This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft File: P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft (raw, json) Hash identifier: PClkOWpjurSJ1FIe7X1BqUxJYRPQNb3FN+DnqCXbXF4= Subject key identifier: 52:EA:A7:A9:48:5B:F8:93:E3:74:17:5A:68:BC:53:E4:BA:7E:1C:79 Authority key identifier: 3F:B7:8C:D1:A3:10:C9:9D:63:77:14:0E:52:8A:A3:E6:E0:DC:AB:9F Certificate issuer: /CN=3fb78cd1a310c99d6377140e528aa3e6e0dcab9f Certificate serial: 019AF3F73B8C8CBA0776DDDE37D034F1293D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P7eM0aMQyZ1jdxQOUoqj5uDcq58.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft Manifest number: 0298 Signing time: Sat 06 Dec 2025 14:00:57 +0000 Manifest this update: Sat 06 Dec 2025 14:00:57 +0000 Manifest next update: Sun 07 Dec 2025 14:00:57 +0000 Files and hashes: 1: P7eM0aMQyZ1jdxQOUoqj5uDcq58.crl (hash: Mx/iD0frzsn0ZVay1oaRZkOf7GzdVd8+ZBsEGxMGT+I=) 2: tO945n8IOH4m4HY-IByza0kUANU.roa (hash: 1Y70k1PM1fySvFZtbmtzuB2FgWQvwNTM4axab3kjR2A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft rsync://rpki.ripe.net/repository/DEFAULT/P7eM0aMQyZ1jdxQOUoqj5uDcq58.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:3b:8c:8c:ba:07:76:dd:de:37:d0:34:f1:29:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fb78cd1a310c99d6377140e528aa3e6e0dcab9f Validity Not Before: Dec 6 14:00:57 2025 GMT Not After : Dec 7 14:00:57 2025 GMT Subject: CN=52eaa7a9485bf893e374175a68bc53e4ba7e1c79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:71:04:76:b5:71:57:a5:22:2e:21:1a:08:cc: 53:14:42:a4:cb:1b:6a:c8:d7:a8:7e:6c:91:a0:7a: 8e:71:70:7f:a3:23:5d:45:42:2f:97:b9:50:76:6d: 05:c7:6c:82:68:fc:89:d6:b1:91:0a:6d:70:8b:7f: d0:a4:47:c8:ec:2d:ac:ef:02:2b:69:91:68:4e:ab: 60:97:51:a3:b9:61:4d:62:07:0f:cc:b4:c5:53:a7: 24:56:65:2e:7c:c9:7e:25:6c:d7:eb:96:17:17:58: 68:07:b2:f6:6c:7c:06:fb:f4:20:7a:cd:9d:92:08: 3d:d8:13:90:e7:0a:60:29:cf:56:5b:a6:10:28:b1: 0b:b8:a2:c9:f7:4c:aa:ea:4c:1e:88:21:3b:77:48: b1:3c:c3:17:56:ea:c1:ef:17:4d:01:c7:48:ea:b6: c0:c6:20:07:07:fe:24:80:28:22:96:6c:df:68:8b: bd:49:92:47:c2:3c:fa:66:32:4c:28:40:90:ff:91: c4:da:36:76:67:98:93:c4:b4:e9:2e:fb:6a:d4:93: 3c:70:a4:8e:63:f9:f3:a9:12:c1:67:f7:86:c4:73: a9:df:00:8b:72:f2:91:73:ed:a7:8b:ae:ca:ca:cd: 1a:a2:92:5e:d4:48:a5:c2:17:80:33:1a:85:86:c4: c9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:EA:A7:A9:48:5B:F8:93:E3:74:17:5A:68:BC:53:E4:BA:7E:1C:79 X509v3 Authority Key Identifier: keyid:3F:B7:8C:D1:A3:10:C9:9D:63:77:14:0E:52:8A:A3:E6:E0:DC:AB:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P7eM0aMQyZ1jdxQOUoqj5uDcq58.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:62:fb:d3:39:4f:0e:a0:cf:c7:b1:41:9a:cf:f5:11:ab:8c: 08:cb:85:26:ec:eb:bc:51:2d:df:ed:4f:05:a3:75:97:6f:50: ce:2c:f4:1d:3d:ce:30:06:fc:73:da:f3:e9:eb:7a:5d:d6:33: 2c:00:83:b7:61:48:de:ee:a3:b0:0e:42:33:a2:a4:eb:de:20: 7f:83:d2:f7:43:28:77:dc:df:44:65:c6:ea:8f:95:1b:39:bb: 6c:22:f9:86:ab:57:8b:86:7e:6c:1e:fb:00:10:5a:96:c3:d2: 4f:c1:66:48:ec:9a:c6:af:3c:38:0f:76:b7:ef:d9:d4:12:d4: 87:91:d6:5f:25:39:6b:d9:c6:4d:1a:b4:73:c5:e6:06:e1:30: a7:b2:04:40:36:62:fc:23:87:30:f0:63:94:28:0c:2e:b8:eb: 78:c2:6c:4a:cc:54:fa:9c:e5:16:1f:b7:06:7a:a7:24:26:e7: df:b3:94:27:7a:9c:ee:27:54:12:1c:bf:46:1e:9c:63:9a:1a: 60:2d:f5:67:76:68:9c:68:39:9d:96:d9:62:52:9b:58:8b:fe: d9:17:bf:a7:84:21:ac:62:ce:94:1c:db:52:d4:3c:00:f1:39: 8f:57:a2:a0:9d:63:58:ec:35:2f:fb:ca:89:31:4f:f9:8e:b2: 35:83:12:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9zuMjLoHdt3eN9A08Sk9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmYjc4Y2QxYTMxMGM5OWQ2Mzc3MTQwZTUyOGFhM2U2ZTBk Y2FiOWYwHhcNMjUxMjA2MTQwMDU3WhcNMjUxMjA3MTQwMDU3WjAzMTEwLwYDVQQD Eyg1MmVhYTdhOTQ4NWJmODkzZTM3NDE3NWE2OGJjNTNlNGJhN2UxYzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHEEdrVxV6UiLiEaCMxTFEKkyxtq yNeofmyRoHqOcXB/oyNdRUIvl7lQdm0Fx2yCaPyJ1rGRCm1wi3/QpEfI7C2s7wIr aZFoTqtgl1GjuWFNYgcPzLTFU6ckVmUufMl+JWzX65YXF1hoB7L2bHwG+/Qges2d kgg92BOQ5wpgKc9WW6YQKLELuKLJ90yq6kweiCE7d0ixPMMXVurB7xdNAcdI6rbA xiAHB/4kgCgilmzfaIu9SZJHwjz6ZjJMKECQ/5HE2jZ2Z5iTxLTpLvtq1JM8cKSO Y/nzqRLBZ/eGxHOp3wCLcvKRc+2ni67Kys0aopJe1EilwheAMxqFhsTJIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFLqp6lIW/iT43QXWmi8U+S6fhx5MB8GA1UdIwQY MBaAFD+3jNGjEMmdY3cUDlKKo+bg3KufMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDdlTTBhTVF5WjFqZHhRT1VvcWo1dURjcTU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8zMjNjM2YtYWFiMy00Njg0LTgxYzct YzU4MTUxMThlNTJmLzEvUDdlTTBhTVF5WjFqZHhRT1VvcWo1dURjcTU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8zMjNjM2YtYWFiMy00Njg0LTgxYzctYzU4MTUxMThlNTJm LzEvUDdlTTBhTVF5WjFqZHhRT1VvcWo1dURjcTU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYmL70zlP DqDPx7FBms/1EauMCMuFJuzrvFEt3+1PBaN1l29Qziz0HT3OMAb8c9rz6et6XdYz LACDt2FI3u6jsA5CM6Kk694gf4PS90Mod9zfRGXG6o+VGzm7bCL5hqtXi4Z+bB77 ABBalsPST8FmSOyaxq88OA92t+/Z1BLUh5HWXyU5a9nGTRq0c8XmBuEwp7IEQDZi /COHMPBjlCgMLrjreMJsSsxU+pzlFh+3BnqnJCbn37OUJ3qc7idUEhy/Rh6cY5oa YC31Z3ZonGg5nZbZYlKbWIv+2Re/p4QhrGLOlBzbUtQ8APE5j1eioJ1jWOw1L/vK iTFP+Y6yNYMSvQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:34:00 2025 by rpki-client