This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft File: P9oppIwld1jI5RjuXIsDzNoCR8k.mft (raw, json) Hash identifier: fhz+RG8OqDHHwWhhtkwoQs8v9Foqwi1Dz1QsmQrtoh4= Subject key identifier: E3:DF:C1:AC:56:1D:7B:70:02:74:72:AA:1E:5C:5F:84:1D:99:B7:6B Authority key identifier: 3F:DA:29:A4:8C:25:77:58:C8:E5:18:EE:5C:8B:03:CC:DA:02:47:C9 Certificate issuer: /CN=3fda29a48c257758c8e518ee5c8b03ccda0247c9 Certificate serial: 019B33B189443A17F26748B5EDEE51571194 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 23:00:31 +0000 Manifest this update: Thu 18 Dec 2025 23:00:31 +0000 Manifest next update: Fri 19 Dec 2025 23:00:31 +0000 Files and hashes: 1: 8_r7mVCzzc8i5_iqagGhH6oA6lo.roa (hash: NPDOx5bLEHu2ttrvWwMBmay19BA0wMcB6dN9yEUt368=) 2: P9oppIwld1jI5RjuXIsDzNoCR8k.crl (hash: eg7H4xwkohH1QgpJJoxj+xUuhodtEKw45/xQKIZ7tIQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b1:89:44:3a:17:f2:67:48:b5:ed:ee:51:57:11:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fda29a48c257758c8e518ee5c8b03ccda0247c9 Validity Not Before: Dec 18 23:00:31 2025 GMT Not After : Dec 19 23:00:31 2025 GMT Subject: CN=e3dfc1ac561d7b70027472aa1e5c5f841d99b76b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3b:d2:7f:e8:be:ae:06:37:2c:57:ca:bb:b4: 59:87:bb:43:9b:79:d5:27:6a:c1:ad:e8:88:a9:53: c2:8a:d6:56:98:2a:6a:a0:7d:0d:2f:29:83:04:2f: ab:c1:74:a1:10:25:0e:66:85:1c:de:32:91:7a:70: dd:56:ba:d2:4c:60:0d:0a:54:20:4b:f7:d4:be:a6: 8e:bd:08:d6:7d:cd:98:78:d7:a3:07:15:91:0e:af: 5e:4b:f5:d0:be:38:5a:73:1a:ab:2b:dc:23:ff:96: c1:cf:8c:d9:a5:b5:09:9a:f0:d0:13:d9:8c:d7:cc: f5:16:7d:a8:b5:10:c5:e0:85:82:70:93:bf:6d:89: 1a:71:95:b4:87:dc:1a:a3:a8:1e:c2:cc:63:bf:95: cd:c0:7f:fa:31:f1:1e:14:60:60:b3:c1:97:5d:87: 4d:56:a7:ed:cc:a5:9d:d4:26:0e:4b:49:30:24:a4: 30:cd:12:6f:b6:a0:fe:b0:92:cd:85:ca:3d:84:73: 64:8c:8c:a7:09:43:b0:64:e1:00:42:01:11:2e:ac: 3d:4d:af:a8:7f:76:ab:37:ad:d0:7e:d3:e2:a9:1a: d7:68:9b:f4:18:48:33:8a:29:b2:61:6f:d0:9b:4c: 20:a6:b0:18:10:80:dd:e4:ff:71:24:d7:db:d8:59: 95:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:DF:C1:AC:56:1D:7B:70:02:74:72:AA:1E:5C:5F:84:1D:99:B7:6B X509v3 Authority Key Identifier: keyid:3F:DA:29:A4:8C:25:77:58:C8:E5:18:EE:5C:8B:03:CC:DA:02:47:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:17:2f:90:57:44:9b:1f:39:fb:27:61:fe:f1:e4:1c:c2:95: 21:1f:df:73:8a:3e:c9:4e:c2:ab:1e:c9:01:4d:a2:bb:4d:5c: 8a:de:f3:88:78:b8:dc:f9:cf:44:2c:bf:62:7a:d9:9d:0e:61: 7b:c3:a9:db:51:57:b6:c3:79:43:14:c2:80:30:d0:b4:d3:bc: ac:d6:2f:25:c1:0c:be:a0:55:40:60:75:56:73:d9:bf:a0:ae: d7:1c:db:ee:e9:91:d4:0b:a1:6a:0c:3b:2f:28:a1:33:4c:98: 83:37:2d:f1:7e:60:84:de:e2:5f:3b:54:0d:f9:e9:50:0d:08: 93:0c:0c:51:ac:0f:0f:06:32:41:8c:62:61:31:40:ff:3f:3f: 33:98:f5:02:8f:ca:ce:fe:67:bf:86:5e:5f:09:b7:2e:77:06: c3:14:3e:4a:25:5e:4a:b6:96:ce:04:48:ff:af:bf:bd:f8:67: 9c:2a:cf:6b:fd:20:04:0e:24:90:75:4a:ec:67:0d:3b:9c:05: e0:6d:e4:48:0d:59:26:6f:cc:c1:25:f6:0e:e2:5d:9d:6a:63: 3f:0d:89:7e:8b:ed:05:ab:c7:ef:e9:c1:a9:2c:0a:7f:8e:01: ef:00:cf:66:f6:d5:34:7b:7b:04:f9:ad:74:8b:b2:52:b2:b0: 58:77:f5:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsYlEOhfyZ0i17e5RVxGUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZGEyOWE0OGMyNTc3NThjOGU1MThlZTVjOGIwM2NjZGEw MjQ3YzkwHhcNMjUxMjE4MjMwMDMxWhcNMjUxMjE5MjMwMDMxWjAzMTEwLwYDVQQD EyhlM2RmYzFhYzU2MWQ3YjcwMDI3NDcyYWExZTVjNWY4NDFkOTliNzZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzvSf+i+rgY3LFfKu7RZh7tDm3nV J2rBreiIqVPCitZWmCpqoH0NLymDBC+rwXShECUOZoUc3jKRenDdVrrSTGANClQg S/fUvqaOvQjWfc2YeNejBxWRDq9eS/XQvjhacxqrK9wj/5bBz4zZpbUJmvDQE9mM 18z1Fn2otRDF4IWCcJO/bYkacZW0h9wao6gewsxjv5XNwH/6MfEeFGBgs8GXXYdN VqftzKWd1CYOS0kwJKQwzRJvtqD+sJLNhco9hHNkjIynCUOwZOEAQgERLqw9Ta+o f3arN63QftPiqRrXaJv0GEgziimyYW/Qm0wgprAYEIDd5P9xJNfb2FmVdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOPfwaxWHXtwAnRyqh5cX4QdmbdrMB8GA1UdIwQY MBaAFD/aKaSMJXdYyOUY7lyLA8zaAkfJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlvcHBJd2xkMWpJNVJqdVhJc0R6Tm9DUjhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9jMWMwNjMtOWU0OS00MzUzLWI4YmQt OTM3NGYyMWU2NDg4LzEvUDlvcHBJd2xkMWpJNVJqdVhJc0R6Tm9DUjhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9jMWMwNjMtOWU0OS00MzUzLWI4YmQtOTM3NGYyMWU2NDg4 LzEvUDlvcHBJd2xkMWpJNVJqdVhJc0R6Tm9DUjhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIRcvkFdE mx85+ydh/vHkHMKVIR/fc4o+yU7Cqx7JAU2iu01cit7ziHi43PnPRCy/YnrZnQ5h e8Op21FXtsN5QxTCgDDQtNO8rNYvJcEMvqBVQGB1VnPZv6Cu1xzb7umR1Auhagw7 LyihM0yYgzct8X5ghN7iXztUDfnpUA0IkwwMUawPDwYyQYxiYTFA/z8/M5j1Ao/K zv5nv4ZeXwm3LncGwxQ+SiVeSraWzgRI/6+/vfhnnCrPa/0gBA4kkHVK7GcNO5wF 4G3kSA1ZJm/MwSX2DuJdnWpjPw2JfovtBavH7+nBqSwKf44B7wDPZvbVNHt7BPmt dIuyUrKwWHf1oQ== -----END CERTIFICATE-----Generated at Fri Dec 19 06:58:40 2025 by rpki-client