This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft File: ppWERHKPWreqgm9DeABc5nkgDVI.mft (raw, json) Hash identifier: ia5G0REfobyBwHVlOfSVZvoRgvykczXGSmyQqLUakwY= Subject key identifier: E2:CA:5E:2F:0C:E1:0F:C4:44:F1:EC:E5:B2:D1:85:9A:B7:33:89:57 Authority key identifier: A6:95:84:44:72:8F:5A:B7:AA:82:6F:43:78:00:5C:E6:79:20:0D:52 Certificate issuer: /CN=a6958444728f5ab7aa826f4378005ce679200d52 Certificate serial: 019AF1D17E0AD0F2354CD7FD5A21887FA816 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 04:00:29 +0000 Manifest this update: Sat 06 Dec 2025 04:00:29 +0000 Manifest next update: Sun 07 Dec 2025 04:00:29 +0000 Files and hashes: 1: ppWERHKPWreqgm9DeABc5nkgDVI.crl (hash: vpjMO883BFQeCUPi07M+XMuDrXjhfzsmEi2zaR5ZedI=) 2: z-LF5XIt0VeWFhY7GK5O7xZnBBE.roa (hash: 1pZ4XtZFpZvLcxR/iScQRob6NYsKteymu5FeNxuRtO0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:7e:0a:d0:f2:35:4c:d7:fd:5a:21:88:7f:a8:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6958444728f5ab7aa826f4378005ce679200d52 Validity Not Before: Dec 6 04:00:29 2025 GMT Not After : Dec 7 04:00:29 2025 GMT Subject: CN=e2ca5e2f0ce10fc444f1ece5b2d1859ab7338957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:25:af:9a:75:35:4e:f0:83:75:4c:90:4d:3e: 6c:69:58:2d:a6:f1:fe:0c:eb:bf:2b:9f:70:09:40: 5d:cc:fc:5e:66:46:b2:cd:53:9d:94:d9:12:9c:1b: 7f:5f:72:c8:08:4e:c1:cd:c0:bb:88:b3:c9:bf:16: 88:5e:62:80:60:28:d2:5d:9c:96:28:d9:1e:7a:d8: d7:e0:be:41:b3:8d:da:36:2b:3a:71:bd:12:9e:15: b2:23:ac:60:db:c4:c2:5c:b8:4f:e9:d8:6b:41:3e: 2b:ea:07:45:60:93:37:10:32:3e:55:89:08:aa:66: 3e:09:e8:c9:73:2f:78:0d:57:be:a9:16:1d:ad:87: 65:4b:b9:35:59:e2:c2:fc:41:7a:07:e3:bd:a8:fe: 9c:de:48:ee:c3:54:c8:85:0a:9b:67:a9:17:91:56: 1b:89:be:43:b7:aa:fb:4a:04:81:95:4a:2b:ca:e7: 79:66:5c:60:5a:b9:38:9c:6a:ce:d2:33:ab:fd:9a: 14:f8:43:b4:02:87:da:33:17:40:cb:01:f8:37:87: 2a:8a:a4:e7:70:ad:d9:33:7d:bf:3b:9c:75:27:56: a2:8e:86:1b:52:7c:84:42:36:bc:2c:c5:d8:72:df: 42:63:34:ba:e4:20:70:33:0c:ff:cc:12:1a:8a:f0: 28:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:CA:5E:2F:0C:E1:0F:C4:44:F1:EC:E5:B2:D1:85:9A:B7:33:89:57 X509v3 Authority Key Identifier: keyid:A6:95:84:44:72:8F:5A:B7:AA:82:6F:43:78:00:5C:E6:79:20:0D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:fb:43:ab:22:a6:97:f8:da:5f:e5:75:52:4a:63:46:96:19: d2:de:37:92:af:6b:a7:43:79:17:96:b5:a2:06:19:f3:b7:70: 68:fb:bc:74:2c:83:65:7f:ba:85:8b:60:a2:37:09:d0:5d:42: 65:31:d5:df:a1:40:d6:c9:62:c7:0e:07:48:85:6d:19:31:b8: b3:0f:06:cb:68:fb:4d:c4:7e:63:d8:d0:e0:ec:f6:3a:e5:1f: d6:7f:fe:ea:43:23:a7:f0:b0:92:92:b2:c7:4a:76:8c:53:91: 01:0a:01:97:03:58:40:7e:58:6a:d0:2f:98:37:99:10:92:04: 7d:f7:e6:87:11:4a:20:26:ac:48:33:8a:c0:80:73:bb:41:12: d5:22:eb:b6:cc:b3:44:6e:47:87:d4:f2:87:b1:63:c3:e8:9b: b2:01:d6:0d:09:6b:70:ad:19:03:6b:c2:df:d8:82:59:ac:e1: 13:25:bb:ed:52:23:9e:1d:64:99:ec:89:82:f5:1a:ee:5c:d8: 2e:44:9b:55:ab:a5:03:cc:2f:2b:3b:0d:72:c1:fc:79:06:61: 1f:7d:13:3f:b7:a2:fc:97:1b:65:bb:27:f0:2a:07:c2:9c:7b: 17:b2:8f:b0:9c:1d:58:50:96:7b:e4:66:c0:93:0d:a0:f5:1d: 2d:3f:f3:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0X4K0PI1TNf9WiGIf6gWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2OTU4NDQ0NzI4ZjVhYjdhYTgyNmY0Mzc4MDA1Y2U2Nzky MDBkNTIwHhcNMjUxMjA2MDQwMDI5WhcNMjUxMjA3MDQwMDI5WjAzMTEwLwYDVQQD EyhlMmNhNWUyZjBjZTEwZmM0NDRmMWVjZTViMmQxODU5YWI3MzM4OTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyWvmnU1TvCDdUyQTT5saVgtpvH+ DOu/K59wCUBdzPxeZkayzVOdlNkSnBt/X3LICE7BzcC7iLPJvxaIXmKAYCjSXZyW KNkeetjX4L5Bs43aNis6cb0SnhWyI6xg28TCXLhP6dhrQT4r6gdFYJM3EDI+VYkI qmY+CejJcy94DVe+qRYdrYdlS7k1WeLC/EF6B+O9qP6c3kjuw1TIhQqbZ6kXkVYb ib5Dt6r7SgSBlUoryud5ZlxgWrk4nGrO0jOr/ZoU+EO0AofaMxdAywH4N4cqiqTn cK3ZM32/O5x1J1aijoYbUnyEQja8LMXYct9CYzS65CBwMwz/zBIaivAokwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOLKXi8M4Q/ERPHs5bLRhZq3M4lXMB8GA1UdIwQY MBaAFKaVhERyj1q3qoJvQ3gAXOZ5IA1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHBXRVJIS1BXcmVxZ205RGVBQmM1bmtnRFZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iZGMxZjEtYzE1Ny00MDhiLWFmZTEt MWI1MTFjNjYzOTc4LzEvcHBXRVJIS1BXcmVxZ205RGVBQmM1bmtnRFZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9iZGMxZjEtYzE1Ny00MDhiLWFmZTEtMWI1MTFjNjYzOTc4 LzEvcHBXRVJIS1BXcmVxZ205RGVBQmM1bmtnRFZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHvtDqyKm l/jaX+V1UkpjRpYZ0t43kq9rp0N5F5a1ogYZ87dwaPu8dCyDZX+6hYtgojcJ0F1C ZTHV36FA1slixw4HSIVtGTG4sw8Gy2j7TcR+Y9jQ4Oz2OuUf1n/+6kMjp/CwkpKy x0p2jFORAQoBlwNYQH5YatAvmDeZEJIEfffmhxFKICasSDOKwIBzu0ES1SLrtsyz RG5Hh9Tyh7Fjw+ibsgHWDQlrcK0ZA2vC39iCWazhEyW77VIjnh1kmeyJgvUa7lzY LkSbVaulA8wvKzsNcsH8eQZhH30TP7ei/JcbZbsn8CoHwpx7F7KPsJwdWFCWe+Rm wJMNoPUdLT/zow== -----END CERTIFICATE-----Generated at Sat Dec 6 12:23:19 2025 by rpki-client