This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.mft File: P591E-0Eyp_o96RU6CeY0E8agKg.mft (raw, json) Hash identifier: vd/Kuu9NU8QRGGYmB9OMQ6K9gOX05Odi8VNBkTjXjv8= Subject key identifier: 29:9E:F4:FB:BC:39:55:4A:A7:59:E3:28:06:42:3C:F7:E9:7F:71:98 Authority key identifier: 3F:9F:75:13:ED:04:CA:9F:E8:F7:A4:54:E8:27:98:D0:4F:1A:80:A8 Certificate issuer: /CN=3f9f7513ed04ca9fe8f7a454e82798d04f1a80a8 Certificate serial: 019AF50B7C46289FB80C0AF7EEA8486B3104 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P591E-0Eyp_o96RU6CeY0E8agKg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.mft Manifest number: 0684 Signing time: Sat 06 Dec 2025 19:02:41 +0000 Manifest this update: Sat 06 Dec 2025 19:02:41 +0000 Manifest next update: Sun 07 Dec 2025 19:02:41 +0000 Files and hashes: 1: P591E-0Eyp_o96RU6CeY0E8agKg.crl (hash: cgBW8zPVibLqRfLoRLAnWINyiAbse7ToHdeJx+ZXATg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.crl rsync://rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.mft rsync://rpki.ripe.net/repository/DEFAULT/P591E-0Eyp_o96RU6CeY0E8agKg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:7c:46:28:9f:b8:0c:0a:f7:ee:a8:48:6b:31:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f9f7513ed04ca9fe8f7a454e82798d04f1a80a8 Validity Not Before: Dec 6 19:02:41 2025 GMT Not After : Dec 7 19:02:41 2025 GMT Subject: CN=299ef4fbbc39554aa759e32806423cf7e97f7198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:8b:a7:24:77:20:89:3d:45:6a:c8:da:26:b7: 3e:b1:41:9d:7a:26:8c:21:73:b7:91:fc:91:55:03: 05:55:39:ea:b5:14:5f:4d:3d:6a:0b:3b:a1:2a:9e: e1:eb:77:37:fb:ea:ce:d2:0c:05:54:b3:23:8a:5d: 2c:62:0c:dd:93:1e:26:e8:83:c0:72:75:a5:f8:7c: c1:ab:fe:18:5e:ea:f2:64:85:40:ff:15:74:69:c4: c5:ab:a5:04:69:56:f3:6d:75:0a:34:3e:7a:3f:f9: b4:57:89:ae:ed:48:f2:0f:ae:ea:87:88:89:db:ce: f6:0e:13:c8:64:21:a9:f7:bc:ac:5d:f0:ce:6a:3e: 2e:d4:54:81:19:e0:3b:ee:f7:47:dd:bd:78:37:55: 51:6f:5f:ca:80:83:17:7e:c6:39:20:12:f7:ad:db: 99:bf:45:1b:74:6f:60:b0:ec:57:7c:41:4d:84:bd: 53:07:7e:a9:40:83:5e:8e:3d:63:fa:0b:ce:46:4f: c5:95:52:d7:cf:a2:72:19:b0:38:39:94:dc:2b:e1: 75:49:3f:de:6a:da:b3:fa:33:ed:91:8d:a2:ba:49: 56:75:30:62:74:a1:58:cd:ca:c4:e7:08:d2:06:dd: 58:15:17:fd:f0:d7:c1:f4:91:cd:84:50:e1:13:b4: 82:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:9E:F4:FB:BC:39:55:4A:A7:59:E3:28:06:42:3C:F7:E9:7F:71:98 X509v3 Authority Key Identifier: keyid:3F:9F:75:13:ED:04:CA:9F:E8:F7:A4:54:E8:27:98:D0:4F:1A:80:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P591E-0Eyp_o96RU6CeY0E8agKg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:38:3a:13:c7:a5:0e:67:4c:22:21:71:04:cd:5a:54:52:e1: 6f:56:ea:14:2a:98:11:05:ef:ab:d8:7b:60:d6:5d:3f:7a:54: c2:6d:07:49:61:2e:41:cc:a4:18:78:7f:32:6f:e4:e0:1b:76: 63:08:7e:b7:93:54:72:d8:c6:b8:66:76:6a:3c:0f:3f:a0:3c: f7:c7:87:42:d1:88:cd:da:4e:32:65:3a:78:98:dc:07:de:a6: 25:fe:1a:7d:e1:64:43:e2:3f:a1:3b:f9:3d:a1:f4:fa:b6:7d: 51:a4:9a:97:da:24:74:9a:0e:1e:41:a9:c0:b4:71:ba:87:ed: 19:f9:18:0c:ce:34:ac:bc:86:97:a7:6a:0e:f6:f9:71:7a:55: 74:37:83:c1:65:f5:ae:49:d6:43:fe:8d:9f:5f:8e:4e:5e:f9: 7c:79:92:d8:39:1d:78:5e:f2:ba:b6:b5:37:62:37:aa:3a:8f: 91:62:5e:dd:01:6e:a0:b8:00:df:58:41:43:44:ce:6f:79:ca: f6:49:cf:77:d1:c9:e8:98:6d:05:7c:2d:b7:f4:a7:9c:4d:1b: ac:30:a0:0e:7a:aa:a2:79:cd:4b:4c:0e:05:c7:95:13:4d:2f: 60:a8:fb:4d:b6:03:a4:e2:4d:0b:ac:3b:b9:b4:b4:cf:5b:f4: 7c:11:89:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C3xGKJ+4DAr37qhIazEEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmOWY3NTEzZWQwNGNhOWZlOGY3YTQ1NGU4Mjc5OGQwNGYx YTgwYTgwHhcNMjUxMjA2MTkwMjQxWhcNMjUxMjA3MTkwMjQxWjAzMTEwLwYDVQQD EygyOTllZjRmYmJjMzk1NTRhYTc1OWUzMjgwNjQyM2NmN2U5N2Y3MTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54unJHcgiT1FasjaJrc+sUGdeiaM IXO3kfyRVQMFVTnqtRRfTT1qCzuhKp7h63c3++rO0gwFVLMjil0sYgzdkx4m6IPA cnWl+HzBq/4YXuryZIVA/xV0acTFq6UEaVbzbXUKND56P/m0V4mu7UjyD67qh4iJ 2872DhPIZCGp97ysXfDOaj4u1FSBGeA77vdH3b14N1VRb1/KgIMXfsY5IBL3rduZ v0UbdG9gsOxXfEFNhL1TB36pQINejj1j+gvORk/FlVLXz6JyGbA4OZTcK+F1ST/e atqz+jPtkY2iuklWdTBidKFYzcrE5wjSBt1YFRf98NfB9JHNhFDhE7SCswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCme9Pu8OVVKp1njKAZCPPfpf3GYMB8GA1UdIwQY MBaAFD+fdRPtBMqf6PekVOgnmNBPGoCoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDU5MUUtMEV5cF9vOTZSVTZDZVkwRThhZ0tnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8wZGYzMGUtYjBiZi00ZDEwLWEwNjYt NjkxN2NiNGM5OWJjLzEvUDU5MUUtMEV5cF9vOTZSVTZDZVkwRThhZ0tnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8wZGYzMGUtYjBiZi00ZDEwLWEwNjYtNjkxN2NiNGM5OWJj LzEvUDU5MUUtMEV5cF9vOTZSVTZDZVkwRThhZ0tnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAzg6E8el DmdMIiFxBM1aVFLhb1bqFCqYEQXvq9h7YNZdP3pUwm0HSWEuQcykGHh/Mm/k4Bt2 Ywh+t5NUctjGuGZ2ajwPP6A898eHQtGIzdpOMmU6eJjcB96mJf4afeFkQ+I/oTv5 PaH0+rZ9UaSal9okdJoOHkGpwLRxuoftGfkYDM40rLyGl6dqDvb5cXpVdDeDwWX1 rknWQ/6Nn1+OTl75fHmS2DkdeF7yura1N2I3qjqPkWJe3QFuoLgA31hBQ0TOb3nK 9knPd9HJ6JhtBXwtt/SnnE0brDCgDnqqonnNS0wOBceVE00vYKj7TbYDpOJNC6w7 ubS0z1v0fBGJLw== -----END CERTIFICATE-----Generated at Sun Dec 7 05:18:00 2025 by rpki-client