This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft File: P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft (raw, json) Hash identifier: oFYAfW2boRONQOcZNZWHwCarrUULoZQodGAEKhp8rb4= Subject key identifier: 4C:47:00:12:11:75:DC:B3:96:CA:74:CC:8D:CB:53:02:AA:DA:C5:28 Authority key identifier: 3F:DA:63:02:13:CD:42:38:80:F9:FE:F1:6D:78:FB:43:6E:08:F2:47 Certificate issuer: /CN=3fda630213cd423880f9fef16d78fb436e08f247 Certificate serial: 019AF464C8870ADF4FD9E8F797563E7A358C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft Manifest number: 0E43 Signing time: Sat 06 Dec 2025 16:00:36 +0000 Manifest this update: Sat 06 Dec 2025 16:00:36 +0000 Manifest next update: Sun 07 Dec 2025 16:00:36 +0000 Files and hashes: 1: P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl (hash: s5RkaXiwm1u5SEM7Br6e+KzRIU2D/V9WnxPI2D+IOak=) 2: gDeneKJTQtX9OIr5MlGy6dCHOYA.roa (hash: 3GvtE0X7YdCyMroXXNh2AEtxzHBHmy4owPJWbBMbbzo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:c8:87:0a:df:4f:d9:e8:f7:97:56:3e:7a:35:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fda630213cd423880f9fef16d78fb436e08f247 Validity Not Before: Dec 6 16:00:36 2025 GMT Not After : Dec 7 16:00:36 2025 GMT Subject: CN=4c4700121175dcb396ca74cc8dcb5302aadac528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1c:3b:3b:c0:d9:dc:fe:25:27:c7:48:5a:c2: 71:86:cd:13:61:d6:a1:26:c1:39:0f:96:c6:8c:31: f0:b0:86:01:32:5c:ec:3e:2e:45:f0:5e:63:36:51: 03:71:e8:fa:a7:53:d5:12:a2:9e:70:08:75:ed:22: d3:16:9b:49:8a:6d:52:05:62:d4:75:3e:f0:a3:9d: b1:fb:b0:13:39:f3:8d:ff:aa:69:9d:bc:df:b0:5c: 06:3b:d9:41:66:d4:60:ef:6a:6a:44:51:91:8c:5a: a0:7b:69:6d:30:aa:5f:21:16:40:2e:04:d3:db:42: 85:73:d5:8a:e1:d0:d5:a8:25:fb:19:eb:da:5d:50: a1:21:3e:ce:e4:53:17:39:1c:37:fa:dc:64:58:8e: 6e:b7:a0:df:0d:74:7d:a4:c9:89:5b:34:96:1f:70: 3c:f0:35:58:38:dd:f8:53:60:db:3f:31:62:71:2b: cc:37:f0:7f:ad:83:53:e0:29:db:21:5c:81:a6:33: 2e:f6:db:86:ac:18:26:7c:c7:36:84:5a:83:d4:c3: 5c:f1:b7:ac:c4:8e:b9:af:be:ae:f1:96:da:0f:ca: f1:16:4e:a9:8f:0d:95:92:02:70:c2:fb:30:86:9d: 97:1e:5d:9d:24:7b:b3:8e:bb:40:99:5b:62:7d:61: 99:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:47:00:12:11:75:DC:B3:96:CA:74:CC:8D:CB:53:02:AA:DA:C5:28 X509v3 Authority Key Identifier: keyid:3F:DA:63:02:13:CD:42:38:80:F9:FE:F1:6D:78:FB:43:6E:08:F2:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:fb:23:a4:f5:0e:89:2e:f9:44:06:14:34:5c:25:8f:f2:98: 0e:51:5b:f1:14:5b:0d:ed:53:91:5a:a3:8e:3b:a0:e6:28:29: 1c:b5:d4:dd:65:4f:86:9e:02:de:29:a3:be:36:c6:92:c9:ab: d5:2f:ee:33:27:35:0d:f4:9d:c7:90:34:d4:d9:ef:19:47:82: 30:62:cd:46:3a:0e:3d:a9:94:77:77:97:41:56:07:cc:2d:6c: 1d:4e:fc:6a:bd:a7:89:31:d9:09:e5:ff:95:81:0e:da:3d:b0: e4:c8:0a:77:4a:6a:8c:79:ab:b0:cc:18:f0:7b:7a:8f:4a:92: d1:7c:e9:fb:c1:27:12:2f:04:ea:f1:73:17:08:31:e7:c3:d6: fa:a8:9d:61:95:d7:18:df:ce:db:cf:40:f6:0a:e6:59:43:45: 63:c1:89:64:16:6b:eb:61:8f:8d:18:d2:07:b7:60:db:0f:ac: d3:36:cf:11:08:13:5b:56:9b:60:00:5e:64:45:f5:7f:7c:2d: a1:aa:87:a6:69:48:ff:49:3a:76:9e:ec:66:da:ab:88:cb:c1: 66:08:99:78:42:c7:73:09:da:ba:4b:9f:18:4f:88:af:ef:17: 5c:21:d4:83:a9:b4:d2:2d:7a:dd:b4:dc:c1:83:af:d6:8f:eb: 27:ae:70:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZMiHCt9P2ej3l1Y+ejWMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZGE2MzAyMTNjZDQyMzg4MGY5ZmVmMTZkNzhmYjQzNmUw OGYyNDcwHhcNMjUxMjA2MTYwMDM2WhcNMjUxMjA3MTYwMDM2WjAzMTEwLwYDVQQD Eyg0YzQ3MDAxMjExNzVkY2IzOTZjYTc0Y2M4ZGNiNTMwMmFhZGFjNTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRw7O8DZ3P4lJ8dIWsJxhs0TYdah JsE5D5bGjDHwsIYBMlzsPi5F8F5jNlEDcej6p1PVEqKecAh17SLTFptJim1SBWLU dT7wo52x+7ATOfON/6ppnbzfsFwGO9lBZtRg72pqRFGRjFqge2ltMKpfIRZALgTT 20KFc9WK4dDVqCX7GevaXVChIT7O5FMXORw3+txkWI5ut6DfDXR9pMmJWzSWH3A8 8DVYON34U2DbPzFicSvMN/B/rYNT4CnbIVyBpjMu9tuGrBgmfMc2hFqD1MNc8bes xI65r76u8ZbaD8rxFk6pjw2VkgJwwvswhp2XHl2dJHuzjrtAmVtifWGZbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFExHABIRddyzlsp0zI3LUwKq2sUoMB8GA1UdIwQY MBaAFD/aYwITzUI4gPn+8W14+0NuCPJHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlwakFoUE5RamlBLWY3eGJYajdRMjRJOGtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My81NGM2OTEtOWZiYi00MzhhLWE1NWYt MzgyMzdmZTRlNDE0LzEvUDlwakFoUE5RamlBLWY3eGJYajdRMjRJOGtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My81NGM2OTEtOWZiYi00MzhhLWE1NWYtMzgyMzdmZTRlNDE0 LzEvUDlwakFoUE5RamlBLWY3eGJYajdRMjRJOGtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF/sjpPUO iS75RAYUNFwlj/KYDlFb8RRbDe1TkVqjjjug5igpHLXU3WVPhp4C3imjvjbGksmr 1S/uMyc1DfSdx5A01NnvGUeCMGLNRjoOPamUd3eXQVYHzC1sHU78ar2niTHZCeX/ lYEO2j2w5MgKd0pqjHmrsMwY8Ht6j0qS0Xzp+8EnEi8E6vFzFwgx58PW+qidYZXX GN/O289A9grmWUNFY8GJZBZr62GPjRjSB7dg2w+s0zbPEQgTW1abYABeZEX1f3wt oaqHpmlI/0k6dp7sZtqriMvBZgiZeELHcwnaukufGE+Ir+8XXCHUg6m00i163bTc wYOv1o/rJ65w5g== -----END CERTIFICATE-----Generated at Sat Dec 6 18:52:52 2025 by rpki-client