This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft File: P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft (raw, json) Hash identifier: Xcd6CL12mBNEIKkK5XqEy+8dgqzb1ujFDSSXjVVjUaU= Subject key identifier: 6C:3E:93:7A:68:9F:C5:AA:48:F7:D0:02:D2:61:BD:2A:A6:A0:AB:02 Authority key identifier: 3F:4B:FE:92:DE:10:E6:60:DD:F4:5C:C2:D1:F5:FF:B6:36:EF:35:90 Certificate issuer: /CN=3f4bfe92de10e660ddf45cc2d1f5ffb636ef3590 Certificate serial: 019B5ABFA025C2541FBA453EDE014AE8307C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft Manifest number: 59 Signing time: Fri 26 Dec 2025 13:01:06 +0000 Manifest this update: Fri 26 Dec 2025 13:01:06 +0000 Manifest next update: Sat 27 Dec 2025 13:01:06 +0000 Files and hashes: 1: P0v-kt4Q5mDd9FzC0fX_tjbvNZA.crl (hash: 8X/E8wQWISaIlnNYzpcVnozTdGWe3OeyE9UMbJ7SKb0=) 2: qlaxC5IjGWh-sjlOO0aWlfo9EJo.roa (hash: tswrwQr+o6+vubHC/2IG1+zCegkDLGFgHNmgJCcToQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft rsync://rpki.ripe.net/repository/DEFAULT/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:a0:25:c2:54:1f:ba:45:3e:de:01:4a:e8:30:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f4bfe92de10e660ddf45cc2d1f5ffb636ef3590 Validity Not Before: Dec 26 13:01:06 2025 GMT Not After : Dec 27 13:01:06 2025 GMT Subject: CN=6c3e937a689fc5aa48f7d002d261bd2aa6a0ab02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:5a:41:00:b0:86:f6:ae:03:b8:16:8b:ca:50: df:56:fc:e3:b2:63:c2:2d:39:e5:31:2c:88:ff:ed: 1c:12:d1:61:02:7d:26:a5:24:c4:8a:8e:c9:04:49: 7c:89:3a:03:83:95:29:ff:b8:fd:da:14:23:99:0e: cf:a3:2d:3b:09:78:f6:9f:e2:da:1d:86:79:3a:4b: f7:6c:9a:f4:21:50:29:ea:f6:96:fb:19:e3:06:2b: ee:7f:ec:89:06:33:e0:20:81:8f:2b:f4:6c:db:bc: c1:67:13:7e:6b:92:73:e9:ec:db:2e:4d:9c:ff:17: 34:22:9a:38:47:59:6a:59:58:f6:c4:03:ee:7e:dd: 4b:0f:d6:2f:d7:fd:ef:34:fe:c5:ac:b0:9e:4c:65: 30:b4:51:bc:b2:26:e2:7c:0c:51:66:46:59:2f:d3: fb:1b:a4:5d:11:b7:8e:d2:b9:06:54:53:db:44:a6: 57:ed:93:eb:0b:30:e7:d8:85:13:eb:5d:d2:39:74: c1:46:40:06:cd:65:3e:ba:c2:a8:ad:cf:01:50:c6: b3:d0:24:8e:a5:ea:6e:86:1a:5a:c4:51:ed:02:b7: 82:13:66:ee:8b:fc:41:d7:4d:65:8c:a5:4b:5b:35: 57:38:14:7c:64:81:3c:af:8a:5e:1c:db:bb:8f:8a: ab:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:3E:93:7A:68:9F:C5:AA:48:F7:D0:02:D2:61:BD:2A:A6:A0:AB:02 X509v3 Authority Key Identifier: keyid:3F:4B:FE:92:DE:10:E6:60:DD:F4:5C:C2:D1:F5:FF:B6:36:EF:35:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:ac:8c:4f:f4:09:54:af:9f:4f:c2:bf:5d:49:f5:05:46:73: 55:75:29:ea:87:f3:89:f6:ff:c6:3b:a1:70:6d:33:f8:58:71: af:88:01:cd:04:9d:cb:3e:6d:3c:0d:0c:85:f1:0a:87:bf:a4: 23:a0:be:49:1a:d6:b0:35:6b:ed:37:ba:2d:fe:99:fb:5c:9a: 9e:00:71:3f:c7:d4:2e:21:a3:f9:42:31:83:b3:8d:7c:84:94: c3:fd:d9:d2:3a:48:ff:9b:70:24:4d:b2:a6:35:71:e7:34:e0: d6:d6:2d:97:58:84:b5:ee:2f:82:51:b0:ba:f0:a2:8b:98:d5: a1:1e:95:26:f6:4a:15:f5:25:f2:c6:d5:57:61:f8:2c:30:60: d1:77:df:c5:b9:97:b6:a3:d7:fd:2f:d4:ad:ef:e2:52:13:ba: 1f:21:16:fd:65:93:04:3d:c3:44:4f:dd:a7:62:34:2a:f5:50: ec:36:77:f8:66:e2:f5:87:8d:fc:4e:01:2b:00:34:f6:0b:ea: 07:40:6a:8d:b8:be:cb:c9:cd:46:f7:ef:fc:89:7d:d8:a9:e5: 2b:53:f4:b1:e9:63:92:ec:89:f6:f2:c1:30:87:9a:ed:87:fb: fc:b1:f1:02:c2:de:9d:1e:1b:a6:ee:bf:a0:99:d6:72:31:7b: 56:95:dc:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav6AlwlQfukU+3gFK6DB8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmNGJmZTkyZGUxMGU2NjBkZGY0NWNjMmQxZjVmZmI2MzZl ZjM1OTAwHhcNMjUxMjI2MTMwMTA2WhcNMjUxMjI3MTMwMTA2WjAzMTEwLwYDVQQD Eyg2YzNlOTM3YTY4OWZjNWFhNDhmN2QwMDJkMjYxYmQyYWE2YTBhYjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9VpBALCG9q4DuBaLylDfVvzjsmPC LTnlMSyI/+0cEtFhAn0mpSTEio7JBEl8iToDg5Up/7j92hQjmQ7Poy07CXj2n+La HYZ5Okv3bJr0IVAp6vaW+xnjBivuf+yJBjPgIIGPK/Rs27zBZxN+a5Jz6ezbLk2c /xc0Ipo4R1lqWVj2xAPuft1LD9Yv1/3vNP7FrLCeTGUwtFG8sibifAxRZkZZL9P7 G6RdEbeO0rkGVFPbRKZX7ZPrCzDn2IUT613SOXTBRkAGzWU+usKorc8BUMaz0CSO pepuhhpaxFHtAreCE2bui/xB101ljKVLWzVXOBR8ZIE8r4peHNu7j4qriwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGw+k3pon8WqSPfQAtJhvSqmoKsCMB8GA1UdIwQY MBaAFD9L/pLeEOZg3fRcwtH1/7Y27zWQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDB2LWt0NFE1bURkOUZ6QzBmWF90amJ2TlpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC83ZWFjNGYtNzdkZC00MDc3LWFlM2Yt Y2U2NDgyZDBmMWI2LzEvUDB2LWt0NFE1bURkOUZ6QzBmWF90amJ2TlpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC83ZWFjNGYtNzdkZC00MDc3LWFlM2YtY2U2NDgyZDBmMWI2 LzEvUDB2LWt0NFE1bURkOUZ6QzBmWF90amJ2TlpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZayMT/QJ VK+fT8K/XUn1BUZzVXUp6ofzifb/xjuhcG0z+Fhxr4gBzQSdyz5tPA0MhfEKh7+k I6C+SRrWsDVr7Te6Lf6Z+1yangBxP8fULiGj+UIxg7ONfISUw/3Z0jpI/5twJE2y pjVx5zTg1tYtl1iEte4vglGwuvCii5jVoR6VJvZKFfUl8sbVV2H4LDBg0XffxbmX tqPX/S/Ure/iUhO6HyEW/WWTBD3DRE/dp2I0KvVQ7DZ3+Gbi9YeN/E4BKwA09gvq B0Bqjbi+y8nNRvfv/Il92KnlK1P0seljkuyJ9vLBMIea7Yf7/LHxAsLenR4bpu6/ oJnWcjF7VpXcuw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:20 2025 by rpki-client