This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft File: PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft (raw, json) Hash identifier: EHg1Fc68MI8aUtUaTNqoEq/J/nY+jfTMvq8ssK+0Ctk= Subject key identifier: 3A:51:73:3A:43:DF:66:5B:6B:08:37:2A:9D:E1:E2:6F:41:86:44:97 Authority key identifier: 3D:55:51:02:99:81:84:FD:A7:C3:01:2E:86:19:00:94:8F:CF:27:73 Certificate issuer: /CN=3d555102998184fda7c3012e861900948fcf2773 Certificate serial: 019AF2E448EF0DF20B6C48B8CC5156225A81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PVVRApmBhP2nwwEuhhkAlI_PJ3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft Manifest number: B2 Signing time: Sat 06 Dec 2025 09:00:38 +0000 Manifest this update: Sat 06 Dec 2025 09:00:38 +0000 Manifest next update: Sun 07 Dec 2025 09:00:38 +0000 Files and hashes: 1: PVVRApmBhP2nwwEuhhkAlI_PJ3M.crl (hash: Q8gqKOVBN/0fwrYxQaPrkXVd7Q/7aUkzNoWdn/4AGDU=) 2: yHDz_dgw2HNuVtS7NpKaJLAB8-Y.roa (hash: +cBZOUimuRqIk7jDWcn04PYJ9cM7ifN5PFGvV7TP168=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft rsync://rpki.ripe.net/repository/DEFAULT/PVVRApmBhP2nwwEuhhkAlI_PJ3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:48:ef:0d:f2:0b:6c:48:b8:cc:51:56:22:5a:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d555102998184fda7c3012e861900948fcf2773 Validity Not Before: Dec 6 09:00:38 2025 GMT Not After : Dec 7 09:00:38 2025 GMT Subject: CN=3a51733a43df665b6b08372a9de1e26f41864497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a9:2e:f4:b6:50:d4:b3:3d:54:f8:62:9f:56: c5:0c:5a:52:9c:4c:10:36:74:22:b1:97:ec:3e:03: 64:e6:9f:1d:13:21:16:c5:3c:ef:7c:da:18:90:ba: 3f:f4:66:6e:6a:b1:d2:39:69:a6:97:df:3a:6e:64: 9f:81:4f:4e:32:12:80:3b:77:7e:cd:45:64:fa:70: 4e:d8:54:ce:7d:2a:8e:2c:73:42:dc:0b:d9:24:4a: c2:6c:dc:fa:2e:d8:09:71:d2:9f:ca:1e:93:ff:3d: 57:4f:8d:ae:f6:ce:df:86:1a:f1:69:35:16:af:7f: 84:db:0b:87:f9:36:28:8f:3a:0f:37:5f:d8:d6:cc: 6f:e5:d3:d7:4e:e5:69:12:36:2b:09:1f:e8:1a:02: f2:e9:59:4d:8e:8e:ec:43:d2:66:1b:27:b9:65:11: 20:d6:1d:4e:66:e1:76:f3:46:b6:d4:88:62:e3:6e: 52:4d:e6:ab:81:8f:06:7a:9d:df:19:7a:f4:73:e5: 80:06:13:5f:fb:29:e8:2c:41:6d:31:61:13:30:51: f1:ef:ab:fe:97:d7:c6:dc:8d:fd:79:00:f4:ec:c8: 3e:11:d3:d8:54:74:a2:48:7c:b4:d4:fa:cc:bb:49: 63:c6:97:c2:ac:68:b7:75:fa:74:ad:b2:e7:6a:99: 89:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:51:73:3A:43:DF:66:5B:6B:08:37:2A:9D:E1:E2:6F:41:86:44:97 X509v3 Authority Key Identifier: keyid:3D:55:51:02:99:81:84:FD:A7:C3:01:2E:86:19:00:94:8F:CF:27:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PVVRApmBhP2nwwEuhhkAlI_PJ3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:8f:74:d3:f5:35:2a:58:b9:f3:62:99:6b:07:77:6b:b6:c0: 02:25:27:26:9b:43:6f:4f:f7:a8:93:f8:ed:b9:23:04:7b:01: 0e:92:67:c4:7b:ac:15:71:bb:ca:d0:ab:16:9e:0c:dd:c6:50: a4:53:f8:ed:3f:21:fc:e9:d6:a3:11:43:2c:ac:e7:12:14:27: 40:55:4b:fd:27:cb:95:cc:a2:bf:85:86:04:13:95:7c:46:57: 56:71:a9:85:d0:aa:4d:9f:3a:4b:52:cd:79:93:1f:a9:b6:89: e1:09:49:6d:6f:d2:8f:21:5f:b3:f8:fd:9e:eb:21:dd:df:6a: 38:e9:29:ac:2e:7f:2c:8e:e8:49:22:88:82:24:9e:65:d1:3b: a8:de:7d:39:6f:92:f5:f3:b3:44:39:b6:a1:a4:66:93:ef:5d: 0a:08:c9:28:17:e5:0f:8a:cc:86:25:81:ba:6e:43:71:53:00: 8a:93:73:16:73:c8:09:c5:c8:e8:0f:58:40:4a:82:a3:69:00: eb:a6:3b:0a:7e:3d:d1:0c:db:a6:91:60:55:b8:a2:a5:ca:fc: 99:c3:6b:3f:be:3c:4a:70:2b:ad:20:8e:96:88:a8:e4:51:a9: ed:72:a0:94:b6:68:9a:64:bc:2a:15:58:ab:af:a4:81:09:46: bc:83:bd:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5EjvDfILbEi4zFFWIlqBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkNTU1MTAyOTk4MTg0ZmRhN2MzMDEyZTg2MTkwMDk0OGZj ZjI3NzMwHhcNMjUxMjA2MDkwMDM4WhcNMjUxMjA3MDkwMDM4WjAzMTEwLwYDVQQD EygzYTUxNzMzYTQzZGY2NjViNmIwODM3MmE5ZGUxZTI2ZjQxODY0NDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaku9LZQ1LM9VPhin1bFDFpSnEwQ NnQisZfsPgNk5p8dEyEWxTzvfNoYkLo/9GZuarHSOWmml986bmSfgU9OMhKAO3d+ zUVk+nBO2FTOfSqOLHNC3AvZJErCbNz6LtgJcdKfyh6T/z1XT42u9s7fhhrxaTUW r3+E2wuH+TYojzoPN1/Y1sxv5dPXTuVpEjYrCR/oGgLy6VlNjo7sQ9JmGye5ZREg 1h1OZuF280a21Ihi425STeargY8Gep3fGXr0c+WABhNf+ynoLEFtMWETMFHx76v+ l9fG3I39eQD07Mg+EdPYVHSiSHy01PrMu0ljxpfCrGi3dfp0rbLnapmJzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDpRczpD32Zbawg3Kp3h4m9BhkSXMB8GA1UdIwQY MBaAFD1VUQKZgYT9p8MBLoYZAJSPzydzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFZWUkFwbUJoUDJud3dFdWhoa0FsSV9QSjNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8yNzMzY2UtZTliOS00YWI5LTk1MGMt YzI4YmRhMjMwY2I0LzEvUFZWUkFwbUJoUDJud3dFdWhoa0FsSV9QSjNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8yNzMzY2UtZTliOS00YWI5LTk1MGMtYzI4YmRhMjMwY2I0 LzEvUFZWUkFwbUJoUDJud3dFdWhoa0FsSV9QSjNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr4900/U1 Kli582KZawd3a7bAAiUnJptDb0/3qJP47bkjBHsBDpJnxHusFXG7ytCrFp4M3cZQ pFP47T8h/OnWoxFDLKznEhQnQFVL/SfLlcyiv4WGBBOVfEZXVnGphdCqTZ86S1LN eZMfqbaJ4QlJbW/SjyFfs/j9nush3d9qOOkprC5/LI7oSSKIgiSeZdE7qN59OW+S 9fOzRDm2oaRmk+9dCgjJKBflD4rMhiWBum5DcVMAipNzFnPICcXI6A9YQEqCo2kA 66Y7Cn490QzbppFgVbiipcr8mcNrP748SnArrSCOloio5FGp7XKglLZommS8KhVY q6+kgQlGvIO98Q== -----END CERTIFICATE-----Generated at Sat Dec 6 11:49:15 2025 by rpki-client