This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.mft File: P2LKnF7__TIKvS2Px-j4Nee70es.mft (raw, json) Hash identifier: TCvJJKKd3s3BcDVjWu12qnTEPgZeF/K5bQskdw6Zags= Subject key identifier: 80:8A:6A:F3:97:D7:03:0D:CA:A7:E3:7C:57:58:F4:E1:27:87:5F:27 Authority key identifier: 3F:62:CA:9C:5E:FF:FD:32:0A:BD:2D:8F:C7:E8:F8:35:E7:BB:D1:EB Certificate issuer: /CN=3f62ca9c5efffd320abd2d8fc7e8f835e7bbd1eb Certificate serial: 019B1F860B4848D243703F7345FDD911ECCE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P2LKnF7__TIKvS2Px-j4Nee70es.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.mft Manifest number: 0B72 Signing time: Mon 15 Dec 2025 01:00:36 +0000 Manifest this update: Mon 15 Dec 2025 01:00:36 +0000 Manifest next update: Tue 16 Dec 2025 01:00:36 +0000 Files and hashes: 1: P2LKnF7__TIKvS2Px-j4Nee70es.crl (hash: Mm457o9K+20zWXsKC033hqOh6zo/GFGvtLunhNacod8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.crl rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.mft rsync://rpki.ripe.net/repository/DEFAULT/P2LKnF7__TIKvS2Px-j4Nee70es.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:86:0b:48:48:d2:43:70:3f:73:45:fd:d9:11:ec:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f62ca9c5efffd320abd2d8fc7e8f835e7bbd1eb Validity Not Before: Dec 15 01:00:36 2025 GMT Not After : Dec 16 01:00:36 2025 GMT Subject: CN=808a6af397d7030dcaa7e37c5758f4e127875f27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:13:b1:52:78:ec:d0:77:15:9f:79:fc:85:6f: 16:1c:48:ed:88:89:35:c6:00:fa:51:e9:c4:de:93: 18:e8:8a:2a:97:eb:19:ff:d8:c2:2c:6e:20:71:11: dc:e1:1d:64:d7:62:9d:cf:06:d0:96:70:f4:34:2b: 07:58:f1:c3:5c:a2:e3:18:14:0e:5b:de:70:6a:ef: 89:c6:83:2a:90:84:b9:29:df:0f:db:9f:48:9b:e8: 7d:f1:1b:98:05:2f:22:f2:24:34:2f:7b:18:3d:63: 04:8c:4e:0f:0a:da:fc:b7:64:7c:06:a6:5f:66:29: a4:02:d5:b2:f5:75:21:62:87:84:e2:db:90:b0:08: 3d:72:8a:d2:0d:6a:ab:86:36:fd:ee:17:37:55:6d: 84:38:db:a5:65:98:bc:28:ce:f2:f6:81:e1:78:7f: 0b:ea:5c:24:8f:91:22:a3:5f:42:48:2d:18:c2:76: 6f:bc:15:9d:82:fe:c8:7f:eb:80:26:f8:c8:75:d9: 16:36:0b:df:33:19:79:84:c6:70:0a:89:8c:0e:1c: cc:c2:7d:92:31:46:47:cf:96:12:a8:59:b4:08:83: f1:56:f6:b5:fb:50:fa:96:55:aa:fb:ba:08:37:da: 3e:0a:63:bf:c9:d7:a5:e4:2f:33:72:e0:d2:78:02: eb:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:8A:6A:F3:97:D7:03:0D:CA:A7:E3:7C:57:58:F4:E1:27:87:5F:27 X509v3 Authority Key Identifier: keyid:3F:62:CA:9C:5E:FF:FD:32:0A:BD:2D:8F:C7:E8:F8:35:E7:BB:D1:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P2LKnF7__TIKvS2Px-j4Nee70es.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:45:08:94:79:ae:e8:c5:d6:fc:31:e0:cd:e6:71:54:32:57: 30:2f:f0:db:0c:79:a2:0e:92:65:f6:c4:e2:3a:76:94:3b:48: 63:4e:b4:f3:f5:c4:b3:a4:6b:f1:8d:83:49:5c:06:b2:46:27: 75:ad:80:b9:9b:75:2a:68:25:ae:22:1b:9b:f0:aa:81:81:78: d1:93:a5:2d:29:55:61:6e:cd:b8:1c:09:d0:66:f0:1c:5e:66: 66:d8:f8:db:25:65:ea:86:3a:04:af:af:33:c4:3f:e4:52:66: f4:45:9a:5e:70:fe:bc:89:c3:33:18:40:eb:ae:6c:48:f9:f7: 95:89:da:50:fd:9d:83:ba:97:01:d2:5b:c6:1b:f4:28:09:16: 0e:66:bc:1d:4e:14:25:a3:91:6d:85:a8:93:eb:4b:93:a4:e0: 32:25:c6:32:cd:c4:88:8a:02:17:84:f9:ef:12:1d:f0:ce:5c: 41:03:6b:98:ef:9f:37:6b:5d:af:19:b7:dd:27:9e:05:c8:06: 38:9e:99:35:f0:45:98:0f:b1:65:ef:0c:6d:77:da:97:c1:c3: 78:32:5d:15:00:99:e4:68:80:8f:3c:e7:93:9c:be:6f:5c:f9: c5:f4:de:82:bb:f7:05:94:a0:f8:d8:35:36:91:50:54:dc:30: 7e:5f:04:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfhgtISNJDcD9zRf3ZEezOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmNjJjYTljNWVmZmZkMzIwYWJkMmQ4ZmM3ZThmODM1ZTdi YmQxZWIwHhcNMjUxMjE1MDEwMDM2WhcNMjUxMjE2MDEwMDM2WjAzMTEwLwYDVQQD Eyg4MDhhNmFmMzk3ZDcwMzBkY2FhN2UzN2M1NzU4ZjRlMTI3ODc1ZjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBOxUnjs0HcVn3n8hW8WHEjtiIk1 xgD6UenE3pMY6Ioql+sZ/9jCLG4gcRHc4R1k12KdzwbQlnD0NCsHWPHDXKLjGBQO W95wau+JxoMqkIS5Kd8P259Im+h98RuYBS8i8iQ0L3sYPWMEjE4PCtr8t2R8BqZf ZimkAtWy9XUhYoeE4tuQsAg9corSDWqrhjb97hc3VW2EONulZZi8KM7y9oHheH8L 6lwkj5Eio19CSC0YwnZvvBWdgv7If+uAJvjIddkWNgvfMxl5hMZwComMDhzMwn2S MUZHz5YSqFm0CIPxVva1+1D6llWq+7oIN9o+CmO/ydel5C8zcuDSeALrGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFICKavOX1wMNyqfjfFdY9OEnh18nMB8GA1UdIwQY MBaAFD9iypxe//0yCr0tj8fo+DXnu9HrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDJMS25GN19fVElLdlMyUHgtajROZWU3MGVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9hMzYxY2ItZjhiZS00YjUwLTk4Njkt MDA5MDgwZThkZmY1LzEvUDJMS25GN19fVElLdlMyUHgtajROZWU3MGVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9hMzYxY2ItZjhiZS00YjUwLTk4NjktMDA5MDgwZThkZmY1 LzEvUDJMS25GN19fVElLdlMyUHgtajROZWU3MGVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk0UIlHmu 6MXW/DHgzeZxVDJXMC/w2wx5og6SZfbE4jp2lDtIY0608/XEs6Rr8Y2DSVwGskYn da2AuZt1KmglriIbm/CqgYF40ZOlLSlVYW7NuBwJ0GbwHF5mZtj42yVl6oY6BK+v M8Q/5FJm9EWaXnD+vInDMxhA665sSPn3lYnaUP2dg7qXAdJbxhv0KAkWDma8HU4U JaORbYWok+tLk6TgMiXGMs3EiIoCF4T57xId8M5cQQNrmO+fN2tdrxm33SeeBcgG OJ6ZNfBFmA+xZe8MbXfal8HDeDJdFQCZ5GiAjzznk5y+b1z5xfTegrv3BZSg+Ng1 NpFQVNwwfl8Edg== -----END CERTIFICATE-----Generated at Mon Dec 15 04:55:59 2025 by rpki-client