This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.mft File: P2LKnF7__TIKvS2Px-j4Nee70es.mft (raw, json) Hash identifier: QvypplE94bScSChAFMcZ5sBEOYxQvQsNMSsn+zN20bo= Subject key identifier: C9:87:AE:05:61:AA:22:1B:FF:B2:67:25:34:62:B5:CE:7B:82:F2:08 Authority key identifier: 3F:62:CA:9C:5E:FF:FD:32:0A:BD:2D:8F:C7:E8:F8:35:E7:BB:D1:EB Certificate issuer: /CN=3f62ca9c5efffd320abd2d8fc7e8f835e7bbd1eb Certificate serial: 019B2D0AC7CB065522028111FA1FF7FB0B9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P2LKnF7__TIKvS2Px-j4Nee70es.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.mft Manifest number: 0B79 Signing time: Wed 17 Dec 2025 16:00:39 +0000 Manifest this update: Wed 17 Dec 2025 16:00:39 +0000 Manifest next update: Thu 18 Dec 2025 16:00:39 +0000 Files and hashes: 1: P2LKnF7__TIKvS2Px-j4Nee70es.crl (hash: C+iuFIWklJ3/0112vqfmJpVdmlCOe7Pymg87ECsJy1o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.crl rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.mft rsync://rpki.ripe.net/repository/DEFAULT/P2LKnF7__TIKvS2Px-j4Nee70es.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0a:c7:cb:06:55:22:02:81:11:fa:1f:f7:fb:0b:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f62ca9c5efffd320abd2d8fc7e8f835e7bbd1eb Validity Not Before: Dec 17 16:00:39 2025 GMT Not After : Dec 18 16:00:39 2025 GMT Subject: CN=c987ae0561aa221bffb267253462b5ce7b82f208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2c:bf:f4:c9:4c:fc:45:b1:c2:bf:6d:74:8d: 65:4e:0f:e8:a8:45:b1:fe:c9:9c:7f:17:6c:26:a9: 0b:5c:36:1d:fc:11:13:c3:de:cf:d1:75:f2:ab:43: c5:6c:8a:fe:af:4e:ee:b6:cf:8b:77:6c:4a:e7:b6: 71:47:35:0c:ea:3a:bc:63:3e:66:f3:c8:52:fe:e7: ab:1f:15:d5:d8:e0:95:11:30:f3:6e:ff:c4:51:e0: 19:24:fb:11:c8:08:5c:b3:03:47:19:f9:af:84:d4: d2:88:67:d9:37:8b:7b:71:13:13:25:01:7f:a8:3c: f9:fd:6f:24:76:62:34:3f:bb:dc:5d:2d:1a:e7:99: 07:0b:a4:f4:8e:0e:55:27:2c:66:ad:df:4f:f6:37: 9f:78:19:10:77:93:2c:21:f7:7a:92:a2:28:18:f0: 2b:2e:d0:6d:e5:0e:bf:f8:60:8a:41:26:f2:29:9f: 69:29:aa:4d:e8:32:11:7b:12:65:ac:f4:a2:15:8e: 5d:6f:d0:8a:a5:23:37:e1:c2:71:fa:ee:83:d8:bd: eb:d4:52:f2:f6:f7:f7:a5:31:9d:79:d2:b6:f0:7d: 91:a8:06:55:61:5e:5c:c0:e2:3b:3c:95:b1:59:30: b2:6c:3e:be:f2:0f:d9:3c:f0:f6:f9:d2:7e:d3:ea: e4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:87:AE:05:61:AA:22:1B:FF:B2:67:25:34:62:B5:CE:7B:82:F2:08 X509v3 Authority Key Identifier: keyid:3F:62:CA:9C:5E:FF:FD:32:0A:BD:2D:8F:C7:E8:F8:35:E7:BB:D1:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P2LKnF7__TIKvS2Px-j4Nee70es.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:46:75:7a:0b:d5:15:8d:cd:7a:72:09:d9:de:e1:fe:6b:d8: a0:cf:18:5b:88:63:e0:e8:50:b4:22:94:91:1d:86:ad:56:c9: 3c:a5:9d:05:fb:36:10:29:46:c1:24:63:a0:7b:f0:ec:ae:fd: 91:d7:00:2e:f4:79:3f:14:84:2e:8e:85:7a:13:3b:2e:c9:b7: 7f:4b:db:6e:a0:ac:16:6b:d9:5f:a4:c8:6b:13:44:88:20:4a: c6:f5:58:92:cf:96:f7:b7:98:22:0f:9b:8e:ae:86:b1:62:84: 13:ee:61:07:c5:ca:2d:a1:ae:f1:0e:dc:ea:d3:04:77:be:8d: 6c:29:8f:91:5d:5f:60:bf:c3:92:46:38:0e:88:fd:2a:01:d1: 0b:ae:2c:2f:d8:43:23:fb:66:0b:6a:5c:ba:6f:ed:9b:1a:4b: 29:15:da:56:0c:14:91:5c:ef:a7:ab:7e:d3:bd:3f:04:1e:c3: d9:af:2f:1c:de:fe:d1:3d:e4:66:49:d5:5f:10:fb:2a:28:c7: ff:05:00:80:84:af:a6:f0:1a:a5:c7:1f:bf:6c:31:56:53:fe: 07:f7:88:9f:70:2d:b1:1e:14:be:c2:e1:f3:f3:03:bf:7a:79: ab:69:cb:96:f0:22:a8:f1:9e:45:05:87:7f:42:0f:cd:4a:cf: 8a:46:72:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstCsfLBlUiAoER+h/3+wudMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmNjJjYTljNWVmZmZkMzIwYWJkMmQ4ZmM3ZThmODM1ZTdi YmQxZWIwHhcNMjUxMjE3MTYwMDM5WhcNMjUxMjE4MTYwMDM5WjAzMTEwLwYDVQQD EyhjOTg3YWUwNTYxYWEyMjFiZmZiMjY3MjUzNDYyYjVjZTdiODJmMjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Cy/9MlM/EWxwr9tdI1lTg/oqEWx /smcfxdsJqkLXDYd/BETw97P0XXyq0PFbIr+r07uts+Ld2xK57ZxRzUM6jq8Yz5m 88hS/uerHxXV2OCVETDzbv/EUeAZJPsRyAhcswNHGfmvhNTSiGfZN4t7cRMTJQF/ qDz5/W8kdmI0P7vcXS0a55kHC6T0jg5VJyxmrd9P9jefeBkQd5MsIfd6kqIoGPAr LtBt5Q6/+GCKQSbyKZ9pKapN6DIRexJlrPSiFY5db9CKpSM34cJx+u6D2L3r1FLy 9vf3pTGdedK28H2RqAZVYV5cwOI7PJWxWTCybD6+8g/ZPPD2+dJ+0+rkNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMmHrgVhqiIb/7JnJTRitc57gvIIMB8GA1UdIwQY MBaAFD9iypxe//0yCr0tj8fo+DXnu9HrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDJMS25GN19fVElLdlMyUHgtajROZWU3MGVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9hMzYxY2ItZjhiZS00YjUwLTk4Njkt MDA5MDgwZThkZmY1LzEvUDJMS25GN19fVElLdlMyUHgtajROZWU3MGVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9hMzYxY2ItZjhiZS00YjUwLTk4NjktMDA5MDgwZThkZmY1 LzEvUDJMS25GN19fVElLdlMyUHgtajROZWU3MGVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc0Z1egvV FY3NenIJ2d7h/mvYoM8YW4hj4OhQtCKUkR2GrVbJPKWdBfs2EClGwSRjoHvw7K79 kdcALvR5PxSELo6FehM7Lsm3f0vbbqCsFmvZX6TIaxNEiCBKxvVYks+W97eYIg+b jq6GsWKEE+5hB8XKLaGu8Q7c6tMEd76NbCmPkV1fYL/DkkY4Doj9KgHRC64sL9hD I/tmC2pcum/tmxpLKRXaVgwUkVzvp6t+070/BB7D2a8vHN7+0T3kZknVXxD7KijH /wUAgISvpvAapccfv2wxVlP+B/eIn3AtsR4UvsLh8/MDv3p5q2nLlvAiqPGeRQWH f0IPzUrPikZyhw== -----END CERTIFICATE-----Generated at Wed Dec 17 18:33:06 2025 by rpki-client