This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft File: P98IRZEZlp1LnBf1qF6ScyxVF9E.mft (raw, json) Hash identifier: Hxa7ADLycxd7Xa41iOYsyCiO0ERHps8BNGJZNcd8+Rc= Subject key identifier: A7:19:10:ED:45:61:41:82:F3:AC:E0:E9:61:AA:03:5A:89:1D:A4:2F Authority key identifier: 3F:DF:08:45:91:19:96:9D:4B:9C:17:F5:A8:5E:92:73:2C:55:17:D1 Certificate issuer: /CN=3fdf08459119969d4b9c17f5a85e92732c5517d1 Certificate serial: 019B194DAF4233120303B44C7A4D81B5444A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft Manifest number: 175D Signing time: Sat 13 Dec 2025 20:01:20 +0000 Manifest this update: Sat 13 Dec 2025 20:01:20 +0000 Manifest next update: Sun 14 Dec 2025 20:01:20 +0000 Files and hashes: 1: P98IRZEZlp1LnBf1qF6ScyxVF9E.crl (hash: G1vQgPDPy8jjqG65CuWuQ+n1j7IeE4CwqdneT1/bObw=) 2: qHPsdBiuTYXVZwMEuexg2CV5_Rc.roa (hash: okNXh+NCN1SYoCMfp10oC5B+Is3b/qKgY4b94Oq45BU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:4d:af:42:33:12:03:03:b4:4c:7a:4d:81:b5:44:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fdf08459119969d4b9c17f5a85e92732c5517d1 Validity Not Before: Dec 13 20:01:20 2025 GMT Not After : Dec 14 20:01:20 2025 GMT Subject: CN=a71910ed45614182f3ace0e961aa035a891da42f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:28:12:cd:3d:7e:ce:1e:5f:4d:6f:bd:7a:7b: 75:c9:ca:2d:1a:01:60:78:a9:7a:a2:aa:fe:4f:c2: b1:69:66:a4:e0:08:87:d6:02:8d:d3:42:02:a4:f1: c9:c7:2a:7a:81:5c:4d:de:60:98:76:bb:20:64:9a: 08:12:c4:28:94:93:53:40:9a:08:ad:80:e3:bd:0f: c6:e6:20:1e:1e:08:e4:37:3e:c3:1d:00:8f:ae:49: 7b:f9:89:7d:fd:6d:8a:4e:f5:2c:2b:60:22:d5:5b: 42:92:c6:3b:b1:00:65:82:11:0b:44:88:41:83:b5: 62:63:7d:9a:bc:f0:97:55:d6:78:86:ae:43:cd:eb: 09:65:1f:da:76:14:ce:49:ed:40:0a:b3:2f:78:3d: 74:53:3e:fe:8c:1c:ab:07:6f:f0:fb:0d:2e:40:82: ef:0c:3e:50:5f:08:0a:df:e1:33:52:9d:0b:88:dc: f2:36:0c:0e:f3:4c:1f:a6:46:97:b0:a1:1b:63:c6: 38:74:94:d1:3c:80:a6:b8:86:df:42:a3:e5:ed:84: 12:47:90:84:6d:0d:57:3e:59:9b:4c:53:56:f7:1b: 43:17:84:48:0e:18:89:61:67:9c:56:2a:c0:0a:6b: ad:22:a3:76:a4:fc:38:57:cb:65:54:2f:ad:4f:e0: 8c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:19:10:ED:45:61:41:82:F3:AC:E0:E9:61:AA:03:5A:89:1D:A4:2F X509v3 Authority Key Identifier: keyid:3F:DF:08:45:91:19:96:9D:4B:9C:17:F5:A8:5E:92:73:2C:55:17:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:0f:0c:25:5d:ad:83:a8:45:5a:60:21:88:0a:c5:d3:7f:cf: 38:8c:f8:ed:ed:a3:52:df:73:93:7b:12:a2:a6:dd:fc:c5:26: ac:11:09:69:00:81:ca:81:14:e9:bf:08:0f:cf:5e:45:3f:c7: 2a:01:9d:d2:43:07:b2:89:c5:f4:68:36:85:ab:e3:e4:61:1f: d4:4c:19:15:1b:d0:9b:f7:10:1a:d7:79:2e:ac:1e:83:7a:8f: 9f:bd:2e:ef:f6:f2:77:1a:91:fd:90:9e:00:fb:db:aa:bc:79: 56:36:b5:af:8b:fb:19:5b:97:a5:aa:7b:31:49:40:0b:4e:42: 62:48:ba:1d:73:1c:f4:c3:53:84:b2:0e:8f:e3:eb:24:bf:3d: e4:cd:9f:3e:6c:60:c8:38:5e:3f:c9:e0:a3:57:2a:0d:98:91: 3d:26:4e:04:50:36:90:26:03:6f:4e:3d:29:b7:d7:63:b7:b7: 57:06:09:96:35:30:70:f5:ef:34:b5:58:e1:4e:cb:26:04:9c: 23:02:45:a9:41:18:d5:3d:68:1c:24:ea:97:da:38:91:a4:66: c9:c4:aa:df:f1:29:02:f7:76:8c:5f:8b:2f:af:8a:39:d0:bb: 28:c4:4b:cc:af:58:67:cc:77:49:e5:f0:ce:c6:24:d3:7d:9c: 3f:77:5c:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZTa9CMxIDA7RMek2BtURKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZGYwODQ1OTExOTk2OWQ0YjljMTdmNWE4NWU5MjczMmM1 NTE3ZDEwHhcNMjUxMjEzMjAwMTIwWhcNMjUxMjE0MjAwMTIwWjAzMTEwLwYDVQQD EyhhNzE5MTBlZDQ1NjE0MTgyZjNhY2UwZTk2MWFhMDM1YTg5MWRhNDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCgSzT1+zh5fTW+9ent1ycotGgFg eKl6oqr+T8KxaWak4AiH1gKN00ICpPHJxyp6gVxN3mCYdrsgZJoIEsQolJNTQJoI rYDjvQ/G5iAeHgjkNz7DHQCPrkl7+Yl9/W2KTvUsK2Ai1VtCksY7sQBlghELRIhB g7ViY32avPCXVdZ4hq5DzesJZR/adhTOSe1ACrMveD10Uz7+jByrB2/w+w0uQILv DD5QXwgK3+EzUp0LiNzyNgwO80wfpkaXsKEbY8Y4dJTRPICmuIbfQqPl7YQSR5CE bQ1XPlmbTFNW9xtDF4RIDhiJYWecVirACmutIqN2pPw4V8tlVC+tT+CMXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKcZEO1FYUGC86zg6WGqA1qJHaQvMB8GA1UdIwQY MBaAFD/fCEWRGZadS5wX9aheknMsVRfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDk4SVJaRVpscDFMbkJmMXFGNlNjeXhWRjlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi81NjQ1Y2ItZjBiYS00NGZjLWJhOTMt NzM2OWYyY2E1YjNiLzEvUDk4SVJaRVpscDFMbkJmMXFGNlNjeXhWRjlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi81NjQ1Y2ItZjBiYS00NGZjLWJhOTMtNzM2OWYyY2E1YjNi LzEvUDk4SVJaRVpscDFMbkJmMXFGNlNjeXhWRjlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARg8MJV2t g6hFWmAhiArF03/POIz47e2jUt9zk3sSoqbd/MUmrBEJaQCByoEU6b8ID89eRT/H KgGd0kMHsonF9Gg2havj5GEf1EwZFRvQm/cQGtd5Lqweg3qPn70u7/bydxqR/ZCe APvbqrx5Vja1r4v7GVuXpap7MUlAC05CYki6HXMc9MNThLIOj+PrJL895M2fPmxg yDheP8ngo1cqDZiRPSZOBFA2kCYDb049KbfXY7e3VwYJljUwcPXvNLVY4U7LJgSc IwJFqUEY1T1oHCTql9o4kaRmycSq3/EpAvd2jF+LL6+KOdC7KMRLzK9YZ8x3SeXw zsYk032cP3dcDw== -----END CERTIFICATE-----Generated at Sun Dec 14 01:06:29 2025 by rpki-client