This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft File: P1jM0LF5IrWNXoss8uV5zmmrOGM.mft (raw, json) Hash identifier: 0CgbAX55yteFT+XBRT5qqMJNVya855b5zXegnJ+NVk4= Subject key identifier: CE:21:EC:82:9D:A5:E2:D5:B1:C2:4E:3C:E9:AA:08:5F:67:AB:97:9F Authority key identifier: 3F:58:CC:D0:B1:79:22:B5:8D:5E:8B:2C:F2:E5:79:CE:69:AB:38:63 Certificate issuer: /CN=3f58ccd0b17922b58d5e8b2cf2e579ce69ab3863 Certificate serial: 019B5A1A94E189E34C48201539B3FA0F2944 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1jM0LF5IrWNXoss8uV5zmmrOGM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft Manifest number: 01D6 Signing time: Fri 26 Dec 2025 10:00:49 +0000 Manifest this update: Fri 26 Dec 2025 10:00:49 +0000 Manifest next update: Sat 27 Dec 2025 10:00:49 +0000 Files and hashes: 1: P1jM0LF5IrWNXoss8uV5zmmrOGM.crl (hash: NB5mPUXp+ZdY7Ttv87PVxQ3bgxiOoFekKzfejD7azIg=) 2: pwkOfI0N-Tqs6EWE-ZLxQ2pD3ZM.asa (hash: 76UHeLcM+om1iT2qZCwO5q94A8qOQbIQ5FrClESA93w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft rsync://rpki.ripe.net/repository/DEFAULT/P1jM0LF5IrWNXoss8uV5zmmrOGM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:94:e1:89:e3:4c:48:20:15:39:b3:fa:0f:29:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f58ccd0b17922b58d5e8b2cf2e579ce69ab3863 Validity Not Before: Dec 26 10:00:49 2025 GMT Not After : Dec 27 10:00:49 2025 GMT Subject: CN=ce21ec829da5e2d5b1c24e3ce9aa085f67ab979f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ca:5f:dd:57:06:46:12:3b:6c:b7:f2:1f:70: 41:70:64:84:f9:54:61:47:ad:43:0b:91:dd:7a:c2: 63:a5:2e:6d:2a:1a:a1:08:ad:39:69:f3:2d:13:dc: 27:47:5d:4f:da:57:88:52:2b:18:2e:9a:b6:43:d4: 43:0b:5c:37:85:dc:3c:dc:ae:c3:2a:b9:fa:1f:0d: 18:fa:45:38:01:a0:53:b3:82:8b:ef:a5:4a:4d:25: 64:21:f2:02:aa:ab:2a:8b:ec:96:32:a8:bc:74:f9: 41:b0:9a:4c:e6:cd:6f:43:c6:dd:f0:cf:03:53:cb: 4e:50:7f:9e:90:4b:17:f6:02:61:9f:bf:3f:2d:bf: 25:9e:47:2e:d5:90:37:ea:68:4d:16:ff:70:27:2f: 44:20:15:4c:b9:17:57:4a:6a:69:f5:38:4a:d8:21: 5f:d1:10:1c:d0:6f:a7:fd:14:87:8f:71:1f:f7:da: 1a:5b:ac:29:ce:83:a4:6a:14:e4:35:20:60:2a:33: 3c:74:28:e7:6f:3c:f9:f9:ca:e2:db:d2:5f:7a:85: ab:4b:2f:42:14:2d:49:64:f4:12:f8:dc:5f:de:9c: 36:24:58:b0:5c:8f:2d:eb:7d:b5:97:f3:13:3c:54: 3f:4c:f9:d4:50:d5:0f:97:f3:ee:8b:41:0d:2a:9c: 77:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:21:EC:82:9D:A5:E2:D5:B1:C2:4E:3C:E9:AA:08:5F:67:AB:97:9F X509v3 Authority Key Identifier: keyid:3F:58:CC:D0:B1:79:22:B5:8D:5E:8B:2C:F2:E5:79:CE:69:AB:38:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1jM0LF5IrWNXoss8uV5zmmrOGM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:bf:f9:99:a3:66:f4:3f:b2:76:0a:c4:92:eb:d8:bf:20:5f: 81:f4:8c:8f:ec:6b:c2:f2:4d:46:a4:46:12:fc:bc:04:fd:5b: 0d:c8:18:67:7d:da:37:40:6a:01:e1:75:ef:e7:7b:5e:07:b3: 79:ce:e3:9a:87:29:fd:52:d9:5f:68:bf:e5:9b:77:d7:6a:97: 73:01:d8:bd:0e:0c:82:5d:ce:42:51:01:6c:2f:46:1e:ed:9c: 28:57:de:21:4a:92:23:db:5f:59:0c:22:25:91:58:31:08:f5: 01:0e:bc:a1:3a:13:73:61:68:ea:02:1d:d9:a0:83:13:81:61: 13:b6:23:76:e3:d3:c0:ca:14:14:48:9a:cd:4d:d9:6d:bc:b0: 03:58:8b:b5:fa:7a:02:21:46:ae:3b:d6:58:27:a9:25:14:55: c2:9f:d3:c3:fb:93:b7:a3:d8:87:66:4c:e0:80:03:c3:63:2e: 92:54:eb:36:6a:2c:db:cb:f3:f4:63:21:93:0b:e7:3c:7a:c2: 97:3d:ff:90:1a:c0:d8:cd:94:71:d8:fb:e7:36:98:df:0f:3c: 6f:10:28:20:d0:07:c0:a1:e6:ed:89:b2:74:16:31:12:06:08: ef:21:fe:06:c5:a9:6a:69:d1:dc:af:6d:f0:9a:30:b0:2b:95: 01:cb:c8:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGpThieNMSCAVObP6DylEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmNThjY2QwYjE3OTIyYjU4ZDVlOGIyY2YyZTU3OWNlNjlh YjM4NjMwHhcNMjUxMjI2MTAwMDQ5WhcNMjUxMjI3MTAwMDQ5WjAzMTEwLwYDVQQD EyhjZTIxZWM4MjlkYTVlMmQ1YjFjMjRlM2NlOWFhMDg1ZjY3YWI5NzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cpf3VcGRhI7bLfyH3BBcGSE+VRh R61DC5HdesJjpS5tKhqhCK05afMtE9wnR11P2leIUisYLpq2Q9RDC1w3hdw83K7D Krn6Hw0Y+kU4AaBTs4KL76VKTSVkIfICqqsqi+yWMqi8dPlBsJpM5s1vQ8bd8M8D U8tOUH+ekEsX9gJhn78/Lb8lnkcu1ZA36mhNFv9wJy9EIBVMuRdXSmpp9ThK2CFf 0RAc0G+n/RSHj3Ef99oaW6wpzoOkahTkNSBgKjM8dCjnbzz5+cri29JfeoWrSy9C FC1JZPQS+Nxf3pw2JFiwXI8t6321l/MTPFQ/TPnUUNUPl/Pui0ENKpx3KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM4h7IKdpeLVscJOPOmqCF9nq5efMB8GA1UdIwQY MBaAFD9YzNCxeSK1jV6LLPLlec5pqzhjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDFqTTBMRjVJcldOWG9zczh1VjV6bW1yT0dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8xOGRiZTItYmM2ZS00YTkyLWI5ZWYt ZWQ3OWEyZjIyNWMwLzEvUDFqTTBMRjVJcldOWG9zczh1VjV6bW1yT0dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8xOGRiZTItYmM2ZS00YTkyLWI5ZWYtZWQ3OWEyZjIyNWMw LzEvUDFqTTBMRjVJcldOWG9zczh1VjV6bW1yT0dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXb/5maNm 9D+ydgrEkuvYvyBfgfSMj+xrwvJNRqRGEvy8BP1bDcgYZ33aN0BqAeF17+d7Xgez ec7jmocp/VLZX2i/5Zt312qXcwHYvQ4Mgl3OQlEBbC9GHu2cKFfeIUqSI9tfWQwi JZFYMQj1AQ68oToTc2Fo6gId2aCDE4FhE7YjduPTwMoUFEiazU3ZbbywA1iLtfp6 AiFGrjvWWCepJRRVwp/Tw/uTt6PYh2ZM4IADw2MuklTrNmos28vz9GMhkwvnPHrC lz3/kBrA2M2Ucdj75zaY3w88bxAoINAHwKHm7YmydBYxEgYI7yH+BsWpamnR3K9t 8JowsCuVAcvIIA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:06:25 2025 by rpki-client