This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft File: P3lU2IwK4_Y5hpe_38GVanU-g9g.mft (raw, json) Hash identifier: PyR4gc8pV8xED6MQ54g4xf+eoDT01YSmKLtLL301g38= Subject key identifier: B3:A5:DE:90:37:A7:E9:16:3D:45:91:65:48:43:DE:35:52:8C:B1:BA Authority key identifier: 3F:79:54:D8:8C:0A:E3:F6:39:86:97:BF:DF:C1:95:6A:75:3E:83:D8 Certificate issuer: /CN=3f7954d88c0ae3f6398697bfdfc1956a753e83d8 Certificate serial: 019AF209057FEA0F30F8889E03CADA00F6AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft Manifest number: 173A Signing time: Sat 06 Dec 2025 05:01:08 +0000 Manifest this update: Sat 06 Dec 2025 05:01:08 +0000 Manifest next update: Sun 07 Dec 2025 05:01:08 +0000 Files and hashes: 1: P3lU2IwK4_Y5hpe_38GVanU-g9g.crl (hash: /+4rPeA5C1H5tYr5Q6LpD+bG3hdW/JxqdTlBdfvcbCA=) 2: rf7Y9BfnjDYuwCtely2bugyEpys.roa (hash: 9y+7Sb1Y7U3Xr15ca0JClSv0KalX6Si92Kt+rNAmTHY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:05:7f:ea:0f:30:f8:88:9e:03:ca:da:00:f6:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f7954d88c0ae3f6398697bfdfc1956a753e83d8 Validity Not Before: Dec 6 05:01:08 2025 GMT Not After : Dec 7 05:01:08 2025 GMT Subject: CN=b3a5de9037a7e9163d4591654843de35528cb1ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4a:e6:9e:64:e9:f9:31:ff:75:2d:9d:59:a9: 2b:fb:15:da:6b:13:f2:ed:65:bf:2e:fb:ac:85:30: f5:a2:3c:13:3b:3b:56:9d:37:e2:07:71:48:5e:7a: ba:d3:41:3d:f9:fe:c7:ad:5c:c6:2d:67:3b:e6:bc: 54:2d:6a:12:2b:8d:be:ad:56:19:78:77:0b:d3:e0: ca:79:f9:f8:dc:d9:6b:fe:64:30:b9:c3:4d:ca:d6: 0d:2f:c9:f1:6f:74:b6:d1:b5:b5:5a:4c:03:6c:2e: 56:0d:72:61:da:42:ae:04:f3:aa:7a:5e:0d:4d:0c: 17:6f:5a:1c:33:6c:46:49:85:a6:54:13:26:7b:9b: 6e:03:4d:9e:2c:9f:aa:0b:ad:44:6a:61:29:44:6f: e9:f5:41:9d:cd:1c:86:b3:de:41:d8:84:17:b5:cc: 8a:7a:f4:da:bd:bb:9a:29:21:3a:da:99:cb:0f:9b: 1f:2a:bd:9d:f5:aa:7e:25:da:a2:ca:cb:49:2e:99: 29:9f:51:11:58:ec:15:c7:c4:65:ca:35:de:ef:0b: 82:b6:27:bb:b2:c6:e7:03:4a:96:02:80:08:58:a6: e1:47:95:4b:e2:75:07:7d:bf:7c:34:34:e9:2e:a8: 4c:91:fb:4b:3f:f0:34:6b:28:d7:49:cc:3a:ec:4c: 5b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A5:DE:90:37:A7:E9:16:3D:45:91:65:48:43:DE:35:52:8C:B1:BA X509v3 Authority Key Identifier: keyid:3F:79:54:D8:8C:0A:E3:F6:39:86:97:BF:DF:C1:95:6A:75:3E:83:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:d8:69:0c:9f:e6:b8:00:89:b5:5c:2d:df:e6:ec:29:bc:8d: f3:a1:4a:86:cd:c7:69:9d:58:f1:50:ce:ef:bc:29:1e:42:7e: 05:51:53:67:ef:58:1d:3e:00:4d:90:a4:4e:e7:e0:81:58:fb: 4b:9c:3b:9a:c4:8c:33:86:7b:4b:71:b9:ff:15:0f:67:68:cd: 74:b8:c6:ba:95:01:ba:d8:eb:2c:04:13:61:86:e0:f1:4c:88: b0:95:66:01:95:e5:75:45:e0:fc:7d:7d:c9:84:1b:60:99:ae: c5:d5:7a:3e:0c:92:c1:ee:94:33:98:fb:23:fa:50:6c:ae:5d: a5:6a:94:f6:1f:16:48:0e:16:a1:d7:3d:ed:5e:cf:ad:9c:14: 9f:ee:3b:c3:90:a6:19:96:19:c7:c3:b8:d6:b4:01:99:3f:06: 4c:f5:f9:be:46:8b:ba:f0:71:00:15:b1:e5:23:2b:60:12:d0: ab:6c:e9:a7:1c:8b:4e:bd:a3:80:c4:dc:97:66:3a:53:ae:0d: 1e:10:82:4f:98:a3:01:cc:45:28:0e:1e:a9:b0:8f:30:97:be: b8:0f:6e:af:e2:70:04:39:0a:e0:04:13:d8:ec:e4:cf:eb:e3: a6:c0:b1:50:c0:00:ef:4d:f8:fd:b9:b6:09:52:38:4c:9a:3b: 41:b0:51:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCQV/6g8w+IieA8raAPauMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmNzk1NGQ4OGMwYWUzZjYzOTg2OTdiZmRmYzE5NTZhNzUz ZTgzZDgwHhcNMjUxMjA2MDUwMTA4WhcNMjUxMjA3MDUwMTA4WjAzMTEwLwYDVQQD EyhiM2E1ZGU5MDM3YTdlOTE2M2Q0NTkxNjU0ODQzZGUzNTUyOGNiMWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUrmnmTp+TH/dS2dWakr+xXaaxPy 7WW/LvushTD1ojwTOztWnTfiB3FIXnq600E9+f7HrVzGLWc75rxULWoSK42+rVYZ eHcL0+DKefn43Nlr/mQwucNNytYNL8nxb3S20bW1WkwDbC5WDXJh2kKuBPOqel4N TQwXb1ocM2xGSYWmVBMme5tuA02eLJ+qC61EamEpRG/p9UGdzRyGs95B2IQXtcyK evTavbuaKSE62pnLD5sfKr2d9ap+JdqiystJLpkpn1ERWOwVx8RlyjXe7wuCtie7 ssbnA0qWAoAIWKbhR5VL4nUHfb98NDTpLqhMkftLP/A0ayjXScw67Exb/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLOl3pA3p+kWPUWRZUhD3jVSjLG6MB8GA1UdIwQY MBaAFD95VNiMCuP2OYaXv9/BlWp1PoPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDNsVTJJd0s0X1k1aHBlXzM4R1ZhblUtZzlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy84MmU2NTYtMTRhMy00ZTNhLTlkNmUt YWY0MDYwODZiODliLzEvUDNsVTJJd0s0X1k1aHBlXzM4R1ZhblUtZzlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy84MmU2NTYtMTRhMy00ZTNhLTlkNmUtYWY0MDYwODZiODli LzEvUDNsVTJJd0s0X1k1aHBlXzM4R1ZhblUtZzlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY9hpDJ/m uACJtVwt3+bsKbyN86FKhs3HaZ1Y8VDO77wpHkJ+BVFTZ+9YHT4ATZCkTufggVj7 S5w7msSMM4Z7S3G5/xUPZ2jNdLjGupUButjrLAQTYYbg8UyIsJVmAZXldUXg/H19 yYQbYJmuxdV6PgySwe6UM5j7I/pQbK5dpWqU9h8WSA4Wodc97V7PrZwUn+47w5Cm GZYZx8O41rQBmT8GTPX5vkaLuvBxABWx5SMrYBLQq2zppxyLTr2jgMTcl2Y6U64N HhCCT5ijAcxFKA4eqbCPMJe+uA9ur+JwBDkK4AQT2Ozkz+vjpsCxUMAA7034/bm2 CVI4TJo7QbBRKw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:17:00 2025 by rpki-client