This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft File: P1umH85V_19gjjr27FYLN67CNf8.mft (raw, json) Hash identifier: 17v1S+vuPCXNDBhl6L8Y2ayR2FB7skvpTs8DkFEVJJo= Subject key identifier: 4C:50:B6:72:A0:3A:11:01:F3:94:6E:66:7B:28:D6:C2:7D:FD:4D:F3 Authority key identifier: 3F:5B:A6:1F:CE:55:FF:5F:60:8E:3A:F6:EC:56:0B:37:AE:C2:35:FF Certificate issuer: /CN=3f5ba61fce55ff5f608e3af6ec560b37aec235ff Certificate serial: 019AF208AD91F0F07EB6561F69014E3AE3DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1umH85V_19gjjr27FYLN67CNf8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft Manifest number: 05B7 Signing time: Sat 06 Dec 2025 05:00:46 +0000 Manifest this update: Sat 06 Dec 2025 05:00:46 +0000 Manifest next update: Sun 07 Dec 2025 05:00:46 +0000 Files and hashes: 1: P1umH85V_19gjjr27FYLN67CNf8.crl (hash: lnaT+xOYdVFMWbvjn3XPO9IDIMJy6FN7rXvmVjFQFAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft rsync://rpki.ripe.net/repository/DEFAULT/P1umH85V_19gjjr27FYLN67CNf8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:ad:91:f0:f0:7e:b6:56:1f:69:01:4e:3a:e3:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f5ba61fce55ff5f608e3af6ec560b37aec235ff Validity Not Before: Dec 6 05:00:46 2025 GMT Not After : Dec 7 05:00:46 2025 GMT Subject: CN=4c50b672a03a1101f3946e667b28d6c27dfd4df3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:00:0a:33:0a:b2:db:cc:50:0f:05:ac:4f:67: 37:76:df:44:fd:d0:32:9f:88:a5:02:6f:77:41:25: bb:5b:10:6a:0a:5d:fc:d6:d9:cf:73:b0:88:9a:11: 5b:57:eb:b2:3d:91:82:9a:7f:ed:93:f1:1d:a2:cf: 4c:5d:dc:c8:8e:33:65:d4:2c:20:bd:ac:1d:e7:11: 88:34:77:98:08:d2:5a:c4:9d:74:e5:b7:af:1f:21: 19:2e:ba:7c:bd:a9:6c:b2:21:51:f1:90:9e:06:6b: 6f:27:11:22:02:c0:2a:99:c9:ab:88:e8:61:7f:68: 21:e8:1a:aa:0f:19:a2:b9:1d:25:49:9c:89:a4:4a: 73:0b:08:1b:e2:3a:ff:4f:a9:d8:dd:ac:cb:49:80: 96:45:e5:e2:1f:c6:cb:e2:c4:73:91:a6:e9:09:88: 9a:51:be:cd:84:a9:11:5c:18:ba:b8:31:1a:a4:03: 93:30:4b:1b:e2:fd:ec:a7:b4:28:2a:27:5d:d8:2a: 84:6f:10:82:76:cc:1e:b5:36:8e:31:ea:f2:37:01: e9:d2:b2:0e:61:6c:dd:1f:d6:e0:53:a9:bc:1c:5e: 64:60:4c:a8:55:6c:8d:91:b1:a5:a9:c9:8a:11:d2: 23:73:bc:d7:f6:f2:c8:de:5f:93:cb:cd:b1:69:3b: 2e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:50:B6:72:A0:3A:11:01:F3:94:6E:66:7B:28:D6:C2:7D:FD:4D:F3 X509v3 Authority Key Identifier: keyid:3F:5B:A6:1F:CE:55:FF:5F:60:8E:3A:F6:EC:56:0B:37:AE:C2:35:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1umH85V_19gjjr27FYLN67CNf8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:9f:d6:ff:9e:34:2c:c7:03:3c:20:36:57:9e:01:3b:58:55: 7e:73:39:01:3e:ac:62:c2:6d:ac:7b:61:4e:e8:09:fc:49:b7: 0d:9d:a0:d1:5e:68:34:9e:2b:f7:fb:c0:1f:e8:d6:4f:5f:66: f5:13:ee:e0:35:5c:fe:71:ff:d9:ce:be:da:00:bf:71:90:76: 76:be:0e:a5:9c:8d:be:6c:1a:1b:64:bd:d2:81:cd:0a:d7:9b: e6:a0:6b:d3:e0:64:d3:7a:5c:af:2b:fd:13:7d:16:93:71:a2: db:1f:0a:27:87:b6:56:5a:f7:62:9d:e9:f5:e4:72:4e:16:73: 5b:1f:11:d0:21:39:5e:45:47:f3:dd:44:0a:d5:4d:60:cc:c9: 22:04:24:f7:0d:1b:ae:1b:62:2a:f8:e8:1c:42:ef:e0:84:51: 75:e6:21:0b:3c:29:2f:2d:b0:68:5a:77:8a:e1:b4:08:68:bb: 3c:4d:4b:5e:91:e1:9b:f0:85:f9:70:6b:b5:e2:ca:b9:5d:f9: 55:e6:4d:ea:bb:27:0f:59:7c:73:7a:35:83:3b:5d:cd:22:20: 18:78:3e:e7:db:ac:7a:15:83:53:fc:58:d2:12:de:14:08:96: 00:2e:8d:9a:df:4e:4d:71:e2:3f:3a:d7:fa:4a:09:71:f9:37: bb:33:6b:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCK2R8PB+tlYfaQFOOuPdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmNWJhNjFmY2U1NWZmNWY2MDhlM2FmNmVjNTYwYjM3YWVj MjM1ZmYwHhcNMjUxMjA2MDUwMDQ2WhcNMjUxMjA3MDUwMDQ2WjAzMTEwLwYDVQQD Eyg0YzUwYjY3MmEwM2ExMTAxZjM5NDZlNjY3YjI4ZDZjMjdkZmQ0ZGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QAKMwqy28xQDwWsT2c3dt9E/dAy n4ilAm93QSW7WxBqCl381tnPc7CImhFbV+uyPZGCmn/tk/Edos9MXdzIjjNl1Cwg vawd5xGINHeYCNJaxJ105bevHyEZLrp8valssiFR8ZCeBmtvJxEiAsAqmcmriOhh f2gh6BqqDxmiuR0lSZyJpEpzCwgb4jr/T6nY3azLSYCWReXiH8bL4sRzkabpCYia Ub7NhKkRXBi6uDEapAOTMEsb4v3sp7QoKidd2CqEbxCCdswetTaOMeryNwHp0rIO YWzdH9bgU6m8HF5kYEyoVWyNkbGlqcmKEdIjc7zX9vLI3l+Ty82xaTsufwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFExQtnKgOhEB85RuZnso1sJ9/U3zMB8GA1UdIwQY MBaAFD9bph/OVf9fYI469uxWCzeuwjX/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDF1bUg4NVZfMTlnampyMjdGWUxONjdDTmY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9hZGM0ZWUtYmIxMC00YzE1LTk0NTct M2JkYjBlYzE0ODAwLzEvUDF1bUg4NVZfMTlnampyMjdGWUxONjdDTmY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9hZGM0ZWUtYmIxMC00YzE1LTk0NTctM2JkYjBlYzE0ODAw LzEvUDF1bUg4NVZfMTlnampyMjdGWUxONjdDTmY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARJ/W/540 LMcDPCA2V54BO1hVfnM5AT6sYsJtrHthTugJ/Em3DZ2g0V5oNJ4r9/vAH+jWT19m 9RPu4DVc/nH/2c6+2gC/cZB2dr4OpZyNvmwaG2S90oHNCteb5qBr0+Bk03pcryv9 E30Wk3Gi2x8KJ4e2Vlr3Yp3p9eRyThZzWx8R0CE5XkVH891ECtVNYMzJIgQk9w0b rhtiKvjoHELv4IRRdeYhCzwpLy2waFp3iuG0CGi7PE1LXpHhm/CF+XBrteLKuV35 VeZN6rsnD1l8c3o1gztdzSIgGHg+59usehWDU/xY0hLeFAiWAC6Nmt9OTXHiPzrX +koJcfk3uzNr1g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:09:47 2025 by rpki-client