This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.mft File: p2H8O2oE10MHa9KG3oIURfBlTvc.mft (raw, json) Hash identifier: AXo98s5J5YrKw+fw2+7wQ/Wc2RA3W/aWquOihNETblc= Subject key identifier: CB:CF:FE:3F:AC:34:54:54:E4:5C:53:25:ED:D2:C9:F4:EE:A4:A2:F8 Authority key identifier: A7:61:FC:3B:6A:04:D7:43:07:6B:D2:86:DE:82:14:45:F0:65:4E:F7 Certificate issuer: /CN=a761fc3b6a04d743076bd286de821445f0654ef7 Certificate serial: 019AF1D1FB826BFF34627A34985E71CF6E23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2H8O2oE10MHa9KG3oIURfBlTvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.mft Manifest number: 16F0 Signing time: Sat 06 Dec 2025 04:01:01 +0000 Manifest this update: Sat 06 Dec 2025 04:01:01 +0000 Manifest next update: Sun 07 Dec 2025 04:01:01 +0000 Files and hashes: 1: p2H8O2oE10MHa9KG3oIURfBlTvc.crl (hash: 5q3Qpgb2vK8rNeq8tJgHV/dZj7CoPK192mfm6jpr+4A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.crl rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.mft rsync://rpki.ripe.net/repository/DEFAULT/p2H8O2oE10MHa9KG3oIURfBlTvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:fb:82:6b:ff:34:62:7a:34:98:5e:71:cf:6e:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a761fc3b6a04d743076bd286de821445f0654ef7 Validity Not Before: Dec 6 04:01:01 2025 GMT Not After : Dec 7 04:01:01 2025 GMT Subject: CN=cbcffe3fac345454e45c5325edd2c9f4eea4a2f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7a:d2:d2:b7:10:16:c7:a9:02:76:f8:5b:bc: 73:e1:6d:28:77:a2:e4:7e:bb:41:2f:57:77:8c:99: 99:57:c3:47:4a:3f:37:1f:30:92:78:ba:63:11:7a: 93:db:c5:ec:db:04:2a:05:2a:83:c3:2e:2e:f3:57: 10:e2:9b:74:9c:7f:14:dd:25:fe:22:2f:b7:ba:84: 80:36:76:96:79:22:e6:70:b3:7b:d2:34:26:e4:55: 58:8f:a0:d3:eb:09:5e:1c:92:c3:73:5f:7e:48:3c: ed:0e:06:8f:af:3a:1a:46:8a:2c:d9:a0:99:68:ae: 8c:dd:c0:f7:45:3a:77:13:1f:1f:b6:30:cd:e5:65: 93:dd:a3:6b:ff:b7:07:45:0b:e1:01:c7:74:56:e7: e5:bd:0b:cf:2e:ea:03:e6:fd:97:5c:a6:17:f9:c0: 18:83:ff:ab:6c:d4:3f:b8:91:92:7a:93:cb:c4:b3: d5:13:50:bb:27:24:10:8e:f2:1e:4e:49:f3:8d:65: 30:f4:0a:75:f9:a2:db:f9:a3:97:c2:22:05:07:6b: c4:96:15:26:e6:0f:52:5d:9d:c8:25:34:80:4f:0c: 5e:fa:6f:f7:64:53:16:e4:be:86:87:53:5a:75:be: 47:31:2b:49:43:10:38:88:5e:26:a5:b9:ab:b2:9d: 7b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:CF:FE:3F:AC:34:54:54:E4:5C:53:25:ED:D2:C9:F4:EE:A4:A2:F8 X509v3 Authority Key Identifier: keyid:A7:61:FC:3B:6A:04:D7:43:07:6B:D2:86:DE:82:14:45:F0:65:4E:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2H8O2oE10MHa9KG3oIURfBlTvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:c9:73:ca:bd:36:b8:47:b1:e2:4d:b8:59:86:25:e5:61:6c: 7b:7b:8d:f6:2d:91:d4:58:f3:9d:1f:83:6a:09:23:ad:41:4e: 15:d8:9c:2b:0c:1b:5c:7c:f6:dc:75:0b:d5:e9:03:b8:4b:ad: 5c:ca:2d:26:bd:9e:90:b1:79:1d:1e:fc:9d:47:75:e0:d0:b5: 0e:e6:f2:5a:a6:0f:ac:00:6f:0a:40:c3:01:cc:f3:8f:61:a9: 89:85:12:4a:14:fb:0c:95:93:2e:c1:65:c3:bd:ff:ac:f1:1d: a9:2a:37:fe:f6:63:ce:2f:5e:61:01:d2:4a:0d:43:d0:e2:4e: 67:b8:ad:45:f3:15:ac:a1:91:97:ba:84:fb:2a:a8:61:d2:d3: 02:85:21:63:90:36:a7:59:08:48:a3:fc:ae:a9:13:b3:db:90: c9:31:f2:52:00:7b:8b:63:a6:5d:7a:7f:80:c9:8b:24:45:3c: 20:6d:9e:2d:0a:0d:b8:c7:58:22:37:67:df:0b:93:aa:d6:67: 44:2b:b5:af:cf:16:ab:86:19:f1:db:85:b0:b2:5f:7b:07:1e: 4e:0d:6a:1a:73:46:db:97:fd:07:6b:71:df:42:12:ff:6d:de: 8f:e7:a4:c7:5b:48:7e:b1:5a:5e:83:fe:f2:47:7d:dd:31:e1: ab:38:f0:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0fuCa/80Yno0mF5xz24jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NjFmYzNiNmEwNGQ3NDMwNzZiZDI4NmRlODIxNDQ1ZjA2 NTRlZjcwHhcNMjUxMjA2MDQwMTAxWhcNMjUxMjA3MDQwMTAxWjAzMTEwLwYDVQQD EyhjYmNmZmUzZmFjMzQ1NDU0ZTQ1YzUzMjVlZGQyYzlmNGVlYTRhMmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnrS0rcQFsepAnb4W7xz4W0od6Lk frtBL1d3jJmZV8NHSj83HzCSeLpjEXqT28Xs2wQqBSqDwy4u81cQ4pt0nH8U3SX+ Ii+3uoSANnaWeSLmcLN70jQm5FVYj6DT6wleHJLDc19+SDztDgaPrzoaRoos2aCZ aK6M3cD3RTp3Ex8ftjDN5WWT3aNr/7cHRQvhAcd0VuflvQvPLuoD5v2XXKYX+cAY g/+rbNQ/uJGSepPLxLPVE1C7JyQQjvIeTknzjWUw9Ap1+aLb+aOXwiIFB2vElhUm 5g9SXZ3IJTSATwxe+m/3ZFMW5L6Gh1Nadb5HMStJQxA4iF4mpbmrsp17GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMvP/j+sNFRU5FxTJe3SyfTupKL4MB8GA1UdIwQY MBaAFKdh/DtqBNdDB2vSht6CFEXwZU73MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDJIOE8yb0UxME1IYTlLRzNvSVVSZkJsVHZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS83MjkzNGUtZmU3My00YTk5LTgxMWYt YTBjZGU3YmE4YmJlLzEvcDJIOE8yb0UxME1IYTlLRzNvSVVSZkJsVHZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS83MjkzNGUtZmU3My00YTk5LTgxMWYtYTBjZGU3YmE4YmJl LzEvcDJIOE8yb0UxME1IYTlLRzNvSVVSZkJsVHZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv8lzyr02 uEex4k24WYYl5WFse3uN9i2R1FjznR+DagkjrUFOFdicKwwbXHz23HUL1ekDuEut XMotJr2ekLF5HR78nUd14NC1DubyWqYPrABvCkDDAczzj2GpiYUSShT7DJWTLsFl w73/rPEdqSo3/vZjzi9eYQHSSg1D0OJOZ7itRfMVrKGRl7qE+yqoYdLTAoUhY5A2 p1kISKP8rqkTs9uQyTHyUgB7i2OmXXp/gMmLJEU8IG2eLQoNuMdYIjdn3wuTqtZn RCu1r88Wq4YZ8duFsLJfewceTg1qGnNG25f9B2tx30IS/23ej+ekx1tIfrFaXoP+ 8kd93THhqzjwgQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:57:54 2025 by rpki-client