This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft File: P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft (raw, json) Hash identifier: XOJw4HkaF9ZKo6pMJVMA5jda7YOohyg7rIvMCZjSLyw= Subject key identifier: 07:E4:95:5B:E8:FF:15:12:D7:28:20:7F:5A:AA:6E:B7:F2:EE:8A:E8 Authority key identifier: 3F:4B:FE:92:DE:10:E6:60:DD:F4:5C:C2:D1:F5:FF:B6:36:EF:35:90 Certificate issuer: /CN=3f4bfe92de10e660ddf45cc2d1f5ffb636ef3590 Certificate serial: 019AF087F4A482423AC6AEFC2E2F1F0A12A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft Manifest number: 22 Signing time: Fri 05 Dec 2025 22:00:33 +0000 Manifest this update: Fri 05 Dec 2025 22:00:33 +0000 Manifest next update: Sat 06 Dec 2025 22:00:33 +0000 Files and hashes: 1: P0v-kt4Q5mDd9FzC0fX_tjbvNZA.crl (hash: vnNTkZiLM5L5iARBq+RP1rje0b8YAwVWF9eAiEyyZx8=) 2: qlaxC5IjGWh-sjlOO0aWlfo9EJo.roa (hash: tswrwQr+o6+vubHC/2IG1+zCegkDLGFgHNmgJCcToQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft rsync://rpki.ripe.net/repository/DEFAULT/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:87:f4:a4:82:42:3a:c6:ae:fc:2e:2f:1f:0a:12:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f4bfe92de10e660ddf45cc2d1f5ffb636ef3590 Validity Not Before: Dec 5 22:00:33 2025 GMT Not After : Dec 6 22:00:33 2025 GMT Subject: CN=07e4955be8ff1512d728207f5aaa6eb7f2ee8ae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6f:23:cc:0e:d3:b2:4d:eb:24:43:00:70:2c: c5:04:17:59:ba:c7:4c:55:3d:8c:d9:82:52:63:65: 59:b7:28:eb:21:28:14:7d:8c:b7:9a:aa:16:c6:ae: e3:cc:4d:20:ee:a9:49:9d:23:e6:fa:f5:a3:36:a3: 5e:b1:c9:2d:14:2a:f6:f4:f8:a9:8a:2d:e0:9a:e4: dc:ae:e9:79:ca:89:6c:e4:16:5b:33:05:d4:cb:29: 07:95:25:5c:f0:41:31:04:ab:49:e0:3b:a6:16:ef: ce:ff:24:57:41:5f:d7:75:30:56:fa:90:76:0a:f9: f3:b0:1e:e8:79:23:e0:f2:1d:3e:86:b0:a9:38:9e: cd:b8:a5:ee:6c:42:a0:93:06:dc:03:75:27:3b:f8: c5:12:29:0a:80:5b:15:1b:8f:7d:f2:9a:4e:8f:84: f4:a4:73:f3:1a:22:15:91:d3:11:46:d0:dc:28:c6: f9:2d:27:c6:01:53:04:41:bc:92:98:8c:24:67:23: 93:f2:3c:5a:92:1d:78:56:cc:35:33:48:46:a5:15: 39:9b:19:35:78:a6:10:58:e8:56:a9:21:ab:90:05: d3:27:5e:d0:09:f0:0d:c3:20:cb:fa:db:ef:82:3d: 9d:b0:1c:a5:bc:bf:bd:c2:ba:f3:e0:16:b9:47:b7: 94:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:E4:95:5B:E8:FF:15:12:D7:28:20:7F:5A:AA:6E:B7:F2:EE:8A:E8 X509v3 Authority Key Identifier: keyid:3F:4B:FE:92:DE:10:E6:60:DD:F4:5C:C2:D1:F5:FF:B6:36:EF:35:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:2e:3c:cc:f7:2a:dc:79:62:cf:98:22:8d:73:54:0b:66:09: 6e:cb:3d:59:12:b1:b0:5c:38:a1:10:36:19:c0:4f:8d:07:ed: 99:36:85:1a:d9:ee:d7:cb:77:de:f2:67:74:6e:73:81:96:1b: fb:db:c1:70:ef:c6:ff:d1:65:4d:73:0d:65:ad:46:a6:f9:91: 6c:9c:4e:c1:69:ba:43:3a:be:c6:58:ff:f1:49:f9:f2:b8:d3: 24:7e:44:02:fa:a7:36:60:a4:3b:42:f7:17:30:de:02:4c:07: e5:78:4c:ae:1b:c8:10:73:cc:47:2b:a0:d0:b3:20:0e:2e:c0: 9d:2e:14:68:11:08:bf:e6:67:d3:b8:7b:26:71:a1:4d:3a:af: dc:28:a7:e6:04:da:e9:8e:a0:4c:3f:eb:8d:b4:f6:c1:1c:36: c4:0a:f3:77:01:7e:c4:a5:e5:02:0c:bc:7f:8b:24:c8:3d:aa: 63:8d:98:f7:e5:7e:63:3c:bf:dc:ad:93:88:46:6e:41:7f:85: e6:84:f8:11:31:6a:c6:6b:1a:5e:10:58:8e:be:b4:ee:4a:2b: df:1a:7a:b2:bc:21:2c:c4:27:a9:f4:ce:2a:8b:d7:4c:f2:a5: 84:ba:e6:14:44:d5:c3:23:93:b9:75:cb:31:61:99:69:70:07: 73:84:36:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwh/SkgkI6xq78Li8fChKiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmNGJmZTkyZGUxMGU2NjBkZGY0NWNjMmQxZjVmZmI2MzZl ZjM1OTAwHhcNMjUxMjA1MjIwMDMzWhcNMjUxMjA2MjIwMDMzWjAzMTEwLwYDVQQD EygwN2U0OTU1YmU4ZmYxNTEyZDcyODIwN2Y1YWFhNmViN2YyZWU4YWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqG8jzA7Tsk3rJEMAcCzFBBdZusdM VT2M2YJSY2VZtyjrISgUfYy3mqoWxq7jzE0g7qlJnSPm+vWjNqNescktFCr29Pip ii3gmuTcrul5yols5BZbMwXUyykHlSVc8EExBKtJ4DumFu/O/yRXQV/XdTBW+pB2 CvnzsB7oeSPg8h0+hrCpOJ7NuKXubEKgkwbcA3UnO/jFEikKgFsVG4998ppOj4T0 pHPzGiIVkdMRRtDcKMb5LSfGAVMEQbySmIwkZyOT8jxakh14Vsw1M0hGpRU5mxk1 eKYQWOhWqSGrkAXTJ17QCfANwyDL+tvvgj2dsBylvL+9wrrz4Ba5R7eUjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAfklVvo/xUS1yggf1qqbrfy7oroMB8GA1UdIwQY MBaAFD9L/pLeEOZg3fRcwtH1/7Y27zWQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDB2LWt0NFE1bURkOUZ6QzBmWF90amJ2TlpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC83ZWFjNGYtNzdkZC00MDc3LWFlM2Yt Y2U2NDgyZDBmMWI2LzEvUDB2LWt0NFE1bURkOUZ6QzBmWF90amJ2TlpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC83ZWFjNGYtNzdkZC00MDc3LWFlM2YtY2U2NDgyZDBmMWI2 LzEvUDB2LWt0NFE1bURkOUZ6QzBmWF90amJ2TlpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABC48zPcq 3Hliz5gijXNUC2YJbss9WRKxsFw4oRA2GcBPjQftmTaFGtnu18t33vJndG5zgZYb +9vBcO/G/9FlTXMNZa1GpvmRbJxOwWm6Qzq+xlj/8Un58rjTJH5EAvqnNmCkO0L3 FzDeAkwH5XhMrhvIEHPMRyug0LMgDi7AnS4UaBEIv+Zn07h7JnGhTTqv3Cin5gTa 6Y6gTD/rjbT2wRw2xArzdwF+xKXlAgy8f4skyD2qY42Y9+V+Yzy/3K2TiEZuQX+F 5oT4ETFqxmsaXhBYjr607kor3xp6srwhLMQnqfTOKovXTPKlhLrmFETVwyOTuXXL MWGZaXAHc4Q2dw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:02:28 2025 by rpki-client