This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft File: P-XZqjR4a6oW1Fa9857K-12XMPg.mft (raw, json) Hash identifier: ofrO70bumBawlYcNIeGT1ISB8XV9Bunk6IpX7SuMoA8= Subject key identifier: 52:93:9E:EF:8E:A7:5B:3E:00:A8:0F:0E:00:40:9F:6F:6C:B3:BD:9A Authority key identifier: 3F:E5:D9:AA:34:78:6B:AA:16:D4:56:BD:F3:9E:CA:FB:5D:97:30:F8 Certificate issuer: /CN=3fe5d9aa34786baa16d456bdf39ecafb5d9730f8 Certificate serial: 019AF12D4FB8163AA4ED6C6EF5D55B05BA29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-XZqjR4a6oW1Fa9857K-12XMPg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 01:01:09 +0000 Manifest this update: Sat 06 Dec 2025 01:01:09 +0000 Manifest next update: Sun 07 Dec 2025 01:01:09 +0000 Files and hashes: 1: I8Hl2QUOJ6pW-HzuzhburaAUCcs.roa (hash: TO7xgPDDMwBnfoyPmeOZq+S6vszklMWr0Jg0Yq+3Oiw=) 2: P-XZqjR4a6oW1Fa9857K-12XMPg.crl (hash: wGUYs4BiYkbALc+1zelZ0Qzbs8ZB0jNV6bN8nVimFRc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.crl rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft rsync://rpki.ripe.net/repository/DEFAULT/P-XZqjR4a6oW1Fa9857K-12XMPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:4f:b8:16:3a:a4:ed:6c:6e:f5:d5:5b:05:ba:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fe5d9aa34786baa16d456bdf39ecafb5d9730f8 Validity Not Before: Dec 6 01:01:09 2025 GMT Not After : Dec 7 01:01:09 2025 GMT Subject: CN=52939eef8ea75b3e00a80f0e00409f6f6cb3bd9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c9:a3:a7:1e:e5:51:c4:96:63:31:bd:84:a6: 1f:c4:f0:40:ef:b5:18:63:65:24:0f:45:92:32:e6: 93:ce:ea:e9:47:73:d8:b6:cd:d4:1b:1c:93:c0:92: 3e:19:07:af:a1:3a:43:3d:2b:95:81:50:1d:81:d0: 6e:34:50:2d:f0:42:11:5d:02:2b:07:7f:01:1a:a5: 62:18:43:50:f6:2b:40:e5:26:a1:a2:e1:c1:c6:30: 00:8e:97:ff:02:25:46:83:ac:74:44:54:ec:b4:f7: 3e:f9:ed:97:79:18:28:86:74:76:1c:0d:7a:11:d1: b6:6e:c6:6e:5e:22:8b:2c:7e:30:65:1d:29:c7:ca: 63:3e:cc:61:16:02:3b:46:77:e6:40:87:03:b7:15: 0c:ed:5e:1e:2f:b4:d0:6f:5c:82:ea:25:a0:93:4c: 74:52:b6:22:b0:b1:0a:b5:99:88:93:3e:13:47:7e: 8a:84:9d:dc:f1:b8:4f:b5:b2:6f:0d:c0:ad:76:86: 7b:6c:a0:f1:f6:d8:fa:42:a7:47:05:e6:07:8a:17: 95:3d:3f:b5:01:df:d8:4b:ab:14:2d:43:ff:29:67: 61:4d:32:6f:ff:37:38:61:1e:70:ff:bc:05:5c:0a: a1:3d:4e:bd:da:8d:26:de:ff:6e:57:ed:ed:fd:d6: ad:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:93:9E:EF:8E:A7:5B:3E:00:A8:0F:0E:00:40:9F:6F:6C:B3:BD:9A X509v3 Authority Key Identifier: keyid:3F:E5:D9:AA:34:78:6B:AA:16:D4:56:BD:F3:9E:CA:FB:5D:97:30:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-XZqjR4a6oW1Fa9857K-12XMPg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:9b:9f:cf:db:d3:ac:7f:5e:66:36:09:ff:98:5d:64:7b:48: c4:7e:47:25:63:df:28:b4:d6:30:2e:e8:59:57:16:8d:7f:a5: 1c:3c:99:b2:19:bd:4d:cb:e2:78:a3:11:ca:64:87:31:94:0d: 10:f5:f5:55:a6:6a:f2:b5:cf:3a:a4:8d:5c:df:5b:94:d6:0b: 24:05:00:32:a7:00:bb:9f:ce:ad:cb:e9:08:d4:ae:bf:4f:59: 00:99:1a:6f:7a:f6:2b:bf:ec:6f:d3:a4:83:38:58:5e:21:ff: 4f:e3:f7:90:d6:6f:68:a8:d8:d3:91:43:e9:66:aa:ec:72:71: a4:34:3c:02:46:72:be:33:da:05:b5:37:b2:3b:83:fb:a6:97: ac:0f:7b:1a:79:fb:97:28:d8:ab:f2:7f:6e:6e:77:04:85:28: 17:e6:eb:97:5a:3c:8d:f2:92:a3:09:c4:15:3e:30:d8:7e:16: d0:03:58:62:bb:ad:ae:f8:b4:57:3a:54:70:87:98:e0:b9:ec: 92:ad:86:25:d2:24:16:2a:eb:78:6e:0a:e7:88:28:a3:df:c1: 86:35:cc:85:d2:aa:03:06:61:68:77:92:13:f2:6b:1d:90:d2: ba:7d:b9:d6:7d:c6:d0:b8:b1:d9:ef:9c:db:6e:35:41:2e:b1: 79:dc:d8:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLU+4Fjqk7Wxu9dVbBbopMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZTVkOWFhMzQ3ODZiYWExNmQ0NTZiZGYzOWVjYWZiNWQ5 NzMwZjgwHhcNMjUxMjA2MDEwMTA5WhcNMjUxMjA3MDEwMTA5WjAzMTEwLwYDVQQD Eyg1MjkzOWVlZjhlYTc1YjNlMDBhODBmMGUwMDQwOWY2ZjZjYjNiZDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMmjpx7lUcSWYzG9hKYfxPBA77UY Y2UkD0WSMuaTzurpR3PYts3UGxyTwJI+GQevoTpDPSuVgVAdgdBuNFAt8EIRXQIr B38BGqViGENQ9itA5SahouHBxjAAjpf/AiVGg6x0RFTstPc++e2XeRgohnR2HA16 EdG2bsZuXiKLLH4wZR0px8pjPsxhFgI7RnfmQIcDtxUM7V4eL7TQb1yC6iWgk0x0 UrYisLEKtZmIkz4TR36KhJ3c8bhPtbJvDcCtdoZ7bKDx9tj6QqdHBeYHiheVPT+1 Ad/YS6sULUP/KWdhTTJv/zc4YR5w/7wFXAqhPU692o0m3v9uV+3t/dat7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFKTnu+Op1s+AKgPDgBAn29ss72aMB8GA1UdIwQY MBaAFD/l2ao0eGuqFtRWvfOeyvtdlzD4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUC1YWnFqUjRhNm9XMUZhOTg1N0stMTJYTVBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9hMmZlNjgtNzYxZC00ZTZjLTlkY2Qt NTk0YzFhY2Q5ZGFmLzEvUC1YWnFqUjRhNm9XMUZhOTg1N0stMTJYTVBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9hMmZlNjgtNzYxZC00ZTZjLTlkY2QtNTk0YzFhY2Q5ZGFm LzEvUC1YWnFqUjRhNm9XMUZhOTg1N0stMTJYTVBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAppufz9vT rH9eZjYJ/5hdZHtIxH5HJWPfKLTWMC7oWVcWjX+lHDyZshm9TcvieKMRymSHMZQN EPX1VaZq8rXPOqSNXN9blNYLJAUAMqcAu5/OrcvpCNSuv09ZAJkab3r2K7/sb9Ok gzhYXiH/T+P3kNZvaKjY05FD6Waq7HJxpDQ8AkZyvjPaBbU3sjuD+6aXrA97Gnn7 lyjYq/J/bm53BIUoF+brl1o8jfKSownEFT4w2H4W0ANYYrutrvi0VzpUcIeY4Lns kq2GJdIkFirreG4K54goo9/BhjXMhdKqAwZhaHeSE/JrHZDSun251n3G0Lix2e+c 2241QS6xedzYKg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:35 2025 by rpki-client