This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.mft File: pPC-25eOGSjR6XDKLtlpNxGP_2g.mft (raw, json) Hash identifier: 6b66/kRRG19YLeMtYJhZ83t+OdnxlTX3XncHU8AWKSM= Subject key identifier: B7:78:AE:D5:5B:A6:3C:82:40:BA:95:45:83:08:5C:41:DC:45:45:50 Authority key identifier: A4:F0:BE:DB:97:8E:19:28:D1:E9:70:CA:2E:D9:69:37:11:8F:FF:68 Certificate issuer: /CN=a4f0bedb978e1928d1e970ca2ed96937118fff68 Certificate serial: 019B3456E987F9CD3C3BBC9828DC7CD85F07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPC-25eOGSjR6XDKLtlpNxGP_2g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.mft Manifest number: 1105 Signing time: Fri 19 Dec 2025 02:01:09 +0000 Manifest this update: Fri 19 Dec 2025 02:01:09 +0000 Manifest next update: Sat 20 Dec 2025 02:01:09 +0000 Files and hashes: 1: 9p8e9WoA4C2DPVeIchZFPcz6XaE.roa (hash: 08xeCtquw3Dlp/xIPaCDCsu7UXWt+ysM9TiqCqTDfRY=) 2: pPC-25eOGSjR6XDKLtlpNxGP_2g.crl (hash: k+R6TZXuGxde7WMCD0ANWCIMMyGB1Ob7eFu0K4rOmRk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.crl rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.mft rsync://rpki.ripe.net/repository/DEFAULT/pPC-25eOGSjR6XDKLtlpNxGP_2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:23:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:e9:87:f9:cd:3c:3b:bc:98:28:dc:7c:d8:5f:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4f0bedb978e1928d1e970ca2ed96937118fff68 Validity Not Before: Dec 19 02:01:09 2025 GMT Not After : Dec 20 02:01:09 2025 GMT Subject: CN=b778aed55ba63c8240ba954583085c41dc454550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b2:39:70:48:72:0d:76:bb:0d:4e:dc:f1:d9: b4:47:16:11:22:ac:d3:cd:9a:6c:92:5c:13:9e:db: f5:84:55:2f:c4:ba:fc:88:f0:a6:ba:0e:5a:8d:2a: a5:d8:5c:82:ce:29:f7:fd:f0:4d:c3:68:ac:f8:0b: 58:4e:ac:41:0e:fc:a7:88:dc:cd:25:65:0d:2c:d4: 2a:e5:58:d6:7e:68:4b:5f:25:27:a5:af:c3:ff:87: 64:cb:a9:43:e0:1b:16:25:b7:8a:95:c4:e5:d8:2f: f0:97:82:1c:a2:36:26:ab:50:dc:f0:a2:e8:a9:54: f9:28:78:d7:d4:26:89:70:ef:af:20:b6:1a:12:68: aa:fd:99:e6:61:a1:33:91:78:4e:df:57:e2:af:29: 1c:b1:0f:5a:e9:15:93:f7:e9:57:16:7e:64:15:73: d0:7a:27:f1:ec:3a:5b:dd:58:d5:ca:27:6f:99:bf: 1d:67:3b:e5:cf:9d:a5:e7:f1:b0:23:1d:86:1d:17: 47:69:25:f3:e4:62:96:21:eb:f3:94:3e:44:9c:65: 01:3c:41:10:4d:a5:b5:0a:14:b5:e6:86:a3:16:64: ec:fe:ea:f3:cd:6e:95:37:2c:01:cc:f6:07:cc:cd: 4f:aa:d6:b6:7e:32:d2:2b:c7:99:6f:f5:8e:26:41: c5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:78:AE:D5:5B:A6:3C:82:40:BA:95:45:83:08:5C:41:DC:45:45:50 X509v3 Authority Key Identifier: keyid:A4:F0:BE:DB:97:8E:19:28:D1:E9:70:CA:2E:D9:69:37:11:8F:FF:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPC-25eOGSjR6XDKLtlpNxGP_2g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:6c:c5:6a:35:7c:d4:2f:a1:c1:64:88:30:6b:b6:45:73:e5: 1d:36:59:b5:fa:48:6f:81:a9:d8:07:2d:10:b9:59:90:13:ec: fe:48:2e:a4:48:87:a7:39:4d:83:28:21:58:34:f4:59:93:97: ad:67:aa:97:28:8d:bb:65:cd:53:e9:83:6b:9e:93:a7:4b:89: 15:3a:f2:1a:5a:e8:e2:4b:51:3b:67:90:c6:ab:bc:98:c7:bc: f6:f5:7f:ad:32:ff:17:cb:fd:98:3e:bd:c0:70:8f:f0:e0:aa: 00:47:e0:97:e4:11:01:8b:ab:ed:6c:80:af:0b:ae:63:9a:8d: d3:18:1b:a7:30:bc:9e:f8:d4:15:2f:46:8b:42:f2:16:31:52: 8b:fd:7b:7e:84:db:2f:28:d5:ca:ee:7c:28:37:70:35:a6:21: e0:2c:d0:83:fc:6c:39:1d:17:96:5d:d7:9e:6a:d8:e3:8d:54: 7f:f1:3d:32:c3:77:dc:ad:d0:69:2d:ab:56:bb:cf:64:fd:19: 20:6e:6b:1f:82:e0:0f:e0:a8:36:71:46:99:6f:69:9f:61:12: 76:e5:d1:1d:bb:dd:c9:88:61:d0:3c:05:b1:19:1d:86:a0:1b: bd:e7:e4:e2:a3:e5:81:b5:84:22:79:08:50:bb:1b:be:6f:1c: 66:af:97:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VumH+c08O7yYKNx82F8HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZjBiZWRiOTc4ZTE5MjhkMWU5NzBjYTJlZDk2OTM3MTE4 ZmZmNjgwHhcNMjUxMjE5MDIwMTA5WhcNMjUxMjIwMDIwMTA5WjAzMTEwLwYDVQQD EyhiNzc4YWVkNTViYTYzYzgyNDBiYTk1NDU4MzA4NWM0MWRjNDU0NTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7I5cEhyDXa7DU7c8dm0RxYRIqzT zZpsklwTntv1hFUvxLr8iPCmug5ajSql2FyCzin3/fBNw2is+AtYTqxBDvyniNzN JWUNLNQq5VjWfmhLXyUnpa/D/4dky6lD4BsWJbeKlcTl2C/wl4IcojYmq1Dc8KLo qVT5KHjX1CaJcO+vILYaEmiq/ZnmYaEzkXhO31firykcsQ9a6RWT9+lXFn5kFXPQ eifx7Dpb3VjVyidvmb8dZzvlz52l5/GwIx2GHRdHaSXz5GKWIevzlD5EnGUBPEEQ TaW1ChS15oajFmTs/urzzW6VNywBzPYHzM1Pqta2fjLSK8eZb/WOJkHFTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLd4rtVbpjyCQLqVRYMIXEHcRUVQMB8GA1UdIwQY MBaAFKTwvtuXjhko0elwyi7ZaTcRj/9oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFBDLTI1ZU9HU2pSNlhES0x0bHBOeEdQXzJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9kOGQ3MDUtNjJlZi00ZTY2LWI3ZTYt ZTgzZTVmZjYxOGRkLzEvcFBDLTI1ZU9HU2pSNlhES0x0bHBOeEdQXzJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9kOGQ3MDUtNjJlZi00ZTY2LWI3ZTYtZTgzZTVmZjYxOGRk LzEvcFBDLTI1ZU9HU2pSNlhES0x0bHBOeEdQXzJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhmzFajV8 1C+hwWSIMGu2RXPlHTZZtfpIb4Gp2ActELlZkBPs/kgupEiHpzlNgyghWDT0WZOX rWeqlyiNu2XNU+mDa56Tp0uJFTryGlro4ktRO2eQxqu8mMe89vV/rTL/F8v9mD69 wHCP8OCqAEfgl+QRAYur7WyArwuuY5qN0xgbpzC8nvjUFS9Gi0LyFjFSi/17foTb LyjVyu58KDdwNaYh4CzQg/xsOR0Xll3XnmrY441Uf/E9MsN33K3QaS2rVrvPZP0Z IG5rH4LgD+CoNnFGmW9pn2ESduXRHbvdyYhh0DwFsRkdhqAbvefk4qPlgbWEInkI ULsbvm8cZq+XmQ== -----END CERTIFICATE-----Generated at Fri Dec 19 08:40:48 2025 by rpki-client