This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft File: P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft (raw, json) Hash identifier: CHemZxf+pi5IqWFLEHiacR3YGh5VXXaEpz8oU+dgbw8= Subject key identifier: 9B:E4:1D:9A:1D:20:2B:11:9D:93:65:4D:C3:4F:31:E3:AD:34:5F:A6 Authority key identifier: 3F:46:C3:51:EE:89:C9:F5:55:81:67:53:07:04:88:5B:8B:E4:6E:AA Certificate issuer: /CN=3f46c351ee89c9f5558167530704885b8be46eaa Certificate serial: 019AF49C13ED71E87EB40C8EDA5D21749606 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 17:01:00 +0000 Manifest this update: Sat 06 Dec 2025 17:01:00 +0000 Manifest next update: Sun 07 Dec 2025 17:01:00 +0000 Files and hashes: 1: P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl (hash: FvhQ6J1PcnNIVOUAYifr4MBi3xvrJ7/R+VZZs296Z9Q=) 2: QxahHBF5SSiTCKjSwe1FlEjpjhQ.roa (hash: d1pnjZFtEihgfo0iFcK4wvbFSZ9uzn9ZUOrv5mZKK8Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:13:ed:71:e8:7e:b4:0c:8e:da:5d:21:74:96:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f46c351ee89c9f5558167530704885b8be46eaa Validity Not Before: Dec 6 17:01:00 2025 GMT Not After : Dec 7 17:01:00 2025 GMT Subject: CN=9be41d9a1d202b119d93654dc34f31e3ad345fa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:51:11:a0:d7:ca:1b:fc:60:cc:44:d8:34:4b: 15:87:cb:04:99:74:dc:38:60:08:cf:2a:d3:06:c9: dc:56:71:ad:cb:5a:9c:77:55:9b:ec:10:df:82:0b: a1:e2:cf:65:5a:f2:5f:64:c2:03:cf:45:db:b0:4e: 22:d1:04:a3:01:4a:d2:fc:e9:2e:47:b4:5f:f4:47: 8b:9c:fc:93:cd:03:79:1d:2a:77:c1:90:93:d6:83: f4:29:c1:e5:8f:d3:ae:e1:02:64:69:d3:29:1e:5e: f4:fa:14:24:44:89:05:10:7f:6c:85:88:f5:72:e0: 8a:7f:3f:af:56:56:26:9f:2b:ab:70:82:42:51:a1: d2:9c:71:59:12:a4:1e:0b:42:2a:3e:6c:07:33:0a: 77:64:6a:ae:6f:22:6f:80:dd:dd:37:62:46:e8:0b: fe:95:67:ad:45:a0:52:b9:8d:41:a9:41:25:12:a5: 3d:d7:d0:88:a0:b0:2f:e8:7b:b1:3d:08:1e:1b:d9: 97:55:2a:c6:fc:e7:a6:8b:9b:ae:04:b9:68:39:4c: 17:64:66:b9:7b:52:c6:36:85:67:78:fb:88:84:4a: ea:3e:2b:ed:53:c8:c2:62:93:ee:d8:e3:da:8e:98: c0:b8:35:2b:7c:73:a4:bf:84:84:43:11:18:2a:c4: 1f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:E4:1D:9A:1D:20:2B:11:9D:93:65:4D:C3:4F:31:E3:AD:34:5F:A6 X509v3 Authority Key Identifier: keyid:3F:46:C3:51:EE:89:C9:F5:55:81:67:53:07:04:88:5B:8B:E4:6E:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:b6:91:25:49:0b:e7:ac:8e:ed:52:71:f9:68:5b:3e:1f:a7: bc:5b:2b:95:c9:8d:e0:67:3a:54:0f:50:67:7e:26:2e:fc:83: da:0a:0c:fa:d8:20:7e:de:ec:55:c0:36:0a:c7:f2:b9:77:17: b8:de:58:3e:77:8d:a6:8e:4d:f5:65:c7:c1:1c:0f:f6:e7:27: e7:9b:72:be:e8:46:e1:bd:02:0c:50:8e:95:a5:12:ce:9d:77: df:ce:e7:9c:ad:e9:88:d4:9a:3f:89:e6:5b:06:dd:79:f6:ee: 92:9a:c3:aa:c3:8b:71:8e:f1:38:d4:25:40:97:fe:2a:8b:49: 2c:2f:22:3f:a0:b6:81:ae:b5:02:24:4e:46:9c:d8:82:19:78: 14:72:15:45:97:88:ef:2b:2d:e5:78:d4:d0:f2:d1:25:09:a8: 5b:b8:57:00:36:13:34:a2:ec:1d:b4:93:52:d0:9f:5b:e9:f0: ac:e2:da:38:01:a0:45:74:3f:91:b0:78:6b:6e:26:52:07:b2: e5:e1:2e:df:dd:b2:59:58:c4:8f:02:e4:73:c2:96:70:51:0c: b3:d8:6c:36:37:4c:7f:a5:22:f3:01:82:33:9e:f4:e7:09:22: ae:3d:64:74:0e:de:31:0d:cf:5c:2f:29:c3:e8:83:7d:15:57: 40:f1:f0:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nBPtceh+tAyO2l0hdJYGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmNDZjMzUxZWU4OWM5ZjU1NTgxNjc1MzA3MDQ4ODViOGJl NDZlYWEwHhcNMjUxMjA2MTcwMTAwWhcNMjUxMjA3MTcwMTAwWjAzMTEwLwYDVQQD Eyg5YmU0MWQ5YTFkMjAyYjExOWQ5MzY1NGRjMzRmMzFlM2FkMzQ1ZmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFERoNfKG/xgzETYNEsVh8sEmXTc OGAIzyrTBsncVnGty1qcd1Wb7BDfgguh4s9lWvJfZMIDz0XbsE4i0QSjAUrS/Oku R7Rf9EeLnPyTzQN5HSp3wZCT1oP0KcHlj9Ou4QJkadMpHl70+hQkRIkFEH9shYj1 cuCKfz+vVlYmnyurcIJCUaHSnHFZEqQeC0IqPmwHMwp3ZGqubyJvgN3dN2JG6Av+ lWetRaBSuY1BqUElEqU919CIoLAv6HuxPQgeG9mXVSrG/Oemi5uuBLloOUwXZGa5 e1LGNoVnePuIhErqPivtU8jCYpPu2OPajpjAuDUrfHOkv4SEQxEYKsQf5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJvkHZodICsRnZNlTcNPMeOtNF+mMB8GA1UdIwQY MBaAFD9Gw1Huicn1VYFnUwcEiFuL5G6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDBiRFVlNkp5ZlZWZ1dkVEJ3U0lXNHZrYnFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9mYzdhZWUtMjMzYy00ZDY0LTkyOTMt MDU5NzhhNWExZDY5LzEvUDBiRFVlNkp5ZlZWZ1dkVEJ3U0lXNHZrYnFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9mYzdhZWUtMjMzYy00ZDY0LTkyOTMtMDU5NzhhNWExZDY5 LzEvUDBiRFVlNkp5ZlZWZ1dkVEJ3U0lXNHZrYnFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN7aRJUkL 56yO7VJx+WhbPh+nvFsrlcmN4Gc6VA9QZ34mLvyD2goM+tggft7sVcA2CsfyuXcX uN5YPneNpo5N9WXHwRwP9ucn55tyvuhG4b0CDFCOlaUSzp13387nnK3piNSaP4nm WwbdefbukprDqsOLcY7xONQlQJf+KotJLC8iP6C2ga61AiRORpzYghl4FHIVRZeI 7yst5XjU0PLRJQmoW7hXADYTNKLsHbSTUtCfW+nwrOLaOAGgRXQ/kbB4a24mUgey 5eEu392yWVjEjwLkc8KWcFEMs9hsNjdMf6Ui8wGCM5705wkirj1kdA7eMQ3PXC8p w+iDfRVXQPHw/Q== -----END CERTIFICATE-----Generated at Sun Dec 7 01:30:26 2025 by rpki-client