This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft File: P98IRZEZlp1LnBf1qF6ScyxVF9E.mft (raw, json) Hash identifier: S49ovonZ4j/qr3BqtvZEEY5eU2+qFoQF+e+xgfqy2dM= Subject key identifier: EC:32:DA:E3:FD:34:3D:62:0C:04:C0:E4:7B:CC:24:C4:83:F1:38:51 Authority key identifier: 3F:DF:08:45:91:19:96:9D:4B:9C:17:F5:A8:5E:92:73:2C:55:17:D1 Certificate issuer: /CN=3fdf08459119969d4b9c17f5a85e92732c5517d1 Certificate serial: 019B3833B0385A0302C55A7012104BA8088C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft Manifest number: 176D Signing time: Fri 19 Dec 2025 20:01:09 +0000 Manifest this update: Fri 19 Dec 2025 20:01:09 +0000 Manifest next update: Sat 20 Dec 2025 20:01:09 +0000 Files and hashes: 1: P98IRZEZlp1LnBf1qF6ScyxVF9E.crl (hash: cngnN33F0M0imdKsyfhaPzzNkHM4hgAUQ2I68rz9zME=) 2: qHPsdBiuTYXVZwMEuexg2CV5_Rc.roa (hash: okNXh+NCN1SYoCMfp10oC5B+Is3b/qKgY4b94Oq45BU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:33:b0:38:5a:03:02:c5:5a:70:12:10:4b:a8:08:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fdf08459119969d4b9c17f5a85e92732c5517d1 Validity Not Before: Dec 19 20:01:09 2025 GMT Not After : Dec 20 20:01:09 2025 GMT Subject: CN=ec32dae3fd343d620c04c0e47bcc24c483f13851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e2:35:42:bc:d5:74:0c:4b:e4:f3:c4:fb:1f: 79:66:68:31:66:19:96:09:0e:fa:bc:c4:e6:bd:5f: 01:37:16:2d:63:9d:99:c1:b5:c1:e5:52:e7:6c:14: 6c:09:43:3d:c0:c3:1a:64:05:43:a0:73:d4:77:fb: fc:1e:4c:78:d0:33:8e:bf:4a:f7:f2:be:25:25:5c: b4:a2:57:5f:27:48:ea:46:35:e5:6e:d8:65:c5:33: 31:01:df:f5:de:3a:05:9e:fd:87:ea:4d:b5:3e:31: 15:42:2c:32:db:1c:3b:32:16:f1:0e:be:02:71:3b: 8b:2a:ab:9e:22:14:fc:ab:4e:0d:b6:23:c8:54:34: 6f:68:06:49:77:7e:cb:53:ce:32:e2:f9:49:36:fd: 63:81:11:64:af:5b:62:1c:72:e6:27:1d:04:c8:85: 88:db:35:63:7f:ad:ba:c7:f9:57:67:ed:4f:b1:63: 73:2c:3f:c0:7c:09:0e:b7:bf:94:b5:45:9f:dd:8f: 1f:64:31:bd:a8:f5:dd:26:0d:2d:a7:d6:8f:eb:ab: b7:9d:dd:ef:7a:e0:2e:c5:96:9f:3c:24:01:97:e9: c0:da:c8:76:0c:ce:3e:0d:f2:e3:36:9e:68:07:43: 5f:98:2b:2c:02:62:0e:85:89:b8:90:70:bf:69:6e: 57:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:32:DA:E3:FD:34:3D:62:0C:04:C0:E4:7B:CC:24:C4:83:F1:38:51 X509v3 Authority Key Identifier: keyid:3F:DF:08:45:91:19:96:9D:4B:9C:17:F5:A8:5E:92:73:2C:55:17:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:39:c5:46:1e:87:26:e9:cc:ff:49:65:5c:70:ab:f9:3b:7c: 15:ff:61:1b:ac:48:a9:79:56:34:3b:28:6c:66:72:f9:70:27: 5f:3b:6f:d1:ac:15:b4:d6:c9:e4:86:39:e8:26:6a:65:f4:97: 3b:7d:71:86:12:91:30:0e:58:08:50:40:95:75:2f:27:ee:11: d7:49:4c:77:0a:ab:73:d2:3c:79:c7:b0:f5:e0:02:33:a6:cb: 99:4b:95:a0:6c:fa:96:e5:7f:1c:97:26:77:aa:f9:dd:fc:58: bb:1c:2f:1d:92:d4:51:67:e3:a1:85:bb:91:28:e0:8f:db:db: d6:e3:3a:da:c6:4c:de:3a:e8:fe:3f:df:51:85:17:6a:d9:03: 99:51:08:02:ad:e9:5b:5d:c5:1e:fd:27:14:d9:4e:d9:1c:c9: ba:90:b9:30:81:bf:6c:18:2f:1e:2e:9f:ef:73:6e:58:fd:05: 67:57:28:06:bd:c2:18:e3:61:75:7f:56:48:b8:60:3b:48:ab: c8:23:9e:89:51:05:99:2c:3e:e3:5d:33:21:13:ce:0c:bb:82: 07:f5:20:90:77:bf:b6:b0:22:36:35:74:e5:35:08:a3:2c:ce: 35:c9:66:91:36:d7:d2:80:f9:78:c4:42:6c:8d:49:76:a5:36: c2:53:ca:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4M7A4WgMCxVpwEhBLqAiMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZGYwODQ1OTExOTk2OWQ0YjljMTdmNWE4NWU5MjczMmM1 NTE3ZDEwHhcNMjUxMjE5MjAwMTA5WhcNMjUxMjIwMjAwMTA5WjAzMTEwLwYDVQQD EyhlYzMyZGFlM2ZkMzQzZDYyMGMwNGMwZTQ3YmNjMjRjNDgzZjEzODUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveI1QrzVdAxL5PPE+x95ZmgxZhmW CQ76vMTmvV8BNxYtY52ZwbXB5VLnbBRsCUM9wMMaZAVDoHPUd/v8Hkx40DOOv0r3 8r4lJVy0oldfJ0jqRjXlbthlxTMxAd/13joFnv2H6k21PjEVQiwy2xw7MhbxDr4C cTuLKqueIhT8q04NtiPIVDRvaAZJd37LU84y4vlJNv1jgRFkr1tiHHLmJx0EyIWI 2zVjf626x/lXZ+1PsWNzLD/AfAkOt7+UtUWf3Y8fZDG9qPXdJg0tp9aP66u3nd3v euAuxZafPCQBl+nA2sh2DM4+DfLjNp5oB0NfmCssAmIOhYm4kHC/aW5XmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOwy2uP9ND1iDATA5HvMJMSD8ThRMB8GA1UdIwQY MBaAFD/fCEWRGZadS5wX9aheknMsVRfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDk4SVJaRVpscDFMbkJmMXFGNlNjeXhWRjlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi81NjQ1Y2ItZjBiYS00NGZjLWJhOTMt NzM2OWYyY2E1YjNiLzEvUDk4SVJaRVpscDFMbkJmMXFGNlNjeXhWRjlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi81NjQ1Y2ItZjBiYS00NGZjLWJhOTMtNzM2OWYyY2E1YjNi LzEvUDk4SVJaRVpscDFMbkJmMXFGNlNjeXhWRjlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaTnFRh6H JunM/0llXHCr+Tt8Ff9hG6xIqXlWNDsobGZy+XAnXztv0awVtNbJ5IY56CZqZfSX O31xhhKRMA5YCFBAlXUvJ+4R10lMdwqrc9I8ecew9eACM6bLmUuVoGz6luV/HJcm d6r53fxYuxwvHZLUUWfjoYW7kSjgj9vb1uM62sZM3jro/j/fUYUXatkDmVEIAq3p W13FHv0nFNlO2RzJupC5MIG/bBgvHi6f73NuWP0FZ1coBr3CGONhdX9WSLhgO0ir yCOeiVEFmSw+410zIRPODLuCB/UgkHe/trAiNjV05TUIoyzONclmkTbX0oD5eMRC bI1JdqU2wlPKDQ== -----END CERTIFICATE-----Generated at Sat Dec 20 02:03:32 2025 by rpki-client