This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft File: P3cnpBMI2bn25j3xsg6LnNgjgSA.mft (raw, json) Hash identifier: 1PHpJ5z/P03RjZG/GczDqjd5HtcMJjdnEA8UM/afc50= Subject key identifier: AB:01:CA:E0:69:1B:F9:29:77:28:00:C6:35:99:A4:D2:15:B4:08:B5 Authority key identifier: 3F:77:27:A4:13:08:D9:B9:F6:E6:3D:F1:B2:0E:8B:9C:D8:23:81:20 Certificate issuer: /CN=3f7727a41308d9b9f6e63df1b20e8b9cd8238120 Certificate serial: 019AF19AC7F6C22C95B98B6525C05018D97B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft Manifest number: 0858 Signing time: Sat 06 Dec 2025 03:00:43 +0000 Manifest this update: Sat 06 Dec 2025 03:00:43 +0000 Manifest next update: Sun 07 Dec 2025 03:00:43 +0000 Files and hashes: 1: P3cnpBMI2bn25j3xsg6LnNgjgSA.crl (hash: kWJ2Q89PEMkS2uc2JlWrfnVy+8JvIx8ws1D2dmJBMlU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:c7:f6:c2:2c:95:b9:8b:65:25:c0:50:18:d9:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f7727a41308d9b9f6e63df1b20e8b9cd8238120 Validity Not Before: Dec 6 03:00:43 2025 GMT Not After : Dec 7 03:00:43 2025 GMT Subject: CN=ab01cae0691bf929772800c63599a4d215b408b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:87:94:5e:8c:ab:dd:4a:ca:e8:cf:62:61:9a: 9c:00:2f:a7:15:19:6a:cc:7c:ca:19:b1:70:44:57: e5:bb:81:63:93:31:6e:37:47:e2:7e:09:b9:47:cc: d6:1a:04:d1:07:5e:24:03:a7:7a:bf:6c:c2:0b:ac: 4e:4e:a6:8a:52:20:88:cb:c7:b5:7a:c4:a0:36:6f: 12:49:8e:54:d8:f2:e7:b7:97:52:ad:b2:ec:6c:90: 85:c7:2f:df:56:31:e8:35:1e:24:4b:60:a4:11:12: c6:31:20:17:f9:6e:1a:08:bd:e1:9b:45:79:d3:3b: 51:dc:66:a3:16:a3:5d:aa:0a:33:57:bb:6e:4e:77: a2:46:5b:bf:74:15:16:26:36:3f:60:86:f4:04:6e: c5:e7:f3:76:c1:47:fe:5d:20:79:27:25:37:d5:43: c7:83:61:2f:be:ed:43:03:52:9a:68:49:3b:a4:24: 6b:f7:43:79:83:2c:a1:9e:2a:64:22:14:5d:99:fc: fa:53:21:51:a2:e2:56:aa:66:70:c0:9e:5b:b3:e1: 66:d9:05:54:b5:d3:0e:5d:cb:8d:be:21:26:15:8d: f5:a7:d2:54:8d:f2:ee:5f:d0:bb:d9:f0:e2:fa:95: 5f:a5:cf:54:38:55:55:10:c3:47:4b:46:e2:4c:36: 34:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:01:CA:E0:69:1B:F9:29:77:28:00:C6:35:99:A4:D2:15:B4:08:B5 X509v3 Authority Key Identifier: keyid:3F:77:27:A4:13:08:D9:B9:F6:E6:3D:F1:B2:0E:8B:9C:D8:23:81:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:40:db:62:5c:c9:09:2e:21:71:5d:43:09:11:28:d9:bc:68: 62:b5:1d:8c:02:37:35:52:54:a7:1f:c7:d7:09:d1:67:f3:2e: 14:5e:e9:30:ec:15:7c:ef:7e:1e:7e:e1:d5:4d:fb:e6:bb:99: ea:ac:f3:a5:81:ec:cb:b0:e0:c9:ff:9f:72:99:3f:8c:35:e5: 95:35:32:ac:16:50:f1:9c:eb:fb:75:08:2b:0f:27:10:7a:81: b2:29:74:73:d0:2e:e2:f3:bd:70:38:8f:bb:43:72:a5:c0:3f: cf:30:e5:c9:e6:23:aa:64:fe:71:d6:ab:5d:e1:b9:bf:ef:d5: 43:c2:e1:82:4f:b2:ab:95:4a:7a:ad:7c:11:23:b0:98:f6:ca: 47:4b:54:4b:cf:61:26:3a:75:43:1e:2a:9c:ca:3e:bc:db:07: 76:d1:86:9f:14:90:83:43:62:47:4e:70:8b:c5:9f:10:b5:69: ea:d2:c0:50:36:3d:60:97:bc:ad:a2:eb:4d:60:40:43:14:7d: 7c:fb:fd:3b:ad:ff:96:0d:27:12:c4:eb:f7:7b:62:8e:ec:59: 22:ed:4b:ef:0e:8f:09:4d:d8:78:b6:88:6a:54:81:b4:9b:63: 87:8e:ed:b2:00:f5:e8:1c:54:7a:b7:8e:5c:fe:95:f4:3f:66: 11:1b:8f:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmsf2wiyVuYtlJcBQGNl7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmNzcyN2E0MTMwOGQ5YjlmNmU2M2RmMWIyMGU4YjljZDgy MzgxMjAwHhcNMjUxMjA2MDMwMDQzWhcNMjUxMjA3MDMwMDQzWjAzMTEwLwYDVQQD EyhhYjAxY2FlMDY5MWJmOTI5NzcyODAwYzYzNTk5YTRkMjE1YjQwOGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoeUXoyr3UrK6M9iYZqcAC+nFRlq zHzKGbFwRFflu4FjkzFuN0fifgm5R8zWGgTRB14kA6d6v2zCC6xOTqaKUiCIy8e1 esSgNm8SSY5U2PLnt5dSrbLsbJCFxy/fVjHoNR4kS2CkERLGMSAX+W4aCL3hm0V5 0ztR3GajFqNdqgozV7tuTneiRlu/dBUWJjY/YIb0BG7F5/N2wUf+XSB5JyU31UPH g2Evvu1DA1KaaEk7pCRr90N5gyyhnipkIhRdmfz6UyFRouJWqmZwwJ5bs+Fm2QVU tdMOXcuNviEmFY31p9JUjfLuX9C72fDi+pVfpc9UOFVVEMNHS0biTDY0OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKsByuBpG/kpdygAxjWZpNIVtAi1MB8GA1UdIwQY MBaAFD93J6QTCNm59uY98bIOi5zYI4EgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDNjbnBCTUkyYm4yNWozeHNnNkxuTmdqZ1NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hODhmMzAtNmUxYy00YzI4LWIwNzkt OTdlY2MwNzA2YmYwLzEvUDNjbnBCTUkyYm4yNWozeHNnNkxuTmdqZ1NBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9hODhmMzAtNmUxYy00YzI4LWIwNzktOTdlY2MwNzA2YmYw LzEvUDNjbnBCTUkyYm4yNWozeHNnNkxuTmdqZ1NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADkDbYlzJ CS4hcV1DCREo2bxoYrUdjAI3NVJUpx/H1wnRZ/MuFF7pMOwVfO9+Hn7h1U375ruZ 6qzzpYHsy7Dgyf+fcpk/jDXllTUyrBZQ8Zzr+3UIKw8nEHqBsil0c9Au4vO9cDiP u0NypcA/zzDlyeYjqmT+cdarXeG5v+/VQ8Lhgk+yq5VKeq18ESOwmPbKR0tUS89h Jjp1Qx4qnMo+vNsHdtGGnxSQg0NiR05wi8WfELVp6tLAUDY9YJe8raLrTWBAQxR9 fPv9O63/lg0nEsTr93tijuxZIu1L7w6PCU3YeLaIalSBtJtjh47tsgD16BxUereO XP6V9D9mERuPOQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:06:12 2025 by rpki-client