This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft File: pPP3bj7O8kl-ET6ju664U_YvWP4.mft (raw, json) Hash identifier: a4IlcqoGwDka4zTnJ/yDsX63tfMGnAUgEEFkKbhf5Ak= Subject key identifier: 9D:1B:A4:F7:7A:B4:4E:C2:F3:BC:27:28:B6:67:80:FF:E7:20:30:02 Authority key identifier: A4:F3:F7:6E:3E:CE:F2:49:7E:11:3E:A3:BB:AE:B8:53:F6:2F:58:FE Certificate issuer: /CN=a4f3f76e3ecef2497e113ea3bbaeb853f62f58fe Certificate serial: 019B2250585AD482C6409D035159BF10CDF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPP3bj7O8kl-ET6ju664U_YvWP4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft Manifest number: 0E0F Signing time: Mon 15 Dec 2025 14:00:49 +0000 Manifest this update: Mon 15 Dec 2025 14:00:49 +0000 Manifest next update: Tue 16 Dec 2025 14:00:49 +0000 Files and hashes: 1: 66ywR3ba4enexaVdWoqndnOvp4U.roa (hash: Qkz3r6su/bj0dLkhbVaX1i/95TsjjuS65tg9qxOjli4=) 2: pPP3bj7O8kl-ET6ju664U_YvWP4.crl (hash: FLMldPV7FfhbVsDjIJvdbMLCh3nwsAbjknJcXprIRe0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft rsync://rpki.ripe.net/repository/DEFAULT/pPP3bj7O8kl-ET6ju664U_YvWP4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:50:58:5a:d4:82:c6:40:9d:03:51:59:bf:10:cd:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4f3f76e3ecef2497e113ea3bbaeb853f62f58fe Validity Not Before: Dec 15 14:00:49 2025 GMT Not After : Dec 16 14:00:49 2025 GMT Subject: CN=9d1ba4f77ab44ec2f3bc2728b66780ffe7203002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3c:ad:3a:c2:70:d1:24:b9:5b:2e:d7:af:75: 65:64:e6:c5:22:c6:10:23:a3:70:97:85:08:c5:60: ca:07:28:dc:0f:93:d4:e0:a3:ef:ae:9b:b1:46:6f: e4:2e:38:d9:67:19:bd:0a:6f:f3:34:19:4c:b7:25: bb:60:49:f6:a0:e8:7f:65:e2:ee:aa:1a:1f:c3:58: 25:1d:a9:29:92:86:7b:32:df:bc:5b:11:47:fb:5b: 31:ee:78:bb:b8:62:d1:97:6e:ca:c7:c7:72:6d:37: 6f:3a:92:18:14:38:8c:6a:0a:cc:5b:d3:b0:0c:8c: 44:96:e7:c7:e2:0e:14:c0:4e:41:f2:2a:3b:2f:c6: ef:01:8a:2a:e0:5f:8b:1d:a6:be:e0:6d:25:84:83: 59:d9:4d:17:81:78:3a:32:c2:9d:9c:16:b7:99:ec: 0d:66:05:6d:11:0b:9a:c3:cf:e4:05:af:60:dd:6e: 53:01:21:c7:e9:10:53:64:67:66:32:d6:d1:0c:fe: 21:e4:cc:be:11:32:7e:56:a8:9b:47:c8:24:4f:88: f2:ae:3c:e1:22:c7:f2:6d:f3:20:04:4d:ec:bd:50: 2e:e5:0f:46:70:8a:7b:93:8d:e5:bc:78:82:b4:28: 21:c0:30:1c:6e:88:56:c0:c3:a1:3f:2f:bc:ab:de: 84:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:1B:A4:F7:7A:B4:4E:C2:F3:BC:27:28:B6:67:80:FF:E7:20:30:02 X509v3 Authority Key Identifier: keyid:A4:F3:F7:6E:3E:CE:F2:49:7E:11:3E:A3:BB:AE:B8:53:F6:2F:58:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPP3bj7O8kl-ET6ju664U_YvWP4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:04:11:8f:b2:03:58:79:91:4a:3c:52:48:6d:f6:c1:ee:8d: 73:8d:90:8d:76:a9:aa:95:0a:43:0a:0d:e8:bb:5c:e2:93:21: 73:1d:df:68:11:19:34:be:28:30:3a:75:27:a7:69:33:69:ff: fc:b9:e8:95:a0:d3:6a:c8:b2:5f:84:ab:1f:f2:84:a2:cb:ce: c9:4e:22:a7:be:4b:eb:f5:ca:f2:73:bf:36:d0:06:8a:e5:f1: ec:b4:1b:bb:fd:9e:7f:3e:51:74:8c:c0:5c:11:d7:a3:ba:85: f7:75:69:b2:15:33:17:a5:38:48:0c:50:29:aa:d1:a5:60:93: 8e:02:37:38:e4:ed:40:80:c8:2b:51:de:7c:75:19:16:94:34: 61:c4:a0:b3:38:b4:79:f2:f6:19:46:1d:48:95:8b:e4:6a:cb: 95:65:5d:aa:36:33:64:7d:32:90:20:7c:16:5d:e0:3b:a5:98: 4e:03:e9:a3:ec:7e:da:b5:6d:85:1f:57:50:24:26:1f:d6:3f: 41:41:e7:ac:77:6f:d0:ec:b7:b5:43:38:14:57:83:80:10:48: 1d:11:02:72:a5:30:d6:6b:f0:1f:f6:e5:a4:0d:1f:0d:ae:02: f5:98:fb:80:f3:4c:24:99:08:81:0a:10:d2:bc:30:b1:f1:7d: df:74:c7:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiUFha1ILGQJ0DUVm/EM30MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZjNmNzZlM2VjZWYyNDk3ZTExM2VhM2JiYWViODUzZjYy ZjU4ZmUwHhcNMjUxMjE1MTQwMDQ5WhcNMjUxMjE2MTQwMDQ5WjAzMTEwLwYDVQQD Eyg5ZDFiYTRmNzdhYjQ0ZWMyZjNiYzI3MjhiNjY3ODBmZmU3MjAzMDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTytOsJw0SS5Wy7Xr3VlZObFIsYQ I6Nwl4UIxWDKByjcD5PU4KPvrpuxRm/kLjjZZxm9Cm/zNBlMtyW7YEn2oOh/ZeLu qhofw1glHakpkoZ7Mt+8WxFH+1sx7ni7uGLRl27Kx8dybTdvOpIYFDiMagrMW9Ow DIxElufH4g4UwE5B8io7L8bvAYoq4F+LHaa+4G0lhINZ2U0XgXg6MsKdnBa3mewN ZgVtEQuaw8/kBa9g3W5TASHH6RBTZGdmMtbRDP4h5My+ETJ+VqibR8gkT4jyrjzh IsfybfMgBE3svVAu5Q9GcIp7k43lvHiCtCghwDAcbohWwMOhPy+8q96EEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ0bpPd6tE7C87wnKLZngP/nIDACMB8GA1UdIwQY MBaAFKTz924+zvJJfhE+o7uuuFP2L1j+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFBQM2JqN084a2wtRVQ2anU2NjRVX1l2V1A0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9kNmM1NWEtODYyOC00MjlmLWEyZWMt NGYyYzE5YmQ1NGQ3LzEvcFBQM2JqN084a2wtRVQ2anU2NjRVX1l2V1A0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9kNmM1NWEtODYyOC00MjlmLWEyZWMtNGYyYzE5YmQ1NGQ3 LzEvcFBQM2JqN084a2wtRVQ2anU2NjRVX1l2V1A0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEwQRj7ID WHmRSjxSSG32we6Nc42QjXapqpUKQwoN6Ltc4pMhcx3faBEZNL4oMDp1J6dpM2n/ /LnolaDTasiyX4SrH/KEosvOyU4ip75L6/XK8nO/NtAGiuXx7LQbu/2efz5RdIzA XBHXo7qF93VpshUzF6U4SAxQKarRpWCTjgI3OOTtQIDIK1HefHUZFpQ0YcSgszi0 efL2GUYdSJWL5GrLlWVdqjYzZH0ykCB8Fl3gO6WYTgPpo+x+2rVthR9XUCQmH9Y/ QUHnrHdv0Oy3tUM4FFeDgBBIHRECcqUw1mvwH/blpA0fDa4C9Zj7gPNMJJkIgQoQ 0rwwsfF933THrg== -----END CERTIFICATE-----Generated at Tue Dec 16 00:19:00 2025 by rpki-client