This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft File: ppv5fceDSX88N716huWZSs7ngbA.mft (raw, json) Hash identifier: 9EVYFRexgIHqCWeVAqUfK3qLXFM5Jmi4VafAH+165GQ= Subject key identifier: BA:A5:33:0B:6F:A9:23:5B:CE:31:72:0F:CE:4E:4B:32:AB:A3:89:77 Authority key identifier: A6:9B:F9:7D:C7:83:49:7F:3C:37:BD:7A:86:E5:99:4A:CE:E7:81:B0 Certificate issuer: /CN=a69bf97dc783497f3c37bd7a86e5994acee781b0 Certificate serial: 019AF31D40671006A9AA25854E48E8E2109F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppv5fceDSX88N716huWZSs7ngbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft Manifest number: 115A Signing time: Sat 06 Dec 2025 10:02:51 +0000 Manifest this update: Sat 06 Dec 2025 10:02:51 +0000 Manifest next update: Sun 07 Dec 2025 10:02:51 +0000 Files and hashes: 1: ppv5fceDSX88N716huWZSs7ngbA.crl (hash: dUbRcnw4O8ey+QhHRHVr3CP/0QDAFzNmun8aI4qgvEI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.crl rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft rsync://rpki.ripe.net/repository/DEFAULT/ppv5fceDSX88N716huWZSs7ngbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:40:67:10:06:a9:aa:25:85:4e:48:e8:e2:10:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a69bf97dc783497f3c37bd7a86e5994acee781b0 Validity Not Before: Dec 6 10:02:51 2025 GMT Not After : Dec 7 10:02:51 2025 GMT Subject: CN=baa5330b6fa9235bce31720fce4e4b32aba38977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cc:7c:0c:26:b8:b8:f5:6a:d0:3f:21:e3:47: 83:1b:29:10:cd:d5:23:4c:71:61:37:b5:cc:48:89: f4:0b:b4:b1:32:7a:8a:ff:ea:3a:4b:20:ac:53:20: 6a:ea:5e:67:6a:fc:21:5d:9e:ea:79:af:ec:e2:f3: b4:e3:c0:79:9d:b7:74:d8:d9:d2:61:cd:fd:c2:7e: ee:1b:f3:cd:27:6d:91:e0:48:8a:6d:ef:81:a0:e6: 06:58:00:ff:0c:6a:d2:9d:04:38:41:3c:30:aa:17: 81:ad:66:3c:10:d0:90:3b:c9:80:30:d3:6d:b2:cb: 84:7a:c3:bf:d3:c9:13:e1:db:bd:c0:0c:a1:ca:a9: a2:9a:fd:d8:fd:46:fc:3b:1a:31:f8:c2:4c:15:6e: 0d:7b:e5:78:cc:7a:0f:9e:03:5d:c5:14:dc:b8:cf: 0c:e9:e6:20:04:82:11:2a:ef:09:2b:fd:41:a7:5c: 0d:ee:26:91:85:c6:f9:46:f6:b1:9f:d1:dc:d8:32: 5c:b7:41:95:d4:ed:34:2a:4d:01:cd:55:c9:bd:c8: f7:3a:f2:77:f6:e1:82:2d:de:17:07:79:38:76:f8: 4d:f2:24:97:28:45:bc:a2:99:54:71:72:28:dd:89: 38:e8:ee:bb:d9:0b:54:4d:8a:cf:d2:17:55:57:0f: 6b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A5:33:0B:6F:A9:23:5B:CE:31:72:0F:CE:4E:4B:32:AB:A3:89:77 X509v3 Authority Key Identifier: keyid:A6:9B:F9:7D:C7:83:49:7F:3C:37:BD:7A:86:E5:99:4A:CE:E7:81:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppv5fceDSX88N716huWZSs7ngbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:cc:92:cd:3c:66:b8:1a:ab:d8:b6:f8:ad:0c:d5:eb:66:4b: c2:1f:a1:c6:1b:3d:67:1a:19:2c:56:f0:fa:f8:97:fd:34:b6: 51:5e:6c:c6:c8:d0:6c:77:36:a7:b9:7c:44:c8:e9:1c:f3:d4: ac:07:5f:cb:fa:d0:61:17:ee:19:80:c8:1a:fd:1e:72:85:84: f9:65:32:4d:c2:ff:20:9f:ab:f8:b8:48:7b:af:99:db:41:e3: b3:94:8b:9f:19:10:d4:8c:fb:8e:ea:4b:15:0a:fe:7a:11:d4: ec:9c:e7:08:65:f7:12:b7:9b:ec:4e:c0:f3:17:a0:23:0a:6b: f1:93:86:1a:43:4b:2d:77:9e:bd:2b:7e:c1:27:de:f7:6d:0a: 43:b1:e8:30:db:46:3a:d1:ee:1e:6b:d5:83:e7:aa:f0:aa:30: e0:8c:b4:f2:f4:a6:72:0a:39:18:31:c4:68:54:6f:3a:15:7f: f6:cc:d5:ad:ce:46:29:d0:0a:8c:db:fc:d6:6c:95:c0:4e:5e: 28:4d:1b:21:dc:99:4d:5e:ae:90:eb:76:33:63:6d:d6:eb:7c: d2:97:33:d3:f3:10:13:92:22:dd:02:02:f1:ff:61:63:03:58: 1e:6a:55:cb:af:5c:d6:83:fd:00:87:4d:de:24:28:a0:43:fe: cd:2f:80:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHUBnEAapqiWFTkjo4hCfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2OWJmOTdkYzc4MzQ5N2YzYzM3YmQ3YTg2ZTU5OTRhY2Vl NzgxYjAwHhcNMjUxMjA2MTAwMjUxWhcNMjUxMjA3MTAwMjUxWjAzMTEwLwYDVQQD EyhiYWE1MzMwYjZmYTkyMzViY2UzMTcyMGZjZTRlNGIzMmFiYTM4OTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcx8DCa4uPVq0D8h40eDGykQzdUj THFhN7XMSIn0C7SxMnqK/+o6SyCsUyBq6l5navwhXZ7qea/s4vO048B5nbd02NnS Yc39wn7uG/PNJ22R4EiKbe+BoOYGWAD/DGrSnQQ4QTwwqheBrWY8ENCQO8mAMNNt ssuEesO/08kT4du9wAyhyqmimv3Y/Ub8Oxox+MJMFW4Ne+V4zHoPngNdxRTcuM8M 6eYgBIIRKu8JK/1Bp1wN7iaRhcb5Rvaxn9Hc2DJct0GV1O00Kk0BzVXJvcj3OvJ3 9uGCLd4XB3k4dvhN8iSXKEW8oplUcXIo3Yk46O672QtUTYrP0hdVVw9rjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLqlMwtvqSNbzjFyD85OSzKro4l3MB8GA1UdIwQY MBaAFKab+X3Hg0l/PDe9eoblmUrO54GwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHB2NWZjZURTWDg4TjcxNmh1V1pTczduZ2JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My85ZTIyYjgtNGViMS00ZDJmLWE4MDct N2I5NGZiNDNiNjBhLzEvcHB2NWZjZURTWDg4TjcxNmh1V1pTczduZ2JBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My85ZTIyYjgtNGViMS00ZDJmLWE4MDctN2I5NGZiNDNiNjBh LzEvcHB2NWZjZURTWDg4TjcxNmh1V1pTczduZ2JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUcySzTxm uBqr2Lb4rQzV62ZLwh+hxhs9ZxoZLFbw+viX/TS2UV5sxsjQbHc2p7l8RMjpHPPU rAdfy/rQYRfuGYDIGv0ecoWE+WUyTcL/IJ+r+LhIe6+Z20Hjs5SLnxkQ1Iz7jupL FQr+ehHU7JznCGX3Ereb7E7A8xegIwpr8ZOGGkNLLXeevSt+wSfe920KQ7HoMNtG OtHuHmvVg+eq8Kow4Iy08vSmcgo5GDHEaFRvOhV/9szVrc5GKdAKjNv81myVwE5e KE0bIdyZTV6ukOt2M2Nt1ut80pcz0/MQE5Ii3QIC8f9hYwNYHmpVy69c1oP9AIdN 3iQooEP+zS+Arg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:03:20 2025 by rpki-client