This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft File: P1jM0LF5IrWNXoss8uV5zmmrOGM.mft (raw, json) Hash identifier: Jo2X72Obp342NlsKjnv1wSSxtqTR0u/ZNuE8vCeedXk= Subject key identifier: 28:56:86:AB:7A:B5:47:06:FC:02:C9:8E:A7:E0:4F:D9:3D:89:6C:66 Authority key identifier: 3F:58:CC:D0:B1:79:22:B5:8D:5E:8B:2C:F2:E5:79:CE:69:AB:38:63 Certificate issuer: /CN=3f58ccd0b17922b58d5e8b2cf2e579ce69ab3863 Certificate serial: 019AF1D1E47046903D35E431DF19B358FAE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1jM0LF5IrWNXoss8uV5zmmrOGM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft Manifest number: 01A0 Signing time: Sat 06 Dec 2025 04:00:55 +0000 Manifest this update: Sat 06 Dec 2025 04:00:55 +0000 Manifest next update: Sun 07 Dec 2025 04:00:55 +0000 Files and hashes: 1: P1jM0LF5IrWNXoss8uV5zmmrOGM.crl (hash: JpI/BgMfL2KXKboohQ5//qdozR4RxfKiaxpHNi4E3Ks=) 2: pwkOfI0N-Tqs6EWE-ZLxQ2pD3ZM.asa (hash: 76UHeLcM+om1iT2qZCwO5q94A8qOQbIQ5FrClESA93w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft rsync://rpki.ripe.net/repository/DEFAULT/P1jM0LF5IrWNXoss8uV5zmmrOGM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:e4:70:46:90:3d:35:e4:31:df:19:b3:58:fa:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f58ccd0b17922b58d5e8b2cf2e579ce69ab3863 Validity Not Before: Dec 6 04:00:55 2025 GMT Not After : Dec 7 04:00:55 2025 GMT Subject: CN=285686ab7ab54706fc02c98ea7e04fd93d896c66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:48:3f:67:2f:2f:67:c4:0c:c2:29:88:66:b3: e8:9e:50:5b:d3:2b:10:a0:8f:a0:c2:71:e6:52:17: 00:88:ac:e2:f6:97:be:89:c7:5b:f9:c5:cf:8f:97: 5d:6c:88:16:c3:1b:47:d4:e3:97:38:b4:7a:dc:b2: 98:dc:74:3f:6d:c8:b0:52:cd:31:5b:f2:fc:18:62: 35:e8:de:33:70:b8:12:e1:0c:80:b6:41:e3:a0:c3: 6d:a4:89:ee:6b:d9:59:9e:95:4b:7d:0d:5e:bb:e0: b4:68:a7:bc:84:29:94:86:04:31:0e:91:fe:12:80: 49:1f:4f:52:79:6c:85:71:9c:6b:e6:a9:5f:a7:bf: e9:32:08:7d:97:ca:32:8f:f4:fe:b8:47:cc:45:9b: e8:e9:47:05:42:7e:26:d3:df:87:47:f7:b6:f1:58: 1a:ee:dd:d9:0f:a5:67:b3:66:10:3a:68:74:a5:54: 35:75:a1:0f:9f:04:f7:1b:0e:3e:84:dd:7a:6e:02: df:34:71:52:7e:d8:d0:b3:e3:a0:f0:95:71:bb:d0: 71:7a:13:b4:d1:fa:39:08:5e:20:81:dc:71:ef:71: ab:9a:5c:97:be:78:39:ca:ae:85:e2:49:8f:78:b9: 94:b7:78:15:29:cb:a6:ba:27:09:3d:29:36:3c:0b: eb:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:56:86:AB:7A:B5:47:06:FC:02:C9:8E:A7:E0:4F:D9:3D:89:6C:66 X509v3 Authority Key Identifier: keyid:3F:58:CC:D0:B1:79:22:B5:8D:5E:8B:2C:F2:E5:79:CE:69:AB:38:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1jM0LF5IrWNXoss8uV5zmmrOGM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:5f:fb:d1:b7:1f:9b:09:e1:de:e4:48:81:b6:fe:ac:a7:6f: b3:78:a3:61:19:9c:63:ec:4b:a5:de:b7:83:d4:99:b9:03:b7: 5c:ac:5f:5c:0b:2a:d6:a6:89:d9:d4:e8:c4:8c:76:a9:b4:dd: 0b:f0:0f:ee:5b:1d:e4:a0:69:84:82:6b:2a:a9:ea:60:ed:22: dc:eb:67:ea:4a:c8:b9:8e:09:62:43:0b:c7:ca:2b:97:17:73: 79:ae:26:b3:fe:cc:3c:87:38:a2:72:d9:a1:a4:cd:65:46:64: 17:fc:27:d2:1c:3e:ef:61:55:e7:4d:4c:4d:44:2e:0a:a5:9c: 5d:6c:32:6e:16:66:99:ce:56:8e:f2:c3:94:65:38:d4:80:6a: a1:ed:9b:f9:84:e9:55:51:89:a1:51:86:68:33:7d:4c:81:26: f6:50:9e:ba:22:07:a8:94:10:63:cb:c0:14:d9:84:22:3c:01: 79:fc:ad:04:90:d3:03:58:e9:7d:fb:11:02:46:4e:a3:2b:e2: e2:23:a8:1b:00:02:96:99:e8:91:a0:4b:b8:e3:2c:45:8d:eb: ad:a2:0d:86:95:87:4b:53:b8:f0:83:90:d5:28:6e:ca:4b:4b: b5:bf:1d:50:ca:22:b7:93:50:10:f7:c6:a0:71:89:78:b0:06: 73:20:0b:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0eRwRpA9NeQx3xmzWPrgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmNThjY2QwYjE3OTIyYjU4ZDVlOGIyY2YyZTU3OWNlNjlh YjM4NjMwHhcNMjUxMjA2MDQwMDU1WhcNMjUxMjA3MDQwMDU1WjAzMTEwLwYDVQQD EygyODU2ODZhYjdhYjU0NzA2ZmMwMmM5OGVhN2UwNGZkOTNkODk2YzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUg/Zy8vZ8QMwimIZrPonlBb0ysQ oI+gwnHmUhcAiKzi9pe+icdb+cXPj5ddbIgWwxtH1OOXOLR63LKY3HQ/bciwUs0x W/L8GGI16N4zcLgS4QyAtkHjoMNtpInua9lZnpVLfQ1eu+C0aKe8hCmUhgQxDpH+ EoBJH09SeWyFcZxr5qlfp7/pMgh9l8oyj/T+uEfMRZvo6UcFQn4m09+HR/e28Vga 7t3ZD6Vns2YQOmh0pVQ1daEPnwT3Gw4+hN16bgLfNHFSftjQs+Og8JVxu9BxehO0 0fo5CF4ggdxx73GrmlyXvng5yq6F4kmPeLmUt3gVKcumuicJPSk2PAvrJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFChWhqt6tUcG/ALJjqfgT9k9iWxmMB8GA1UdIwQY MBaAFD9YzNCxeSK1jV6LLPLlec5pqzhjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDFqTTBMRjVJcldOWG9zczh1VjV6bW1yT0dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8xOGRiZTItYmM2ZS00YTkyLWI5ZWYt ZWQ3OWEyZjIyNWMwLzEvUDFqTTBMRjVJcldOWG9zczh1VjV6bW1yT0dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8xOGRiZTItYmM2ZS00YTkyLWI5ZWYtZWQ3OWEyZjIyNWMw LzEvUDFqTTBMRjVJcldOWG9zczh1VjV6bW1yT0dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKF/70bcf mwnh3uRIgbb+rKdvs3ijYRmcY+xLpd63g9SZuQO3XKxfXAsq1qaJ2dToxIx2qbTd C/AP7lsd5KBphIJrKqnqYO0i3Otn6krIuY4JYkMLx8orlxdzea4ms/7MPIc4onLZ oaTNZUZkF/wn0hw+72FV501MTUQuCqWcXWwybhZmmc5WjvLDlGU41IBqoe2b+YTp VVGJoVGGaDN9TIEm9lCeuiIHqJQQY8vAFNmEIjwBefytBJDTA1jpffsRAkZOoyvi 4iOoGwAClpnokaBLuOMsRY3rraINhpWHS1O48IOQ1ShuyktLtb8dUMoit5NQEPfG oHGJeLAGcyALBg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:52:34 2025 by rpki-client