This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft File: P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft (raw, json) Hash identifier: zcnEWEEK3QKeUkQXeut56ihjO9w16IE8Wx5AqOaD3lE= Subject key identifier: 47:74:46:7F:AB:6F:9B:F4:35:22:CE:F6:A4:E8:B3:A8:F9:1A:7B:E1 Authority key identifier: 3F:F5:8D:FF:BA:4D:F6:AC:34:BD:9F:48:11:9A:E1:1C:FE:F8:A7:6C Certificate issuer: /CN=3ff58dffba4df6ac34bd9f48119ae11cfef8a76c Certificate serial: 019AF31CBA752021707889E769F3D944E91D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft Manifest number: 14F3 Signing time: Sat 06 Dec 2025 10:02:17 +0000 Manifest this update: Sat 06 Dec 2025 10:02:17 +0000 Manifest next update: Sun 07 Dec 2025 10:02:17 +0000 Files and hashes: 1: P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl (hash: PouPJMqN3udkRL/Gr6YF7MPBQI1s7g6QA9xd2DWmQRE=) 2: Q0NTavEWJ5qlzhM0Gok-q7D_kpE.roa (hash: 38GOGOOApNFSuUu3tueeEDSFag3IGEHi/vwKyUqguXY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:ba:75:20:21:70:78:89:e7:69:f3:d9:44:e9:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ff58dffba4df6ac34bd9f48119ae11cfef8a76c Validity Not Before: Dec 6 10:02:17 2025 GMT Not After : Dec 7 10:02:17 2025 GMT Subject: CN=4774467fab6f9bf43522cef6a4e8b3a8f91a7be1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:91:71:8a:ab:35:3b:89:46:eb:ba:a9:4e:55: b8:54:67:3c:78:af:d5:01:5d:34:34:48:f9:29:04: 17:94:7f:4e:b6:82:bc:d8:0b:9b:bd:ad:f7:3e:9e: 29:d7:fd:5f:2f:55:74:4d:d2:fe:18:f2:c5:01:5a: ef:fe:84:ae:12:67:86:46:67:e2:b0:e7:26:39:03: ea:55:d9:69:e1:34:68:38:13:74:37:0f:05:0c:5a: d8:ea:84:b3:64:a0:b4:a1:cd:59:1e:1d:20:3c:23: 64:66:4a:6c:14:33:27:76:df:5c:f4:0d:0c:71:ed: e6:a3:2e:70:08:cc:8d:e5:05:07:d5:a5:95:8f:21: 8f:57:4f:30:0d:1d:35:0e:6f:aa:60:7a:f5:9b:53: 7a:72:d1:86:50:c1:58:dd:5d:69:cb:b3:44:4d:5f: 77:6a:1f:24:f4:a4:22:dc:7d:c0:a0:00:98:fd:0d: ec:dc:d0:d8:de:71:01:77:b9:8c:82:2d:94:b9:9e: 5c:60:ff:77:7c:83:7b:66:3b:6a:15:16:71:6c:21: 94:3d:5a:4f:df:c1:de:57:6d:7c:39:64:7b:2a:2b: 2c:98:26:eb:66:78:a1:d2:b2:f6:33:bb:d9:75:ef: 86:e7:75:ca:b4:7c:2c:b2:a2:3e:1f:38:ec:4f:12: 36:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:74:46:7F:AB:6F:9B:F4:35:22:CE:F6:A4:E8:B3:A8:F9:1A:7B:E1 X509v3 Authority Key Identifier: keyid:3F:F5:8D:FF:BA:4D:F6:AC:34:BD:9F:48:11:9A:E1:1C:FE:F8:A7:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:fb:5f:31:cc:28:8d:91:b1:22:28:55:7d:7b:ce:65:01:87: 6b:84:91:a6:56:82:eb:d9:53:45:cc:69:de:d1:4c:ea:b1:8c: 1e:89:35:a4:58:d1:18:60:e3:28:7e:52:3e:1a:c4:af:10:cc: 15:8e:5c:f8:ea:50:89:8a:e7:91:b4:44:1f:dd:1e:07:5e:ac: 33:c3:f6:51:db:78:0d:31:f3:e2:31:1e:56:8a:7b:0b:db:4e: ff:e5:59:a5:ae:1b:9c:03:6c:28:57:c0:65:73:bf:33:6b:55: f0:bc:fd:5b:32:40:7f:d4:ed:5b:3e:67:2a:12:61:ab:64:45: 6a:b1:04:db:be:fa:cb:08:c5:86:78:09:a1:81:13:0c:49:03: 73:cd:ae:6a:5f:07:01:ca:13:ca:b2:d9:37:02:93:b8:f8:7c: 92:8b:4d:ff:22:41:66:2d:df:0c:3b:0e:da:31:9a:07:61:7d: 49:dd:b0:ae:fc:8d:13:e0:d4:ad:d9:dd:3d:9d:47:4c:3f:3d: 6d:94:cf:36:b5:f0:ce:3d:e6:e9:11:89:11:67:72:54:fa:fa: 5c:b4:60:ea:17:bb:ae:e9:b8:fa:7b:08:ba:c1:e6:09:d0:61: db:0a:4c:75:c8:e5:0b:8f:75:77:9d:97:79:c6:91:85:5e:b7: ba:bc:8a:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHLp1ICFweInnafPZROkdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZjU4ZGZmYmE0ZGY2YWMzNGJkOWY0ODExOWFlMTFjZmVm OGE3NmMwHhcNMjUxMjA2MTAwMjE3WhcNMjUxMjA3MTAwMjE3WjAzMTEwLwYDVQQD Eyg0Nzc0NDY3ZmFiNmY5YmY0MzUyMmNlZjZhNGU4YjNhOGY5MWE3YmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5Fxiqs1O4lG67qpTlW4VGc8eK/V AV00NEj5KQQXlH9OtoK82Aubva33Pp4p1/1fL1V0TdL+GPLFAVrv/oSuEmeGRmfi sOcmOQPqVdlp4TRoOBN0Nw8FDFrY6oSzZKC0oc1ZHh0gPCNkZkpsFDMndt9c9A0M ce3moy5wCMyN5QUH1aWVjyGPV08wDR01Dm+qYHr1m1N6ctGGUMFY3V1py7NETV93 ah8k9KQi3H3AoACY/Q3s3NDY3nEBd7mMgi2UuZ5cYP93fIN7ZjtqFRZxbCGUPVpP 38HeV218OWR7KissmCbrZnih0rL2M7vZde+G53XKtHwssqI+HzjsTxI23QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEd0Rn+rb5v0NSLO9qTos6j5GnvhMB8GA1UdIwQY MBaAFD/1jf+6TfasNL2fSBGa4Rz++KdsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUF9XTl83cE45cXcwdlo5SUVacmhIUDc0cDJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8yOGZjZTQtODFmMS00Y2QzLWE4ZWQt YWI5NGFmZmI5MDNhLzEvUF9XTl83cE45cXcwdlo5SUVacmhIUDc0cDJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8yOGZjZTQtODFmMS00Y2QzLWE4ZWQtYWI5NGFmZmI5MDNh LzEvUF9XTl83cE45cXcwdlo5SUVacmhIUDc0cDJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfftfMcwo jZGxIihVfXvOZQGHa4SRplaC69lTRcxp3tFM6rGMHok1pFjRGGDjKH5SPhrErxDM FY5c+OpQiYrnkbREH90eB16sM8P2Udt4DTHz4jEeVop7C9tO/+VZpa4bnANsKFfA ZXO/M2tV8Lz9WzJAf9TtWz5nKhJhq2RFarEE2776ywjFhngJoYETDEkDc82ual8H AcoTyrLZNwKTuPh8kotN/yJBZi3fDDsO2jGaB2F9Sd2wrvyNE+DUrdndPZ1HTD89 bZTPNrXwzj3m6RGJEWdyVPr6XLRg6he7rum4+nsIusHmCdBh2wpMdcjlC491d52X ecaRhV63uryKyw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:39:23 2025 by rpki-client