00:44 +0000 Manifest next update: Sun 07 Dec 2025 07:00:44 +0000 Files and hashes: 1: AcEkQsHgOk9cJvafcwY_24-gqJU.roa (hash: P0WFMbng9Ro3ND0yeTy1ArY8fd/+6N/p4Vx6hJOnIpk=) 2: AhGacAZRO8Gx3hNBgiDjl4oZgqI.roa (hash: /EpJOq122VUgjLXObaWDOaWwB7lmX3CrZN3WS11mATY=) 3: P1vEQBQoW28-KHKuz11PM-Jozos.crl (hash: 2svsS3QYItuBaTH7aBoMJ7hwdM2rbqtW9K6lXJbzJrQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:82:6f:9a:f2:42:09:4e:c3:2b:2d:91:22:43:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b Validity Not Before: Dec 6 07:00:44 2025 GMT Not After : Dec 7 07:00:44 2025 GMT Subject: CN=0c5c08d7f2dbe5e06b3eb09715cea0f393fbdb44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:43:cc:29:4b:3b:ba:dc:32:c6:f3:02:7b:3f: 5b:b2:69:ef:c7:b4:1a:bd:33:be:b4:f8:8b:14:c5: bc:86:df:72:3a:9a:91:b6:bc:ff:28:a4:70:00:98: ed:e2:7a:59:73:dc:52:9d:33:b5:7f:20:a6:ae:07: 31:15:cd:ff:d4:49:56:ae:e4:00:1f:d1:ce:87:e1: 29:fe:3d:fa:d1:21:f0:60:6e:63:50:86:3a:f7:2b: 54:2b:d9:81:00:30:3b:05:20:27:b9:0a:e8:55:3b: bb:f0:6d:9e:6c:0a:99:67:4d:5d:fa:40:7c:22:81: 90:c3:e4:7c:41:6c:e1:8c:71:18:a0:8c:21:f4:5b: 02:3b:9b:22:32:bc:25:d6:8a:38:e9:8e:96:bf:53: d2:80:74:cd:3f:17:3f:44:3a:58:d8:0d:bc:4a:6b: 7d:f7:d0:2b:47:01:b3:11:b2:96:da:6e:e4:2d:e2: ea:69:f0:8c:48:7c:70:d6:7f:7a:8e:7e:0e:91:86: 88:bd:ee:fc:80:27:57:ea:b2:ce:95:de:85:04:47: 51:ab:ee:1a:0b:24:5b:1e:05:67:e8:f7:1e:a2:50: 66:47:77:a4:9b:89:90:81:0e:e3:9b:bd:5c:a7:58: 89:b6:de:87:48:3d:97:cc:cd:4c:2e:c1:4a:c1:75: c7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:5C:08:D7:F2:DB:E5:E0:6B:3E:B0:97:15:CE:A0:F3:93:FB:DB:44 X509v3 Authority Key Identifier: keyid:3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:d3:a3:2c:4e:12:55:4b:48:47:66:60:13:c9:80:91:27:d2: 5c:55:9d:12:0c:2a:b5:c6:b2:cb:73:4f:49:c1:89:83:fa:c6: f2:05:55:4c:7f:61:07:85:9b:aa:f4:3e:42:ab:13:75:53:4d: 6d:15:e9:2b:7d:03:ea:1a:f8:ec:18:03:5c:8c:5b:19:57:f8: 4b:9b:42:6f:aa:7f:51:6e:fc:99:5e:67:dd:4b:6a:93:39:af: bd:b2:2a:42:8d:c7:29:35:a4:66:06:37:71:a7:15:45:ec:28: fa:14:8f:9d:3c:7e:29:28:a5:d4:d2:24:0e:c2:6c:5e:49:45: c0:d2:bb:ed:36:cf:02:06:a9:c0:61:33:46:2c:de:32:e6:84: f1:00:78:65:7d:8b:e2:e0:54:8f:be:c1:53:80:ef:64:2a:38: 68:4f:69:97:c3:d0:01:d5:86:13:5e:e5:a5:51:c2:49:c5:29: 49:5e:f7:db:09:8b:63:cd:91:80:39:1e:43:c7:40:2e:73:e7: 29:62:79:9e:da:05:b2:86:0e:0b:30:2c:2b:fc:7e:ad:45:b7: 38:16:e1:86:5f:90:f0:35:a2:09:c0:e4:4c:94:db:50:8b:1b: c0:2d:23:c9:b4:33:48:80:d7:fa:ef:dd:1a:57:13:a6:cf:46: 6a:a6:22:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydoJvmvJCCU7DKy2RIkMIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmNWJjNDQwMTQyODViNmYzZTI4NzJhZWNmNWQ0ZjMzZTI2 OGNlOGIwHhcNMjUxMjA2MDcwMDQ0WhcNMjUxMjA3MDcwMDQ0WjAzMTEwLwYDVQQD EygwYzVjMDhkN2YyZGJlNWUwNmIzZWIwOTcxNWNlYTBmMzkzZmJkYjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUPMKUs7utwyxvMCez9bsmnvx7Qa vTO+tPiLFMW8ht9yOpqRtrz/KKRwAJjt4npZc9xSnTO1fyCmrgcxFc3/1ElWruQA H9HOh+Ep/j360SHwYG5jUIY69ytUK9mBADA7BSAnuQroVTu78G2ebAqZZ01d+kB8 IoGQw+R8QWzhjHEYoIwh9FsCO5siMrwl1oo46Y6Wv1PSgHTNPxc/RDpY2A28Smt9 99ArRwGzEbKW2m7kLeLqafCMSHxw1n96jn4OkYaIve78gCdX6rLOld6FBEdRq+4a CyRbHgVn6PceolBmR3ekm4mQgQ7jm71cp1iJtt6HSD2XzM1MLsFKwXXHGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAxcCNfy2+Xgaz6wlxXOoPOT+9tEMB8GA1UdIwQY MBaAFD9bxEAUKFtvPihyrs9dTzPiaM6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDF2RVFCUW9XMjgtS0hLdXoxMVBNLUpvem9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zMjI2OTMtZTU4Yi00OGUyLWJkZDkt MDI5NTNjZTYzODQzLzEvUDF2RVFCUW9XMjgtS0hLdXoxMVBNLUpvem9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8zMjI2OTMtZTU4Yi00OGUyLWJkZDktMDI5NTNjZTYzODQz LzEvUDF2RVFCUW9XMjgtS0hLdXoxMVBNLUpvem9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAndOjLE4S VUtIR2ZgE8mAkSfSXFWdEgwqtcayy3NPScGJg/rG8gVVTH9hB4WbqvQ+QqsTdVNN bRXpK30D6hr47BgDXIxbGVf4S5tCb6p/UW78mV5n3UtqkzmvvbIqQo3HKTWkZgY3 cacVRewo+hSPnTx+KSil1NIkDsJsXklFwNK77TbPAgapwGEzRizeMuaE8QB4ZX2L 4uBUj77BU4DvZCo4aE9pl8PQAdWGE17lpVHCScUpSV732wmLY82RgDkeQ8dALnPn KWJ5ntoFsoYOCzAsK/x+rUW3OBbhhl+Q8DWiCcDkTJTbUIsbwC0jybQzSIDX+u/d GlcTps9GaqYi2A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:35:40 2025 by rpki-client