This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft File: P__L7IiMEEfyIdfPk5a_FBKrr5s.mft (raw, json) Hash identifier: s7cdcVmKCko1eMHhtVhH6Dtk4teQ0uCD5bA2lhjoAX0= Subject key identifier: 88:C1:85:6C:4B:3A:13:67:7A:9B:B2:F7:EE:D4:74:F4:96:AB:79:F2 Authority key identifier: 3F:FF:CB:EC:88:8C:10:47:F2:21:D7:CF:93:96:BF:14:12:AB:AF:9B Certificate issuer: /CN=3fffcbec888c1047f221d7cf9396bf1412abaf9b Certificate serial: 019AF276D74D47A8D1A500ED52B0ECCFCDDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft Manifest number: 0D4D Signing time: Sat 06 Dec 2025 07:01:05 +0000 Manifest this update: Sat 06 Dec 2025 07:01:05 +0000 Manifest next update: Sun 07 Dec 2025 07:01:05 +0000 Files and hashes: 1: G1ZoPreJjIkkyyNJWvhlfTtWo1U.roa (hash: ZGtSGL/7afo62ORK+9uxVq7WnlKM3t68x8dY3Lc6a40=) 2: P__L7IiMEEfyIdfPk5a_FBKrr5s.crl (hash: AdcYibBeFQIsvOk2V1TC+RBrefp4ADYQnC1ksDhpGr8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.crl rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:d7:4d:47:a8:d1:a5:00:ed:52:b0:ec:cf:cd:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fffcbec888c1047f221d7cf9396bf1412abaf9b Validity Not Before: Dec 6 07:01:05 2025 GMT Not After : Dec 7 07:01:05 2025 GMT Subject: CN=88c1856c4b3a13677a9bb2f7eed474f496ab79f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1e:51:70:71:dc:4d:30:39:93:d7:dd:28:a0: 07:e7:35:ca:41:21:b8:85:df:01:d7:27:56:f2:bc: 91:a9:d8:6c:2b:cc:2c:5b:c3:08:6e:f6:55:8e:52: 20:6e:a8:eb:85:c2:2a:18:5a:1e:0b:c8:f1:30:5e: d8:8a:b4:61:e1:ae:a7:ab:ce:2b:f3:5d:de:49:73: e7:1b:08:c4:ec:77:26:40:79:bf:7f:e0:f7:8e:9c: 6a:62:15:2b:c7:5a:18:82:8a:12:5a:fa:2f:86:dd: 24:7d:30:f4:a7:48:c6:7f:eb:d9:49:97:bc:5a:d1: 79:6a:a5:8f:5c:a7:5d:78:f3:fd:b2:de:29:54:60: 39:b9:5c:0f:8e:22:00:c7:22:41:12:fd:ac:19:e0: a1:67:25:d2:1a:e4:9b:6f:b1:5d:5a:cb:a7:49:7b: 32:9b:23:88:c7:59:ea:19:79:8d:53:82:23:65:aa: 86:e9:2e:35:17:2e:19:ed:01:f6:ee:38:21:e4:0a: f2:69:5c:7a:82:84:97:59:e4:d5:84:22:09:5e:85: bb:84:ad:3c:ce:94:10:16:dd:4a:20:a8:28:df:a7: c8:03:8c:29:d1:e0:17:af:e6:75:04:72:b5:ff:19: 34:58:83:29:7a:57:87:9b:f6:1a:09:40:cf:34:1f: ef:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:C1:85:6C:4B:3A:13:67:7A:9B:B2:F7:EE:D4:74:F4:96:AB:79:F2 X509v3 Authority Key Identifier: keyid:3F:FF:CB:EC:88:8C:10:47:F2:21:D7:CF:93:96:BF:14:12:AB:AF:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:3b:cb:b7:03:8c:73:db:4d:d9:a3:41:b7:47:c3:6c:99:46: 47:9d:3a:5f:17:5e:b7:d0:12:1f:66:dd:94:a9:83:47:f9:ce: fc:83:6b:d2:ef:0c:a4:6a:50:55:a5:f6:c9:da:81:73:1b:0d: 62:b9:d7:e3:e6:69:0c:f0:28:08:15:56:b5:17:d6:d9:a2:18: ad:1f:61:59:e9:df:9a:fd:de:98:c9:91:6c:f7:fe:b3:18:d2: 74:7e:d2:cf:a5:00:b0:5a:47:ba:56:5a:d7:4d:d8:f6:c2:d1: 93:9b:d1:67:4b:c6:d7:29:d0:f0:58:9c:28:65:6f:b2:4b:95: 7d:49:09:e7:c1:11:90:a2:6d:12:be:12:a7:e5:47:df:d4:8b: 88:75:c0:c0:49:6e:51:e7:d2:2f:86:56:4c:a0:d3:43:1d:55: de:9d:d1:87:07:7b:54:68:9f:72:c3:14:a2:0c:45:bd:79:7d: d9:50:87:48:b0:4c:38:c3:80:95:e0:8b:28:e4:88:6a:a1:15: 29:6f:b9:75:a5:56:93:d3:02:e1:b5:7e:b5:b9:f3:e8:7f:31: 1d:bd:fa:00:d2:c0:b5:77:55:6d:25:ee:8c:fd:b6:1a:1d:ed: e5:f8:56:b1:2d:77:e3:66:7b:5b:39:05:cc:63:a3:55:92:45: 58:8d:24:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydtdNR6jRpQDtUrDsz83aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZmZjYmVjODg4YzEwNDdmMjIxZDdjZjkzOTZiZjE0MTJh YmFmOWIwHhcNMjUxMjA2MDcwMTA1WhcNMjUxMjA3MDcwMTA1WjAzMTEwLwYDVQQD Eyg4OGMxODU2YzRiM2ExMzY3N2E5YmIyZjdlZWQ0NzRmNDk2YWI3OWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuB5RcHHcTTA5k9fdKKAH5zXKQSG4 hd8B1ydW8ryRqdhsK8wsW8MIbvZVjlIgbqjrhcIqGFoeC8jxMF7YirRh4a6nq84r 813eSXPnGwjE7HcmQHm/f+D3jpxqYhUrx1oYgooSWvovht0kfTD0p0jGf+vZSZe8 WtF5aqWPXKddePP9st4pVGA5uVwPjiIAxyJBEv2sGeChZyXSGuSbb7FdWsunSXsy myOIx1nqGXmNU4IjZaqG6S41Fy4Z7QH27jgh5AryaVx6goSXWeTVhCIJXoW7hK08 zpQQFt1KIKgo36fIA4wp0eAXr+Z1BHK1/xk0WIMpeleHm/YaCUDPNB/vewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIjBhWxLOhNnepuy9+7UdPSWq3nyMB8GA1UdIwQY MBaAFD//y+yIjBBH8iHXz5OWvxQSq6+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUF9fTDdJaU1FRWZ5SWRmUGs1YV9GQktycjVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9iYmI3YjYtM2VlNS00NmQ5LWIzN2It NjE2NjdjNzY5MWIyLzEvUF9fTDdJaU1FRWZ5SWRmUGs1YV9GQktycjVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9iYmI3YjYtM2VlNS00NmQ5LWIzN2ItNjE2NjdjNzY5MWIy LzEvUF9fTDdJaU1FRWZ5SWRmUGs1YV9GQktycjVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOzvLtwOM c9tN2aNBt0fDbJlGR506Xxdet9ASH2bdlKmDR/nO/INr0u8MpGpQVaX2ydqBcxsN YrnX4+ZpDPAoCBVWtRfW2aIYrR9hWenfmv3emMmRbPf+sxjSdH7Sz6UAsFpHulZa 103Y9sLRk5vRZ0vG1ynQ8FicKGVvskuVfUkJ58ERkKJtEr4Sp+VH39SLiHXAwElu UefSL4ZWTKDTQx1V3p3Rhwd7VGifcsMUogxFvXl92VCHSLBMOMOAleCLKOSIaqEV KW+5daVWk9MC4bV+tbnz6H8xHb36ANLAtXdVbSXujP22Gh3t5fhWsS1342Z7WzkF zGOjVZJFWI0kJA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:32 2025 by rpki-client