This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft File: P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft (raw, json) Hash identifier: GJ1ya8/ApLEiSwyYwfxVWyJUcOkiIjuwZLw6hHwfqjM= Subject key identifier: F6:6A:F7:5A:23:05:7D:48:29:B2:A9:27:3B:98:6B:8D:E1:00:E2:AD Authority key identifier: 3F:F5:8D:FF:BA:4D:F6:AC:34:BD:9F:48:11:9A:E1:1C:FE:F8:A7:6C Certificate issuer: /CN=3ff58dffba4df6ac34bd9f48119ae11cfef8a76c Certificate serial: 019B1D997E14CD1B9C442E6F7794C79B7CE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft Manifest number: 1509 Signing time: Sun 14 Dec 2025 16:02:36 +0000 Manifest this update: Sun 14 Dec 2025 16:02:36 +0000 Manifest next update: Mon 15 Dec 2025 16:02:36 +0000 Files and hashes: 1: P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl (hash: E70TCgWoR/gUYQ7b3XFdeAz7sb5k9sXfmI9WT5n97sc=) 2: Q0NTavEWJ5qlzhM0Gok-q7D_kpE.roa (hash: 38GOGOOApNFSuUu3tueeEDSFag3IGEHi/vwKyUqguXY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:99:7e:14:cd:1b:9c:44:2e:6f:77:94:c7:9b:7c:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ff58dffba4df6ac34bd9f48119ae11cfef8a76c Validity Not Before: Dec 14 16:02:36 2025 GMT Not After : Dec 15 16:02:36 2025 GMT Subject: CN=f66af75a23057d4829b2a9273b986b8de100e2ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:9a:ae:cd:52:7e:d2:4a:53:47:03:90:73:0f: db:ec:b2:41:28:f8:2b:ad:e1:74:a8:0a:f1:54:1e: c8:96:84:ba:54:e8:04:af:76:a2:8c:fc:fc:f2:14: 6f:fb:5a:af:0c:ea:53:cb:f7:bd:d5:82:39:f1:7f: fb:75:ff:15:62:a5:1b:29:61:46:c1:35:9f:d1:77: a5:88:85:c1:1f:05:ef:98:09:81:e0:91:bd:e5:34: 6d:9b:f9:6e:35:c7:b4:76:d0:38:54:b0:65:cc:e9: ff:24:ff:eb:3b:88:cc:89:02:4b:7b:0c:d2:64:39: 3d:08:c6:41:37:84:f7:3c:0c:ab:53:ef:71:41:1d: ac:de:ce:2a:d0:c1:90:87:62:bb:45:2e:20:66:32: 52:2f:d9:3a:dd:36:62:08:f3:68:ac:0e:73:e2:9b: ca:70:a0:7e:48:13:ed:94:58:a1:4f:f8:59:06:d8: 31:58:2c:02:ea:11:92:6f:8b:95:7b:9d:78:3c:7f: 97:d5:8f:45:4f:ed:a0:b1:47:cb:f0:bd:b7:02:17: 7f:99:de:8b:cb:d2:a5:a7:59:7b:1a:82:cf:a2:a3: b8:41:33:43:4b:1c:d5:63:28:49:bd:44:dd:e2:35: c6:8d:aa:6c:bf:b6:8c:60:9d:2d:0a:23:42:17:15: 18:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:6A:F7:5A:23:05:7D:48:29:B2:A9:27:3B:98:6B:8D:E1:00:E2:AD X509v3 Authority Key Identifier: keyid:3F:F5:8D:FF:BA:4D:F6:AC:34:BD:9F:48:11:9A:E1:1C:FE:F8:A7:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:8f:ba:f8:2b:ed:56:a6:72:ce:dd:e7:13:14:53:0e:63:f2: 99:c8:7b:b0:73:f5:5d:27:f0:8f:65:d2:a2:ab:a9:db:ac:ab: 75:97:0b:92:9f:61:c0:ed:84:b9:4b:1e:83:13:ae:b0:b5:07: 52:79:47:e0:09:e6:ac:4e:d5:7c:a5:84:f6:f0:8d:dd:0b:c4: b5:e5:df:15:a8:ee:aa:5d:af:ba:0e:82:00:a8:1a:04:d3:e1: 49:d0:dc:ec:5c:49:e2:5a:b9:4c:c9:1e:d9:30:93:26:a8:e9: a4:5f:db:67:43:04:ec:80:00:1f:3e:1a:30:6d:04:ea:97:dc: 8f:46:9d:c3:65:d1:dc:cc:26:1c:9e:9b:be:69:68:70:49:4f: 67:93:b1:4d:b4:f9:c4:09:8b:a8:ab:01:de:a8:33:7f:6f:0c: 96:b9:6f:03:c5:95:92:17:f5:e4:dc:22:54:95:87:83:38:7e: 53:fc:88:c4:08:01:99:f6:d1:07:f4:b4:d3:78:60:3a:8b:a6: bd:cf:3e:18:61:a8:85:ca:7c:55:a0:ae:f1:c6:77:65:3d:8d: f4:84:23:cc:65:fb:a6:e3:fa:21:43:81:2d:ad:38:ac:aa:cf: 1f:33:ba:c2:d5:16:19:25:99:b8:5b:4b:5c:6d:ff:0f:ab:5a: 27:59:7e:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdmX4UzRucRC5vd5THm3zmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZjU4ZGZmYmE0ZGY2YWMzNGJkOWY0ODExOWFlMTFjZmVm OGE3NmMwHhcNMjUxMjE0MTYwMjM2WhcNMjUxMjE1MTYwMjM2WjAzMTEwLwYDVQQD EyhmNjZhZjc1YTIzMDU3ZDQ4MjliMmE5MjczYjk4NmI4ZGUxMDBlMmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZquzVJ+0kpTRwOQcw/b7LJBKPgr reF0qArxVB7IloS6VOgEr3aijPz88hRv+1qvDOpTy/e91YI58X/7df8VYqUbKWFG wTWf0XeliIXBHwXvmAmB4JG95TRtm/luNce0dtA4VLBlzOn/JP/rO4jMiQJLewzS ZDk9CMZBN4T3PAyrU+9xQR2s3s4q0MGQh2K7RS4gZjJSL9k63TZiCPNorA5z4pvK cKB+SBPtlFihT/hZBtgxWCwC6hGSb4uVe514PH+X1Y9FT+2gsUfL8L23Ahd/md6L y9Klp1l7GoLPoqO4QTNDSxzVYyhJvUTd4jXGjapsv7aMYJ0tCiNCFxUY+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPZq91ojBX1IKbKpJzuYa43hAOKtMB8GA1UdIwQY MBaAFD/1jf+6TfasNL2fSBGa4Rz++KdsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUF9XTl83cE45cXcwdlo5SUVacmhIUDc0cDJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8yOGZjZTQtODFmMS00Y2QzLWE4ZWQt YWI5NGFmZmI5MDNhLzEvUF9XTl83cE45cXcwdlo5SUVacmhIUDc0cDJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8yOGZjZTQtODFmMS00Y2QzLWE4ZWQtYWI5NGFmZmI5MDNh LzEvUF9XTl83cE45cXcwdlo5SUVacmhIUDc0cDJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoI+6+Cvt VqZyzt3nExRTDmPymch7sHP1XSfwj2XSoqup26yrdZcLkp9hwO2EuUsegxOusLUH UnlH4AnmrE7VfKWE9vCN3QvEteXfFajuql2vug6CAKgaBNPhSdDc7FxJ4lq5TMke 2TCTJqjppF/bZ0ME7IAAHz4aMG0E6pfcj0adw2XR3MwmHJ6bvmlocElPZ5OxTbT5 xAmLqKsB3qgzf28MlrlvA8WVkhf15NwiVJWHgzh+U/yIxAgBmfbRB/S003hgOoum vc8+GGGohcp8VaCu8cZ3ZT2N9IQjzGX7puP6IUOBLa04rKrPHzO6wtUWGSWZuFtL XG3/D6taJ1l+rw== -----END CERTIFICATE-----Generated at Sun Dec 14 22:53:07 2025 by rpki-client