This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.mft File: PpvRijUxNTVm7RgUDK10GQW-r64.mft (raw, json) Hash identifier: zOyy5QWBFcsoan7DShJXSinxoAPHTwMNYLqEu27IR0s= Subject key identifier: 44:AB:F0:06:16:0C:A1:58:9B:9A:FA:B9:EE:70:8C:38:29:F6:65:B1 Authority key identifier: 3E:9B:D1:8A:35:31:35:35:66:ED:18:14:0C:AD:74:19:05:BE:AF:AE Certificate issuer: /CN=3e9bd18a3531353566ed18140cad741905beafae Certificate serial: 019AF209A84B6994776330D2A9D148123753 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PpvRijUxNTVm7RgUDK10GQW-r64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.mft Manifest number: 07 Signing time: Sat 06 Dec 2025 05:01:50 +0000 Manifest this update: Sat 06 Dec 2025 05:01:50 +0000 Manifest next update: Sun 07 Dec 2025 05:01:50 +0000 Files and hashes: 1: 03eGanIB24DOZ7MKOXSZJGh-5cA.roa (hash: iyZvfLEmfTPTO9GO7+ZlUk9hdJrJwgF8x+Hodf8w1sU=) 2: PpvRijUxNTVm7RgUDK10GQW-r64.crl (hash: 3RbVppNra7hrEekOhf1e69lSzZL1C5tkKhRSo6C3Xcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.mft rsync://rpki.ripe.net/repository/DEFAULT/PpvRijUxNTVm7RgUDK10GQW-r64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:a8:4b:69:94:77:63:30:d2:a9:d1:48:12:37:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e9bd18a3531353566ed18140cad741905beafae Validity Not Before: Dec 6 05:01:50 2025 GMT Not After : Dec 7 05:01:50 2025 GMT Subject: CN=44abf006160ca1589b9afab9ee708c3829f665b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e3:9f:26:d5:a7:77:16:25:2d:fc:68:a5:35: cc:ae:71:8f:ed:41:d1:c6:27:21:8c:59:34:d0:35: 8d:0f:93:17:b7:7e:a2:9d:1e:60:7a:c4:ef:91:ff: 01:9c:bb:32:37:5a:fe:de:71:91:0d:0e:85:cc:67: d7:0b:ab:b9:80:ba:d9:26:0c:f6:c9:b3:8e:4b:5a: 8a:2e:25:c8:4e:20:1c:3b:77:e0:40:6d:2d:ee:32: f5:d4:a7:03:43:2e:7a:7e:fe:a0:ec:9d:1b:a4:8e: 29:47:45:64:af:c6:56:68:ff:ec:0f:90:4c:e7:be: 11:ec:c7:67:16:78:e5:93:bd:c0:8c:e5:48:f7:51: 0f:79:04:df:53:a4:e1:d5:e6:80:93:48:80:85:69: 6f:c5:f7:1d:51:54:d3:7b:0f:06:3a:4e:c1:9d:70: 32:d9:fe:0e:af:5a:7b:ee:df:53:12:15:d3:71:fb: 63:23:c3:b6:d8:bb:54:dc:b0:d8:9c:7e:20:85:9b: 2d:70:4b:e0:d3:f0:8d:8b:35:e5:ac:0c:c6:f8:70: 86:0b:83:5e:2e:08:fc:e4:23:bd:ab:ad:f4:3f:61: cc:0d:c2:03:89:11:6d:78:a3:63:34:b4:66:df:c9: 6b:d2:85:41:df:d3:de:92:3a:19:0b:a4:69:3f:4d: dc:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:AB:F0:06:16:0C:A1:58:9B:9A:FA:B9:EE:70:8C:38:29:F6:65:B1 X509v3 Authority Key Identifier: keyid:3E:9B:D1:8A:35:31:35:35:66:ED:18:14:0C:AD:74:19:05:BE:AF:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PpvRijUxNTVm7RgUDK10GQW-r64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:1f:fb:d7:22:6b:a8:4d:68:3a:a8:1f:3f:d7:8b:4e:2d:ea: 6f:8b:f0:8a:58:d8:e0:e1:2f:03:6c:4f:39:74:47:0b:da:ad: e0:e2:18:35:4f:8e:a6:2f:74:29:f7:1c:c1:c1:04:6e:0a:94: 83:46:bb:75:58:ec:55:7b:07:04:93:d4:fb:51:b6:1f:2d:8b: 1a:0e:a6:0b:fe:8f:97:b5:32:b6:52:98:26:7f:42:93:10:67: 34:53:11:93:72:10:39:d7:ad:35:03:a9:6a:00:60:61:c6:4e: df:ef:21:1b:b7:7e:49:11:24:3a:e9:ca:f8:5b:9b:9b:a4:f7: 23:73:8b:54:8c:52:06:70:8a:93:5d:58:59:e0:99:e3:51:7f: 53:5b:27:ea:eb:be:50:ba:98:bd:f4:53:13:be:18:e9:97:fe: a4:50:b3:cd:c4:b4:93:83:9f:69:17:3d:0e:4a:b6:cc:13:e6: 50:d8:c1:57:05:43:0e:51:f7:4a:3e:8f:f0:69:0d:47:58:a4: dd:18:5c:bc:17:f1:d5:23:eb:9e:c8:07:54:c9:87:7e:62:82: 70:32:a8:31:1c:cc:ff:6a:f6:0d:d2:a5:dd:e6:dc:4e:6c:56: 24:4d:78:b1:df:e8:fc:9a:cf:4c:1d:fc:19:e4:90:99:5c:40: 55:6c:e9:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCahLaZR3YzDSqdFIEjdTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlOWJkMThhMzUzMTM1MzU2NmVkMTgxNDBjYWQ3NDE5MDVi ZWFmYWUwHhcNMjUxMjA2MDUwMTUwWhcNMjUxMjA3MDUwMTUwWjAzMTEwLwYDVQQD Eyg0NGFiZjAwNjE2MGNhMTU4OWI5YWZhYjllZTcwOGMzODI5ZjY2NWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuOfJtWndxYlLfxopTXMrnGP7UHR xichjFk00DWND5MXt36inR5gesTvkf8BnLsyN1r+3nGRDQ6FzGfXC6u5gLrZJgz2 ybOOS1qKLiXITiAcO3fgQG0t7jL11KcDQy56fv6g7J0bpI4pR0Vkr8ZWaP/sD5BM 574R7MdnFnjlk73AjOVI91EPeQTfU6Th1eaAk0iAhWlvxfcdUVTTew8GOk7BnXAy 2f4Or1p77t9TEhXTcftjI8O22LtU3LDYnH4ghZstcEvg0/CNizXlrAzG+HCGC4Ne Lgj85CO9q630P2HMDcIDiRFteKNjNLRm38lr0oVB39PekjoZC6RpP03cywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFESr8AYWDKFYm5r6ue5wjDgp9mWxMB8GA1UdIwQY MBaAFD6b0Yo1MTU1Zu0YFAytdBkFvq+uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHB2UmlqVXhOVFZtN1JnVURLMTBHUVctcjY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS84NmRiYjQtNmFlNC00NzZlLWE2MDEt ZWEyNzdiNDkyZjFlLzEvUHB2UmlqVXhOVFZtN1JnVURLMTBHUVctcjY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS84NmRiYjQtNmFlNC00NzZlLWE2MDEtZWEyNzdiNDkyZjFl LzEvUHB2UmlqVXhOVFZtN1JnVURLMTBHUVctcjY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOR/71yJr qE1oOqgfP9eLTi3qb4vwiljY4OEvA2xPOXRHC9qt4OIYNU+Opi90KfccwcEEbgqU g0a7dVjsVXsHBJPU+1G2Hy2LGg6mC/6Pl7UytlKYJn9CkxBnNFMRk3IQOdetNQOp agBgYcZO3+8hG7d+SREkOunK+Fubm6T3I3OLVIxSBnCKk11YWeCZ41F/U1sn6uu+ ULqYvfRTE74Y6Zf+pFCzzcS0k4OfaRc9Dkq2zBPmUNjBVwVDDlH3Sj6P8GkNR1ik 3RhcvBfx1SPrnsgHVMmHfmKCcDKoMRzM/2r2DdKl3ebcTmxWJE14sd/o/JrPTB38 GeSQmVxAVWzpVA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:48 2025 by rpki-client