This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft File: P1amMzFVLvkdigAFozjsmC3zfIs.mft (raw, json) Hash identifier: vJFa2wn1FYJcttupEGIA8StJ0y5BOpRR25uaRc5BBug= Subject key identifier: 8F:18:C4:1C:F6:4E:E6:BE:39:CC:44:38:D9:AF:A3:34:FF:47:8A:D7 Authority key identifier: 3F:56:A6:33:31:55:2E:F9:1D:8A:00:05:A3:38:EC:98:2D:F3:7C:8B Certificate issuer: /CN=3f56a63331552ef91d8a0005a338ec982df37c8b Certificate serial: 019B1F187EF67EE2DFCC02EAFE008D62D45D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1amMzFVLvkdigAFozjsmC3zfIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft Manifest number: 1183 Signing time: Sun 14 Dec 2025 23:00:57 +0000 Manifest this update: Sun 14 Dec 2025 23:00:57 +0000 Manifest next update: Mon 15 Dec 2025 23:00:57 +0000 Files and hashes: 1: P1amMzFVLvkdigAFozjsmC3zfIs.crl (hash: 8PqpDCNGJRT8MitzXdxD+h4X96ac9MMyfN9qTwEOgH8=) 2: i_E14tU_jnnkTSG9INpa9JShg9E.roa (hash: ZqQOvQcYLRY+mr+wSPe0ltP607X6tGik7hBPTVxfXqk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft rsync://rpki.ripe.net/repository/DEFAULT/P1amMzFVLvkdigAFozjsmC3zfIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:18:7e:f6:7e:e2:df:cc:02:ea:fe:00:8d:62:d4:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f56a63331552ef91d8a0005a338ec982df37c8b Validity Not Before: Dec 14 23:00:57 2025 GMT Not After : Dec 15 23:00:57 2025 GMT Subject: CN=8f18c41cf64ee6be39cc4438d9afa334ff478ad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3a:2a:d5:16:67:b6:cd:ef:71:6a:55:2d:19: 68:b5:fc:ad:c4:8f:fe:6a:b9:aa:4e:29:a1:4f:9f: 9d:3e:5d:97:34:07:8b:c6:a4:82:72:42:36:a1:47: 7e:ea:ed:7b:da:c8:63:21:8f:40:f6:cb:2e:e4:8a: b3:30:ee:d7:12:96:53:8f:81:6b:94:38:55:e7:cc: 70:5c:d2:0f:25:ed:da:73:e3:55:bd:89:f0:13:11: 85:94:d7:44:e1:98:59:44:bc:45:bd:df:03:9e:c2: 08:0d:ea:b4:ac:f9:3b:fb:6c:b5:04:f2:43:4d:40: 27:84:75:47:42:b7:62:44:f6:41:e0:f0:ce:4b:01: 4b:e4:0b:e8:8b:68:e3:cb:7c:06:d3:8f:b5:d3:9a: 02:ea:03:84:ec:a3:90:33:f1:71:f6:4a:d6:1f:eb: 9f:fb:ba:62:e3:6c:dc:8b:21:be:ae:2c:85:df:4a: ea:3c:a0:b4:e2:b8:e6:0e:55:56:36:04:4e:b9:82: dd:c4:0f:d3:7c:3a:a1:f5:df:64:74:88:98:12:6e: 35:73:7a:16:88:eb:62:1d:ea:e2:92:43:87:5b:5b: b1:ff:85:8f:c3:95:a5:42:d2:33:bd:1f:94:21:d5: ba:bd:cf:d6:d8:09:e8:76:d0:f3:cc:4b:18:8c:52: 3d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:18:C4:1C:F6:4E:E6:BE:39:CC:44:38:D9:AF:A3:34:FF:47:8A:D7 X509v3 Authority Key Identifier: keyid:3F:56:A6:33:31:55:2E:F9:1D:8A:00:05:A3:38:EC:98:2D:F3:7C:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1amMzFVLvkdigAFozjsmC3zfIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:3d:15:45:e6:0b:3b:64:54:7b:69:b0:32:a9:57:33:df:f8: 40:fa:82:49:12:82:66:51:4e:0d:7a:1d:aa:4b:3a:5e:d2:4f: 5e:86:1e:03:29:20:3d:ee:d1:7d:a8:45:32:c4:cf:58:f2:f4: 77:a8:bc:84:09:b2:c0:fb:ea:62:06:60:b4:57:8f:35:99:70: b0:46:32:c7:cb:3e:21:70:39:fb:66:6c:b2:aa:3d:39:6f:98: 6e:9f:59:b5:75:9e:36:67:f5:53:1f:f8:f5:c4:fe:be:ca:a7: 4b:99:68:7d:d0:9e:68:31:1f:a8:d3:32:6b:ed:df:4e:dc:a0: 75:b4:4f:56:15:89:3d:24:bd:aa:55:13:f1:30:47:7f:81:00: 8b:60:ac:47:3e:d7:8d:81:63:f5:84:ec:b4:2b:29:26:85:0a: ce:0e:de:80:de:a9:7f:20:60:f8:db:6d:26:16:22:af:3c:87: 2d:6c:f8:d4:0a:49:d9:2f:28:3b:7f:a8:b5:c4:e2:1c:06:05: ce:52:fa:47:44:bb:4f:bf:74:44:8c:2f:d3:de:8c:08:1f:ce: 8d:42:6b:8f:99:8d:04:11:71:f9:b5:f2:0a:21:a5:1e:4a:17: da:61:75:8d:01:46:3b:6c:6b:15:2c:ab:24:d1:85:60:a6:1c: 34:59:b2:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfGH72fuLfzALq/gCNYtRdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmNTZhNjMzMzE1NTJlZjkxZDhhMDAwNWEzMzhlYzk4MmRm MzdjOGIwHhcNMjUxMjE0MjMwMDU3WhcNMjUxMjE1MjMwMDU3WjAzMTEwLwYDVQQD Eyg4ZjE4YzQxY2Y2NGVlNmJlMzljYzQ0MzhkOWFmYTMzNGZmNDc4YWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvToq1RZnts3vcWpVLRlotfytxI/+ armqTimhT5+dPl2XNAeLxqSCckI2oUd+6u172shjIY9A9ssu5IqzMO7XEpZTj4Fr lDhV58xwXNIPJe3ac+NVvYnwExGFlNdE4ZhZRLxFvd8DnsIIDeq0rPk7+2y1BPJD TUAnhHVHQrdiRPZB4PDOSwFL5Avoi2jjy3wG04+105oC6gOE7KOQM/Fx9krWH+uf +7pi42zciyG+riyF30rqPKC04rjmDlVWNgROuYLdxA/TfDqh9d9kdIiYEm41c3oW iOtiHerikkOHW1ux/4WPw5WlQtIzvR+UIdW6vc/W2AnodtDzzEsYjFI9GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI8YxBz2Tua+OcxEONmvozT/R4rXMB8GA1UdIwQY MBaAFD9WpjMxVS75HYoABaM47Jgt83yLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDFhbU16RlZMdmtkaWdBRm96anNtQzN6ZklzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8yYjE3OWMtMmQyZC00NDIzLWI2ZDYt YjA4MzdhN2Q0NjQxLzEvUDFhbU16RlZMdmtkaWdBRm96anNtQzN6ZklzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC8yYjE3OWMtMmQyZC00NDIzLWI2ZDYtYjA4MzdhN2Q0NjQx LzEvUDFhbU16RlZMdmtkaWdBRm96anNtQzN6ZklzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVj0VReYL O2RUe2mwMqlXM9/4QPqCSRKCZlFODXodqks6XtJPXoYeAykgPe7RfahFMsTPWPL0 d6i8hAmywPvqYgZgtFePNZlwsEYyx8s+IXA5+2Zssqo9OW+Ybp9ZtXWeNmf1Ux/4 9cT+vsqnS5lofdCeaDEfqNMya+3fTtygdbRPVhWJPSS9qlUT8TBHf4EAi2CsRz7X jYFj9YTstCspJoUKzg7egN6pfyBg+NttJhYirzyHLWz41ApJ2S8oO3+otcTiHAYF zlL6R0S7T790RIwv096MCB/OjUJrj5mNBBFx+bXyCiGlHkoX2mF1jQFGO2xrFSyr JNGFYKYcNFmy0w== -----END CERTIFICATE-----Generated at Mon Dec 15 04:52:28 2025 by rpki-client