This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/5177fd-89ed-4e6f-8c3d-23b8611cce23/1/PP7M1r9kBrDPRPaCuTzYbjNGUko.mft File: PP7M1r9kBrDPRPaCuTzYbjNGUko.mft (raw, json) Hash identifier: zA2BiNz3ZjGxfQujrMjXwZhAHy/cCinuTAvGeESego4= Subject key identifier: A8:98:D7:AD:E4:D5:38:B8:9A:11:F6:EC:50:20:87:9D:99:90:27:37 Authority key identifier: 3C:FE:CC:D6:BF:64:06:B0:CF:44:F6:82:B9:3C:D8:6E:33:46:52:4A Certificate issuer: /CN=3cfeccd6bf6406b0cf44f682b93cd86e3346524a Certificate serial: 019AF31BC66CCB8106F6A32ABCE0116EB50A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PP7M1r9kBrDPRPaCuTzYbjNGUko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/5177fd-89ed-4e6f-8c3d-23b8611cce23/1/PP7M1r9kBrDPRPaCuTzYbjNGUko.mft Manifest number: 12D8 Signing time: Sat 06 Dec 2025 10:01:14 +0000 Manifest this update: Sat 06 Dec 2025 10:01:14 +0000 Manifest next update: Sun 07 Dec 2025 10:01:14 +0000 Files and hashes: 1: PP7M1r9kBrDPRPaCuTzYbjNGUko.crl (hash: l3gWQiCAx6vgL1t5HOj1cg46tbbidHrMkuwaSdCGMPM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/5177fd-89ed-4e6f-8c3d-23b8611cce23/1/PP7M1r9kBrDPRPaCuTzYbjNGUko.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/5177fd-89ed-4e6f-8c3d-23b8611cce23/1/PP7M1r9kBrDPRPaCuTzYbjNGUko.mft rsync://rpki.ripe.net/repository/DEFAULT/PP7M1r9kBrDPRPaCuTzYbjNGUko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:c6:6c:cb:81:06:f6:a3:2a:bc:e0:11:6e:b5:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cfeccd6bf6406b0cf44f682b93cd86e3346524a Validity Not Before: Dec 6 10:01:14 2025 GMT Not After : Dec 7 10:01:14 2025 GMT Subject: CN=a898d7ade4d538b89a11f6ec5020879d99902737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a6:f5:33:a4:29:e9:07:ec:f1:42:25:ec:b5: f2:34:ad:7a:f7:3c:7b:27:8a:a1:ff:45:d2:04:88: 48:58:43:29:3a:3a:f8:b9:6a:e8:02:ca:53:d0:1b: dc:b5:4b:24:89:3d:c7:bb:ec:76:2e:3e:8e:20:da: e7:96:a9:e4:af:fb:79:3e:c7:5b:c8:bb:d9:db:0e: dd:54:cb:92:39:ae:d8:4b:fb:ad:a8:43:ab:bb:45: cd:a3:39:af:b1:12:3f:63:de:5a:2a:12:73:c5:be: a2:29:f3:87:fe:37:0b:e0:f3:1c:88:7b:ae:6f:a7: 2e:57:8d:c5:a5:d8:20:d9:8f:42:f3:f8:4b:89:e6: 4f:cd:cf:6b:b2:f8:24:aa:8a:c8:16:98:0a:1d:a3: b2:4d:7f:69:9e:18:9f:58:21:4d:e0:7c:07:2e:7b: d2:6a:a4:98:47:44:48:4f:8b:d6:a4:74:20:4f:67: 91:ac:b4:1b:e4:85:97:04:0d:9d:42:65:ab:b8:41: 44:dd:0c:17:fd:d0:08:94:37:62:79:1e:81:b8:1c: 55:cd:2e:01:80:af:b3:d8:08:e7:39:83:f5:b8:e0: 23:39:37:ad:75:49:9d:9f:cc:83:2d:90:dd:0e:44: fb:97:92:41:76:c6:0d:b5:6b:79:e5:c0:94:80:b0: 21:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:98:D7:AD:E4:D5:38:B8:9A:11:F6:EC:50:20:87:9D:99:90:27:37 X509v3 Authority Key Identifier: keyid:3C:FE:CC:D6:BF:64:06:B0:CF:44:F6:82:B9:3C:D8:6E:33:46:52:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PP7M1r9kBrDPRPaCuTzYbjNGUko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5177fd-89ed-4e6f-8c3d-23b8611cce23/1/PP7M1r9kBrDPRPaCuTzYbjNGUko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5177fd-89ed-4e6f-8c3d-23b8611cce23/1/PP7M1r9kBrDPRPaCuTzYbjNGUko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:df:2a:2a:45:85:55:73:69:2b:93:5f:22:07:c7:52:17:ca: 02:a7:71:4b:4a:fd:8b:d0:30:18:ac:65:ea:e4:41:50:43:78: 38:19:5a:84:0b:38:c1:8b:13:df:a1:3c:59:e1:72:05:a7:87: a3:85:73:3b:81:99:ca:ce:2c:04:3c:ca:31:ab:3c:c3:94:10: e1:86:b3:09:75:12:c7:a6:a5:d7:90:a3:e2:d5:c7:f1:59:39: f1:c7:4d:4b:ae:0c:fa:af:a7:6b:be:6b:e0:b7:b1:ef:da:58: 70:9e:05:c8:9b:d4:11:14:15:bc:c4:be:42:6e:5d:35:77:10: f5:ae:22:80:ec:df:d4:cc:d5:d8:07:13:9e:e8:0a:17:db:cc: 35:cc:7e:15:c8:32:23:ff:1d:d4:8c:60:88:64:26:a8:b7:a1: b8:cb:96:47:3a:54:b6:d1:3c:2d:65:ec:dd:e1:11:56:f8:64: 64:dd:29:a3:cf:5f:60:f4:ab:e4:02:a4:9b:46:06:a3:82:36: 3a:4b:00:b4:9e:90:3f:9e:45:4d:74:e2:88:f3:a5:b6:6f:c7: 31:1b:ad:c2:14:98:8a:ff:e1:f5:87:38:88:0f:39:af:7e:48: 07:13:ae:22:69:6a:a3:26:84:1a:5f:66:77:6f:62:a7:b2:9c: 20:b6:29:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG8Zsy4EG9qMqvOARbrUKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjZmVjY2Q2YmY2NDA2YjBjZjQ0ZjY4MmI5M2NkODZlMzM0 NjUyNGEwHhcNMjUxMjA2MTAwMTE0WhcNMjUxMjA3MTAwMTE0WjAzMTEwLwYDVQQD EyhhODk4ZDdhZGU0ZDUzOGI4OWExMWY2ZWM1MDIwODc5ZDk5OTAyNzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6b1M6Qp6Qfs8UIl7LXyNK169zx7 J4qh/0XSBIhIWEMpOjr4uWroAspT0BvctUskiT3Hu+x2Lj6OINrnlqnkr/t5Psdb yLvZ2w7dVMuSOa7YS/utqEOru0XNozmvsRI/Y95aKhJzxb6iKfOH/jcL4PMciHuu b6cuV43Fpdgg2Y9C8/hLieZPzc9rsvgkqorIFpgKHaOyTX9pnhifWCFN4HwHLnvS aqSYR0RIT4vWpHQgT2eRrLQb5IWXBA2dQmWruEFE3QwX/dAIlDdieR6BuBxVzS4B gK+z2AjnOYP1uOAjOTetdUmdn8yDLZDdDkT7l5JBdsYNtWt55cCUgLAhbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKiY163k1Ti4mhH27FAgh52ZkCc3MB8GA1UdIwQY MBaAFDz+zNa/ZAawz0T2grk82G4zRlJKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFA3TTFyOWtCckRQUlBhQ3VUelliak5HVWtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy81MTc3ZmQtODllZC00ZTZmLThjM2Qt MjNiODYxMWNjZTIzLzEvUFA3TTFyOWtCckRQUlBhQ3VUelliak5HVWtvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy81MTc3ZmQtODllZC00ZTZmLThjM2QtMjNiODYxMWNjZTIz LzEvUFA3TTFyOWtCckRQUlBhQ3VUelliak5HVWtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAed8qKkWF VXNpK5NfIgfHUhfKAqdxS0r9i9AwGKxl6uRBUEN4OBlahAs4wYsT36E8WeFyBaeH o4VzO4GZys4sBDzKMas8w5QQ4YazCXUSx6al15Cj4tXH8Vk58cdNS64M+q+na75r 4Lex79pYcJ4FyJvUERQVvMS+Qm5dNXcQ9a4igOzf1MzV2AcTnugKF9vMNcx+Fcgy I/8d1IxgiGQmqLehuMuWRzpUttE8LWXs3eERVvhkZN0po89fYPSr5AKkm0YGo4I2 OksAtJ6QP55FTXTiiPOltm/HMRutwhSYiv/h9Yc4iA85r35IBxOuImlqoyaEGl9m d29ip7KcILYpYw== -----END CERTIFICATE-----Generated at Sat Dec 6 18:49:04 2025 by rpki-client