This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.mft File: P1ptl_x4eEKUBFeOXMDMZS_ktNQ.mft (raw, json) Hash identifier: mYo1Qzt+9z2hKc9WwYCrjIekrlZ6056ID+do1kjcDLI= Subject key identifier: 56:34:15:5B:B3:CD:E3:38:FF:E7:A1:E9:9C:FA:B3:68:3D:BF:CB:C2 Authority key identifier: 3F:5A:6D:97:FC:78:78:42:94:04:57:8E:5C:C0:CC:65:2F:E4:B4:D4 Certificate issuer: /CN=3f5a6d97fc7878429404578e5cc0cc652fe4b4d4 Certificate serial: 019B3231D4B1631173FD8F507C42F9ECEA60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.mft Manifest number: 1644 Signing time: Thu 18 Dec 2025 16:01:25 +0000 Manifest this update: Thu 18 Dec 2025 16:01:25 +0000 Manifest next update: Fri 19 Dec 2025 16:01:25 +0000 Files and hashes: 1: P1ptl_x4eEKUBFeOXMDMZS_ktNQ.crl (hash: UYTj3I2jqjQ/ZjJYufXwvRFkHQgfXYZQK1p3IdoUito=) 2: yV6dlaQqykdXmPFxWtSp2DJEhJw.roa (hash: WmIvozgI3vtTkD0hLlFRwt8yL/FQ4uPIVdy3pddOlRc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.crl rsync://rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.mft rsync://rpki.ripe.net/repository/DEFAULT/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:d4:b1:63:11:73:fd:8f:50:7c:42:f9:ec:ea:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f5a6d97fc7878429404578e5cc0cc652fe4b4d4 Validity Not Before: Dec 18 16:01:25 2025 GMT Not After : Dec 19 16:01:25 2025 GMT Subject: CN=5634155bb3cde338ffe7a1e99cfab3683dbfcbc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5d:84:96:f6:d6:99:8f:b0:d3:9a:45:83:1d: a6:ab:6c:e0:c0:2f:8a:0a:0a:79:01:2c:08:c2:1d: 42:a1:c7:95:84:3b:55:2d:e4:ad:98:d1:e2:8e:c7: 0d:37:98:ad:6a:3c:3a:d3:62:c2:55:0a:02:78:03: 31:c3:30:07:ce:73:e8:02:a0:f9:87:50:09:21:b7: 31:f0:4b:cd:61:0f:7f:28:95:e3:63:f4:05:3b:00: 25:e6:78:0d:45:36:2d:64:92:a0:39:1b:0a:d6:54: 9b:40:c1:54:b1:8f:fe:53:39:31:ee:43:53:2e:bc: 6b:bd:dd:f9:d4:b8:0d:19:ec:49:32:3f:57:80:8f: 06:74:91:15:77:a2:f7:37:7d:6d:e4:cc:f6:51:b6: 7e:69:af:b3:88:67:81:3d:8c:04:24:2c:b3:45:fd: e4:35:9c:73:b5:9d:49:aa:1d:60:1a:43:81:e6:63: db:61:85:f5:b8:95:26:94:82:26:25:24:5b:ea:0b: 2f:4c:c2:25:37:b8:99:4f:3b:77:65:7e:b8:a0:c1: 5a:c2:17:55:1b:7e:85:65:83:bb:45:0e:82:93:2c: c6:52:b8:47:a4:15:d6:ff:51:96:7b:f2:b9:37:8b: c7:eb:0c:40:0a:43:e0:5f:ea:b7:eb:80:f4:05:95: fd:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:34:15:5B:B3:CD:E3:38:FF:E7:A1:E9:9C:FA:B3:68:3D:BF:CB:C2 X509v3 Authority Key Identifier: keyid:3F:5A:6D:97:FC:78:78:42:94:04:57:8E:5C:C0:CC:65:2F:E4:B4:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:61:24:a5:2e:00:8b:30:4f:e2:fd:3f:74:34:2e:73:ee:c8: 2e:05:7e:d0:dc:67:52:a4:20:99:be:54:62:c5:b3:3c:c1:16: 30:5f:76:4e:0c:16:a3:24:29:d8:96:37:e5:90:a7:7b:82:ab: 69:cc:5c:0a:32:e3:fe:fd:80:2b:40:96:73:4f:75:ca:28:c1: e5:c2:91:88:ff:c0:b0:67:93:30:7c:1c:a9:b7:8b:b3:aa:f3: 13:b8:a2:fa:2e:db:96:04:55:86:51:9e:70:8e:9d:de:11:c5: a8:d2:f6:1d:14:c3:4f:5d:0a:12:30:8f:b3:fa:24:7e:61:35: 5b:53:96:d3:9b:3a:33:08:a3:c6:30:76:cc:60:d4:cb:7b:a8: 94:59:ed:55:60:fa:2e:17:6f:33:4a:a6:95:69:2b:4a:e8:b5: 03:a4:94:a9:fe:2e:30:91:21:e9:7f:26:5d:e9:1f:54:8d:d2: 55:81:71:d0:b1:05:4e:ba:ef:6e:65:8c:1c:38:fa:36:05:f5: cb:87:d2:94:97:ee:49:30:f0:0f:78:f8:28:5a:02:84:9b:b4: 75:61:72:2b:b1:a2:62:02:dc:dc:91:ca:c8:d1:29:1e:20:83: fb:32:5a:a1:78:21:22:a3:5a:60:65:dd:ca:b3:bd:8f:4c:d3: 53:74:a6:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMdSxYxFz/Y9QfEL57OpgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmNWE2ZDk3ZmM3ODc4NDI5NDA0NTc4ZTVjYzBjYzY1MmZl NGI0ZDQwHhcNMjUxMjE4MTYwMTI1WhcNMjUxMjE5MTYwMTI1WjAzMTEwLwYDVQQD Eyg1NjM0MTU1YmIzY2RlMzM4ZmZlN2ExZTk5Y2ZhYjM2ODNkYmZjYmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvV2ElvbWmY+w05pFgx2mq2zgwC+K Cgp5ASwIwh1CoceVhDtVLeStmNHijscNN5itajw602LCVQoCeAMxwzAHznPoAqD5 h1AJIbcx8EvNYQ9/KJXjY/QFOwAl5ngNRTYtZJKgORsK1lSbQMFUsY/+Uzkx7kNT Lrxrvd351LgNGexJMj9XgI8GdJEVd6L3N31t5Mz2UbZ+aa+ziGeBPYwEJCyzRf3k NZxztZ1Jqh1gGkOB5mPbYYX1uJUmlIImJSRb6gsvTMIlN7iZTzt3ZX64oMFawhdV G36FZYO7RQ6CkyzGUrhHpBXW/1GWe/K5N4vH6wxACkPgX+q364D0BZX9TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFY0FVuzzeM4/+eh6Zz6s2g9v8vCMB8GA1UdIwQY MBaAFD9abZf8eHhClARXjlzAzGUv5LTUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDFwdGxfeDRlRUtVQkZlT1hNRE1aU19rdE5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82NWYwYzEtZmU5ZC00YjA5LWI1Mjgt NWRiMDMwYzFmMTRiLzEvUDFwdGxfeDRlRUtVQkZlT1hNRE1aU19rdE5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS82NWYwYzEtZmU5ZC00YjA5LWI1MjgtNWRiMDMwYzFmMTRi LzEvUDFwdGxfeDRlRUtVQkZlT1hNRE1aU19rdE5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASGEkpS4A izBP4v0/dDQuc+7ILgV+0NxnUqQgmb5UYsWzPMEWMF92TgwWoyQp2JY35ZCne4Kr acxcCjLj/v2AK0CWc091yijB5cKRiP/AsGeTMHwcqbeLs6rzE7ii+i7blgRVhlGe cI6d3hHFqNL2HRTDT10KEjCPs/okfmE1W1OW05s6MwijxjB2zGDUy3uolFntVWD6 LhdvM0qmlWkrSui1A6SUqf4uMJEh6X8mXekfVI3SVYFx0LEFTrrvbmWMHDj6NgX1 y4fSlJfuSTDwD3j4KFoChJu0dWFyK7GiYgLc3JHKyNEpHiCD+zJaoXghIqNaYGXd yrO9j0zTU3SmCQ== -----END CERTIFICATE-----Generated at Thu Dec 18 19:12:55 2025 by rpki-client