This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft File: P1amMzFVLvkdigAFozjsmC3zfIs.mft (raw, json) Hash identifier: jeOgRuNP8HC1oRlcZY/V2W4QWOZlQkpHQkz7OZbI138= Subject key identifier: AA:C7:79:13:75:79:D1:C5:6F:89:3E:79:63:CA:BB:8B:32:E4:44:07 Authority key identifier: 3F:56:A6:33:31:55:2E:F9:1D:8A:00:05:A3:38:EC:98:2D:F3:7C:8B Certificate issuer: /CN=3f56a63331552ef91d8a0005a338ec982df37c8b Certificate serial: 019B2C9D2531DCF4BCFD0080A29E7D9617FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1amMzFVLvkdigAFozjsmC3zfIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft Manifest number: 118A Signing time: Wed 17 Dec 2025 14:00:54 +0000 Manifest this update: Wed 17 Dec 2025 14:00:54 +0000 Manifest next update: Thu 18 Dec 2025 14:00:54 +0000 Files and hashes: 1: P1amMzFVLvkdigAFozjsmC3zfIs.crl (hash: O0Zsu8C2Tq7MvrASvhta3bAWu1Gq/8fsh8+eNd1Ky1Q=) 2: i_E14tU_jnnkTSG9INpa9JShg9E.roa (hash: ZqQOvQcYLRY+mr+wSPe0ltP607X6tGik7hBPTVxfXqk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft rsync://rpki.ripe.net/repository/DEFAULT/P1amMzFVLvkdigAFozjsmC3zfIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:9d:25:31:dc:f4:bc:fd:00:80:a2:9e:7d:96:17:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f56a63331552ef91d8a0005a338ec982df37c8b Validity Not Before: Dec 17 14:00:54 2025 GMT Not After : Dec 18 14:00:54 2025 GMT Subject: CN=aac779137579d1c56f893e7963cabb8b32e44407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:5b:69:50:30:4c:68:71:0b:69:f3:48:58:0f: d9:b0:5e:51:31:19:22:d6:aa:18:e4:08:0e:4e:18: 37:e8:70:36:61:3f:ab:26:2b:fd:e2:87:e6:90:ec: 3f:2c:ca:3d:ce:09:f8:2d:dd:8d:8c:be:da:be:96: 25:0d:86:e8:ee:e1:b2:fe:8b:55:d9:ae:2a:ce:18: e9:e9:4d:ad:0e:30:5b:ed:c7:3f:3a:39:92:ad:d0: de:a0:67:67:f3:a8:2f:17:57:b9:69:97:39:9f:43: 2c:bf:19:bb:9d:e0:48:a2:35:09:d1:41:6b:87:c5: 1a:ae:40:60:87:64:c7:4e:ee:33:5e:9d:48:42:cc: a1:38:66:d1:c8:20:ea:c3:2d:15:32:b2:62:48:e8: 5a:27:34:77:04:75:dd:f9:50:39:d8:52:0f:8e:7a: 46:5b:aa:0a:6a:ea:f5:bc:68:6c:fd:61:c4:f8:0e: 04:b2:00:87:6e:a9:ec:56:99:90:ab:3a:fe:39:8d: 84:88:20:45:7a:41:cf:1d:ac:93:ce:a0:cb:87:c5: 37:77:a4:cb:be:c0:b0:00:36:5b:e1:a7:13:85:fd: 2a:cb:82:67:05:3c:7c:b6:31:0b:20:ec:07:99:40: b6:6a:e7:ed:1d:a3:88:76:f5:d2:a0:55:de:a8:02: b3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:C7:79:13:75:79:D1:C5:6F:89:3E:79:63:CA:BB:8B:32:E4:44:07 X509v3 Authority Key Identifier: keyid:3F:56:A6:33:31:55:2E:F9:1D:8A:00:05:A3:38:EC:98:2D:F3:7C:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1amMzFVLvkdigAFozjsmC3zfIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:11:5f:0c:9f:14:93:5d:91:14:d7:8d:70:0c:40:b6:ab:cd: a7:10:12:64:3d:e4:29:9e:94:46:81:f5:89:e9:6f:46:f8:cd: e8:95:b0:5a:29:2a:e0:91:a6:cc:3c:20:d7:74:ee:e0:24:5e: ce:04:e4:03:f0:fd:7d:9e:f5:1e:ad:63:96:1a:59:88:e9:80: 5d:89:c6:ea:f3:b7:16:2d:5c:17:e1:5b:3c:fa:2b:88:d2:a8: 43:35:82:80:75:67:df:13:48:99:03:19:4c:6f:d3:3d:0a:26: d6:9d:40:ed:ff:c8:6a:a3:ca:fb:98:d2:00:9e:5e:68:7a:33: df:e0:92:04:99:f9:63:eb:b4:af:b0:ce:ea:03:1c:01:80:71: 24:f9:04:be:bd:7c:83:0a:c9:d5:10:2e:bf:b0:bb:ca:55:07: 79:4f:31:29:c3:e1:7e:bb:3f:32:35:7d:11:be:b9:4b:0d:d8: 2d:be:34:ed:bc:f1:d3:77:2b:c1:7e:99:58:32:ab:20:03:40: eb:c9:b8:2a:e3:19:61:aa:db:fa:d0:da:1e:e6:fe:5b:14:11: 22:11:d1:ea:db:a4:be:b0:1a:27:ef:56:d7:de:6e:ea:91:3d: 5c:63:41:ef:08:c3:df:7e:5d:6e:6b:3f:96:15:e2:cd:b7:c9: 86:82:8c:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssnSUx3PS8/QCAop59lhf9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmNTZhNjMzMzE1NTJlZjkxZDhhMDAwNWEzMzhlYzk4MmRm MzdjOGIwHhcNMjUxMjE3MTQwMDU0WhcNMjUxMjE4MTQwMDU0WjAzMTEwLwYDVQQD EyhhYWM3NzkxMzc1NzlkMWM1NmY4OTNlNzk2M2NhYmI4YjMyZTQ0NDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FtpUDBMaHELafNIWA/ZsF5RMRki 1qoY5AgOThg36HA2YT+rJiv94ofmkOw/LMo9zgn4Ld2NjL7avpYlDYbo7uGy/otV 2a4qzhjp6U2tDjBb7cc/OjmSrdDeoGdn86gvF1e5aZc5n0Msvxm7neBIojUJ0UFr h8UarkBgh2THTu4zXp1IQsyhOGbRyCDqwy0VMrJiSOhaJzR3BHXd+VA52FIPjnpG W6oKaur1vGhs/WHE+A4EsgCHbqnsVpmQqzr+OY2EiCBFekHPHayTzqDLh8U3d6TL vsCwADZb4acThf0qy4JnBTx8tjELIOwHmUC2auftHaOIdvXSoFXeqAKzcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKrHeRN1edHFb4k+eWPKu4sy5EQHMB8GA1UdIwQY MBaAFD9WpjMxVS75HYoABaM47Jgt83yLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDFhbU16RlZMdmtkaWdBRm96anNtQzN6ZklzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8yYjE3OWMtMmQyZC00NDIzLWI2ZDYt YjA4MzdhN2Q0NjQxLzEvUDFhbU16RlZMdmtkaWdBRm96anNtQzN6ZklzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC8yYjE3OWMtMmQyZC00NDIzLWI2ZDYtYjA4MzdhN2Q0NjQx LzEvUDFhbU16RlZMdmtkaWdBRm96anNtQzN6ZklzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbBFfDJ8U k12RFNeNcAxAtqvNpxASZD3kKZ6URoH1ielvRvjN6JWwWikq4JGmzDwg13Tu4CRe zgTkA/D9fZ71Hq1jlhpZiOmAXYnG6vO3Fi1cF+FbPPoriNKoQzWCgHVn3xNImQMZ TG/TPQom1p1A7f/IaqPK+5jSAJ5eaHoz3+CSBJn5Y+u0r7DO6gMcAYBxJPkEvr18 gwrJ1RAuv7C7ylUHeU8xKcPhfrs/MjV9Eb65Sw3YLb407bzx03crwX6ZWDKrIANA 68m4KuMZYarb+tDaHub+WxQRIhHR6tukvrAaJ+9W195u6pE9XGNB7wjD335dbms/ lhXizbfJhoKMKw== -----END CERTIFICATE-----Generated at Wed Dec 17 20:13:01 2025 by rpki-client