This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/70d112-0221-4b04-ac83-6123fd1f5fcd/1/P8ar6uG2IiVtuy2LdFHSdJDSdLs.mft File: P8ar6uG2IiVtuy2LdFHSdJDSdLs.mft (raw, json) Hash identifier: W+ZW9bYHXQ04mR8QtYAJhhVPYk8Vu9iTbCygEjFLSes= Subject key identifier: 63:E0:8F:25:05:F6:D8:7B:B9:D1:44:7E:EE:E3:A7:6F:5F:78:96:F0 Authority key identifier: 3F:C6:AB:EA:E1:B6:22:25:6D:BB:2D:8B:74:51:D2:74:90:D2:74:BB Certificate issuer: /CN=3fc6abeae1b622256dbb2d8b7451d27490d274bb Certificate serial: 019AF49BC7813675635FB2934EED87EF7C52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P8ar6uG2IiVtuy2LdFHSdJDSdLs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/70d112-0221-4b04-ac83-6123fd1f5fcd/1/P8ar6uG2IiVtuy2LdFHSdJDSdLs.mft Manifest number: 046C Signing time: Sat 06 Dec 2025 17:00:41 +0000 Manifest this update: Sat 06 Dec 2025 17:00:41 +0000 Manifest next update: Sun 07 Dec 2025 17:00:41 +0000 Files and hashes: 1: P8ar6uG2IiVtuy2LdFHSdJDSdLs.crl (hash: Yr8DlAZuwxVIo2jIe12iE8Lovx/Tla1FMTaGVAxKX08=) 2: mmWIUy6R5upz2L1YINLOdfsMMT0.roa (hash: wBplVEEyq+VUYs/M8XPCNDfyw39oDDlnudAvkLvbSPo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/70d112-0221-4b04-ac83-6123fd1f5fcd/1/P8ar6uG2IiVtuy2LdFHSdJDSdLs.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/70d112-0221-4b04-ac83-6123fd1f5fcd/1/P8ar6uG2IiVtuy2LdFHSdJDSdLs.mft rsync://rpki.ripe.net/repository/DEFAULT/P8ar6uG2IiVtuy2LdFHSdJDSdLs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:c7:81:36:75:63:5f:b2:93:4e:ed:87:ef:7c:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fc6abeae1b622256dbb2d8b7451d27490d274bb Validity Not Before: Dec 6 17:00:41 2025 GMT Not After : Dec 7 17:00:41 2025 GMT Subject: CN=63e08f2505f6d87bb9d1447eeee3a76f5f7896f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ba:a9:c7:ed:c5:a9:b9:3d:85:7d:53:68:6a: cd:49:f3:1d:3c:e3:35:28:39:c0:74:3f:00:4e:f7: 7d:df:42:d6:b9:d2:b8:6e:82:a2:61:fe:6b:5b:cb: 35:8c:e1:ac:2d:78:7b:15:fe:d8:d4:48:61:db:a8: 71:9a:ca:29:d7:05:6c:4c:fd:5b:5c:6f:7a:39:81: 91:5c:f9:1e:e2:56:05:34:c8:f2:c5:45:79:10:e4: 99:eb:17:99:be:ce:92:e2:a5:f6:44:88:24:a6:6c: 5c:57:0a:6e:67:52:b2:c7:05:68:53:2f:37:b8:7c: 81:0d:6d:89:df:e8:1b:ae:c2:84:63:45:4c:36:27: 42:7a:15:35:a5:7b:4e:05:53:52:48:56:ab:af:ed: e6:d7:1a:bc:46:06:7a:1b:8c:2f:15:a9:e2:1d:bd: c8:fc:19:60:0b:84:cd:e6:2c:63:97:b5:d2:db:96: 04:d1:bc:de:73:a2:cf:26:3c:78:e0:68:e7:81:9f: a2:31:cd:0d:df:f1:d2:56:7d:29:73:53:c2:de:62: 66:94:47:4d:b5:e4:0f:31:f9:b1:13:c8:b9:63:dc: db:40:32:5e:07:4a:14:83:44:3e:1e:4b:a7:7f:c4: 25:e7:b2:92:4b:5f:7b:d3:d5:1e:d1:34:12:b0:31: 86:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E0:8F:25:05:F6:D8:7B:B9:D1:44:7E:EE:E3:A7:6F:5F:78:96:F0 X509v3 Authority Key Identifier: keyid:3F:C6:AB:EA:E1:B6:22:25:6D:BB:2D:8B:74:51:D2:74:90:D2:74:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P8ar6uG2IiVtuy2LdFHSdJDSdLs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/70d112-0221-4b04-ac83-6123fd1f5fcd/1/P8ar6uG2IiVtuy2LdFHSdJDSdLs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/70d112-0221-4b04-ac83-6123fd1f5fcd/1/P8ar6uG2IiVtuy2LdFHSdJDSdLs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:db:b2:b9:b4:79:a9:a0:2f:35:68:2b:38:d9:24:9f:5b:97: a9:62:44:97:65:1d:0a:65:1a:fe:f4:22:e5:f5:99:f8:d3:e7: b1:14:3c:55:81:87:7e:58:ae:31:b3:d1:f3:85:4f:4e:ac:25: 8c:f0:70:d8:62:ab:b1:37:0a:6d:9f:66:d9:22:9b:87:94:71: e7:ec:8f:78:9b:71:e6:ea:aa:a9:e1:3b:06:69:9d:2f:39:79: 22:33:a8:69:b5:82:4b:7e:a8:e9:da:32:56:61:60:8c:89:97: 66:6a:64:82:c1:f4:87:41:98:b9:e4:05:1c:b2:9a:51:c4:9c: 4a:b7:52:b7:79:c3:34:9f:47:23:a4:8a:8e:a8:2f:0a:d8:11: 38:77:a7:5b:fd:90:f0:32:c1:a0:59:ee:87:91:7b:02:19:23: 1c:31:d7:d8:82:2a:31:42:73:b1:67:76:a1:c0:57:67:68:17: 09:39:2a:ea:6e:49:2e:47:f8:e3:33:0e:55:fd:ef:62:e1:a1: a8:3d:49:f7:a5:96:de:5d:98:5c:f0:e7:b1:11:ce:86:c3:3f: e0:8e:a8:92:56:f8:44:3c:a9:04:a5:f7:77:4e:83:44:5a:57: 47:8d:ca:b2:1b:bd:7b:43:58:72:bc:c1:85:12:cf:23:c5:13: 47:d8:64:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m8eBNnVjX7KTTu2H73xSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmYzZhYmVhZTFiNjIyMjU2ZGJiMmQ4Yjc0NTFkMjc0OTBk Mjc0YmIwHhcNMjUxMjA2MTcwMDQxWhcNMjUxMjA3MTcwMDQxWjAzMTEwLwYDVQQD Eyg2M2UwOGYyNTA1ZjZkODdiYjlkMTQ0N2VlZWUzYTc2ZjVmNzg5NmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorqpx+3Fqbk9hX1TaGrNSfMdPOM1 KDnAdD8ATvd930LWudK4boKiYf5rW8s1jOGsLXh7Ff7Y1Ehh26hxmsop1wVsTP1b XG96OYGRXPke4lYFNMjyxUV5EOSZ6xeZvs6S4qX2RIgkpmxcVwpuZ1KyxwVoUy83 uHyBDW2J3+gbrsKEY0VMNidCehU1pXtOBVNSSFarr+3m1xq8RgZ6G4wvFaniHb3I /BlgC4TN5ixjl7XS25YE0bzec6LPJjx44GjngZ+iMc0N3/HSVn0pc1PC3mJmlEdN teQPMfmxE8i5Y9zbQDJeB0oUg0Q+Hkunf8Ql57KSS19709Ue0TQSsDGGcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGPgjyUF9th7udFEfu7jp29feJbwMB8GA1UdIwQY MBaAFD/Gq+rhtiIlbbsti3RR0nSQ0nS7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDhhcjZ1RzJJaVZ0dXkyTGRGSFNkSkRTZExzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi83MGQxMTItMDIyMS00YjA0LWFjODMt NjEyM2ZkMWY1ZmNkLzEvUDhhcjZ1RzJJaVZ0dXkyTGRGSFNkSkRTZExzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi83MGQxMTItMDIyMS00YjA0LWFjODMtNjEyM2ZkMWY1ZmNk LzEvUDhhcjZ1RzJJaVZ0dXkyTGRGSFNkSkRTZExzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARduyubR5 qaAvNWgrONkkn1uXqWJEl2UdCmUa/vQi5fWZ+NPnsRQ8VYGHfliuMbPR84VPTqwl jPBw2GKrsTcKbZ9m2SKbh5Rx5+yPeJtx5uqqqeE7BmmdLzl5IjOoabWCS36o6doy VmFgjImXZmpkgsH0h0GYueQFHLKaUcScSrdSt3nDNJ9HI6SKjqgvCtgROHenW/2Q 8DLBoFnuh5F7AhkjHDHX2IIqMUJzsWd2ocBXZ2gXCTkq6m5JLkf44zMOVf3vYuGh qD1J96WW3l2YXPDnsRHOhsM/4I6oklb4RDypBKX3d06DRFpXR43Kshu9e0NYcrzB hRLPI8UTR9hk5w== -----END CERTIFICATE-----Generated at Sat Dec 6 20:58:25 2025 by rpki-client