This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft File: PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft (raw, json) Hash identifier: pi9QMJG0206fmlW7zXwK/WjIJwBQCWtMWXsKLbTRbp8= Subject key identifier: 8A:04:D3:2C:7C:C6:5D:FF:90:90:64:FF:2D:B4:38:21:CE:CE:0D:8A Authority key identifier: 3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C Certificate issuer: /CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c Certificate serial: 019AF23FF8E8D77A39220463998489BE087D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft Manifest number: 0EA7 Signing time: Sat 06 Dec 2025 06:01:10 +0000 Manifest this update: Sat 06 Dec 2025 06:01:10 +0000 Manifest next update: Sun 07 Dec 2025 06:01:10 +0000 Files and hashes: 1: PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl (hash: ykF3zpLDs/H1eD0v/bhAZMoSdnZrd0UrnmBB2hx/w8A=) 2: Zudt2t67uMUQbMO8N99rmxJB1wQ.roa (hash: SIlAW/DlBSg5+XbRtnFyzPAIYziyY+yFv6/k5lPUFJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:f8:e8:d7:7a:39:22:04:63:99:84:89:be:08:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c Validity Not Before: Dec 6 06:01:10 2025 GMT Not After : Dec 7 06:01:10 2025 GMT Subject: CN=8a04d32c7cc65dff909064ff2db43821cece0d8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f3:20:3d:98:40:2a:97:01:f2:8a:e0:d5:7f: 90:4f:fb:96:6a:46:03:1a:53:b8:eb:08:6c:b3:31: cb:dd:bb:c5:48:87:b2:88:79:93:3d:91:a2:f2:1b: bb:93:b6:ac:4d:c1:5f:f3:1a:d6:4a:37:11:be:94: a0:d6:4f:a4:66:b3:6e:8e:74:05:09:b3:a2:6e:52: 13:ff:ac:92:b2:98:c4:25:dd:56:77:de:70:b5:c2: 39:ef:67:3a:e7:04:ad:c2:8e:e1:be:1d:55:6b:67: 86:c5:f9:2f:e6:fc:45:00:a5:0c:44:be:81:54:02: 85:93:51:e5:c4:e2:8b:c6:25:0b:26:26:af:ec:f2: 7f:a4:12:68:0b:68:bc:09:e0:de:39:44:33:e6:c7: 60:19:eb:2d:5c:57:6d:81:41:84:ec:57:eb:50:aa: 80:f3:97:a1:d5:62:98:86:df:49:14:0a:a3:d6:bb: 9a:78:49:d8:9e:0d:4b:56:7d:5b:e1:d7:f2:77:15: 07:c4:84:ec:9e:62:67:3f:45:88:0e:62:34:0f:66: f0:cb:50:bf:bf:98:f3:51:65:5f:84:bb:d1:c2:1c: 0d:f3:2f:9e:bc:7b:97:1f:a5:bb:4a:cf:83:0c:a9: 29:25:49:92:ca:41:57:e7:96:9d:e7:9b:e4:7f:6f: 39:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:04:D3:2C:7C:C6:5D:FF:90:90:64:FF:2D:B4:38:21:CE:CE:0D:8A X509v3 Authority Key Identifier: keyid:3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:dd:9c:a9:9e:83:32:77:16:fb:fd:d0:ae:71:4b:6b:5a:d8: 0c:90:d0:2d:86:c5:b8:53:de:5c:3d:20:88:98:46:95:70:87: f7:3b:d3:2b:69:b8:c1:7c:d3:a0:40:5c:f9:72:6b:9c:43:72: 9e:df:f2:6a:7a:7b:97:24:3f:97:91:7e:ab:52:6c:84:96:69: 76:45:c9:f6:54:75:cb:df:67:9f:14:c5:84:fe:d0:b8:2a:2a: 1e:fc:c2:37:92:f7:aa:b6:ff:e9:33:a2:4b:75:ab:0e:4a:d6: ab:f4:a0:4e:0a:38:42:49:4b:b0:4b:06:34:cd:6c:fd:f3:1a: 17:fe:d5:3f:1b:3f:cb:5c:0c:c0:bf:6a:60:e0:1d:27:fa:3a: a9:97:1b:50:cb:21:0d:d0:c6:9c:aa:cf:ea:9e:41:01:f9:61: 24:e2:9a:42:69:42:99:1a:b7:e9:a3:6d:df:38:ee:05:15:89: ba:ac:27:aa:2a:88:80:da:4a:31:51:c1:9f:ef:e4:91:78:30: a0:94:f9:c5:b2:92:21:3a:8d:f9:0d:29:e0:85:e6:1c:7b:bb: 4e:e3:de:98:f7:e5:0c:40:e7:e7:3a:1b:51:81:d7:c7:04:03: a9:fe:5f:d2:20:03:a8:be:47:50:68:02:9e:29:c6:68:58:3c: 59:cf:a0:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP/jo13o5IgRjmYSJvgh9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjZmFhNDBmNjI2M2UwMGQxMjkxNjk4NTc2YTYxN2E1YjVk NjhhOWMwHhcNMjUxMjA2MDYwMTEwWhcNMjUxMjA3MDYwMTEwWjAzMTEwLwYDVQQD Eyg4YTA0ZDMyYzdjYzY1ZGZmOTA5MDY0ZmYyZGI0MzgyMWNlY2UwZDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPMgPZhAKpcB8org1X+QT/uWakYD GlO46whsszHL3bvFSIeyiHmTPZGi8hu7k7asTcFf8xrWSjcRvpSg1k+kZrNujnQF CbOiblIT/6ySspjEJd1Wd95wtcI572c65wStwo7hvh1Va2eGxfkv5vxFAKUMRL6B VAKFk1HlxOKLxiULJiav7PJ/pBJoC2i8CeDeOUQz5sdgGestXFdtgUGE7FfrUKqA 85eh1WKYht9JFAqj1ruaeEnYng1LVn1b4dfydxUHxITsnmJnP0WIDmI0D2bwy1C/ v5jzUWVfhLvRwhwN8y+evHuXH6W7Ss+DDKkpJUmSykFX55ad55vkf2854wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIoE0yx8xl3/kJBk/y20OCHOzg2KMB8GA1UdIwQY MBaAFDz6pA9iY+ANEpFphXamF6W11oqcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFBxa0QySmo0QTBTa1dtRmRxWVhwYlhXaXB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC84NDVhZWUtZGFhYy00NjQxLTlmMzEt OWU3ZjBmOTQxMDQ5LzEvUFBxa0QySmo0QTBTa1dtRmRxWVhwYlhXaXB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC84NDVhZWUtZGFhYy00NjQxLTlmMzEtOWU3ZjBmOTQxMDQ5 LzEvUFBxa0QySmo0QTBTa1dtRmRxWVhwYlhXaXB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcd2cqZ6D MncW+/3QrnFLa1rYDJDQLYbFuFPeXD0giJhGlXCH9zvTK2m4wXzToEBc+XJrnENy nt/yanp7lyQ/l5F+q1JshJZpdkXJ9lR1y99nnxTFhP7QuCoqHvzCN5L3qrb/6TOi S3WrDkrWq/SgTgo4QklLsEsGNM1s/fMaF/7VPxs/y1wMwL9qYOAdJ/o6qZcbUMsh DdDGnKrP6p5BAflhJOKaQmlCmRq36aNt3zjuBRWJuqwnqiqIgNpKMVHBn+/kkXgw oJT5xbKSITqN+Q0p4IXmHHu7TuPemPflDEDn5zobUYHXxwQDqf5f0iADqL5HUGgC ninGaFg8Wc+gvw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:16:03 2025 by rpki-client