This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.mft File: PI0Z2SQBkcNql0ti35PCIUNtm90.mft (raw, json) Hash identifier: JDTYq07cjqZmGEA1/95HwHN2WCyLs59a0RBDLlERFEU= Subject key identifier: 5A:88:4E:06:DD:83:DA:5C:73:9C:B5:AF:55:BE:38:83:0D:A9:B2:6A Authority key identifier: 3C:8D:19:D9:24:01:91:C3:6A:97:4B:62:DF:93:C2:21:43:6D:9B:DD Certificate issuer: /CN=3c8d19d9240191c36a974b62df93c221436d9bdd Certificate serial: 019B19BC1FFE7D37D036871C6C4F1F1D8D36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PI0Z2SQBkcNql0ti35PCIUNtm90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.mft Manifest number: 0BB0 Signing time: Sat 13 Dec 2025 22:01:57 +0000 Manifest this update: Sat 13 Dec 2025 22:01:57 +0000 Manifest next update: Sun 14 Dec 2025 22:01:57 +0000 Files and hashes: 1: PI0Z2SQBkcNql0ti35PCIUNtm90.crl (hash: d/ESNmKLfO9eXdTL8LWBjeJNceVZgvzEp0Wnez3p6F8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.crl rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.mft rsync://rpki.ripe.net/repository/DEFAULT/PI0Z2SQBkcNql0ti35PCIUNtm90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 22:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bc:1f:fe:7d:37:d0:36:87:1c:6c:4f:1f:1d:8d:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c8d19d9240191c36a974b62df93c221436d9bdd Validity Not Before: Dec 13 22:01:57 2025 GMT Not After : Dec 14 22:01:57 2025 GMT Subject: CN=5a884e06dd83da5c739cb5af55be38830da9b26a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e1:53:21:d2:95:f9:71:c0:40:d1:4b:43:8d: 76:05:6c:f8:f3:e3:f5:2e:59:1f:3e:8f:49:12:36: 90:11:5a:3f:6b:1d:95:3f:9d:fd:6a:b8:13:dd:03: 12:43:25:25:1b:d9:73:c8:c9:d7:7c:9b:0d:35:b3: 5d:47:a0:f7:f2:00:3f:cc:1d:42:4b:bd:f0:e2:2f: 97:c3:e3:76:1a:85:d5:1f:42:43:51:1e:9d:4a:de: 8e:11:4e:ec:0b:17:ac:57:62:39:fb:35:5c:d6:be: c2:71:16:0c:4c:03:ca:49:4b:3c:46:6a:d9:88:5b: ee:a6:3c:bf:a1:2e:02:ad:a8:09:10:c7:14:3c:a3: 02:0a:bd:a9:f2:b5:4d:ca:90:f8:a0:61:8b:bd:c2: 8e:20:fc:31:c7:04:a1:92:0d:aa:4f:ad:f4:bd:44: c6:8b:c4:0b:a0:8d:61:d0:12:68:3a:69:1b:d3:b7: bb:f7:18:76:cf:a0:f9:eb:ae:7f:5a:2f:dd:3c:7d: 1e:e5:7a:68:9e:a0:d5:91:b5:31:f4:52:6b:ae:ee: 9a:b0:00:81:a7:a4:03:1e:ee:e8:80:ae:7f:8e:fb: e1:62:41:06:3d:0a:4b:45:da:8e:a1:2f:4f:44:a7: b5:e8:b8:64:46:86:4e:17:30:a0:7a:a9:72:40:86: d1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:88:4E:06:DD:83:DA:5C:73:9C:B5:AF:55:BE:38:83:0D:A9:B2:6A X509v3 Authority Key Identifier: keyid:3C:8D:19:D9:24:01:91:C3:6A:97:4B:62:DF:93:C2:21:43:6D:9B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PI0Z2SQBkcNql0ti35PCIUNtm90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:3a:f2:30:18:9a:7a:8c:5e:16:37:2e:e5:db:ea:28:57:05: 8b:c9:8d:08:f1:12:b6:03:f1:14:b4:12:1c:61:67:bd:5b:71: 74:08:74:41:3b:c8:72:d3:a6:fa:b4:c5:ec:e4:b9:20:a5:8e: 7c:29:47:07:ee:13:56:43:0b:e2:61:f9:5a:b6:7f:e9:11:d4: a4:28:a4:07:38:b8:f1:23:3c:30:a2:9d:5f:54:eb:da:20:24: 41:71:61:b7:da:5c:c0:2a:65:5e:48:d1:e7:57:a5:ee:8c:ab: 27:08:51:6b:ab:d0:e4:05:a1:e5:22:2a:dc:0a:09:af:9b:5e: 75:a2:ce:dd:5c:39:e3:45:c9:57:f6:4a:59:12:31:1b:e3:90: e5:bc:c7:12:28:82:b7:75:01:5a:6f:3a:84:68:28:2d:62:09: 93:b2:ea:90:8f:48:98:06:d6:4e:ad:81:a9:59:eb:d8:dd:bc: 43:c5:52:d2:14:a2:f4:8a:ff:6a:ba:b5:7b:5d:69:ad:e0:d6: 39:f3:2a:b3:2b:ac:62:d8:d5:0c:c2:69:7c:0a:37:b8:4f:66: 5e:eb:8a:0f:83:d4:60:c7:23:38:93:de:7b:03:a6:0a:52:89: ff:7c:df:e8:ca:44:71:1f:7a:61:9c:0d:05:7e:d4:df:8a:d0: 58:ed:ea:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZvB/+fTfQNoccbE8fHY02MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjOGQxOWQ5MjQwMTkxYzM2YTk3NGI2MmRmOTNjMjIxNDM2 ZDliZGQwHhcNMjUxMjEzMjIwMTU3WhcNMjUxMjE0MjIwMTU3WjAzMTEwLwYDVQQD Eyg1YTg4NGUwNmRkODNkYTVjNzM5Y2I1YWY1NWJlMzg4MzBkYTliMjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+FTIdKV+XHAQNFLQ412BWz48+P1 LlkfPo9JEjaQEVo/ax2VP539argT3QMSQyUlG9lzyMnXfJsNNbNdR6D38gA/zB1C S73w4i+Xw+N2GoXVH0JDUR6dSt6OEU7sCxesV2I5+zVc1r7CcRYMTAPKSUs8RmrZ iFvupjy/oS4CragJEMcUPKMCCr2p8rVNypD4oGGLvcKOIPwxxwShkg2qT630vUTG i8QLoI1h0BJoOmkb07e79xh2z6D5665/Wi/dPH0e5XponqDVkbUx9FJrru6asACB p6QDHu7ogK5/jvvhYkEGPQpLRdqOoS9PRKe16LhkRoZOFzCgeqlyQIbRSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFqITgbdg9pcc5y1r1W+OIMNqbJqMB8GA1UdIwQY MBaAFDyNGdkkAZHDapdLYt+TwiFDbZvdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEkwWjJTUUJrY05xbDB0aTM1UENJVU50bTkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS84MDBlMzktZjliMS00ZjhkLTljMTAt MTAzNTdiODdjYjIzLzEvUEkwWjJTUUJrY05xbDB0aTM1UENJVU50bTkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS84MDBlMzktZjliMS00ZjhkLTljMTAtMTAzNTdiODdjYjIz LzEvUEkwWjJTUUJrY05xbDB0aTM1UENJVU50bTkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABzryMBia eoxeFjcu5dvqKFcFi8mNCPEStgPxFLQSHGFnvVtxdAh0QTvIctOm+rTF7OS5IKWO fClHB+4TVkML4mH5WrZ/6RHUpCikBzi48SM8MKKdX1Tr2iAkQXFht9pcwCplXkjR 51el7oyrJwhRa6vQ5AWh5SIq3AoJr5tedaLO3Vw540XJV/ZKWRIxG+OQ5bzHEiiC t3UBWm86hGgoLWIJk7LqkI9ImAbWTq2BqVnr2N28Q8VS0hSi9Ir/arq1e11preDW OfMqsyusYtjVDMJpfAo3uE9mXuuKD4PUYMcjOJPeewOmClKJ/3zf6MpEcR96YZwN BX7U34rQWO3qmw== -----END CERTIFICATE-----Generated at Sun Dec 14 07:46:01 2025 by rpki-client