This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft File: P2U3Wk029crhof4kWKOAUmz-22o.mft (raw, json) Hash identifier: AFIpZ05eBj8NP/22Q8CcI2Hkdi+iowO4iHZe2dUGL6E= Subject key identifier: 48:C5:C6:D9:8D:E7:C0:30:94:6D:E1:66:D6:09:3C:A0:5A:ED:DA:33 Authority key identifier: 3F:65:37:5A:4D:36:F5:CA:E1:A1:FE:24:58:A3:80:52:6C:FE:DB:6A Certificate issuer: /CN=3f65375a4d36f5cae1a1fe2458a380526cfedb6a Certificate serial: 019AF12EC246F86A8B554BEC22BDC968D403 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft Manifest number: 02BF Signing time: Sat 06 Dec 2025 01:02:44 +0000 Manifest this update: Sat 06 Dec 2025 01:02:44 +0000 Manifest next update: Sun 07 Dec 2025 01:02:44 +0000 Files and hashes: 1: 9-o0NLiGvlKmMx-qIL22lBoBavY.roa (hash: x3fjMZ9f1cmTHw/gRrQuIfz02fOQCT025xB0UcuPW+Y=) 2: P2U3Wk029crhof4kWKOAUmz-22o.crl (hash: 8ZmnlqaFzu+cWEboRsvu77x4rvdQmBNmerBNl49xTDg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:c2:46:f8:6a:8b:55:4b:ec:22:bd:c9:68:d4:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f65375a4d36f5cae1a1fe2458a380526cfedb6a Validity Not Before: Dec 6 01:02:44 2025 GMT Not After : Dec 7 01:02:44 2025 GMT Subject: CN=48c5c6d98de7c030946de166d6093ca05aedda33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:dd:20:3e:b9:a3:26:f6:35:e7:6d:e1:19:cb: 01:8e:23:a8:3c:c2:45:7c:d8:18:73:37:f6:c3:e4: 8f:c2:e9:1b:5f:3b:40:ca:a5:45:3c:42:8d:c3:0a: b2:50:58:4e:30:eb:9e:77:d4:95:b5:a7:2e:92:68: e0:c5:7a:8a:fb:a6:a7:24:19:38:56:bc:9d:b7:87: cc:c7:28:39:b1:d2:19:4f:f9:fd:2f:d7:6d:75:25: 6d:fa:17:d1:a5:c6:77:e9:2f:38:dc:79:b9:f1:54: cd:1d:58:00:6d:a4:b7:7c:3e:5c:ee:88:de:5d:8c: a0:d8:b9:4d:a7:cf:47:22:d1:79:ad:b8:5c:f3:ac: 81:48:ac:82:61:0b:fc:ee:e9:04:7e:fa:14:73:4a: 2a:91:c4:8a:b5:3c:ef:9b:24:c6:90:aa:2b:76:b4: 8f:0b:b4:54:3d:46:26:ee:91:6b:ef:6e:fb:4a:e7: f1:c7:41:b3:fa:bf:15:67:6d:de:e5:6a:bf:5c:ca: 5f:55:b5:07:52:3a:37:d2:f0:fc:5b:64:c4:8d:e2: ef:16:ad:cf:b6:52:74:9a:16:b2:3e:78:f7:d4:18: 01:e4:96:61:ea:1f:d6:9e:8d:33:be:26:45:4d:31: c3:a3:04:b2:27:bc:5a:ec:a0:f3:b9:73:ff:bb:43: f8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:C5:C6:D9:8D:E7:C0:30:94:6D:E1:66:D6:09:3C:A0:5A:ED:DA:33 X509v3 Authority Key Identifier: keyid:3F:65:37:5A:4D:36:F5:CA:E1:A1:FE:24:58:A3:80:52:6C:FE:DB:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:f4:eb:80:14:fc:18:58:fd:34:f5:86:20:fe:d9:e6:87:77: 43:ea:3b:9c:c8:c6:29:2d:39:df:47:90:a7:d3:4c:4f:c2:73: 93:10:49:bf:b6:fc:24:a4:37:3c:72:a8:54:22:01:8c:13:15: c7:a9:19:55:55:a4:01:ec:e2:ca:80:66:a5:0a:b9:34:5f:06: 4e:62:fa:82:02:6b:88:9a:92:db:73:f9:00:ae:bd:b9:76:44: ea:a4:e9:59:9a:54:8f:e4:51:55:15:58:9b:76:e3:2c:a6:89: 33:ca:d1:fc:7a:f2:f6:32:44:0c:a2:73:b6:bd:2c:36:48:0a: 1e:03:52:d9:ee:53:35:e3:48:02:dc:ae:cd:3d:1c:3f:e2:40: 2f:e3:c2:74:5b:e8:11:ac:e6:38:09:bd:ea:2e:89:86:50:2a: ed:db:31:47:06:0d:ad:dd:fd:b1:c9:86:f0:f7:c9:cd:b9:a1: 82:5b:d9:6f:5f:04:37:9c:aa:3e:23:63:9c:6b:64:45:16:6f: c5:bb:18:fb:0b:ee:bc:e9:29:26:3e:ac:ca:48:f2:a1:50:67: 92:b3:d6:46:d2:bd:43:a5:f5:11:d8:52:d8:4c:49:c8:50:34: 99:9a:95:08:62:87:33:66:37:c1:94:31:92:55:38:69:b1:98: 50:f3:98:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLsJG+GqLVUvsIr3JaNQDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmNjUzNzVhNGQzNmY1Y2FlMWExZmUyNDU4YTM4MDUyNmNm ZWRiNmEwHhcNMjUxMjA2MDEwMjQ0WhcNMjUxMjA3MDEwMjQ0WjAzMTEwLwYDVQQD Eyg0OGM1YzZkOThkZTdjMDMwOTQ2ZGUxNjZkNjA5M2NhMDVhZWRkYTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApd0gPrmjJvY1523hGcsBjiOoPMJF fNgYczf2w+SPwukbXztAyqVFPEKNwwqyUFhOMOued9SVtacukmjgxXqK+6anJBk4 Vrydt4fMxyg5sdIZT/n9L9dtdSVt+hfRpcZ36S843Hm58VTNHVgAbaS3fD5c7oje XYyg2LlNp89HItF5rbhc86yBSKyCYQv87ukEfvoUc0oqkcSKtTzvmyTGkKordrSP C7RUPUYm7pFr7277Sufxx0Gz+r8VZ23e5Wq/XMpfVbUHUjo30vD8W2TEjeLvFq3P tlJ0mhayPnj31BgB5JZh6h/Wno0zviZFTTHDowSyJ7xa7KDzuXP/u0P4dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEjFxtmN58AwlG3hZtYJPKBa7dozMB8GA1UdIwQY MBaAFD9lN1pNNvXK4aH+JFijgFJs/ttqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDJVM1drMDI5Y3Job2Y0a1dLT0FVbXotMjJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS82ZDE5MzAtNjgxNS00ODdmLWFiZTkt ZTI4MTZlZTZiYTU2LzEvUDJVM1drMDI5Y3Job2Y0a1dLT0FVbXotMjJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS82ZDE5MzAtNjgxNS00ODdmLWFiZTktZTI4MTZlZTZiYTU2 LzEvUDJVM1drMDI5Y3Job2Y0a1dLT0FVbXotMjJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkfTrgBT8 GFj9NPWGIP7Z5od3Q+o7nMjGKS0530eQp9NMT8JzkxBJv7b8JKQ3PHKoVCIBjBMV x6kZVVWkAeziyoBmpQq5NF8GTmL6ggJriJqS23P5AK69uXZE6qTpWZpUj+RRVRVY m3bjLKaJM8rR/Hry9jJEDKJztr0sNkgKHgNS2e5TNeNIAtyuzT0cP+JAL+PCdFvo EazmOAm96i6JhlAq7dsxRwYNrd39scmG8PfJzbmhglvZb18EN5yqPiNjnGtkRRZv xbsY+wvuvOkpJj6sykjyoVBnkrPWRtK9Q6X1EdhS2ExJyFA0mZqVCGKHM2Y3wZQx klU4abGYUPOYmA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:15:39 2025 by rpki-client