This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft File: P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft (raw, json) Hash identifier: D8h4VS6JRJGVU2W1/vSo0ZWlW/K1J4+xRFkk5Tg/nSk= Subject key identifier: 97:00:BC:BD:36:45:CA:86:77:58:3A:A7:06:36:70:58:07:61:36:ED Authority key identifier: 3F:DA:63:02:13:CD:42:38:80:F9:FE:F1:6D:78:FB:43:6E:08:F2:47 Certificate issuer: /CN=3fda630213cd423880f9fef16d78fb436e08f247 Certificate serial: 019B495DC9F5F8E7C8B7F0EB8D6AA98A9E0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft Manifest number: 0E6F Signing time: Tue 23 Dec 2025 04:00:41 +0000 Manifest this update: Tue 23 Dec 2025 04:00:41 +0000 Manifest next update: Wed 24 Dec 2025 04:00:41 +0000 Files and hashes: 1: P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl (hash: Be03eaOwpmbmzOKw1zBpcKKDGUW4zV41sm+h1zH2zK0=) 2: gDeneKJTQtX9OIr5MlGy6dCHOYA.roa (hash: 3GvtE0X7YdCyMroXXNh2AEtxzHBHmy4owPJWbBMbbzo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:5d:c9:f5:f8:e7:c8:b7:f0:eb:8d:6a:a9:8a:9e:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fda630213cd423880f9fef16d78fb436e08f247 Validity Not Before: Dec 23 04:00:41 2025 GMT Not After : Dec 24 04:00:41 2025 GMT Subject: CN=9700bcbd3645ca8677583aa706367058076136ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2f:d3:7b:6b:4b:bb:eb:0d:aa:89:cb:0e:fa: 80:09:36:f9:fc:37:0d:aa:d5:b3:6d:57:33:5e:11: 47:f2:4b:e3:66:41:76:06:b3:fa:94:3a:10:1a:f6: c4:4e:c8:8d:f2:0e:6b:13:1b:07:12:cc:56:2c:67: cb:7f:3d:c3:c0:c8:ea:b9:ff:3f:fb:35:a2:75:de: 3f:93:a7:54:87:41:88:08:ba:8e:83:f8:01:1c:28: 62:1b:92:4b:83:b7:81:a7:fe:0b:29:80:c6:b9:ba: c2:ee:89:c0:02:5e:53:64:9e:32:34:c8:5e:a6:49: 69:5b:e9:fb:6f:a1:b1:48:fc:df:d4:5f:01:3e:f4: d9:46:45:e5:6c:14:58:f2:b1:1f:87:6d:f1:1d:3d: dd:be:7d:58:0d:6e:77:d7:fe:4f:4e:12:0b:56:8a: 99:89:90:c9:69:2e:60:9e:73:4b:62:92:7e:bc:ec: f7:f0:fc:d8:28:60:d5:25:f1:4d:51:15:c1:5e:57: 67:65:36:5a:e1:71:e2:40:87:a3:34:92:95:80:9f: 3d:36:b1:04:df:c0:99:77:ce:6a:08:2e:c9:06:99: 9b:88:2a:1d:64:bb:7e:94:cd:e0:15:fa:f1:69:23: 57:87:69:60:52:eb:03:67:24:6b:93:ce:00:fa:05: 10:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:00:BC:BD:36:45:CA:86:77:58:3A:A7:06:36:70:58:07:61:36:ED X509v3 Authority Key Identifier: keyid:3F:DA:63:02:13:CD:42:38:80:F9:FE:F1:6D:78:FB:43:6E:08:F2:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:85:4f:fd:0f:72:d3:6c:26:2f:29:24:47:3a:93:21:91:20: 5d:95:03:fb:56:02:3d:37:8b:73:87:2f:76:e5:07:d9:e4:50: ce:41:f5:56:eb:a4:ba:48:60:c1:fa:40:28:6e:70:8d:2e:26: d0:ee:94:0f:8f:6e:eb:ac:29:9b:ea:6f:46:99:2f:4f:c7:07: 85:5e:ef:03:bf:da:c0:af:b7:cd:dc:cb:82:0c:78:ee:b8:43: da:09:82:14:03:e2:7b:51:99:da:cd:0f:8f:75:f8:c0:3e:09: 46:8d:97:44:0b:12:93:36:1c:47:c7:3c:f3:19:4a:95:48:e9: 0c:e0:0b:80:e9:24:06:9e:d3:20:4b:d9:80:5a:9c:6c:99:13: 33:56:93:94:83:5d:57:d6:84:71:2b:91:56:eb:15:25:27:e7: de:5c:7c:66:25:35:4d:62:d1:f8:52:fe:f0:3f:d8:9c:49:bb: d6:d8:6f:6d:69:c0:5a:d6:93:55:6d:ff:81:ad:c9:b6:4a:6b: ad:2d:14:00:d6:f1:6f:75:90:b7:78:1d:5d:23:cd:32:e1:76: 53:19:54:4b:ea:10:49:86:41:cc:9b:57:38:23:1f:29:bd:99: 68:9f:7b:8c:85:9e:dd:49:18:c2:09:47:80:7e:23:03:59:ce: 9e:9f:f5:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJXcn1+OfIt/DrjWqpip4LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZGE2MzAyMTNjZDQyMzg4MGY5ZmVmMTZkNzhmYjQzNmUw OGYyNDcwHhcNMjUxMjIzMDQwMDQxWhcNMjUxMjI0MDQwMDQxWjAzMTEwLwYDVQQD Eyg5NzAwYmNiZDM2NDVjYTg2Nzc1ODNhYTcwNjM2NzA1ODA3NjEzNmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxC/Te2tLu+sNqonLDvqACTb5/DcN qtWzbVczXhFH8kvjZkF2BrP6lDoQGvbETsiN8g5rExsHEsxWLGfLfz3DwMjquf8/ +zWidd4/k6dUh0GICLqOg/gBHChiG5JLg7eBp/4LKYDGubrC7onAAl5TZJ4yNMhe pklpW+n7b6GxSPzf1F8BPvTZRkXlbBRY8rEfh23xHT3dvn1YDW531/5PThILVoqZ iZDJaS5gnnNLYpJ+vOz38PzYKGDVJfFNURXBXldnZTZa4XHiQIejNJKVgJ89NrEE 38CZd85qCC7JBpmbiCodZLt+lM3gFfrxaSNXh2lgUusDZyRrk84A+gUQmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJcAvL02RcqGd1g6pwY2cFgHYTbtMB8GA1UdIwQY MBaAFD/aYwITzUI4gPn+8W14+0NuCPJHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlwakFoUE5RamlBLWY3eGJYajdRMjRJOGtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My81NGM2OTEtOWZiYi00MzhhLWE1NWYt MzgyMzdmZTRlNDE0LzEvUDlwakFoUE5RamlBLWY3eGJYajdRMjRJOGtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My81NGM2OTEtOWZiYi00MzhhLWE1NWYtMzgyMzdmZTRlNDE0 LzEvUDlwakFoUE5RamlBLWY3eGJYajdRMjRJOGtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxoVP/Q9y 02wmLykkRzqTIZEgXZUD+1YCPTeLc4cvduUH2eRQzkH1VuukukhgwfpAKG5wjS4m 0O6UD49u66wpm+pvRpkvT8cHhV7vA7/awK+3zdzLggx47rhD2gmCFAPie1GZ2s0P j3X4wD4JRo2XRAsSkzYcR8c88xlKlUjpDOALgOkkBp7TIEvZgFqcbJkTM1aTlINd V9aEcSuRVusVJSfn3lx8ZiU1TWLR+FL+8D/YnEm71thvbWnAWtaTVW3/ga3Jtkpr rS0UANbxb3WQt3gdXSPNMuF2UxlUS+oQSYZBzJtXOCMfKb2ZaJ97jIWe3UkYwglH gH4jA1nOnp/1uA== -----END CERTIFICATE-----Generated at Tue Dec 23 07:58:11 2025 by rpki-client