This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft File: pS3-y7QxcCl5YaIbfltKPEfeCVs.mft (raw, json) Hash identifier: Ea2oEV+qDlD4silShygd+NfsPDSK9wXHLlUU4k9r61k= Subject key identifier: 5F:9E:A0:B1:55:CF:F3:FE:16:CE:29:4A:BE:49:4D:F1:F9:55:50:B4 Authority key identifier: A5:2D:FE:CB:B4:31:70:29:79:61:A2:1B:7E:5B:4A:3C:47:DE:09:5B Certificate issuer: /CN=a52dfecbb43170297961a21b7e5b4a3c47de095b Certificate serial: 019AF12EA8A13B63920A67A9A2159C923154 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft Manifest number: 0973 Signing time: Sat 06 Dec 2025 01:02:38 +0000 Manifest this update: Sat 06 Dec 2025 01:02:38 +0000 Manifest next update: Sun 07 Dec 2025 01:02:38 +0000 Files and hashes: 1: pS3-y7QxcCl5YaIbfltKPEfeCVs.crl (hash: FOPBohUWCfn+XHJBZkbv5LcFRcdsE7AiqBZ3PAcn/1k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:a8:a1:3b:63:92:0a:67:a9:a2:15:9c:92:31:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a52dfecbb43170297961a21b7e5b4a3c47de095b Validity Not Before: Dec 6 01:02:38 2025 GMT Not After : Dec 7 01:02:38 2025 GMT Subject: CN=5f9ea0b155cff3fe16ce294abe494df1f95550b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ed:5f:09:b9:3e:e7:01:4f:69:32:a0:1e:4f: 47:54:fc:4c:1d:1c:2f:9c:1d:da:48:52:0e:f8:60: fa:7a:87:5b:e8:9e:bf:4c:70:87:b8:2a:9e:d1:b1: eb:44:19:99:27:1f:20:a0:9d:fb:52:7f:14:e6:2f: c1:d2:c4:7b:91:6c:52:b8:1b:8e:6f:d3:56:d6:75: 7d:ae:a0:68:91:d6:a2:d9:db:a9:81:af:31:cc:b8: 66:f8:fa:49:78:fc:40:8c:fb:15:eb:02:75:64:49: 02:1c:a3:cc:76:6e:1a:57:6b:4d:24:8d:1e:33:68: f8:67:65:04:95:7b:fa:d9:66:de:82:9d:df:ff:9e: e9:c1:c0:f0:4d:35:44:f6:47:3d:72:36:d6:29:17: d8:48:74:39:23:0f:d8:ce:7c:54:89:ed:98:5b:79: 44:00:7c:e7:06:30:67:00:ef:79:db:a5:aa:fa:cf: 69:07:af:1b:fe:2c:98:1d:ce:3d:04:65:e4:59:8a: c4:4e:20:cc:b3:7b:6e:51:db:b5:a0:eb:6e:63:b7: 71:e6:d2:0a:0f:64:bb:90:6a:ba:25:ce:30:37:a8: 57:cc:77:dc:43:67:84:55:50:dc:be:c8:41:03:c8: 8f:d5:2f:d8:00:d0:a7:c5:82:6c:0e:68:69:dc:c7: 71:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:9E:A0:B1:55:CF:F3:FE:16:CE:29:4A:BE:49:4D:F1:F9:55:50:B4 X509v3 Authority Key Identifier: keyid:A5:2D:FE:CB:B4:31:70:29:79:61:A2:1B:7E:5B:4A:3C:47:DE:09:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:29:9e:54:76:c1:1f:4c:92:65:75:10:82:45:8d:bd:91:c3: 7e:19:20:9c:bd:51:e3:0f:8d:69:70:4f:c0:5a:3f:c1:d7:7d: 79:e5:f0:95:26:47:90:18:10:6f:a9:73:70:1b:26:3d:1c:1b: b8:1b:7e:00:92:99:93:8a:3d:f1:37:5a:e0:ef:07:a7:ec:bb: 4a:d7:06:e5:0e:67:c5:49:70:d1:da:95:9b:c5:7e:15:59:c0: ba:3f:97:db:90:68:68:be:04:82:50:73:1d:c8:7c:fa:c3:76: e8:e3:3b:a2:22:05:4a:cc:77:11:53:d7:b3:66:6e:08:dc:65: 5a:2d:fd:b6:71:74:be:b2:b4:65:5c:84:5d:56:38:49:0e:9a: 01:82:90:cf:84:46:b3:91:2b:66:73:90:83:23:60:1a:66:1c: 5b:e4:4a:98:43:43:90:27:fa:2a:49:ed:4c:a0:5d:dd:ab:29: 74:de:00:79:d6:39:8c:44:07:10:44:3b:9f:d0:e6:11:35:b5: 0a:db:84:a8:14:1a:e4:1f:50:cf:ef:1d:26:1c:58:6d:a7:b4: c0:5a:87:49:8d:80:20:6d:ee:26:d4:81:4d:e3:4d:85:23:80: ac:77:9d:29:1c:00:31:1e:b3:df:46:a2:2d:51:90:21:3e:8c: 7d:37:37:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLqihO2OSCmepohWckjFUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MmRmZWNiYjQzMTcwMjk3OTYxYTIxYjdlNWI0YTNjNDdk ZTA5NWIwHhcNMjUxMjA2MDEwMjM4WhcNMjUxMjA3MDEwMjM4WjAzMTEwLwYDVQQD Eyg1ZjllYTBiMTU1Y2ZmM2ZlMTZjZTI5NGFiZTQ5NGRmMWY5NTU1MGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAne1fCbk+5wFPaTKgHk9HVPxMHRwv nB3aSFIO+GD6eodb6J6/THCHuCqe0bHrRBmZJx8goJ37Un8U5i/B0sR7kWxSuBuO b9NW1nV9rqBokdai2dupga8xzLhm+PpJePxAjPsV6wJ1ZEkCHKPMdm4aV2tNJI0e M2j4Z2UElXv62Wbegp3f/57pwcDwTTVE9kc9cjbWKRfYSHQ5Iw/YznxUie2YW3lE AHznBjBnAO9526Wq+s9pB68b/iyYHc49BGXkWYrETiDMs3tuUdu1oOtuY7dx5tIK D2S7kGq6Jc4wN6hXzHfcQ2eEVVDcvshBA8iP1S/YANCnxYJsDmhp3MdxwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF+eoLFVz/P+Fs4pSr5JTfH5VVC0MB8GA1UdIwQY MBaAFKUt/su0MXApeWGiG35bSjxH3glbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFMzLXk3UXhjQ2w1WWFJYmZsdEtQRWZlQ1ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82MzI5MTUtZTdhMS00NjEwLWJmMTUt YmQ1NzkwYTJiYTUwLzEvcFMzLXk3UXhjQ2w1WWFJYmZsdEtQRWZlQ1ZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS82MzI5MTUtZTdhMS00NjEwLWJmMTUtYmQ1NzkwYTJiYTUw LzEvcFMzLXk3UXhjQ2w1WWFJYmZsdEtQRWZlQ1ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbCmeVHbB H0ySZXUQgkWNvZHDfhkgnL1R4w+NaXBPwFo/wdd9eeXwlSZHkBgQb6lzcBsmPRwb uBt+AJKZk4o98Tda4O8Hp+y7StcG5Q5nxUlw0dqVm8V+FVnAuj+X25BoaL4EglBz Hch8+sN26OM7oiIFSsx3EVPXs2ZuCNxlWi39tnF0vrK0ZVyEXVY4SQ6aAYKQz4RG s5ErZnOQgyNgGmYcW+RKmENDkCf6KkntTKBd3aspdN4AedY5jEQHEEQ7n9DmETW1 CtuEqBQa5B9Qz+8dJhxYbae0wFqHSY2AIG3uJtSBTeNNhSOArHedKRwAMR6z30ai LVGQIT6MfTc3+A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:06:33 2025 by rpki-client