This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft File: P3cnpBMI2bn25j3xsg6LnNgjgSA.mft (raw, json) Hash identifier: Hc7qEfZ4XfNzX9DtW3rh6ry3zH+7Uh/yBLmQgoHnwDs= Subject key identifier: 29:BE:42:BB:C5:79:3E:36:89:77:AE:AA:85:0F:7F:7C:B3:43:9B:14 Authority key identifier: 3F:77:27:A4:13:08:D9:B9:F6:E6:3D:F1:B2:0E:8B:9C:D8:23:81:20 Certificate issuer: /CN=3f7727a41308d9b9f6e63df1b20e8b9cd8238120 Certificate serial: 019B59E40D6D608FD81862837616D98BA657 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft Manifest number: 088E Signing time: Fri 26 Dec 2025 09:01:16 +0000 Manifest this update: Fri 26 Dec 2025 09:01:16 +0000 Manifest next update: Sat 27 Dec 2025 09:01:16 +0000 Files and hashes: 1: P3cnpBMI2bn25j3xsg6LnNgjgSA.crl (hash: hID18K6IRS4MB57zIfrPp0Xfp4s8iNr8xGygiTynIFA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:0d:6d:60:8f:d8:18:62:83:76:16:d9:8b:a6:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f7727a41308d9b9f6e63df1b20e8b9cd8238120 Validity Not Before: Dec 26 09:01:16 2025 GMT Not After : Dec 27 09:01:16 2025 GMT Subject: CN=29be42bbc5793e368977aeaa850f7f7cb3439b14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e9:10:9e:10:1c:52:21:18:8a:9e:2b:11:09: c9:cc:38:a7:f2:3b:f5:2f:46:65:8b:53:77:d5:d9: 31:c3:6c:97:8d:a1:e3:48:ed:43:18:cb:e6:a2:94: ef:ca:0b:7f:0c:1e:9d:2a:c0:98:2a:e7:79:7d:ce: da:5f:5b:e4:6c:75:71:e8:62:9b:43:cc:34:1b:54: 28:b0:91:7e:65:cf:88:f7:4f:ce:68:90:2a:f4:83: 76:52:ab:4d:e3:b6:30:22:20:4d:7f:15:48:cb:c9: b1:2f:d8:f2:ad:91:29:00:e8:4f:67:c1:ba:d6:2f: 4b:28:08:3b:c5:bc:80:66:d2:19:d8:1a:63:3e:4c: 2c:03:6f:d2:9a:b5:f3:a3:2a:c4:31:7a:4d:15:bc: 21:74:56:64:1a:4f:9a:0f:2f:3b:fb:3b:8f:14:14: 31:8e:ad:b0:91:8d:35:3a:5c:3b:ce:d0:fe:fe:7e: 02:bb:58:ac:87:2c:c1:a7:ac:0f:d8:9b:4a:5e:e8: a4:6a:e9:c1:0c:50:e4:d8:21:7a:b3:ef:d8:4d:5b: 38:8f:0f:cc:e8:63:7e:27:a2:be:f3:3b:4f:1b:a1: be:54:7d:ad:cd:9a:1b:0a:8f:4d:95:f8:ee:88:9e: ca:76:6b:50:42:34:7d:1d:7e:6d:08:b0:49:ba:f7: 77:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:BE:42:BB:C5:79:3E:36:89:77:AE:AA:85:0F:7F:7C:B3:43:9B:14 X509v3 Authority Key Identifier: keyid:3F:77:27:A4:13:08:D9:B9:F6:E6:3D:F1:B2:0E:8B:9C:D8:23:81:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:e9:f8:ad:07:9f:a7:08:b5:b6:60:48:16:14:93:f2:7b:d4: 94:02:8e:d5:6f:bf:5b:7d:b3:2e:a1:b6:3e:90:6d:b9:e4:fc: 01:bd:0d:79:ee:44:38:53:53:03:21:17:a6:5e:0c:ef:bf:d4: cb:c4:96:7c:1f:ab:11:a2:10:e0:68:c9:21:a3:d2:21:fb:c4: ff:b4:8d:5c:5d:8c:b0:0b:2c:0f:f9:5f:0d:b2:7b:3b:64:ef: 7e:87:19:d7:75:2d:18:01:67:d9:69:2f:88:d6:39:01:d2:0b: 46:42:df:37:32:a5:88:93:48:7f:c0:a8:59:2c:34:40:d5:6e: 99:af:ba:8d:48:12:a4:1d:92:a4:18:32:d7:d3:ca:8b:33:73: 33:79:a3:a6:af:0f:10:3e:e5:68:ea:a7:0c:95:2a:1c:e1:03: 6f:bc:0b:04:b6:90:dd:eb:ad:3c:d6:40:0e:05:20:82:90:e0: 32:ef:e5:08:b2:87:0b:2f:ed:6e:44:93:dc:bc:1c:14:83:47: 50:07:c7:68:02:e6:a0:31:b2:a9:cd:7c:b2:c7:3f:6d:2a:84: ca:cf:85:75:35:28:40:63:41:35:94:53:24:83:0e:a3:ad:e3: e1:5c:5b:84:04:74:ed:dc:ab:ec:19:bc:9c:6c:4c:7f:6c:28: d8:64:fe:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5A1tYI/YGGKDdhbZi6ZXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmNzcyN2E0MTMwOGQ5YjlmNmU2M2RmMWIyMGU4YjljZDgy MzgxMjAwHhcNMjUxMjI2MDkwMTE2WhcNMjUxMjI3MDkwMTE2WjAzMTEwLwYDVQQD EygyOWJlNDJiYmM1NzkzZTM2ODk3N2FlYWE4NTBmN2Y3Y2IzNDM5YjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ekQnhAcUiEYip4rEQnJzDin8jv1 L0Zli1N31dkxw2yXjaHjSO1DGMvmopTvygt/DB6dKsCYKud5fc7aX1vkbHVx6GKb Q8w0G1QosJF+Zc+I90/OaJAq9IN2UqtN47YwIiBNfxVIy8mxL9jyrZEpAOhPZ8G6 1i9LKAg7xbyAZtIZ2BpjPkwsA2/SmrXzoyrEMXpNFbwhdFZkGk+aDy87+zuPFBQx jq2wkY01Olw7ztD+/n4Cu1ishyzBp6wP2JtKXuikaunBDFDk2CF6s+/YTVs4jw/M 6GN+J6K+8ztPG6G+VH2tzZobCo9NlfjuiJ7KdmtQQjR9HX5tCLBJuvd37wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCm+QrvFeT42iXeuqoUPf3yzQ5sUMB8GA1UdIwQY MBaAFD93J6QTCNm59uY98bIOi5zYI4EgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDNjbnBCTUkyYm4yNWozeHNnNkxuTmdqZ1NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hODhmMzAtNmUxYy00YzI4LWIwNzkt OTdlY2MwNzA2YmYwLzEvUDNjbnBCTUkyYm4yNWozeHNnNkxuTmdqZ1NBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9hODhmMzAtNmUxYy00YzI4LWIwNzktOTdlY2MwNzA2YmYw LzEvUDNjbnBCTUkyYm4yNWozeHNnNkxuTmdqZ1NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOun4rQef pwi1tmBIFhST8nvUlAKO1W+/W32zLqG2PpBtueT8Ab0Nee5EOFNTAyEXpl4M77/U y8SWfB+rEaIQ4GjJIaPSIfvE/7SNXF2MsAssD/lfDbJ7O2TvfocZ13UtGAFn2Wkv iNY5AdILRkLfNzKliJNIf8CoWSw0QNVuma+6jUgSpB2SpBgy19PKizNzM3mjpq8P ED7laOqnDJUqHOEDb7wLBLaQ3eutPNZADgUggpDgMu/lCLKHCy/tbkST3LwcFINH UAfHaALmoDGyqc18ssc/bSqEys+FdTUoQGNBNZRTJIMOo63j4VxbhAR07dyr7Bm8 nGxMf2wo2GT+Jw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:31 2025 by rpki-client