This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft File: pS3-y7QxcCl5YaIbfltKPEfeCVs.mft (raw, json) Hash identifier: whbuYIFwhBCXAyAfd6dVjzEuswBEbo6PK86orPh4maU= Subject key identifier: CF:B8:72:45:F4:22:20:CA:5D:E9:85:47:30:93:41:5D:F9:66:85:24 Authority key identifier: A5:2D:FE:CB:B4:31:70:29:79:61:A2:1B:7E:5B:4A:3C:47:DE:09:5B Certificate issuer: /CN=a52dfecbb43170297961a21b7e5b4a3c47de095b Certificate serial: 019B2D0B184FBCBDA16DC471B24B017DEFC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft Manifest number: 0992 Signing time: Wed 17 Dec 2025 16:01:00 +0000 Manifest this update: Wed 17 Dec 2025 16:01:00 +0000 Manifest next update: Thu 18 Dec 2025 16:01:00 +0000 Files and hashes: 1: pS3-y7QxcCl5YaIbfltKPEfeCVs.crl (hash: tr/1CbJH6sut/5VsEXK4cXSPSpQY78r4v2ytjV6BGlM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:18:4f:bc:bd:a1:6d:c4:71:b2:4b:01:7d:ef:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a52dfecbb43170297961a21b7e5b4a3c47de095b Validity Not Before: Dec 17 16:01:00 2025 GMT Not After : Dec 18 16:01:00 2025 GMT Subject: CN=cfb87245f42220ca5de985473093415df9668524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fc:9c:9a:27:f8:63:b4:1a:94:18:59:78:08: 09:1e:c9:df:73:70:ec:04:97:90:6b:69:92:3a:2a: 0f:5f:ac:e7:d7:ae:d2:34:2c:e6:2c:51:1b:9a:56: 79:d0:55:72:ce:98:2d:53:a3:6d:2f:90:cb:c3:22: b9:38:29:87:f7:bf:da:04:6d:8d:5a:fd:31:bf:cf: e9:23:6c:0b:cd:eb:69:6f:d8:50:d1:47:ad:ff:93: ac:85:f1:be:e8:ad:f3:a7:08:52:7b:a1:c7:42:22: 41:d4:41:f5:0d:ab:3d:30:66:65:a9:ff:e7:4a:04: 4a:84:78:bd:f0:cc:be:03:89:e8:36:54:ee:1a:56: b9:84:14:d4:90:04:25:cd:e0:2d:4f:bb:b7:0f:6e: 14:5b:d3:87:a8:46:0a:7f:01:90:ef:b1:d7:3b:47: 83:d8:32:94:20:ad:76:38:b6:7d:3b:72:2c:22:d5: e2:f8:c0:6b:6e:d7:68:91:0b:f4:2c:ef:4e:5c:4c: 16:50:e1:5e:9a:b4:8f:a7:ff:f9:ab:46:90:ca:c4: ec:8b:95:d4:e6:4d:ae:4b:1f:40:d3:47:7a:74:e7: b8:8b:13:03:50:fe:2f:ed:81:8e:63:55:70:64:d0: 47:78:78:0e:0d:b0:e3:ab:91:00:27:26:e5:e0:f7: fe:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:B8:72:45:F4:22:20:CA:5D:E9:85:47:30:93:41:5D:F9:66:85:24 X509v3 Authority Key Identifier: keyid:A5:2D:FE:CB:B4:31:70:29:79:61:A2:1B:7E:5B:4A:3C:47:DE:09:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:71:a0:e0:e1:fb:1f:32:65:eb:4f:fe:9b:e1:09:2c:b9:08: 81:f4:e8:f4:84:8a:99:7b:67:57:d4:16:73:f5:85:b1:3f:b6: 9c:51:b6:44:bf:93:ed:62:67:0c:f4:98:83:6f:f2:3e:72:a2: 90:fe:47:4b:c8:cf:09:2f:c2:ab:da:69:93:48:0f:62:03:6a: 6b:79:b4:9c:63:ae:bb:b2:09:37:15:8c:62:b6:4a:3f:75:46: 11:5c:c2:e9:1b:e4:6c:76:6c:69:19:bb:7b:eb:b3:b0:d4:fa: c4:36:4f:e0:2e:ae:19:af:8e:fa:2b:e3:98:35:41:a8:a2:48: 72:da:e2:2a:ba:0a:71:64:d4:21:5b:c5:df:38:d5:26:70:b8: 27:bf:55:b8:1d:c2:58:a9:89:ec:af:4f:d3:61:2b:8c:28:59: 75:97:b4:57:da:b7:3b:55:54:7b:1a:c6:3b:b4:59:8a:a1:ef: 4d:c4:6b:84:f8:80:f4:74:7a:ff:49:a8:25:5c:7b:a6:77:dc: 4c:83:2b:49:8c:7f:8f:46:28:99:aa:b0:e4:04:49:dc:87:be: 5d:ec:c0:fb:fd:fe:8b:c1:8c:f3:f9:fd:d0:09:c6:b1:db:72: b0:fe:d0:08:62:5c:31:00:7f:d3:8f:35:5b:18:28:b6:6e:11: 37:36:7b:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstCxhPvL2hbcRxsksBfe/BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MmRmZWNiYjQzMTcwMjk3OTYxYTIxYjdlNWI0YTNjNDdk ZTA5NWIwHhcNMjUxMjE3MTYwMTAwWhcNMjUxMjE4MTYwMTAwWjAzMTEwLwYDVQQD EyhjZmI4NzI0NWY0MjIyMGNhNWRlOTg1NDczMDkzNDE1ZGY5NjY4NTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPycmif4Y7QalBhZeAgJHsnfc3Ds BJeQa2mSOioPX6zn167SNCzmLFEbmlZ50FVyzpgtU6NtL5DLwyK5OCmH97/aBG2N Wv0xv8/pI2wLzetpb9hQ0Uet/5OshfG+6K3zpwhSe6HHQiJB1EH1Das9MGZlqf/n SgRKhHi98My+A4noNlTuGla5hBTUkAQlzeAtT7u3D24UW9OHqEYKfwGQ77HXO0eD 2DKUIK12OLZ9O3IsItXi+MBrbtdokQv0LO9OXEwWUOFemrSPp//5q0aQysTsi5XU 5k2uSx9A00d6dOe4ixMDUP4v7YGOY1VwZNBHeHgODbDjq5EAJybl4Pf+jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+4ckX0IiDKXemFRzCTQV35ZoUkMB8GA1UdIwQY MBaAFKUt/su0MXApeWGiG35bSjxH3glbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFMzLXk3UXhjQ2w1WWFJYmZsdEtQRWZlQ1ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82MzI5MTUtZTdhMS00NjEwLWJmMTUt YmQ1NzkwYTJiYTUwLzEvcFMzLXk3UXhjQ2w1WWFJYmZsdEtQRWZlQ1ZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS82MzI5MTUtZTdhMS00NjEwLWJmMTUtYmQ1NzkwYTJiYTUw LzEvcFMzLXk3UXhjQ2w1WWFJYmZsdEtQRWZlQ1ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJXGg4OH7 HzJl60/+m+EJLLkIgfTo9ISKmXtnV9QWc/WFsT+2nFG2RL+T7WJnDPSYg2/yPnKi kP5HS8jPCS/Cq9ppk0gPYgNqa3m0nGOuu7IJNxWMYrZKP3VGEVzC6RvkbHZsaRm7 e+uzsNT6xDZP4C6uGa+O+ivjmDVBqKJIctriKroKcWTUIVvF3zjVJnC4J79VuB3C WKmJ7K9P02ErjChZdZe0V9q3O1VUexrGO7RZiqHvTcRrhPiA9HR6/0moJVx7pnfc TIMrSYx/j0Yomaqw5ARJ3Ie+XezA+/3+i8GM8/n90AnGsdtysP7QCGJcMQB/0481 Wxgotm4RNzZ7uw== -----END CERTIFICATE-----Generated at Wed Dec 17 18:34:14 2025 by rpki-client