This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft File: pS3-y7QxcCl5YaIbfltKPEfeCVs.mft (raw, json) Hash identifier: 4wsgwzu5TSo+NDFyzdHpUxX+/p3Txmjt93ueYGdxet0= Subject key identifier: BC:B5:3E:73:94:FC:D5:33:9E:1E:2C:E8:2B:BE:D3:78:F9:D5:75:35 Authority key identifier: A5:2D:FE:CB:B4:31:70:29:79:61:A2:1B:7E:5B:4A:3C:47:DE:09:5B Certificate issuer: /CN=a52dfecbb43170297961a21b7e5b4a3c47de095b Certificate serial: 019B21760864D2FFCA1B7B265650E33B9776 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft Manifest number: 098C Signing time: Mon 15 Dec 2025 10:02:22 +0000 Manifest this update: Mon 15 Dec 2025 10:02:22 +0000 Manifest next update: Tue 16 Dec 2025 10:02:22 +0000 Files and hashes: 1: pS3-y7QxcCl5YaIbfltKPEfeCVs.crl (hash: uVtTCCDEIgSSOIq0a9gCObLWhluKrKdmlJE21z7O7MI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:76:08:64:d2:ff:ca:1b:7b:26:56:50:e3:3b:97:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a52dfecbb43170297961a21b7e5b4a3c47de095b Validity Not Before: Dec 15 10:02:22 2025 GMT Not After : Dec 16 10:02:22 2025 GMT Subject: CN=bcb53e7394fcd5339e1e2ce82bbed378f9d57535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2a:4b:c7:9f:aa:ca:95:ef:78:d7:d8:ea:ed: 47:b0:e4:ad:92:09:2e:5e:9a:ba:55:0e:e9:dd:8a: 3e:a2:5b:1f:19:63:9f:ff:65:c2:14:21:a5:fe:19: b4:8a:ab:14:9f:76:e8:47:78:b6:f8:d3:21:37:9b: 63:cf:85:6f:27:47:e2:6d:60:8d:87:f8:b2:b8:ce: bc:00:cf:27:99:f4:43:cc:a5:79:17:d1:e9:0c:cf: 6b:5d:67:77:59:09:c5:bd:e6:c8:e9:6d:be:66:90: c4:89:54:8b:1c:43:23:02:08:9c:3b:15:52:df:7f: 05:5b:80:42:2c:f0:fa:56:03:aa:ed:20:b6:b5:1c: 0e:83:29:de:a9:08:ca:85:ab:db:58:44:fe:0c:28: f5:07:36:64:56:d3:aa:50:95:03:61:ad:e0:bc:26: 25:a6:1c:2c:c1:99:89:12:59:45:db:8d:41:a8:9c: dd:3a:7e:f2:4e:74:bf:7e:1b:a9:7c:04:4b:e4:91: 11:86:a3:d7:8a:f1:fe:63:fb:7f:59:a4:c1:90:a0: 65:34:dc:d7:ae:fb:52:f8:30:7c:4d:ce:a2:fd:fb: 69:d0:59:08:fd:39:fe:94:f1:68:6b:c8:f5:3e:5f: 21:07:f1:59:af:3b:b7:ea:a7:5a:34:39:f9:92:27: cd:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B5:3E:73:94:FC:D5:33:9E:1E:2C:E8:2B:BE:D3:78:F9:D5:75:35 X509v3 Authority Key Identifier: keyid:A5:2D:FE:CB:B4:31:70:29:79:61:A2:1B:7E:5B:4A:3C:47:DE:09:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:13:9f:71:07:d4:66:1d:2d:e5:f2:25:c0:d5:f9:41:5c:ae: b2:39:a6:84:99:a5:4b:6a:7f:8b:2e:b9:70:10:f9:19:7d:97: 3f:5d:eb:60:c8:c4:86:48:a6:4f:01:4f:d3:f0:8e:60:d3:5e: c8:07:32:7a:e9:f6:b0:90:2b:4d:a0:b2:8a:76:0a:80:35:00: 41:cc:16:7d:bf:2d:2f:49:05:7a:df:ea:d4:9e:89:f5:2d:24: ed:9d:9d:ef:e7:1e:ca:49:04:2a:0d:05:50:2a:ca:19:0c:1b: 8f:a8:93:81:f0:68:8d:2f:b3:a4:f0:22:c8:31:62:0c:fa:69: 08:e5:b3:6f:cd:4f:d9:72:73:35:6a:df:65:4a:83:e5:97:2e: 9e:1e:81:9b:02:6c:67:6a:43:47:81:73:93:d4:e1:ad:d2:2d: c2:cc:e0:54:2d:18:4b:a3:06:6c:5b:4a:fe:94:9e:1e:85:a8: 4f:e4:b8:d2:e1:c1:dd:fe:06:d5:d5:d9:87:4e:0b:a8:d7:79: 4d:5e:a2:ac:8c:75:30:4d:41:e2:34:12:50:d1:87:58:00:70: fc:2a:7f:ef:41:ad:39:d3:95:f0:19:57:e0:01:1b:fa:41:6e: 86:f3:77:8a:70:7f:3f:66:60:21:f6:85:6b:1b:d6:ff:a4:f3: e7:0a:a6:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdghk0v/KG3smVlDjO5d2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MmRmZWNiYjQzMTcwMjk3OTYxYTIxYjdlNWI0YTNjNDdk ZTA5NWIwHhcNMjUxMjE1MTAwMjIyWhcNMjUxMjE2MTAwMjIyWjAzMTEwLwYDVQQD EyhiY2I1M2U3Mzk0ZmNkNTMzOWUxZTJjZTgyYmJlZDM3OGY5ZDU3NTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CpLx5+qypXveNfY6u1HsOStkgku Xpq6VQ7p3Yo+olsfGWOf/2XCFCGl/hm0iqsUn3boR3i2+NMhN5tjz4VvJ0fibWCN h/iyuM68AM8nmfRDzKV5F9HpDM9rXWd3WQnFvebI6W2+ZpDEiVSLHEMjAgicOxVS 338FW4BCLPD6VgOq7SC2tRwOgyneqQjKhavbWET+DCj1BzZkVtOqUJUDYa3gvCYl phwswZmJEllF241BqJzdOn7yTnS/fhupfARL5JERhqPXivH+Y/t/WaTBkKBlNNzX rvtS+DB8Tc6i/ftp0FkI/Tn+lPFoa8j1Pl8hB/FZrzu36qdaNDn5kifNewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLy1PnOU/NUznh4s6Cu+03j51XU1MB8GA1UdIwQY MBaAFKUt/su0MXApeWGiG35bSjxH3glbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFMzLXk3UXhjQ2w1WWFJYmZsdEtQRWZlQ1ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82MzI5MTUtZTdhMS00NjEwLWJmMTUt YmQ1NzkwYTJiYTUwLzEvcFMzLXk3UXhjQ2w1WWFJYmZsdEtQRWZlQ1ZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS82MzI5MTUtZTdhMS00NjEwLWJmMTUtYmQ1NzkwYTJiYTUw LzEvcFMzLXk3UXhjQ2w1WWFJYmZsdEtQRWZlQ1ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWhOfcQfU Zh0t5fIlwNX5QVyusjmmhJmlS2p/iy65cBD5GX2XP13rYMjEhkimTwFP0/COYNNe yAcyeun2sJArTaCyinYKgDUAQcwWfb8tL0kFet/q1J6J9S0k7Z2d7+ceykkEKg0F UCrKGQwbj6iTgfBojS+zpPAiyDFiDPppCOWzb81P2XJzNWrfZUqD5Zcunh6BmwJs Z2pDR4Fzk9ThrdItwszgVC0YS6MGbFtK/pSeHoWoT+S40uHB3f4G1dXZh04LqNd5 TV6irIx1ME1B4jQSUNGHWABw/Cp/70GtOdOV8BlX4AEb+kFuhvN3inB/P2ZgIfaF axvW/6Tz5wqmnQ== -----END CERTIFICATE-----Generated at Mon Dec 15 13:16:51 2025 by rpki-client