This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.mft File: P2LKnF7__TIKvS2Px-j4Nee70es.mft (raw, json) Hash identifier: jneY2MZtJ4x7jHe2McMP59jD9xw+R6ll2ZvwZvVSwPo= Subject key identifier: 37:7A:B5:A5:87:34:6E:BB:77:BA:9A:8F:C0:C6:36:68:11:61:CC:EA Authority key identifier: 3F:62:CA:9C:5E:FF:FD:32:0A:BD:2D:8F:C7:E8:F8:35:E7:BB:D1:EB Certificate issuer: /CN=3f62ca9c5efffd320abd2d8fc7e8f835e7bbd1eb Certificate serial: 019B2EFA3126AFC795CCA5DDBE1ACFE2AB88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P2LKnF7__TIKvS2Px-j4Nee70es.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.mft Manifest number: 0B7A Signing time: Thu 18 Dec 2025 01:01:47 +0000 Manifest this update: Thu 18 Dec 2025 01:01:47 +0000 Manifest next update: Fri 19 Dec 2025 01:01:47 +0000 Files and hashes: 1: P2LKnF7__TIKvS2Px-j4Nee70es.crl (hash: fKOSbcZ7Yij1tqYtpbH+pFLV4skesRHLthELAIKtTn0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.crl rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.mft rsync://rpki.ripe.net/repository/DEFAULT/P2LKnF7__TIKvS2Px-j4Nee70es.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:31:26:af:c7:95:cc:a5:dd:be:1a:cf:e2:ab:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f62ca9c5efffd320abd2d8fc7e8f835e7bbd1eb Validity Not Before: Dec 18 01:01:47 2025 GMT Not After : Dec 19 01:01:47 2025 GMT Subject: CN=377ab5a587346ebb77ba9a8fc0c636681161ccea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:dc:57:a9:40:17:64:7c:6f:55:fc:2c:54:95: 2e:4e:08:d8:b2:4e:43:73:27:29:ec:09:a8:a8:26: 79:54:13:91:20:43:bc:cb:12:cb:f3:63:cd:eb:c4: 61:99:47:80:b2:70:b1:a9:69:c9:42:aa:66:59:8c: 25:79:1c:d6:1b:b4:d9:d3:30:37:8e:ff:d1:0a:e7: c6:1c:59:81:09:6d:e7:ca:6b:43:e0:14:08:ce:10: 38:5b:41:da:db:23:54:de:8a:85:85:5a:3b:68:e8: 23:82:21:95:84:47:3c:05:b0:0c:ac:03:20:e3:1a: 82:ae:9f:1a:b8:d7:0b:dc:4b:55:53:16:19:86:b1: 95:96:8a:c2:00:75:35:bb:c6:d8:ae:05:4e:0e:e6: 10:b4:22:a1:9c:66:c4:a8:ee:3f:ad:59:8f:40:84: d3:cb:f3:75:1e:06:00:ca:28:d3:f6:ea:d6:e3:ff: e9:b8:ad:11:2f:bb:a1:70:a0:34:ec:6e:71:b4:54: 00:8e:a4:11:c0:67:80:62:2f:fd:f8:f7:b3:89:0d: 72:1d:c6:11:2d:34:12:54:e4:e3:aa:d4:c8:ad:68: 5e:1c:4b:88:8c:ec:eb:75:13:b9:a9:4b:b7:fb:11: e4:49:0d:85:81:3e:80:69:2e:52:b8:c2:bd:11:e1: 49:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:7A:B5:A5:87:34:6E:BB:77:BA:9A:8F:C0:C6:36:68:11:61:CC:EA X509v3 Authority Key Identifier: keyid:3F:62:CA:9C:5E:FF:FD:32:0A:BD:2D:8F:C7:E8:F8:35:E7:BB:D1:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P2LKnF7__TIKvS2Px-j4Nee70es.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:24:9d:ce:ab:80:21:c1:3f:36:9d:0a:52:d4:a5:91:c8:7e: fc:8d:47:ea:9b:f2:c0:3a:04:9c:9e:e3:21:8a:ef:ae:b3:49: ca:d6:3e:24:dc:81:ad:aa:27:26:f9:73:23:ec:bc:f6:46:7a: e0:bb:f6:6c:41:54:72:40:ba:0e:79:42:52:b4:31:6e:e8:d4: 9b:85:d3:6c:4e:18:55:f8:0e:6f:f1:9b:10:ca:d7:aa:73:05: cf:b6:1d:2c:ba:4f:21:8b:3e:a6:36:02:6c:41:c7:4b:6f:88: 9f:73:bf:7c:0f:af:d0:b8:b0:e2:83:9b:f7:54:39:f7:fd:a8: 7c:f0:b7:bf:fe:30:35:d0:49:d8:c2:49:b3:12:8c:e4:20:5c: 3f:3d:5a:33:ed:83:f8:e8:58:ed:03:48:a9:0a:d5:c2:4a:e4: e0:c7:6a:b6:8d:28:81:b9:53:8d:bc:ff:95:26:5f:ad:0f:03: d6:db:91:5d:a3:9f:e7:1c:ce:de:0b:b3:fc:1e:8a:78:72:07: c4:c1:2c:f1:b9:a1:23:b4:30:30:f0:01:d4:0b:a9:4a:9e:de: f0:c4:8c:2d:53:fa:d3:74:61:0c:e4:04:99:da:cc:3e:06:63: f2:ac:7c:b8:77:d4:cf:24:aa:c3:e8:32:81:2b:04:ef:df:6d: 1c:ba:2c:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+jEmr8eVzKXdvhrP4quIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmNjJjYTljNWVmZmZkMzIwYWJkMmQ4ZmM3ZThmODM1ZTdi YmQxZWIwHhcNMjUxMjE4MDEwMTQ3WhcNMjUxMjE5MDEwMTQ3WjAzMTEwLwYDVQQD EygzNzdhYjVhNTg3MzQ2ZWJiNzdiYTlhOGZjMGM2MzY2ODExNjFjY2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotxXqUAXZHxvVfwsVJUuTgjYsk5D cycp7AmoqCZ5VBORIEO8yxLL82PN68RhmUeAsnCxqWnJQqpmWYwleRzWG7TZ0zA3 jv/RCufGHFmBCW3nymtD4BQIzhA4W0Ha2yNU3oqFhVo7aOgjgiGVhEc8BbAMrAMg 4xqCrp8auNcL3EtVUxYZhrGVlorCAHU1u8bYrgVODuYQtCKhnGbEqO4/rVmPQITT y/N1HgYAyijT9urW4//puK0RL7uhcKA07G5xtFQAjqQRwGeAYi/9+PeziQ1yHcYR LTQSVOTjqtTIrWheHEuIjOzrdRO5qUu3+xHkSQ2FgT6AaS5SuMK9EeFJlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDd6taWHNG67d7qaj8DGNmgRYczqMB8GA1UdIwQY MBaAFD9iypxe//0yCr0tj8fo+DXnu9HrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDJMS25GN19fVElLdlMyUHgtajROZWU3MGVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9hMzYxY2ItZjhiZS00YjUwLTk4Njkt MDA5MDgwZThkZmY1LzEvUDJMS25GN19fVElLdlMyUHgtajROZWU3MGVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9hMzYxY2ItZjhiZS00YjUwLTk4NjktMDA5MDgwZThkZmY1 LzEvUDJMS25GN19fVElLdlMyUHgtajROZWU3MGVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUySdzquA IcE/Np0KUtSlkch+/I1H6pvywDoEnJ7jIYrvrrNJytY+JNyBraonJvlzI+y89kZ6 4Lv2bEFUckC6DnlCUrQxbujUm4XTbE4YVfgOb/GbEMrXqnMFz7YdLLpPIYs+pjYC bEHHS2+In3O/fA+v0Liw4oOb91Q59/2ofPC3v/4wNdBJ2MJJsxKM5CBcPz1aM+2D +OhY7QNIqQrVwkrk4Mdqto0ogblTjbz/lSZfrQ8D1tuRXaOf5xzO3guz/B6KeHIH xMEs8bmhI7QwMPAB1AupSp7e8MSMLVP603RhDOQEmdrMPgZj8qx8uHfUzySqw+gy gSsE799tHLosXg== -----END CERTIFICATE-----Generated at Thu Dec 18 05:02:47 2025 by rpki-client