This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft File: PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft (raw, json) Hash identifier: bGX7gI2wu29yZ5uBtJcWtPvZihEhaJ0zhNce752dNx0= Subject key identifier: 2D:E4:B4:98:35:EC:A3:D8:F8:B7:4B:EC:32:90:FC:84:8A:02:61:B8 Authority key identifier: 3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C Certificate issuer: /CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c Certificate serial: 019B3D90EA5F62B729407BB2C81E8B6E3BED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft Manifest number: 0ECE Signing time: Sat 20 Dec 2025 21:01:05 +0000 Manifest this update: Sat 20 Dec 2025 21:01:05 +0000 Manifest next update: Sun 21 Dec 2025 21:01:05 +0000 Files and hashes: 1: PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl (hash: zpfOlg5lRg2zdTPyiU+0zHC4EDYmb7jk1QlCQ/mtcvU=) 2: Zudt2t67uMUQbMO8N99rmxJB1wQ.roa (hash: SIlAW/DlBSg5+XbRtnFyzPAIYziyY+yFv6/k5lPUFJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 21:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:ea:5f:62:b7:29:40:7b:b2:c8:1e:8b:6e:3b:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c Validity Not Before: Dec 20 21:01:05 2025 GMT Not After : Dec 21 21:01:05 2025 GMT Subject: CN=2de4b49835eca3d8f8b74bec3290fc848a0261b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4b:c1:2c:af:1b:9b:3d:02:ad:be:36:7c:c2: 77:2f:9b:9e:ec:aa:dd:17:8b:2f:65:fc:c4:78:fc: 40:58:4c:d1:01:5f:f7:6c:d6:8e:5b:67:d5:1c:41: 3f:7d:fd:10:7e:a5:1a:8b:eb:ef:07:4e:74:d3:60: 23:e9:10:1e:ab:10:0c:6e:88:34:cf:51:dc:fe:e7: 33:1e:7a:2f:a7:d3:0d:83:a3:7b:fb:23:f5:ae:00: 7f:81:f0:3e:2c:43:81:50:ce:2f:5e:d0:cb:bf:77: 19:cc:88:b4:a0:00:16:42:22:91:22:40:76:2f:b0: d9:cf:c1:2e:64:6e:ad:41:7d:51:ee:03:1d:8b:10: 0c:0d:c1:6a:1f:0a:d4:7b:b1:63:bd:60:9a:fc:07: 50:ef:50:19:93:0f:d3:8c:60:dc:ac:5d:5e:c7:c0: 49:10:df:5e:eb:53:21:c6:35:05:bd:be:b5:24:15: 5a:41:0c:b6:bb:8b:27:06:6d:bf:97:24:2c:da:b7: a0:05:35:97:11:44:67:7e:c9:c7:66:de:a7:eb:c1: cf:71:ec:0e:f6:de:2e:c3:27:14:21:c7:4b:f2:89: d2:f3:74:a8:e2:d2:7b:ef:fe:a2:d4:0b:d4:81:9a: c9:e1:e0:2a:b7:1b:81:5c:e3:8e:58:da:6b:e3:8a: e6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E4:B4:98:35:EC:A3:D8:F8:B7:4B:EC:32:90:FC:84:8A:02:61:B8 X509v3 Authority Key Identifier: keyid:3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:12:10:70:75:d4:a6:85:33:4e:c6:6f:05:51:43:b4:c2:67: 1c:13:0d:37:ab:f8:05:c7:91:c0:6c:f5:ee:c3:b7:55:34:0f: c2:49:01:56:15:4f:98:12:46:5f:c1:00:79:d9:a5:b5:3f:01: 30:f4:d9:b0:ec:1c:7d:b0:9d:7e:d8:62:93:34:69:2a:7c:29: 0b:80:d6:92:a5:ff:f7:60:fb:7f:1c:bd:b7:5e:44:c0:68:25: 03:6f:32:92:61:89:da:d1:64:3e:bb:fd:10:ae:b5:3b:e7:5c: a1:93:fe:01:6a:ad:4b:e0:58:41:73:d8:f2:fe:54:3d:68:7f: 1f:65:61:de:6d:37:ab:ce:41:3d:ce:7c:91:cb:34:cb:b6:63: c9:4d:9d:25:5f:32:d4:e8:6e:77:60:23:e6:10:0d:46:86:95: b9:b0:0c:6a:b7:56:43:99:4d:77:2c:00:4d:c8:3a:a6:88:7a: 76:52:c0:ba:6b:4d:51:ec:5b:76:f9:1d:29:fc:6e:fa:c4:61: 78:21:15:74:48:9e:4c:89:74:aa:17:47:97:a1:07:7a:77:d3: 7d:a9:4b:45:15:70:69:99:17:63:1d:ba:fd:9c:ac:99:ba:dd: 54:0d:57:6d:01:b0:a8:12:be:5a:f1:d5:0a:2d:20:f9:95:11: 87:e0:40:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kOpfYrcpQHuyyB6LbjvtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjZmFhNDBmNjI2M2UwMGQxMjkxNjk4NTc2YTYxN2E1YjVk NjhhOWMwHhcNMjUxMjIwMjEwMTA1WhcNMjUxMjIxMjEwMTA1WjAzMTEwLwYDVQQD EygyZGU0YjQ5ODM1ZWNhM2Q4ZjhiNzRiZWMzMjkwZmM4NDhhMDI2MWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUvBLK8bmz0Crb42fMJ3L5ue7Krd F4svZfzEePxAWEzRAV/3bNaOW2fVHEE/ff0QfqUai+vvB05002Aj6RAeqxAMbog0 z1Hc/uczHnovp9MNg6N7+yP1rgB/gfA+LEOBUM4vXtDLv3cZzIi0oAAWQiKRIkB2 L7DZz8EuZG6tQX1R7gMdixAMDcFqHwrUe7FjvWCa/AdQ71AZkw/TjGDcrF1ex8BJ EN9e61MhxjUFvb61JBVaQQy2u4snBm2/lyQs2regBTWXEURnfsnHZt6n68HPcewO 9t4uwycUIcdL8onS83So4tJ77/6i1AvUgZrJ4eAqtxuBXOOOWNpr44rmLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC3ktJg17KPY+LdL7DKQ/ISKAmG4MB8GA1UdIwQY MBaAFDz6pA9iY+ANEpFphXamF6W11oqcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFBxa0QySmo0QTBTa1dtRmRxWVhwYlhXaXB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC84NDVhZWUtZGFhYy00NjQxLTlmMzEt OWU3ZjBmOTQxMDQ5LzEvUFBxa0QySmo0QTBTa1dtRmRxWVhwYlhXaXB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC84NDVhZWUtZGFhYy00NjQxLTlmMzEtOWU3ZjBmOTQxMDQ5 LzEvUFBxa0QySmo0QTBTa1dtRmRxWVhwYlhXaXB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALRIQcHXU poUzTsZvBVFDtMJnHBMNN6v4BceRwGz17sO3VTQPwkkBVhVPmBJGX8EAedmltT8B MPTZsOwcfbCdfthikzRpKnwpC4DWkqX/92D7fxy9t15EwGglA28ykmGJ2tFkPrv9 EK61O+dcoZP+AWqtS+BYQXPY8v5UPWh/H2Vh3m03q85BPc58kcs0y7ZjyU2dJV8y 1Ohud2Aj5hANRoaVubAMardWQ5lNdywATcg6poh6dlLAumtNUexbdvkdKfxu+sRh eCEVdEieTIl0qhdHl6EHenfTfalLRRVwaZkXYx26/ZysmbrdVA1XbQGwqBK+WvHV Ci0g+ZURh+BAlA== -----END CERTIFICATE-----Generated at Sun Dec 21 05:20:37 2025 by rpki-client