This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft File: PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft (raw, json) Hash identifier: KPEFg/hdbijVbs8eKxWuQ2SzXfQT20PCe/ptI0WKqTQ= Subject key identifier: 04:16:4B:00:AA:9A:1C:F8:11:DD:BC:78:83:A9:40:21:C6:6A:B2:9E Authority key identifier: 3C:FE:E2:EA:3C:DE:08:73:A1:91:BD:D7:95:22:73:99:B5:6A:43:BA Certificate issuer: /CN=3cfee2ea3cde0873a191bdd795227399b56a43ba Certificate serial: 019AF19B146B33C71DE8934BF2F2F71D2219 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft Manifest number: 86 Signing time: Sat 06 Dec 2025 03:01:03 +0000 Manifest this update: Sat 06 Dec 2025 03:01:03 +0000 Manifest next update: Sun 07 Dec 2025 03:01:03 +0000 Files and hashes: 1: PP7i6jzeCHOhkb3XlSJzmbVqQ7o.crl (hash: gXs6LjNAoZLxRDIquklD8OGBq4PuI4D13rF6qx8GlFI=) 2: jr0RBSPTUaBgSpWvcYrsuz04Sl4.roa (hash: e3OTBQIY/Ada+fXq3XpOy4yH3jmNIsJ/kNlwBeX9MM0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft rsync://rpki.ripe.net/repository/DEFAULT/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:14:6b:33:c7:1d:e8:93:4b:f2:f2:f7:1d:22:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cfee2ea3cde0873a191bdd795227399b56a43ba Validity Not Before: Dec 6 03:01:03 2025 GMT Not After : Dec 7 03:01:03 2025 GMT Subject: CN=04164b00aa9a1cf811ddbc7883a94021c66ab29e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f4:76:b0:da:2a:5c:e0:0a:ff:67:de:21:3e: 96:c2:32:94:8d:28:ad:cd:cb:b2:4e:e0:d2:30:cc: f0:d6:75:a2:b4:7c:95:5b:14:7d:75:a9:58:2c:20: e4:ad:b7:f0:c7:2d:31:26:c0:e4:70:0e:bc:cf:40: d3:44:d1:f7:4b:66:8e:92:0a:d6:73:5e:e5:b9:c6: 79:0d:63:9b:5b:12:c7:cd:3b:59:ed:f6:3d:00:32: 4b:c0:af:3b:3f:a1:be:7b:cc:77:85:2f:ff:c0:50: 05:2c:6f:fa:6b:21:20:76:8a:fc:c2:0d:a2:36:e0: 0a:4f:48:1d:95:17:6b:a3:d7:9b:8a:fa:66:1d:68: d4:73:c8:d6:57:cb:e7:db:66:59:81:ca:34:30:db: 7d:37:a1:a7:7c:7a:49:2e:9c:ee:c4:d5:68:ba:67: bc:4f:c3:a7:ec:e7:d5:69:76:2d:89:3c:35:e3:2c: dd:78:82:0a:28:87:4d:57:aa:b7:df:fd:f9:64:c6: 6a:77:b9:84:84:3a:92:75:a6:2b:e1:55:06:ea:b4: db:83:90:71:77:f7:8c:b1:3c:6b:da:a2:89:bf:bf: 32:9b:6b:d3:a1:ed:79:b2:3b:4a:4e:c1:59:2e:70: 08:b0:c3:20:93:4c:4c:42:91:90:f8:be:bb:2d:bb: f7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:16:4B:00:AA:9A:1C:F8:11:DD:BC:78:83:A9:40:21:C6:6A:B2:9E X509v3 Authority Key Identifier: keyid:3C:FE:E2:EA:3C:DE:08:73:A1:91:BD:D7:95:22:73:99:B5:6A:43:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:fb:89:d0:03:dc:aa:d2:f1:00:a2:9e:f5:13:04:fa:1b:e1: 37:15:d8:ed:b1:56:fe:14:e7:b8:f6:14:3f:f8:22:cf:67:c6: d9:fc:6f:5d:b6:eb:d6:82:42:58:d9:2b:b5:e5:7c:b1:9f:51: 04:d4:aa:48:a4:af:4f:8e:4b:96:a9:3c:ae:dc:fe:07:a7:47: d7:84:4a:c3:cc:da:b2:fb:8f:74:eb:4e:2e:4f:b2:f0:fe:e8: 5b:55:b1:03:5a:a8:ea:c7:2b:93:9e:e8:8c:f9:8e:1b:cd:5d: b6:d6:57:fc:b0:7b:9c:9a:c3:0f:36:d0:04:7d:b9:ec:26:ed: fd:d2:e9:3b:5c:2b:4b:78:7e:c2:bb:cc:b6:52:e2:f0:0b:83: 13:3b:5d:d3:be:1c:1b:56:35:2b:74:73:f8:3a:64:0a:68:9c: 49:a0:d9:cb:6a:9d:40:5d:67:1f:74:77:fc:a7:1a:9f:ff:4a: e0:80:24:08:d5:62:32:fa:f2:ea:c5:10:3e:b2:05:03:79:c5: 4a:ed:68:7d:45:2f:72:17:7a:c3:cb:a9:80:c5:db:07:57:bb: fe:fc:b9:7a:2a:9d:a8:ba:69:cb:0c:dc:11:74:15:57:42:bf: 63:8a:16:88:d1:94:68:14:05:bc:1f:6c:14:20:ab:5a:41:2d: e0:aa:1b:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmxRrM8cd6JNL8vL3HSIZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjZmVlMmVhM2NkZTA4NzNhMTkxYmRkNzk1MjI3Mzk5YjU2 YTQzYmEwHhcNMjUxMjA2MDMwMTAzWhcNMjUxMjA3MDMwMTAzWjAzMTEwLwYDVQQD EygwNDE2NGIwMGFhOWExY2Y4MTFkZGJjNzg4M2E5NDAyMWM2NmFiMjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfR2sNoqXOAK/2feIT6WwjKUjSit zcuyTuDSMMzw1nWitHyVWxR9dalYLCDkrbfwxy0xJsDkcA68z0DTRNH3S2aOkgrW c17lucZ5DWObWxLHzTtZ7fY9ADJLwK87P6G+e8x3hS//wFAFLG/6ayEgdor8wg2i NuAKT0gdlRdro9ebivpmHWjUc8jWV8vn22ZZgco0MNt9N6GnfHpJLpzuxNVoume8 T8On7OfVaXYtiTw14yzdeIIKKIdNV6q33/35ZMZqd7mEhDqSdaYr4VUG6rTbg5Bx d/eMsTxr2qKJv78ym2vToe15sjtKTsFZLnAIsMMgk0xMQpGQ+L67Lbv3vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQWSwCqmhz4Ed28eIOpQCHGarKeMB8GA1UdIwQY MBaAFDz+4uo83ghzoZG915Uic5m1akO6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFA3aTZqemVDSE9oa2IzWGxTSnptYlZxUTdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9mNjY4ZTAtZmIzNi00NWEwLTk3MWYt NmIyZjlkMTUxNTE5LzEvUFA3aTZqemVDSE9oa2IzWGxTSnptYlZxUTdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9mNjY4ZTAtZmIzNi00NWEwLTk3MWYtNmIyZjlkMTUxNTE5 LzEvUFA3aTZqemVDSE9oa2IzWGxTSnptYlZxUTdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAevuJ0APc qtLxAKKe9RME+hvhNxXY7bFW/hTnuPYUP/giz2fG2fxvXbbr1oJCWNkrteV8sZ9R BNSqSKSvT45Llqk8rtz+B6dH14RKw8zasvuPdOtOLk+y8P7oW1WxA1qo6scrk57o jPmOG81dttZX/LB7nJrDDzbQBH257Cbt/dLpO1wrS3h+wrvMtlLi8AuDEztd074c G1Y1K3Rz+DpkCmicSaDZy2qdQF1nH3R3/Kcan/9K4IAkCNViMvry6sUQPrIFA3nF Su1ofUUvchd6w8upgMXbB1e7/vy5eiqdqLppywzcEXQVV0K/Y4oWiNGUaBQFvB9s FCCrWkEt4KobcA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:41:08 2025 by rpki-client