This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft File: P1umH85V_19gjjr27FYLN67CNf8.mft (raw, json) Hash identifier: mJuoWyJtY/4E33ErzuNfAdcT6d/YUroiSetxO8y8nGE= Subject key identifier: 53:DC:C9:F1:42:59:79:C2:D7:71:C8:52:2B:16:6E:05:EF:1B:53:66 Authority key identifier: 3F:5B:A6:1F:CE:55:FF:5F:60:8E:3A:F6:EC:56:0B:37:AE:C2:35:FF Certificate issuer: /CN=3f5ba61fce55ff5f608e3af6ec560b37aec235ff Certificate serial: 019B3F47E5A4A26B913B4A98185975FEAF4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1umH85V_19gjjr27FYLN67CNf8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft Manifest number: 05DF Signing time: Sun 21 Dec 2025 05:00:34 +0000 Manifest this update: Sun 21 Dec 2025 05:00:34 +0000 Manifest next update: Mon 22 Dec 2025 05:00:34 +0000 Files and hashes: 1: P1umH85V_19gjjr27FYLN67CNf8.crl (hash: ZuqzbiRow+Kzhwf4nyH0g/yX8CuA2gfwdj6vErV04g8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft rsync://rpki.ripe.net/repository/DEFAULT/P1umH85V_19gjjr27FYLN67CNf8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:47:e5:a4:a2:6b:91:3b:4a:98:18:59:75:fe:af:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f5ba61fce55ff5f608e3af6ec560b37aec235ff Validity Not Before: Dec 21 05:00:34 2025 GMT Not After : Dec 22 05:00:34 2025 GMT Subject: CN=53dcc9f1425979c2d771c8522b166e05ef1b5366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:85:9e:34:6d:85:08:31:2b:93:bc:fb:43:2e: b0:17:0a:52:89:61:db:49:65:15:09:87:e5:43:89: a2:81:37:f9:0e:38:c2:34:7a:18:58:6b:23:c7:73: f3:89:66:37:9f:54:37:03:30:bb:bf:d7:2d:1f:6d: 03:53:c2:fa:c9:29:28:b5:39:86:c9:2f:2a:ee:c4: 30:47:97:d2:7b:8f:75:00:fe:7f:87:aa:2c:c9:af: 9e:e5:10:69:ff:6d:02:b2:5d:1e:d7:77:51:a2:1a: 47:c7:7f:d1:f9:8e:0d:4a:46:b5:3b:30:11:3e:0b: c2:bb:60:d9:0a:35:fb:69:26:87:b7:53:72:83:7c: 94:a9:f1:24:ce:18:9b:b1:15:ee:31:17:09:86:a5: 9d:85:fa:8f:9a:ff:2b:2f:4b:36:dd:80:8c:d4:69: e0:e2:52:22:90:df:f0:34:b2:61:7a:7d:b8:19:1d: 64:7e:34:63:83:b0:a1:26:3b:56:91:13:25:2c:93: f2:d5:7b:6b:c0:c7:4b:e1:5c:64:19:c1:91:48:d4: 26:b3:16:5d:89:25:2d:86:94:f5:33:28:24:cd:9c: e8:db:c6:57:23:1e:bb:dd:f7:57:6d:25:03:b3:c8: 2b:9b:9a:6f:73:df:81:cf:d3:62:1e:82:5a:b4:c8: 0e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:DC:C9:F1:42:59:79:C2:D7:71:C8:52:2B:16:6E:05:EF:1B:53:66 X509v3 Authority Key Identifier: keyid:3F:5B:A6:1F:CE:55:FF:5F:60:8E:3A:F6:EC:56:0B:37:AE:C2:35:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1umH85V_19gjjr27FYLN67CNf8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:69:93:74:e0:db:5e:25:b6:c4:7b:43:53:b7:41:2a:96:32: 10:67:a5:5a:1c:ba:3f:4d:38:c3:05:b2:85:45:14:c5:4f:6d: ec:92:24:2c:62:6e:52:35:9f:3c:da:76:5e:39:1a:2c:fc:30: 6f:0a:39:c7:ba:4d:7d:07:cb:5e:a6:cb:6b:f0:1e:d3:18:1b: d9:22:c1:b9:88:ba:a8:e6:58:2b:a7:6d:c2:29:4b:21:e9:24: 4a:8a:2e:7e:45:0b:6f:00:08:37:f1:96:7d:87:74:1a:a4:43: b7:89:a2:c7:55:f7:74:d9:5c:ab:00:c4:25:c9:5d:fb:1a:e2: c0:0b:cb:02:05:9e:f7:34:78:e2:bc:ec:ab:9f:87:ff:e0:2c: 87:d0:8b:4d:f6:cc:b7:aa:4a:60:4c:e5:7b:0a:12:3f:f3:17: de:20:22:55:1b:3e:a6:4f:a9:18:9b:bf:7b:ba:0f:26:2d:7a: 63:09:cb:92:fb:b1:70:72:8a:95:09:ad:d6:23:ff:13:ee:25: 24:00:c3:13:a4:2e:f6:63:07:7f:dc:60:d8:06:83:24:04:b5: d8:e8:29:99:36:6a:52:f7:ca:69:bb:59:03:5c:f5:9d:70:cf: 56:53:69:c3:25:64:e0:4a:10:e2:ae:db:45:82:57:bc:f8:20: 3e:81:1d:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/R+WkomuRO0qYGFl1/q9NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmNWJhNjFmY2U1NWZmNWY2MDhlM2FmNmVjNTYwYjM3YWVj MjM1ZmYwHhcNMjUxMjIxMDUwMDM0WhcNMjUxMjIyMDUwMDM0WjAzMTEwLwYDVQQD Eyg1M2RjYzlmMTQyNTk3OWMyZDc3MWM4NTIyYjE2NmUwNWVmMWI1MzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4WeNG2FCDErk7z7Qy6wFwpSiWHb SWUVCYflQ4migTf5DjjCNHoYWGsjx3PziWY3n1Q3AzC7v9ctH20DU8L6ySkotTmG yS8q7sQwR5fSe491AP5/h6osya+e5RBp/20Csl0e13dRohpHx3/R+Y4NSka1OzAR PgvCu2DZCjX7aSaHt1Nyg3yUqfEkzhibsRXuMRcJhqWdhfqPmv8rL0s23YCM1Gng 4lIikN/wNLJhen24GR1kfjRjg7ChJjtWkRMlLJPy1XtrwMdL4VxkGcGRSNQmsxZd iSUthpT1MygkzZzo28ZXIx673fdXbSUDs8grm5pvc9+Bz9NiHoJatMgOAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFPcyfFCWXnC13HIUisWbgXvG1NmMB8GA1UdIwQY MBaAFD9bph/OVf9fYI469uxWCzeuwjX/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDF1bUg4NVZfMTlnampyMjdGWUxONjdDTmY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9hZGM0ZWUtYmIxMC00YzE1LTk0NTct M2JkYjBlYzE0ODAwLzEvUDF1bUg4NVZfMTlnampyMjdGWUxONjdDTmY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9hZGM0ZWUtYmIxMC00YzE1LTk0NTctM2JkYjBlYzE0ODAw LzEvUDF1bUg4NVZfMTlnampyMjdGWUxONjdDTmY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEGmTdODb XiW2xHtDU7dBKpYyEGelWhy6P004wwWyhUUUxU9t7JIkLGJuUjWfPNp2XjkaLPww bwo5x7pNfQfLXqbLa/Ae0xgb2SLBuYi6qOZYK6dtwilLIekkSooufkULbwAIN/GW fYd0GqRDt4mix1X3dNlcqwDEJcld+xriwAvLAgWe9zR44rzsq5+H/+Ash9CLTfbM t6pKYEzlewoSP/MX3iAiVRs+pk+pGJu/e7oPJi16YwnLkvuxcHKKlQmt1iP/E+4l JADDE6Qu9mMHf9xg2AaDJAS12OgpmTZqUvfKabtZA1z1nXDPVlNpwyVk4EoQ4q7b RYJXvPggPoEdHQ== -----END CERTIFICATE-----Generated at Sun Dec 21 11:28:54 2025 by rpki-client