This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft File: P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft (raw, json) Hash identifier: 8mghKGURTDELvSzHkfbEQqXrJCkX/nivOl1Z7J12vyo= Subject key identifier: 2B:DF:73:98:2A:43:AC:8D:0D:DA:BA:E6:E1:97:CD:D5:41:3B:5C:6D Authority key identifier: 3F:47:F7:57:57:41:3C:CC:17:2D:3D:1B:82:6F:AE:5A:E9:38:5A:1B Certificate issuer: /CN=3f47f75757413ccc172d3d1b826fae5ae9385a1b Certificate serial: 019B5AF6AB4F02E8AE1587845284B5C6BAD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P0f3V1dBPMwXLT0bgm-uWuk4Whs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft Manifest number: 179A Signing time: Fri 26 Dec 2025 14:01:13 +0000 Manifest this update: Fri 26 Dec 2025 14:01:13 +0000 Manifest next update: Sat 27 Dec 2025 14:01:13 +0000 Files and hashes: 1: P0f3V1dBPMwXLT0bgm-uWuk4Whs.crl (hash: OSJs4Aco2rjJ461WHQL2BpP1p79HrDb0Kz4SVNtn/NU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.crl rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft rsync://rpki.ripe.net/repository/DEFAULT/P0f3V1dBPMwXLT0bgm-uWuk4Whs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:ab:4f:02:e8:ae:15:87:84:52:84:b5:c6:ba:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f47f75757413ccc172d3d1b826fae5ae9385a1b Validity Not Before: Dec 26 14:01:13 2025 GMT Not After : Dec 27 14:01:13 2025 GMT Subject: CN=2bdf73982a43ac8d0ddabae6e197cdd5413b5c6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:73:e2:d8:1a:53:d7:7e:33:2e:73:30:1e:d2: ca:ae:27:3a:06:7e:fa:c8:ad:23:50:9c:af:97:44: b1:32:0c:c2:91:bc:d0:dd:0a:62:02:73:e9:ba:d7: 2e:e9:ac:6a:0c:6a:51:32:3e:86:d8:e0:ca:b0:96: 0e:f3:cf:99:15:91:e2:20:c7:31:90:5f:af:f3:74: 27:86:0e:da:ce:ef:aa:ad:a6:44:b5:54:f5:1d:8a: b6:00:91:29:65:e2:10:fc:a2:d3:98:eb:37:a0:18: 16:0e:de:91:44:3b:47:26:2f:d0:ab:fd:52:04:5b: f8:cd:ee:9f:7f:b1:a8:41:b7:d5:eb:8f:46:28:ef: 47:f6:c7:ee:05:15:89:95:00:ea:48:2b:b3:5b:24: e5:dc:d6:9a:56:39:f9:7a:91:bd:1a:9f:d9:fa:8d: 33:bc:ea:1a:63:92:de:db:0d:33:46:14:f8:c1:47: 7c:3f:e1:55:65:63:9c:41:b0:4d:e4:2d:3f:db:04: fc:c0:65:2b:78:39:ef:2c:1f:fd:4e:c6:09:b5:a3: ac:c0:82:10:68:6e:af:73:35:7f:2d:02:fe:25:d6: 7c:b5:fc:54:2b:98:fa:f9:5f:67:d3:8f:a1:3b:ef: 90:83:79:21:ba:ec:17:aa:db:11:70:28:d3:ad:38: 65:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:DF:73:98:2A:43:AC:8D:0D:DA:BA:E6:E1:97:CD:D5:41:3B:5C:6D X509v3 Authority Key Identifier: keyid:3F:47:F7:57:57:41:3C:CC:17:2D:3D:1B:82:6F:AE:5A:E9:38:5A:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0f3V1dBPMwXLT0bgm-uWuk4Whs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:d6:e3:3b:cb:b0:9a:c7:7e:f6:8b:06:fe:52:81:40:10:ce: 9c:8f:a4:8b:1a:38:76:c7:be:bc:57:61:7e:80:42:a5:79:04: ec:b5:06:0d:ca:c1:30:77:d1:3b:a4:e2:7b:8a:6a:64:93:c3: a4:00:30:45:60:2a:11:7f:52:c8:66:42:89:c4:82:ee:ae:5a: 2c:a7:d0:9b:d4:c1:ed:b6:18:b6:ca:f2:93:9b:3a:09:09:fc: 3a:1a:ac:83:b8:7c:cb:f2:db:15:71:3a:e5:27:86:f8:d9:a3: 24:53:b8:aa:31:bc:4c:35:d8:32:f3:3a:21:24:61:1d:39:32: 6c:9a:b4:a8:33:d5:57:2e:9b:0e:43:a8:c8:e9:6a:e4:4d:a3: 3b:b0:14:cc:be:dd:3a:ec:f0:b6:c7:78:19:f4:44:f5:20:d5: 8f:03:e2:16:06:f9:82:6e:ad:e0:f6:8c:50:0c:9c:82:a8:df: b8:50:b5:09:82:90:40:7d:c5:fa:e9:51:4f:51:a8:a9:9e:45: c5:c1:ae:a6:63:69:c1:d8:a4:1a:4f:72:d1:e8:ea:f2:f7:ee: 9f:9f:72:d3:1e:87:43:e4:e7:68:8b:dd:dd:f1:90:43:91:f6: 71:93:a4:77:39:46:a6:79:98:0b:dc:21:6e:dc:9a:b1:c8:32: 23:0c:b1:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9qtPAuiuFYeEUoS1xrrVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmNDdmNzU3NTc0MTNjY2MxNzJkM2QxYjgyNmZhZTVhZTkz ODVhMWIwHhcNMjUxMjI2MTQwMTEzWhcNMjUxMjI3MTQwMTEzWjAzMTEwLwYDVQQD EygyYmRmNzM5ODJhNDNhYzhkMGRkYWJhZTZlMTk3Y2RkNTQxM2I1YzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHPi2BpT134zLnMwHtLKric6Bn76 yK0jUJyvl0SxMgzCkbzQ3QpiAnPputcu6axqDGpRMj6G2ODKsJYO88+ZFZHiIMcx kF+v83Qnhg7azu+qraZEtVT1HYq2AJEpZeIQ/KLTmOs3oBgWDt6RRDtHJi/Qq/1S BFv4ze6ff7GoQbfV649GKO9H9sfuBRWJlQDqSCuzWyTl3NaaVjn5epG9Gp/Z+o0z vOoaY5Le2w0zRhT4wUd8P+FVZWOcQbBN5C0/2wT8wGUreDnvLB/9TsYJtaOswIIQ aG6vczV/LQL+JdZ8tfxUK5j6+V9n04+hO++Qg3khuuwXqtsRcCjTrThlBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCvfc5gqQ6yNDdq65uGXzdVBO1xtMB8GA1UdIwQY MBaAFD9H91dXQTzMFy09G4JvrlrpOFobMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDBmM1YxZEJQTXdYTFQwYmdtLXVXdWs0V2hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC85Zjg4ZDgtOGE2ZC00YzVjLWIxOTQt ZTE1NWFjYzZiODRlLzEvUDBmM1YxZEJQTXdYTFQwYmdtLXVXdWs0V2hzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC85Zjg4ZDgtOGE2ZC00YzVjLWIxOTQtZTE1NWFjYzZiODRl LzEvUDBmM1YxZEJQTXdYTFQwYmdtLXVXdWs0V2hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAatbjO8uw msd+9osG/lKBQBDOnI+kixo4dse+vFdhfoBCpXkE7LUGDcrBMHfRO6Tie4pqZJPD pAAwRWAqEX9SyGZCicSC7q5aLKfQm9TB7bYYtsryk5s6CQn8Ohqsg7h8y/LbFXE6 5SeG+NmjJFO4qjG8TDXYMvM6ISRhHTkybJq0qDPVVy6bDkOoyOlq5E2jO7AUzL7d Ouzwtsd4GfRE9SDVjwPiFgb5gm6t4PaMUAycgqjfuFC1CYKQQH3F+ulRT1GoqZ5F xcGupmNpwdikGk9y0ejq8vfun59y0x6HQ+TnaIvd3fGQQ5H2cZOkdzlGpnmYC9wh btyascgyIwyxsA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:03 2025 by rpki-client