This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft File: PP8fKxF18GBdAl5RAXNpwcqLGkY.mft (raw, json) Hash identifier: qoQWEzijWfOXbM1wbm781UhvZG3hin5QJ2sCaBRg8pg= Subject key identifier: 0E:9A:4D:B6:7C:09:42:58:A0:1C:DE:DC:DA:1D:7E:41:B9:78:E9:16 Authority key identifier: 3C:FF:1F:2B:11:75:F0:60:5D:02:5E:51:01:73:69:C1:CA:8B:1A:46 Certificate issuer: /CN=3cff1f2b1175f0605d025e51017369c1ca8b1a46 Certificate serial: 019AF276754D325AF96C305E7498E5D0070B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 07:00:40 +0000 Manifest this update: Sat 06 Dec 2025 07:00:40 +0000 Manifest next update: Sun 07 Dec 2025 07:00:40 +0000 Files and hashes: 1: PP8fKxF18GBdAl5RAXNpwcqLGkY.crl (hash: eDcbTOJSHsN9tqTU8g8l5UYPKG/nR2xBfl9tdRMSV70=) 2: rEJUWBjq_sWfsa1cNiXjG-c5ovw.roa (hash: ZZH1S0+UsBnMa9sS+gXeBGEXEb7GWoo4AFZx2+gdykk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:75:4d:32:5a:f9:6c:30:5e:74:98:e5:d0:07:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cff1f2b1175f0605d025e51017369c1ca8b1a46 Validity Not Before: Dec 6 07:00:40 2025 GMT Not After : Dec 7 07:00:40 2025 GMT Subject: CN=0e9a4db67c094258a01cdedcda1d7e41b978e916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:73:24:0a:bd:82:15:fd:65:22:6d:b0:64:fa: 45:ad:b6:27:20:54:bb:73:f8:79:4e:51:53:76:9a: b0:64:43:33:cf:4a:0c:89:d7:90:61:67:73:82:39: ef:a6:07:86:1b:13:7a:72:95:82:a2:84:fd:c4:79: d0:f9:c0:2a:9e:c2:9a:3a:0d:0a:1f:0f:78:da:25: 82:9a:4b:90:07:75:f5:d7:42:a6:d7:0a:ae:6a:bf: c4:d2:1a:16:bc:1d:53:d0:5a:4f:90:eb:dc:e3:bd: b9:df:5d:64:f9:8b:24:63:67:19:67:6e:50:92:31: 67:cd:e5:8c:31:c9:33:2b:66:d1:22:98:c1:5e:3b: 30:a1:f5:e6:9d:f8:06:80:96:fb:1e:97:3a:56:6d: 00:2a:c2:c6:f9:4b:df:44:95:a8:8d:99:b9:7d:77: 6c:7b:88:da:79:58:f8:e6:ca:42:f3:74:4a:2d:87: 4c:f4:68:28:cb:b0:d6:83:0f:48:26:83:54:61:1e: b3:4e:3b:7c:4e:9b:b3:24:0e:cd:33:9e:cd:47:67: 34:6d:92:40:a6:8b:c6:68:a3:ff:be:a7:10:b7:51: 3c:2d:8e:d7:6b:68:97:85:9d:b0:ea:2e:44:72:b5: d2:28:4a:b4:a6:62:08:f6:15:b5:4d:56:2a:66:f6: 04:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:9A:4D:B6:7C:09:42:58:A0:1C:DE:DC:DA:1D:7E:41:B9:78:E9:16 X509v3 Authority Key Identifier: keyid:3C:FF:1F:2B:11:75:F0:60:5D:02:5E:51:01:73:69:C1:CA:8B:1A:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:f8:f7:a1:2b:b0:61:75:b7:be:9d:35:72:dc:f3:08:0d:2f: 47:35:70:6d:61:3b:14:55:22:c6:05:38:b1:8e:35:12:d6:61: 0f:96:32:b4:e6:ee:be:c9:0c:1a:98:e0:1f:83:e3:00:d0:5d: 43:0f:0e:03:2e:f1:7e:b1:0e:cc:af:90:27:8b:8f:e2:60:32: f0:ec:bd:e2:3c:0c:be:56:76:fc:82:c0:45:55:7c:00:f7:0b: 94:c8:d2:9b:5b:3c:57:01:e3:0b:c4:c2:9a:f1:a5:4f:25:c7: df:12:fb:89:47:c5:29:2f:18:f8:c5:67:e5:97:3f:18:c8:7e: af:20:35:62:6f:98:92:24:54:54:57:30:93:9d:c4:70:c6:e8: d4:8c:f5:eb:1d:83:38:27:a8:24:b3:a5:57:5d:12:b2:5c:76: 6a:ae:62:7e:14:a0:04:1c:e8:bb:81:7d:0f:db:fc:8f:e8:c3: 93:b1:b7:6b:8d:ff:cc:f4:54:2b:d9:96:64:64:c6:ce:21:17: c2:c4:cd:e9:2f:b3:c4:2b:15:b4:57:f5:52:ba:1b:5a:04:6b: 1d:90:aa:78:80:59:2c:42:d8:c7:1a:3c:5f:07:f7:06:a5:dc: bb:3c:7c:b5:ed:b1:55:e3:f6:eb:31:12:bb:78:4a:99:2b:f5: 65:39:58:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydnVNMlr5bDBedJjl0AcLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjZmYxZjJiMTE3NWYwNjA1ZDAyNWU1MTAxNzM2OWMxY2E4 YjFhNDYwHhcNMjUxMjA2MDcwMDQwWhcNMjUxMjA3MDcwMDQwWjAzMTEwLwYDVQQD EygwZTlhNGRiNjdjMDk0MjU4YTAxY2RlZGNkYTFkN2U0MWI5NzhlOTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nMkCr2CFf1lIm2wZPpFrbYnIFS7 c/h5TlFTdpqwZEMzz0oMideQYWdzgjnvpgeGGxN6cpWCooT9xHnQ+cAqnsKaOg0K Hw942iWCmkuQB3X110Km1wquar/E0hoWvB1T0FpPkOvc4725311k+YskY2cZZ25Q kjFnzeWMMckzK2bRIpjBXjswofXmnfgGgJb7Hpc6Vm0AKsLG+UvfRJWojZm5fXds e4jaeVj45spC83RKLYdM9Ggoy7DWgw9IJoNUYR6zTjt8TpuzJA7NM57NR2c0bZJA povGaKP/vqcQt1E8LY7Xa2iXhZ2w6i5EcrXSKEq0pmII9hW1TVYqZvYEywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA6aTbZ8CUJYoBze3NodfkG5eOkWMB8GA1UdIwQY MBaAFDz/HysRdfBgXQJeUQFzacHKixpGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFA4Zkt4RjE4R0JkQWw1UkFYTnB3Y3FMR2tZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hYzc5NDktYTFjYS00N2Y0LWIzOTMt MmJmMzRjNTI2MmU3LzEvUFA4Zkt4RjE4R0JkQWw1UkFYTnB3Y3FMR2tZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9hYzc5NDktYTFjYS00N2Y0LWIzOTMtMmJmMzRjNTI2MmU3 LzEvUFA4Zkt4RjE4R0JkQWw1UkFYTnB3Y3FMR2tZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr/j3oSuw YXW3vp01ctzzCA0vRzVwbWE7FFUixgU4sY41EtZhD5YytObuvskMGpjgH4PjANBd Qw8OAy7xfrEOzK+QJ4uP4mAy8Oy94jwMvlZ2/ILARVV8APcLlMjSm1s8VwHjC8TC mvGlTyXH3xL7iUfFKS8Y+MVn5Zc/GMh+ryA1Ym+YkiRUVFcwk53EcMbo1Iz16x2D OCeoJLOlV10Sslx2aq5ifhSgBBzou4F9D9v8j+jDk7G3a43/zPRUK9mWZGTGziEX wsTN6S+zxCsVtFf1UrobWgRrHZCqeIBZLELYxxo8Xwf3BqXcuzx8te2xVeP26zES u3hKmSv1ZTlY/g== -----END CERTIFICATE-----Generated at Sat Dec 6 13:07:48 2025 by rpki-client