This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.mft File: p2H8O2oE10MHa9KG3oIURfBlTvc.mft (raw, json) Hash identifier: jgj4biMVB17um2F0REaDayEo5jKV0p603vXOuNdKtgw= Subject key identifier: 38:AF:E6:9B:1E:62:5D:6C:DF:B5:5C:BE:BE:2C:48:7A:D7:7C:B0:96 Authority key identifier: A7:61:FC:3B:6A:04:D7:43:07:6B:D2:86:DE:82:14:45:F0:65:4E:F7 Certificate issuer: /CN=a761fc3b6a04d743076bd286de821445f0654ef7 Certificate serial: 019B2DB005A7170C67E0E9039448C5B80A16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2H8O2oE10MHa9KG3oIURfBlTvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.mft Manifest number: 170F Signing time: Wed 17 Dec 2025 19:01:09 +0000 Manifest this update: Wed 17 Dec 2025 19:01:09 +0000 Manifest next update: Thu 18 Dec 2025 19:01:09 +0000 Files and hashes: 1: p2H8O2oE10MHa9KG3oIURfBlTvc.crl (hash: Y3LJiaKRwuhIJJalqgu2CwW7FmtrbjnHfP4C44mVnm4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.crl rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.mft rsync://rpki.ripe.net/repository/DEFAULT/p2H8O2oE10MHa9KG3oIURfBlTvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:b0:05:a7:17:0c:67:e0:e9:03:94:48:c5:b8:0a:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a761fc3b6a04d743076bd286de821445f0654ef7 Validity Not Before: Dec 17 19:01:09 2025 GMT Not After : Dec 18 19:01:09 2025 GMT Subject: CN=38afe69b1e625d6cdfb55cbebe2c487ad77cb096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:de:a9:4f:ee:82:ce:32:a5:6c:8d:b7:c4:0a: 16:55:58:e2:f4:04:4f:b0:6a:b7:b1:94:1b:7b:13: e1:60:ad:79:34:86:32:53:d7:e9:a8:3f:a3:a0:70: 53:fb:ce:2e:4c:b7:4d:5d:a1:5f:85:36:e3:e5:a7: 2a:d7:16:c2:fa:ba:e5:1b:36:9d:45:7b:3c:5e:94: a2:57:d5:56:d0:b8:8a:86:da:6a:07:82:8d:0c:aa: 96:22:3c:96:e8:26:30:4a:02:f2:df:ea:ea:67:16: 83:8c:07:a3:51:89:d4:b1:b3:38:88:5d:84:75:1c: a1:e4:ae:90:15:dc:89:8e:79:0d:04:32:54:42:9f: 1c:74:f0:28:e1:e9:66:37:72:9e:73:ee:03:0f:6e: 7d:96:7e:27:ad:68:b6:2a:4e:87:e7:81:b3:70:7f: c6:c3:26:fc:03:e3:b1:e2:8f:1c:d1:55:2f:58:8b: c5:60:63:05:c5:45:15:af:ae:e3:90:ff:4a:d0:93: dc:6f:d5:04:e6:51:94:9f:67:55:dd:ba:89:3f:c2: 1f:e8:4e:04:9a:66:93:f7:ca:ac:d8:7b:5f:76:5b: 90:c3:7e:5e:83:db:81:db:74:3d:3b:db:31:22:31: 22:ba:1c:71:98:03:ea:03:5e:80:ed:fd:9b:5f:bc: dc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:AF:E6:9B:1E:62:5D:6C:DF:B5:5C:BE:BE:2C:48:7A:D7:7C:B0:96 X509v3 Authority Key Identifier: keyid:A7:61:FC:3B:6A:04:D7:43:07:6B:D2:86:DE:82:14:45:F0:65:4E:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2H8O2oE10MHa9KG3oIURfBlTvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:eb:5d:bf:47:29:7f:31:90:4f:9a:a1:b0:6f:75:3a:94:d6: e7:80:4d:63:b5:70:29:01:04:dc:51:a4:af:13:1c:64:2c:c5: 34:93:b3:04:03:20:43:14:80:e4:13:d2:ee:f3:6e:1c:6c:e2: 5c:f3:1f:e6:f9:3b:6b:e8:1a:ef:ff:e3:2d:5e:50:ea:25:31: ac:a2:54:95:f8:03:84:a5:30:7a:73:a7:10:85:64:12:fa:7e: af:93:4f:f1:ba:9f:9a:9f:2c:ad:03:4f:d0:83:66:97:7c:3b: d2:69:7f:1c:3e:67:13:14:53:65:99:5b:0f:05:c8:69:34:b7: db:66:2e:f1:f3:7f:83:46:82:51:bc:08:1d:da:7c:34:20:7c: 33:39:69:ab:7d:97:a1:6f:01:e6:26:2d:57:7e:d8:b1:52:d8: 49:db:74:1b:d3:c4:0c:e0:38:66:8b:fe:f1:12:b2:c6:b7:45: 9f:ef:b9:52:57:07:20:19:a8:ed:21:c8:f5:4a:4b:bd:e0:71: fb:6a:0f:d9:4c:45:ab:9c:50:a0:99:59:be:96:7c:c4:d6:d1: c3:8a:4c:b6:14:4d:ec:8a:61:95:6a:48:b7:8a:fc:0b:0a:55: 59:f2:11:0d:b6:a0:d8:6e:d6:3e:c4:02:ce:6e:dd:15:9e:ca: ec:83:e7:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstsAWnFwxn4OkDlEjFuAoWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NjFmYzNiNmEwNGQ3NDMwNzZiZDI4NmRlODIxNDQ1ZjA2 NTRlZjcwHhcNMjUxMjE3MTkwMTA5WhcNMjUxMjE4MTkwMTA5WjAzMTEwLwYDVQQD EygzOGFmZTY5YjFlNjI1ZDZjZGZiNTVjYmViZTJjNDg3YWQ3N2NiMDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4N6pT+6CzjKlbI23xAoWVVji9ARP sGq3sZQbexPhYK15NIYyU9fpqD+joHBT+84uTLdNXaFfhTbj5acq1xbC+rrlGzad RXs8XpSiV9VW0LiKhtpqB4KNDKqWIjyW6CYwSgLy3+rqZxaDjAejUYnUsbM4iF2E dRyh5K6QFdyJjnkNBDJUQp8cdPAo4elmN3Kec+4DD259ln4nrWi2Kk6H54GzcH/G wyb8A+Ox4o8c0VUvWIvFYGMFxUUVr67jkP9K0JPcb9UE5lGUn2dV3bqJP8If6E4E mmaT98qs2HtfdluQw35eg9uB23Q9O9sxIjEiuhxxmAPqA16A7f2bX7zcrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDiv5pseYl1s37Vcvr4sSHrXfLCWMB8GA1UdIwQY MBaAFKdh/DtqBNdDB2vSht6CFEXwZU73MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDJIOE8yb0UxME1IYTlLRzNvSVVSZkJsVHZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS83MjkzNGUtZmU3My00YTk5LTgxMWYt YTBjZGU3YmE4YmJlLzEvcDJIOE8yb0UxME1IYTlLRzNvSVVSZkJsVHZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS83MjkzNGUtZmU3My00YTk5LTgxMWYtYTBjZGU3YmE4YmJl LzEvcDJIOE8yb0UxME1IYTlLRzNvSVVSZkJsVHZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoutdv0cp fzGQT5qhsG91OpTW54BNY7VwKQEE3FGkrxMcZCzFNJOzBAMgQxSA5BPS7vNuHGzi XPMf5vk7a+ga7//jLV5Q6iUxrKJUlfgDhKUwenOnEIVkEvp+r5NP8bqfmp8srQNP 0INml3w70ml/HD5nExRTZZlbDwXIaTS322Yu8fN/g0aCUbwIHdp8NCB8Mzlpq32X oW8B5iYtV37YsVLYSdt0G9PEDOA4Zov+8RKyxrdFn++5UlcHIBmo7SHI9UpLveBx +2oP2UxFq5xQoJlZvpZ8xNbRw4pMthRN7IphlWpIt4r8CwpVWfIRDbag2G7WPsQC zm7dFZ7K7IPnkg== -----END CERTIFICATE-----Generated at Wed Dec 17 23:41:37 2025 by rpki-client