This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft File: P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft (raw, json) Hash identifier: JfE+XQXX69DaB/zDLM0IeEj7IscS2gZvX5rLFZXWQfI= Subject key identifier: 22:91:90:5E:3E:56:7E:83:19:2D:D0:DA:BD:B1:05:E4:EC:EC:94:EE Authority key identifier: 3F:F7:78:93:46:A9:F9:29:15:F1:F7:5B:10:AF:94:F9:7B:6E:24:FA Certificate issuer: /CN=3ff7789346a9f92915f1f75b10af94f97b6e24fa Certificate serial: 019AF31CAFC5E8A31C1D8E17B196F3FEE7A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft Manifest number: 16E6 Signing time: Sat 06 Dec 2025 10:02:14 +0000 Manifest this update: Sat 06 Dec 2025 10:02:14 +0000 Manifest next update: Sun 07 Dec 2025 10:02:14 +0000 Files and hashes: 1: P_d4k0ap-SkV8fdbEK-U-XtuJPo.crl (hash: was/mGVVAF4cHkJHjLf33QFjh8OPz3dBpFiQ2jmQJdk=) 2: dfyn6nhNR8JQy6SGJlUvEZfvkyM.roa (hash: k281u51pv38AcL8abAJjlmfLN2hampMY0v32cElp30w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft rsync://rpki.ripe.net/repository/DEFAULT/P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:af:c5:e8:a3:1c:1d:8e:17:b1:96:f3:fe:e7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ff7789346a9f92915f1f75b10af94f97b6e24fa Validity Not Before: Dec 6 10:02:14 2025 GMT Not After : Dec 7 10:02:14 2025 GMT Subject: CN=2291905e3e567e83192dd0dabdb105e4ecec94ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2f:af:13:d2:b8:54:45:f3:f0:d4:3c:20:dd: 54:01:51:15:54:d5:6f:6e:b7:80:4e:a0:92:a0:7a: 69:30:55:73:b5:7d:08:fb:d5:6c:5d:34:b6:18:81: 0a:d1:b8:59:2b:c6:ae:94:26:95:e8:07:d8:32:fd: 56:95:eb:46:47:52:66:cf:b5:65:52:e2:b2:f8:0c: ae:28:2e:41:dd:fb:14:60:4a:97:4d:22:f6:b1:9e: c5:7c:0d:d3:bc:b9:52:9c:1b:da:77:f4:9c:3f:61: 05:e6:b1:1f:c6:63:cf:15:d6:10:60:9b:af:26:57: 23:69:19:c7:bb:78:83:1e:a2:57:b7:93:2f:73:10: 37:00:af:06:4a:40:78:2f:8c:f4:7a:bf:dc:1a:4f: 0e:fc:9d:2f:36:2d:95:53:3b:d5:00:16:81:5b:60: bc:de:57:df:81:50:2a:ef:84:c7:b7:7d:67:4c:af: 14:d3:4c:05:fe:7e:a8:4f:22:9f:13:d7:c5:38:4e: 5c:43:88:05:9d:1c:16:52:c9:d7:5d:81:22:84:70: c8:06:07:81:7a:2a:33:b0:56:ba:40:3e:00:94:4d: dc:1a:b2:60:66:af:7e:9d:63:af:38:05:21:42:49: 14:d3:d0:1d:f6:30:89:87:11:a5:47:61:d0:03:fb: 5f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:91:90:5E:3E:56:7E:83:19:2D:D0:DA:BD:B1:05:E4:EC:EC:94:EE X509v3 Authority Key Identifier: keyid:3F:F7:78:93:46:A9:F9:29:15:F1:F7:5B:10:AF:94:F9:7B:6E:24:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:55:9e:c6:b9:f5:6a:2b:b3:b0:62:45:f0:0c:1b:e3:a9:53: aa:5d:4a:e6:35:93:71:70:71:73:3c:c3:62:17:f1:fe:b3:5f: 07:8f:b5:3a:f4:13:9e:42:2e:39:fa:17:d8:23:a0:a2:6e:07: f5:ec:33:1d:82:b3:95:88:7e:13:5a:02:d2:da:1a:93:fb:da: 6a:5c:64:1f:5b:8b:82:4f:72:74:af:b5:96:1d:d6:02:f4:e8: b4:8b:ad:be:28:1b:cb:a9:26:ba:c7:6e:1e:1b:4a:29:d7:3e: 03:11:fd:4e:2a:79:ed:b7:5f:5e:9f:9e:97:3d:8d:2a:cf:2b: fa:f9:52:79:0b:45:55:93:cd:4a:48:ab:7b:fc:99:1e:ec:cd: 44:4e:41:49:42:20:d1:1d:66:e2:19:cd:b5:87:bb:b5:79:2a: ac:ce:95:2e:6c:3d:62:3e:f1:be:48:a4:0d:45:c2:1a:6c:e0: 84:04:c6:ae:f9:db:a2:93:ac:6b:2b:1d:a6:2c:90:2a:57:dd: 12:9f:7d:e2:5a:4a:55:0d:f0:7d:6d:3e:fa:83:55:7d:34:23: 9d:87:22:e0:e1:07:fc:72:c9:7b:24:e5:0a:0f:fc:5f:bd:78: b7:a0:96:67:d2:09:a0:64:21:9e:60:3c:65:2b:ad:1a:72:bd: 28:2e:11:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHK/F6KMcHY4XsZbz/uegMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZjc3ODkzNDZhOWY5MjkxNWYxZjc1YjEwYWY5NGY5N2I2 ZTI0ZmEwHhcNMjUxMjA2MTAwMjE0WhcNMjUxMjA3MTAwMjE0WjAzMTEwLwYDVQQD EygyMjkxOTA1ZTNlNTY3ZTgzMTkyZGQwZGFiZGIxMDVlNGVjZWM5NGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAri+vE9K4VEXz8NQ8IN1UAVEVVNVv breATqCSoHppMFVztX0I+9VsXTS2GIEK0bhZK8aulCaV6AfYMv1WletGR1Jmz7Vl UuKy+AyuKC5B3fsUYEqXTSL2sZ7FfA3TvLlSnBvad/ScP2EF5rEfxmPPFdYQYJuv JlcjaRnHu3iDHqJXt5MvcxA3AK8GSkB4L4z0er/cGk8O/J0vNi2VUzvVABaBW2C8 3lffgVAq74THt31nTK8U00wF/n6oTyKfE9fFOE5cQ4gFnRwWUsnXXYEihHDIBgeB eiozsFa6QD4AlE3cGrJgZq9+nWOvOAUhQkkU09Ad9jCJhxGlR2HQA/tfsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCKRkF4+Vn6DGS3Q2r2xBeTs7JTuMB8GA1UdIwQY MBaAFD/3eJNGqfkpFfH3WxCvlPl7biT6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUF9kNGswYXAtU2tWOGZkYkVLLVUtWHR1SlBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80ODFhMzUtMjQzNC00NmUzLWFlZTEt YWUxMzA1MzEzM2NiLzEvUF9kNGswYXAtU2tWOGZkYkVLLVUtWHR1SlBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi80ODFhMzUtMjQzNC00NmUzLWFlZTEtYWUxMzA1MzEzM2Ni LzEvUF9kNGswYXAtU2tWOGZkYkVLLVUtWHR1SlBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALlWexrn1 aiuzsGJF8Awb46lTql1K5jWTcXBxczzDYhfx/rNfB4+1OvQTnkIuOfoX2COgom4H 9ewzHYKzlYh+E1oC0toak/vaalxkH1uLgk9ydK+1lh3WAvTotIutvigby6kmusdu HhtKKdc+AxH9Tip57bdfXp+elz2NKs8r+vlSeQtFVZPNSkire/yZHuzNRE5BSUIg 0R1m4hnNtYe7tXkqrM6VLmw9Yj7xvkikDUXCGmzghATGrvnbopOsaysdpiyQKlfd Ep994lpKVQ3wfW0++oNVfTQjnYci4OEH/HLJeyTlCg/8X714t6CWZ9IJoGQhnmA8 ZSutGnK9KC4RWg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:09:13 2025 by rpki-client