This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft File: P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft (raw, json) Hash identifier: p2ACyKdFRgOL56kB6K0Wegpa+UP+k08UUD4p/mE5iNw= Subject key identifier: CC:17:CA:C9:A2:9A:67:84:14:B9:EC:8A:F2:9B:90:08:EF:62:BD:A5 Authority key identifier: 3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E Certificate issuer: /CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e Certificate serial: 019B477005D57C39A7855BE2EDB8312B7C26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft Manifest number: 11C4 Signing time: Mon 22 Dec 2025 19:01:22 +0000 Manifest this update: Mon 22 Dec 2025 19:01:22 +0000 Manifest next update: Tue 23 Dec 2025 19:01:22 +0000 Files and hashes: 1: LsnRSFX0fJ6jFaMFhsNOF1N3rXk.roa (hash: dex17lVhtaQHFqLExDWweZahtCv1yqvsMMQYp4bDPYo=) 2: P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl (hash: XYPuS2SIk9EO6Dn6XzzN9X9u8HU403kByUAb6k4d6po=) 3: ZCv1BvgxYc7es0hHXD_Z0b-Ht0s.roa (hash: M90TxVMUtw28EWlnD72m1jWls/YScUzAXqX8GMvniY8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:70:05:d5:7c:39:a7:85:5b:e2:ed:b8:31:2b:7c:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e Validity Not Before: Dec 22 19:01:22 2025 GMT Not After : Dec 23 19:01:22 2025 GMT Subject: CN=cc17cac9a29a678414b9ec8af29b9008ef62bda5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ed:51:16:5a:b3:af:05:ee:fc:06:67:70:9e: 1b:75:41:fd:1e:34:79:93:9f:5e:f8:24:e0:94:3a: 02:ba:e3:e8:e2:2d:5e:51:9a:cf:8b:05:cf:66:92: 3d:9b:19:75:55:46:f4:59:cf:79:17:53:17:14:65: 3a:ee:20:0e:df:72:36:24:ae:13:60:6c:fe:63:16: 04:c0:d3:b8:14:91:fb:30:61:ce:64:51:e7:34:23: a1:2f:e5:b3:4a:03:27:1a:7f:2d:2c:ed:fc:4a:f9: 8c:bd:b0:79:7f:44:c3:d0:b3:69:17:43:8a:ab:c2: c1:da:32:b3:3c:d3:79:0f:7a:ef:65:71:a8:18:12: 89:f1:f8:ba:fd:d1:cf:ea:6e:12:9f:a3:02:d3:3e: 22:10:a1:29:fb:77:fd:38:75:08:6f:38:87:5a:ac: a2:5e:e5:94:c0:26:12:e7:ab:01:9a:d0:79:46:17: 17:2b:44:ee:54:d5:bd:e5:a9:c6:b3:01:3f:44:1b: 92:3b:22:84:fd:f1:96:79:cb:43:6a:82:ff:24:c5: 61:b4:c6:4d:a6:b8:5f:91:83:d6:6f:1c:c4:e5:f6: 30:23:49:23:ff:0e:f7:30:e0:de:ef:26:b8:02:9a: a9:35:e4:ac:a7:1e:9c:7b:0f:3c:c8:2c:35:72:10: d7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:17:CA:C9:A2:9A:67:84:14:B9:EC:8A:F2:9B:90:08:EF:62:BD:A5 X509v3 Authority Key Identifier: keyid:3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:3e:ad:8e:6c:f9:e7:10:f3:36:7e:e5:56:5c:2a:38:8f:6b: dc:69:ca:09:a6:1f:d0:ef:34:06:84:3d:f5:ea:6e:5b:85:44: fb:33:63:d0:6c:f3:f7:9c:2d:06:6c:1c:df:ae:31:00:00:8a: fd:46:06:51:53:fc:76:c3:84:06:14:32:7a:1f:5b:1e:86:32: ab:58:46:b5:1a:77:af:7f:95:7d:30:41:34:d2:89:9c:02:e4: 72:81:04:d3:c9:c1:89:d2:45:74:d4:a6:8d:d6:ab:df:72:13: 5f:e0:22:06:b1:01:8c:a9:da:09:b6:47:55:3f:35:8e:ba:a3: a2:4a:0a:d3:a3:1f:aa:00:c0:fc:dc:85:0f:3d:d7:45:54:7b: 04:73:08:c7:26:c9:20:95:c2:04:2d:ee:a7:e8:73:c1:02:a2: 64:00:56:7a:c1:df:36:20:c5:1a:99:7b:9b:b6:0b:c1:4b:0e: 52:39:51:7e:ca:72:27:c9:7d:b8:51:8f:59:44:3c:53:45:74: 1d:1a:d9:71:b5:21:40:98:8d:7d:e2:60:af:8d:d1:20:87:71: 33:e5:3a:02:95:56:f7:8b:fd:2d:38:58:5e:e7:8d:cd:e4:1c: d5:3b:54:e4:03:62:a7:49:97:35:5b:92:90:5a:78:96:cb:e2: c7:9f:1a:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHcAXVfDmnhVvi7bgxK3wmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmOTY3MDNmMzBlMjA5OWEzZDkwMDZiZmE4NGU1YzZjNDg2 YThkMmUwHhcNMjUxMjIyMTkwMTIyWhcNMjUxMjIzMTkwMTIyWjAzMTEwLwYDVQQD EyhjYzE3Y2FjOWEyOWE2Nzg0MTRiOWVjOGFmMjliOTAwOGVmNjJiZGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3e1RFlqzrwXu/AZncJ4bdUH9HjR5 k59e+CTglDoCuuPo4i1eUZrPiwXPZpI9mxl1VUb0Wc95F1MXFGU67iAO33I2JK4T YGz+YxYEwNO4FJH7MGHOZFHnNCOhL+WzSgMnGn8tLO38SvmMvbB5f0TD0LNpF0OK q8LB2jKzPNN5D3rvZXGoGBKJ8fi6/dHP6m4Sn6MC0z4iEKEp+3f9OHUIbziHWqyi XuWUwCYS56sBmtB5RhcXK0TuVNW95anGswE/RBuSOyKE/fGWectDaoL/JMVhtMZN prhfkYPWbxzE5fYwI0kj/w73MODe7ya4ApqpNeSspx6cew88yCw1chDXuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMwXysmimmeEFLnsivKbkAjvYr2lMB8GA1UdIwQY MBaAFD+WcD8w4gmaPZAGv6hOXGxIao0uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDVad1B6RGlDWm85a0FhX3FFNWNiRWhxalM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84MzY0N2EtNDRlNS00MDQ5LWI4Nzkt OTMzN2YzNzQxNjhlLzEvUDVad1B6RGlDWm85a0FhX3FFNWNiRWhxalM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC84MzY0N2EtNDRlNS00MDQ5LWI4NzktOTMzN2YzNzQxNjhl LzEvUDVad1B6RGlDWm85a0FhX3FFNWNiRWhxalM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAST6tjmz5 5xDzNn7lVlwqOI9r3GnKCaYf0O80BoQ99epuW4VE+zNj0Gzz95wtBmwc364xAACK /UYGUVP8dsOEBhQyeh9bHoYyq1hGtRp3r3+VfTBBNNKJnALkcoEE08nBidJFdNSm jdar33ITX+AiBrEBjKnaCbZHVT81jrqjokoK06MfqgDA/NyFDz3XRVR7BHMIxybJ IJXCBC3up+hzwQKiZABWesHfNiDFGpl7m7YLwUsOUjlRfspyJ8l9uFGPWUQ8U0V0 HRrZcbUhQJiNfeJgr43RIIdxM+U6ApVW94v9LThYXueNzeQc1TtU5ANip0mXNVuS kFp4lsvix58a1Q== -----END CERTIFICATE-----Generated at Tue Dec 23 00:31:56 2025 by rpki-client