This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft File: P1vEQBQoW28-KHKuz11PM-Jozos.mft (raw, json) Hash identifier: YrfOTiB4wNbn5+hRni3KneyERSTdBuYhMXiMScb1cME= Subject key identifier: D4:0E:50:C5:AB:57:17:DB:6A:04:55:87:F7:5F:F7:E0:9F:AD:98:23 Authority key identifier: 3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B Certificate issuer: /CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b Certificate serial: 019B115D4E11B6FF49396CD03879CCC804AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft Manifest number: 0870 Signing time: Fri 12 Dec 2025 07:01:25 +0000 Manifest this update: Fri 12 Dec 2025 07:01:25 +0000 Manifest next update: Sat 13 Dec 2025 07:01:25 +0000 Files and hashes: 1: AcEkQsHgOk9cJvafcwY_24-gqJU.roa (hash: P0WFMbng9Ro3ND0yeTy1ArY8fd/+6N/p4Vx6hJOnIpk=) 2: AhGacAZRO8Gx3hNBgiDjl4oZgqI.roa (hash: /EpJOq122VUgjLXObaWDOaWwB7lmX3CrZN3WS11mATY=) 3: P1vEQBQoW28-KHKuz11PM-Jozos.crl (hash: o0xvJvZXBs52+mXsu3RVJ1/UnHDwy4Q+j5GEDX+RTpQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 07:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:5d:4e:11:b6:ff:49:39:6c:d0:38:79:cc:c8:04:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b Validity Not Before: Dec 12 07:01:25 2025 GMT Not After : Dec 13 07:01:25 2025 GMT Subject: CN=d40e50c5ab5717db6a045587f75ff7e09fad9823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6a:c7:85:73:d4:7f:4b:05:7c:c5:e2:b0:6f: df:9e:a0:f0:d5:bf:92:a8:cb:98:82:67:a6:89:cd: e2:28:ba:55:95:a9:35:22:61:96:cb:83:4b:1d:e7: d7:e9:af:60:40:01:36:f2:3f:0b:52:9b:3e:3f:ac: 73:33:21:2b:91:af:b3:fb:e1:a5:33:fc:3d:7e:07: fe:6c:3f:bf:10:8a:bb:8d:e1:27:11:5a:ec:22:57: a0:26:e7:45:65:5d:7f:a7:1f:0e:9c:f0:f2:41:1b: c9:0a:26:87:fd:da:40:ee:9b:8d:96:43:7e:85:cf: 19:2f:3a:41:a9:60:fe:95:13:63:ba:6f:ab:ae:05: 07:dc:9e:42:7b:e7:2e:49:61:33:69:c7:25:7a:fb: b2:67:66:b7:61:45:29:3b:c2:5d:12:0f:80:14:61: 3d:9a:91:f9:9e:4c:99:e4:d3:4c:2b:32:c7:a5:9a: d6:ce:d8:7c:ca:86:55:47:d2:b6:06:4f:7e:7c:7e: 46:1b:b6:47:ba:be:d2:19:57:b9:12:64:ef:22:3e: 3a:c3:02:bd:49:aa:fc:2d:34:8f:70:ab:e2:93:d7: 7f:0c:cb:39:33:32:33:c7:23:06:5e:62:e5:ab:b6: 45:7c:42:56:f1:c4:1c:e4:d5:86:f9:96:b1:ec:df: aa:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:0E:50:C5:AB:57:17:DB:6A:04:55:87:F7:5F:F7:E0:9F:AD:98:23 X509v3 Authority Key Identifier: keyid:3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:2a:85:b9:ca:80:01:8e:9a:18:79:be:6d:64:f3:ed:6f:2a: e2:07:62:c1:8f:01:56:77:15:b9:85:86:40:ea:6e:70:69:12: d9:52:74:f4:9c:48:bb:0a:86:1b:43:cb:ab:03:57:d5:5e:b5: 76:7c:ad:d8:01:0e:24:3a:6d:6d:1c:05:d1:c0:77:74:62:3b: f3:31:b2:47:47:83:66:8b:ad:e9:03:b2:57:e0:e9:86:da:56: c8:b2:f5:77:73:4d:32:4d:b5:9f:f7:9e:f8:1c:0c:79:18:44: 9a:27:49:17:42:40:6d:a9:47:5a:f7:6d:66:31:2c:53:f4:35: 47:79:ef:e6:9f:88:42:30:19:ca:33:bb:dc:7f:ed:36:77:57: 8b:87:7e:1b:0a:9f:14:d0:de:dc:31:3f:69:17:4b:3b:8d:69: c9:5d:da:0f:69:72:7b:86:48:13:95:1f:67:2a:8c:5b:90:24: 65:2a:da:17:a9:46:d2:2a:43:74:b8:e4:27:3e:d1:12:72:b2: fb:8a:e7:9d:d1:7e:78:85:36:62:d2:b2:24:07:2a:08:19:7a: fb:be:f4:61:6e:0d:85:bb:47:85:6a:f8:21:7d:33:31:3f:e4: 9f:fe:be:79:4a:62:0b:59:96:29:57:44:e3:1b:60:47:d1:67: 50:5e:73:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRXU4Rtv9JOWzQOHnMyASrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmNWJjNDQwMTQyODViNmYzZTI4NzJhZWNmNWQ0ZjMzZTI2 OGNlOGIwHhcNMjUxMjEyMDcwMTI1WhcNMjUxMjEzMDcwMTI1WjAzMTEwLwYDVQQD EyhkNDBlNTBjNWFiNTcxN2RiNmEwNDU1ODdmNzVmZjdlMDlmYWQ5ODIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2rHhXPUf0sFfMXisG/fnqDw1b+S qMuYgmemic3iKLpVlak1ImGWy4NLHefX6a9gQAE28j8LUps+P6xzMyErka+z++Gl M/w9fgf+bD+/EIq7jeEnEVrsIlegJudFZV1/px8OnPDyQRvJCiaH/dpA7puNlkN+ hc8ZLzpBqWD+lRNjum+rrgUH3J5Ce+cuSWEzacclevuyZ2a3YUUpO8JdEg+AFGE9 mpH5nkyZ5NNMKzLHpZrWzth8yoZVR9K2Bk9+fH5GG7ZHur7SGVe5EmTvIj46wwK9 Sar8LTSPcKvik9d/DMs5MzIzxyMGXmLlq7ZFfEJW8cQc5NWG+Zax7N+q5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNQOUMWrVxfbagRVh/df9+CfrZgjMB8GA1UdIwQY MBaAFD9bxEAUKFtvPihyrs9dTzPiaM6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDF2RVFCUW9XMjgtS0hLdXoxMVBNLUpvem9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zMjI2OTMtZTU4Yi00OGUyLWJkZDkt MDI5NTNjZTYzODQzLzEvUDF2RVFCUW9XMjgtS0hLdXoxMVBNLUpvem9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8zMjI2OTMtZTU4Yi00OGUyLWJkZDktMDI5NTNjZTYzODQz LzEvUDF2RVFCUW9XMjgtS0hLdXoxMVBNLUpvem9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATSqFucqA AY6aGHm+bWTz7W8q4gdiwY8BVncVuYWGQOpucGkS2VJ09JxIuwqGG0PLqwNX1V61 dnyt2AEOJDptbRwF0cB3dGI78zGyR0eDZout6QOyV+DphtpWyLL1d3NNMk21n/ee +BwMeRhEmidJF0JAbalHWvdtZjEsU/Q1R3nv5p+IQjAZyjO73H/tNndXi4d+Gwqf FNDe3DE/aRdLO41pyV3aD2lye4ZIE5UfZyqMW5AkZSraF6lG0ipDdLjkJz7REnKy +4rnndF+eIU2YtKyJAcqCBl6+770YW4NhbtHhWr4IX0zMT/kn/6+eUpiC1mWKVdE 4xtgR9FnUF5zBA== -----END CERTIFICATE-----Generated at Fri Dec 12 13:14:44 2025 by rpki-client