This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.mft File: P1ptl_x4eEKUBFeOXMDMZS_ktNQ.mft (raw, json) Hash identifier: k9Dj0cNKQy3BniTmJKBIQVPrrpTl+nuj1l+8V//ciH4= Subject key identifier: F3:39:0B:59:B2:8D:9F:5D:D4:A7:37:CD:F8:05:80:58:7E:27:AC:91 Authority key identifier: 3F:5A:6D:97:FC:78:78:42:94:04:57:8E:5C:C0:CC:65:2F:E4:B4:D4 Certificate issuer: /CN=3f5a6d97fc7878429404578e5cc0cc652fe4b4d4 Certificate serial: 019AF0886E9DC8AB643DAFBB549A6189230F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.mft Manifest number: 1622 Signing time: Fri 05 Dec 2025 22:01:04 +0000 Manifest this update: Fri 05 Dec 2025 22:01:04 +0000 Manifest next update: Sat 06 Dec 2025 22:01:04 +0000 Files and hashes: 1: P1ptl_x4eEKUBFeOXMDMZS_ktNQ.crl (hash: SeviQ9Ch9ZQHeFTMBYJyeYB7yPeYHe3VW67FKQQUnkM=) 2: yV6dlaQqykdXmPFxWtSp2DJEhJw.roa (hash: WmIvozgI3vtTkD0hLlFRwt8yL/FQ4uPIVdy3pddOlRc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.crl rsync://rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.mft rsync://rpki.ripe.net/repository/DEFAULT/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:6e:9d:c8:ab:64:3d:af:bb:54:9a:61:89:23:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f5a6d97fc7878429404578e5cc0cc652fe4b4d4 Validity Not Before: Dec 5 22:01:04 2025 GMT Not After : Dec 6 22:01:04 2025 GMT Subject: CN=f3390b59b28d9f5dd4a737cdf80580587e27ac91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2c:0d:72:99:3b:88:92:58:0f:ec:0f:23:7d: e6:55:e6:77:ed:22:41:46:2d:51:ae:26:8e:31:da: f6:2c:21:50:1b:53:14:8f:96:f0:7f:51:09:61:ad: 4a:34:89:4f:5a:eb:40:e9:e2:1a:3d:83:e0:a9:ad: 99:4d:ef:cf:77:13:e0:64:67:72:25:f4:43:03:6a: b8:e6:35:8a:a5:30:2c:3d:5f:ce:fd:3f:00:4d:9f: 1d:0d:95:d3:ce:5d:64:8a:db:b9:45:f7:86:ef:9f: 21:6e:7a:2d:d2:c8:ed:0c:04:76:8f:ab:23:ad:08: 88:df:19:97:13:4a:21:da:d2:18:f9:73:fb:fb:6d: 2f:1c:1a:ef:a2:44:e4:cc:dd:e5:35:8e:3d:5b:c3: 5d:de:d1:64:9a:b5:f7:9b:b5:98:1e:dd:43:cf:0a: 7d:55:17:c3:a8:a5:e9:7c:84:27:f5:ad:72:d3:84: 87:5f:fe:9a:14:7c:fb:76:92:86:cd:03:40:95:26: a8:17:86:92:c6:08:2b:c9:0b:f1:39:67:8f:1a:e3: 5d:f2:f3:3e:88:55:9f:aa:d8:90:e3:61:a5:16:f3: 0b:04:1c:62:05:45:7b:ad:de:21:f1:6b:58:5f:df: dc:59:69:65:cf:e1:07:54:15:d1:5f:96:4c:3d:61: 8c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:39:0B:59:B2:8D:9F:5D:D4:A7:37:CD:F8:05:80:58:7E:27:AC:91 X509v3 Authority Key Identifier: keyid:3F:5A:6D:97:FC:78:78:42:94:04:57:8E:5C:C0:CC:65:2F:E4:B4:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:a8:2b:a7:49:a6:6b:7c:0f:a3:85:ca:4b:e7:d5:7e:a3:e3: 73:96:05:7c:6b:c7:f0:fa:4f:f1:0e:18:2f:5c:be:0e:bc:91: c2:70:85:65:84:3f:cf:0e:b6:21:e5:ca:b0:94:21:ca:7e:30: 65:38:66:bf:bd:68:20:7d:d0:13:b4:74:0e:ff:57:9d:00:08: b9:dd:6b:1a:c5:62:2d:12:d6:f1:b9:46:89:b1:28:9f:8e:8c: d4:55:a2:4d:6b:7c:c1:dd:8d:c6:4f:d6:fd:dd:3e:9e:9b:54: e4:c3:08:5c:dd:8b:e2:2e:b0:c1:78:dd:fa:7d:a1:c5:ac:94: 7f:82:8d:86:38:b8:79:58:0a:55:e9:3f:99:ca:4c:97:f4:79: d3:c7:82:e9:c8:43:e3:71:3d:26:6f:5e:68:c9:57:e7:21:08: eb:c4:9e:d7:b5:a1:25:e6:e1:d3:97:18:59:5f:6d:b4:7a:dc: 44:8b:25:ec:ed:4c:79:77:cb:66:2d:09:4b:46:2b:2e:8f:01: 98:4e:93:83:ac:e5:b3:e0:2a:cb:81:8d:61:ad:ba:8e:e2:b8: d3:25:9c:3f:d6:ba:b9:00:f6:8e:97:fc:45:5c:e0:6d:43:b7: e6:65:9c:e4:18:22:26:4b:ff:b3:d0:12:91:10:e8:1f:3d:70: e6:a6:6b:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiG6dyKtkPa+7VJphiSMPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmNWE2ZDk3ZmM3ODc4NDI5NDA0NTc4ZTVjYzBjYzY1MmZl NGI0ZDQwHhcNMjUxMjA1MjIwMTA0WhcNMjUxMjA2MjIwMTA0WjAzMTEwLwYDVQQD EyhmMzM5MGI1OWIyOGQ5ZjVkZDRhNzM3Y2RmODA1ODA1ODdlMjdhYzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCwNcpk7iJJYD+wPI33mVeZ37SJB Ri1RriaOMdr2LCFQG1MUj5bwf1EJYa1KNIlPWutA6eIaPYPgqa2ZTe/PdxPgZGdy JfRDA2q45jWKpTAsPV/O/T8ATZ8dDZXTzl1kitu5RfeG758hbnot0sjtDAR2j6sj rQiI3xmXE0oh2tIY+XP7+20vHBrvokTkzN3lNY49W8Nd3tFkmrX3m7WYHt1Dzwp9 VRfDqKXpfIQn9a1y04SHX/6aFHz7dpKGzQNAlSaoF4aSxggryQvxOWePGuNd8vM+ iFWfqtiQ42GlFvMLBBxiBUV7rd4h8WtYX9/cWWllz+EHVBXRX5ZMPWGM1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPM5C1myjZ9d1Kc3zfgFgFh+J6yRMB8GA1UdIwQY MBaAFD9abZf8eHhClARXjlzAzGUv5LTUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDFwdGxfeDRlRUtVQkZlT1hNRE1aU19rdE5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82NWYwYzEtZmU5ZC00YjA5LWI1Mjgt NWRiMDMwYzFmMTRiLzEvUDFwdGxfeDRlRUtVQkZlT1hNRE1aU19rdE5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS82NWYwYzEtZmU5ZC00YjA5LWI1MjgtNWRiMDMwYzFmMTRi LzEvUDFwdGxfeDRlRUtVQkZlT1hNRE1aU19rdE5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC6grp0mm a3wPo4XKS+fVfqPjc5YFfGvH8PpP8Q4YL1y+DryRwnCFZYQ/zw62IeXKsJQhyn4w ZThmv71oIH3QE7R0Dv9XnQAIud1rGsViLRLW8blGibEon46M1FWiTWt8wd2Nxk/W /d0+nptU5MMIXN2L4i6wwXjd+n2hxayUf4KNhji4eVgKVek/mcpMl/R508eC6chD 43E9Jm9eaMlX5yEI68Se17WhJebh05cYWV9ttHrcRIsl7O1MeXfLZi0JS0YrLo8B mE6Tg6zls+Aqy4GNYa26juK40yWcP9a6uQD2jpf8RVzgbUO35mWc5BgiJkv/s9AS kRDoHz1w5qZrHA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:35 2025 by rpki-client