This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.mft File: P1YjHn71MYG2MCYPVzmpOZgLzg8.mft (raw, json) Hash identifier: pv0KZD5ZoyvHUoAmL12x0Yr1FvAJQr8g13a4G1EpaEA= Subject key identifier: 8E:23:86:82:38:DF:04:81:E7:14:90:A4:CE:AB:B5:CD:38:79:E3:0C Authority key identifier: 3F:56:23:1E:7E:F5:31:81:B6:30:26:0F:57:39:A9:39:98:0B:CE:0F Certificate issuer: /CN=3f56231e7ef53181b630260f5739a939980bce0f Certificate serial: 019AF540CC05C4DB0F0C98653D49960A154E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1YjHn71MYG2MCYPVzmpOZgLzg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.mft Manifest number: 07AD Signing time: Sat 06 Dec 2025 20:00:55 +0000 Manifest this update: Sat 06 Dec 2025 20:00:55 +0000 Manifest next update: Sun 07 Dec 2025 20:00:55 +0000 Files and hashes: 1: 8Zequ1BL_W6iYmWvGSLxlKoRtx0.roa (hash: OYnqa1GBuQcygL8L90eWwKPCUkwvpNVbLAFvlJTFkpE=) 2: P1YjHn71MYG2MCYPVzmpOZgLzg8.crl (hash: V8Nt7zRoC0StWf3aaod7zjTz5EAvuLcXL7NMtMky5i8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.mft rsync://rpki.ripe.net/repository/DEFAULT/P1YjHn71MYG2MCYPVzmpOZgLzg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:cc:05:c4:db:0f:0c:98:65:3d:49:96:0a:15:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f56231e7ef53181b630260f5739a939980bce0f Validity Not Before: Dec 6 20:00:55 2025 GMT Not After : Dec 7 20:00:55 2025 GMT Subject: CN=8e23868238df0481e71490a4ceabb5cd3879e30c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:37:6b:29:ed:d4:05:a5:92:09:ff:97:34:95: 83:2c:00:28:1e:b5:24:d2:12:34:a6:e6:2b:db:a4: e7:8b:71:6b:da:a2:fd:33:e9:5e:e8:83:82:8b:8e: 08:c2:fe:55:0c:29:ff:ca:14:f0:bc:96:ee:40:aa: 61:cb:e4:42:02:05:46:5b:07:2a:13:54:cf:da:1f: 48:81:a8:e9:ef:0b:13:2a:aa:0d:04:2b:b9:61:2e: 04:5e:fe:1c:4e:db:b2:ff:ed:db:86:da:2e:06:4d: 64:aa:00:8c:c4:b1:9a:05:0b:79:4b:93:6c:23:55: 7f:46:24:b3:75:ba:16:ce:87:27:80:29:ef:91:1e: ce:d6:eb:fa:44:8d:dc:37:f3:4b:f3:a8:57:f8:2c: 96:64:aa:5e:a0:83:2a:8b:e8:68:58:dc:c0:82:9e: 5e:ea:56:04:76:3e:f6:07:7c:05:19:33:da:1b:95: 49:87:a0:4b:e9:a4:1c:ec:93:2f:f3:2f:dd:bc:67: c0:3b:0d:ad:38:7b:ff:83:b9:42:1d:fa:ba:ad:03: 14:ec:e9:9f:34:3b:3d:7e:31:1e:d9:68:61:dd:af: 15:09:a9:5d:04:8f:7d:d1:83:d8:4f:dd:2d:49:66: 26:d8:3e:a5:5d:0d:75:24:ac:49:50:27:70:f1:d4: d7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:23:86:82:38:DF:04:81:E7:14:90:A4:CE:AB:B5:CD:38:79:E3:0C X509v3 Authority Key Identifier: keyid:3F:56:23:1E:7E:F5:31:81:B6:30:26:0F:57:39:A9:39:98:0B:CE:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1YjHn71MYG2MCYPVzmpOZgLzg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:ba:ad:a1:2d:b4:58:1e:6e:da:1d:d6:e2:ca:e0:1c:bd:0e: 9d:09:84:2c:fa:e9:08:64:e7:e0:62:4b:4d:f6:16:b8:b5:60: 72:45:69:26:23:31:d7:ae:df:fa:e3:51:2d:c9:5f:6c:76:5b: dc:b6:8e:02:db:7b:ca:f0:13:28:d0:1e:43:8f:e6:86:0f:ae: 17:37:fa:1a:6c:1f:68:e6:b2:1e:eb:51:4c:0a:59:3e:67:33: d3:1a:c0:06:90:2d:5b:de:0e:cb:4d:7f:bd:03:d0:45:7f:ef: af:90:db:a7:f5:c9:b4:2d:5b:87:a8:3f:4b:8a:33:41:52:96: 26:77:17:e6:20:91:be:15:45:90:3b:9b:ed:77:a1:56:1c:b6: 49:25:44:9a:34:5b:b4:a2:d9:41:96:d9:ec:65:c5:bc:83:16: d3:d4:ee:d4:fe:67:5c:2a:83:18:e3:39:4d:9f:70:d8:ba:ee: 10:74:cf:e3:ab:1a:30:37:da:71:a5:16:0e:95:bf:84:6d:ba: 5a:74:1f:a3:7b:73:2f:ef:25:95:18:c0:e2:e0:24:44:87:cb: ec:67:78:d5:04:39:b2:2e:39:22:f6:89:46:e1:a1:76:1a:82: 2d:d4:f5:a3:42:fb:97:82:19:38:35:4a:c0:a2:92:de:9a:a0: bd:4a:11:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QMwFxNsPDJhlPUmWChVOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmNTYyMzFlN2VmNTMxODFiNjMwMjYwZjU3MzlhOTM5OTgw YmNlMGYwHhcNMjUxMjA2MjAwMDU1WhcNMjUxMjA3MjAwMDU1WjAzMTEwLwYDVQQD Eyg4ZTIzODY4MjM4ZGYwNDgxZTcxNDkwYTRjZWFiYjVjZDM4NzllMzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDdrKe3UBaWSCf+XNJWDLAAoHrUk 0hI0puYr26Tni3Fr2qL9M+le6IOCi44Iwv5VDCn/yhTwvJbuQKphy+RCAgVGWwcq E1TP2h9Igajp7wsTKqoNBCu5YS4EXv4cTtuy/+3bhtouBk1kqgCMxLGaBQt5S5Ns I1V/RiSzdboWzocngCnvkR7O1uv6RI3cN/NL86hX+CyWZKpeoIMqi+hoWNzAgp5e 6lYEdj72B3wFGTPaG5VJh6BL6aQc7JMv8y/dvGfAOw2tOHv/g7lCHfq6rQMU7Omf NDs9fjEe2Whh3a8VCaldBI990YPYT90tSWYm2D6lXQ11JKxJUCdw8dTXHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI4jhoI43wSB5xSQpM6rtc04eeMMMB8GA1UdIwQY MBaAFD9WIx5+9TGBtjAmD1c5qTmYC84PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDFZakhuNzFNWUcyTUNZUFZ6bXBPWmdMemc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi81YzJlMzYtYTlkYi00NTIyLWE2M2Ut NDU1ZGRjN2Q5ZTM4LzEvUDFZakhuNzFNWUcyTUNZUFZ6bXBPWmdMemc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi81YzJlMzYtYTlkYi00NTIyLWE2M2UtNDU1ZGRjN2Q5ZTM4 LzEvUDFZakhuNzFNWUcyTUNZUFZ6bXBPWmdMemc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGbqtoS20 WB5u2h3W4srgHL0OnQmELPrpCGTn4GJLTfYWuLVgckVpJiMx167f+uNRLclfbHZb 3LaOAtt7yvATKNAeQ4/mhg+uFzf6GmwfaOayHutRTApZPmcz0xrABpAtW94Oy01/ vQPQRX/vr5Dbp/XJtC1bh6g/S4ozQVKWJncX5iCRvhVFkDub7XehVhy2SSVEmjRb tKLZQZbZ7GXFvIMW09Tu1P5nXCqDGOM5TZ9w2LruEHTP46saMDfacaUWDpW/hG26 WnQfo3tzL+8llRjA4uAkRIfL7Gd41QQ5si45IvaJRuGhdhqCLdT1o0L7l4IZODVK wKKS3pqgvUoRjw== -----END CERTIFICATE-----Generated at Sun Dec 7 00:36:43 2025 by rpki-client