This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft File: ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft (raw, json) Hash identifier: 031ygI/DGJbfgQj0BqWHv76ORwK1F5yxaecJlMGAOm8= Subject key identifier: 5D:DB:88:92:13:95:44:60:B4:8B:C1:C0:07:67:E2:5B:98:2E:C6:57 Authority key identifier: A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A Certificate issuer: /CN=a69749fa2337db33a76474eb812c034e30509d2a Certificate serial: 019AF2768A1E8D998FDAC5CC216C8CEB7DFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft Manifest number: 06D4 Signing time: Sat 06 Dec 2025 07:00:46 +0000 Manifest this update: Sat 06 Dec 2025 07:00:46 +0000 Manifest next update: Sun 07 Dec 2025 07:00:46 +0000 Files and hashes: 1: AKpMQvIIqQzXRs3Ululs7jvONDY.roa (hash: BIy70VCzVM+Xa+CdmKbiFZkREDOaRaKjJ7xUey551TY=) 2: ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl (hash: YkQH1E/sX6AcpgTjla2ZoC2gPAMYStE3elWW8GJo4mw=) 3: xwhdiFLdj-4M8l9XUnyeFRJXGwQ.roa (hash: VoSzy1kKxVH6beyOekb646N9QsT3/EG5ENUuXQtb21o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:8a:1e:8d:99:8f:da:c5:cc:21:6c:8c:eb:7d:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a69749fa2337db33a76474eb812c034e30509d2a Validity Not Before: Dec 6 07:00:46 2025 GMT Not After : Dec 7 07:00:46 2025 GMT Subject: CN=5ddb889213954460b48bc1c00767e25b982ec657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ff:fc:3c:63:cd:15:9e:10:c9:5c:7d:d0:98: 21:2f:86:14:42:39:3e:ff:bd:4b:2f:47:81:c7:ee: bc:9d:71:0e:26:96:68:a9:2e:a1:71:68:5a:4f:88: 99:3f:d4:1a:e8:99:cb:06:fd:0b:b3:33:61:85:66: 6b:93:fc:24:8c:96:a6:7a:ea:af:be:54:1e:92:e6: 3f:bb:3c:3b:11:e6:7c:25:b7:ac:31:26:49:a0:f2: ad:2f:bc:29:59:62:37:59:14:bd:85:3a:ad:89:07: 37:55:95:63:b6:71:77:3d:62:90:9d:2d:3a:d6:1e: 3a:0f:83:ef:ab:2b:10:cb:70:04:aa:4b:4f:da:0c: b9:1c:5c:c0:5e:7d:af:a3:88:d3:1a:a9:4a:6a:94: 1b:12:58:56:4a:4a:3f:b8:7f:d7:76:ea:9d:49:21: 5d:a2:6b:95:50:7a:bf:9e:87:88:21:7b:ba:44:5c: 74:2e:2d:8a:4d:d1:26:dc:5d:0d:15:65:f0:5d:5b: d0:8a:fb:68:e7:9b:7c:8b:01:d1:ad:58:2c:d9:14: 9d:4a:5e:d2:35:86:23:9c:2a:7a:b0:c3:1e:47:81: b0:4e:25:06:5e:35:cd:66:64:53:11:58:9d:5c:fb: cc:94:be:f3:1d:69:71:94:10:dc:9a:b7:21:1d:d2: 3f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:DB:88:92:13:95:44:60:B4:8B:C1:C0:07:67:E2:5B:98:2E:C6:57 X509v3 Authority Key Identifier: keyid:A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:8b:f7:d3:1f:1e:aa:a8:38:b0:80:98:63:d7:b4:f4:55:4a: d5:ab:8f:7b:44:c8:af:05:10:00:d0:32:b4:bf:b1:33:06:47: 4a:bc:17:b7:85:92:12:d8:5f:32:76:c7:97:18:b1:6f:f4:34: e1:1e:75:86:3a:cd:8f:fd:68:02:f6:27:5b:18:57:30:6f:74: db:b2:24:cc:ed:50:77:de:c6:eb:e8:06:e0:5d:ec:56:7c:79: a0:86:30:fd:23:1f:e0:b9:d2:dc:6a:6d:c2:8c:f0:9e:1a:04: 4e:ce:d0:1b:96:9c:07:6e:22:4f:2e:a8:7c:9c:a9:7b:7b:b3: be:cb:32:aa:af:fa:d2:82:05:bb:08:a2:41:23:b1:f5:20:e6: e3:f2:50:75:20:4d:43:e6:1b:38:53:4a:a9:91:4a:bd:c5:18: 9f:83:c7:16:1b:4b:fe:3e:89:a0:50:1e:b5:30:9e:11:22:75: 43:0d:ad:95:95:ae:ca:c2:e4:7d:32:2d:5d:ee:c6:f4:1c:85: 07:52:c2:3d:7e:af:c9:ab:dc:93:9f:d8:77:43:f5:fc:83:5c: 4b:45:ff:25:2f:0a:2d:c6:7e:7c:5b:45:7d:0d:75:33:6b:fd: 93:54:23:b8:9e:bc:1d:8e:57:52:ca:92:76:2a:bd:07:f8:64: 83:0d:bc:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydooejZmP2sXMIWyM6336MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2OTc0OWZhMjMzN2RiMzNhNzY0NzRlYjgxMmMwMzRlMzA1 MDlkMmEwHhcNMjUxMjA2MDcwMDQ2WhcNMjUxMjA3MDcwMDQ2WjAzMTEwLwYDVQQD Eyg1ZGRiODg5MjEzOTU0NDYwYjQ4YmMxYzAwNzY3ZTI1Yjk4MmVjNjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0f/8PGPNFZ4QyVx90JghL4YUQjk+ /71LL0eBx+68nXEOJpZoqS6hcWhaT4iZP9Qa6JnLBv0LszNhhWZrk/wkjJameuqv vlQekuY/uzw7EeZ8JbesMSZJoPKtL7wpWWI3WRS9hTqtiQc3VZVjtnF3PWKQnS06 1h46D4PvqysQy3AEqktP2gy5HFzAXn2vo4jTGqlKapQbElhWSko/uH/XduqdSSFd omuVUHq/noeIIXu6RFx0Li2KTdEm3F0NFWXwXVvQivto55t8iwHRrVgs2RSdSl7S NYYjnCp6sMMeR4GwTiUGXjXNZmRTEVidXPvMlL7zHWlxlBDcmrchHdI/kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF3biJITlURgtIvBwAdn4luYLsZXMB8GA1UdIwQY MBaAFKaXSfojN9szp2R064EsA04wUJ0qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHBkSi1pTTMyek9uWkhUcmdTd0RUakJRblNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iMWJmNTctNjc5Zi00NTY0LWI3MDEt Y2IyOTY3MDhkZWM4LzEvcHBkSi1pTTMyek9uWkhUcmdTd0RUakJRblNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9iMWJmNTctNjc5Zi00NTY0LWI3MDEtY2IyOTY3MDhkZWM4 LzEvcHBkSi1pTTMyek9uWkhUcmdTd0RUakJRblNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEov30x8e qqg4sICYY9e09FVK1auPe0TIrwUQANAytL+xMwZHSrwXt4WSEthfMnbHlxixb/Q0 4R51hjrNj/1oAvYnWxhXMG9027IkzO1Qd97G6+gG4F3sVnx5oIYw/SMf4LnS3Gpt wozwnhoETs7QG5acB24iTy6ofJype3uzvssyqq/60oIFuwiiQSOx9SDm4/JQdSBN Q+YbOFNKqZFKvcUYn4PHFhtL/j6JoFAetTCeESJ1Qw2tlZWuysLkfTItXe7G9ByF B1LCPX6vyavck5/Yd0P1/INcS0X/JS8KLcZ+fFtFfQ11M2v9k1QjuJ68HY5XUsqS diq9B/hkgw28bQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:45:20 2025 by rpki-client