This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft File: ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft (raw, json) Hash identifier: E+9AMZruDlBQaBb427Cmw2QBMlyI0epQl5FXGs0PM40= Subject key identifier: 10:89:77:C2:B4:49:E0:75:70:A7:82:A8:AC:2E:C2:23:26:45:27:24 Authority key identifier: A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A Certificate issuer: /CN=a69749fa2337db33a76474eb812c034e30509d2a Certificate serial: 019BF5ABC69C46A74D423B7C019963F1A489 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft Manifest number: 075B Signing time: Sun 25 Jan 2026 15:00:33 +0000 Manifest this update: Sun 25 Jan 2026 15:00:33 +0000 Manifest next update: Mon 26 Jan 2026 15:00:33 +0000 Files and hashes: 1: ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl (hash: ZKzMPuL9Z63mvepAeyH4nc2Jx4v+chn7IQqW8Ewp71Y=) 2: rTC0QfBbtuMqPMUcNggAjT6mTZU.roa (hash: Kx4VZB+r4ecCnqS7wfmvRwNhUpPx2hLpmBb8CQQGRSA=) 3: xEEobC6a9g-ieILcoz7D0nJiJUk.roa (hash: oW3AWDFA5hp4F3w3Pl6J/jMvd/iESOLPY+Y+Yt3dnpk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ab:c6:9c:46:a7:4d:42:3b:7c:01:99:63:f1:a4:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a69749fa2337db33a76474eb812c034e30509d2a Validity Not Before: Jan 25 15:00:33 2026 GMT Not After : Jan 26 15:00:33 2026 GMT Subject: CN=108977c2b449e07570a782a8ac2ec22326452724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:92:9d:a9:20:aa:70:90:94:22:41:b4:85:86: 72:bb:98:5c:00:1a:ae:a2:3a:ce:08:a3:7c:81:a0: 47:e2:0f:18:4e:26:dd:83:9f:ea:1d:a5:31:e5:9e: 68:d6:b5:79:8f:0c:07:cb:41:24:db:e5:2b:56:ee: 40:69:5f:25:5e:0f:a0:08:f7:49:5b:a5:53:66:74: c9:c6:3f:06:33:e8:32:20:43:b8:8b:c3:98:82:0a: a5:3b:e2:df:6f:7a:95:8f:d5:f2:12:5b:36:b6:27: c7:cb:28:54:c9:d8:92:d4:25:32:f5:ff:e8:3e:65: c8:c2:fc:2b:07:69:18:22:76:44:e0:50:0c:45:c8: 9c:15:46:07:38:df:d0:d7:f1:d7:cd:0c:73:77:db: fc:cd:a0:f2:86:f3:9a:7b:75:8d:18:1f:46:11:5d: e2:84:ec:53:1b:2c:ee:18:c1:76:9d:94:63:5d:54: 8d:72:b5:b7:b2:ee:03:5f:ef:80:d0:93:c6:6f:17: b5:2d:a0:f4:85:9d:d5:f2:4c:94:df:41:5a:93:cc: e6:4a:7a:61:37:3c:a8:f6:ce:40:3b:c7:a2:0f:2a: 88:88:dd:97:12:af:a3:d8:bb:a9:dc:e7:e4:d7:59: e9:aa:b7:44:4c:81:0d:e0:7d:e2:5c:5f:a8:27:48: 16:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:89:77:C2:B4:49:E0:75:70:A7:82:A8:AC:2E:C2:23:26:45:27:24 X509v3 Authority Key Identifier: keyid:A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:fa:3f:0a:ed:d0:2f:bd:06:43:3c:2a:b7:45:02:a2:53:29: cc:8c:32:7d:d5:55:ef:c3:d9:65:a9:68:f8:34:84:89:0b:e1: f9:2e:df:5b:a6:9a:0a:8e:4f:24:3d:49:6b:72:fe:23:03:9c: 64:80:13:d8:15:d7:6a:09:e6:8c:74:d3:0f:b5:89:e3:f5:71: f0:f9:a7:87:a4:9b:09:6c:a9:52:8a:7e:51:23:6c:3a:a4:3c: 4d:67:09:1b:58:85:5e:8c:69:14:30:50:9e:1a:e7:c6:2e:b1: 8c:05:25:72:a7:76:86:29:83:5c:46:a0:9b:93:99:fb:60:84: 1b:44:42:1c:4c:78:b2:96:4d:7e:00:9d:e2:7e:af:df:fc:bc: 1b:fe:cf:67:56:92:3c:2d:61:28:a7:c2:26:ee:f9:a0:c1:b7: c9:c7:16:36:9c:81:89:e5:38:54:5c:ca:af:3b:50:d1:a7:2d: cb:03:1b:d6:ac:4d:e1:03:ff:32:55:41:d7:23:8e:c8:d0:31: 10:16:ea:3a:0e:83:83:40:50:a3:9f:e5:d4:3b:59:ff:7f:3b: ba:36:7f:04:7e:35:fa:9e:17:5f:11:d2:e8:0c:f6:cb:07:9e: bc:e4:9b:06:cf:d8:f7:ee:f0:92:40:77:20:27:18:b8:2c:16: 19:40:c5:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1q8acRqdNQjt8AZlj8aSJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2OTc0OWZhMjMzN2RiMzNhNzY0NzRlYjgxMmMwMzRlMzA1 MDlkMmEwHhcNMjYwMTI1MTUwMDMzWhcNMjYwMTI2MTUwMDMzWjAzMTEwLwYDVQQD EygxMDg5NzdjMmI0NDllMDc1NzBhNzgyYThhYzJlYzIyMzI2NDUyNzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJKdqSCqcJCUIkG0hYZyu5hcABqu ojrOCKN8gaBH4g8YTibdg5/qHaUx5Z5o1rV5jwwHy0Ek2+UrVu5AaV8lXg+gCPdJ W6VTZnTJxj8GM+gyIEO4i8OYggqlO+Lfb3qVj9XyEls2tifHyyhUydiS1CUy9f/o PmXIwvwrB2kYInZE4FAMRcicFUYHON/Q1/HXzQxzd9v8zaDyhvOae3WNGB9GEV3i hOxTGyzuGMF2nZRjXVSNcrW3su4DX++A0JPGbxe1LaD0hZ3V8kyU30Fak8zmSnph Nzyo9s5AO8eiDyqIiN2XEq+j2Lup3Ofk11npqrdETIEN4H3iXF+oJ0gWvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBCJd8K0SeB1cKeCqKwuwiMmRSckMB8GA1UdIwQY MBaAFKaXSfojN9szp2R064EsA04wUJ0qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHBkSi1pTTMyek9uWkhUcmdTd0RUakJRblNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iMWJmNTctNjc5Zi00NTY0LWI3MDEt Y2IyOTY3MDhkZWM4LzEvcHBkSi1pTTMyek9uWkhUcmdTd0RUakJRblNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9iMWJmNTctNjc5Zi00NTY0LWI3MDEtY2IyOTY3MDhkZWM4 LzEvcHBkSi1pTTMyek9uWkhUcmdTd0RUakJRblNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALPo/Cu3Q L70GQzwqt0UColMpzIwyfdVV78PZZalo+DSEiQvh+S7fW6aaCo5PJD1Ja3L+IwOc ZIAT2BXXagnmjHTTD7WJ4/Vx8Pmnh6SbCWypUop+USNsOqQ8TWcJG1iFXoxpFDBQ nhrnxi6xjAUlcqd2himDXEagm5OZ+2CEG0RCHEx4spZNfgCd4n6v3/y8G/7PZ1aS PC1hKKfCJu75oMG3yccWNpyBieU4VFzKrztQ0actywMb1qxN4QP/MlVB1yOOyNAx EBbqOg6Dg0BQo5/l1DtZ/387ujZ/BH41+p4XXxHS6Az2yweevOSbBs/Y9+7wkkB3 ICcYuCwWGUDF5Q== -----END CERTIFICATE-----Generated at Mon Jan 26 01:48:25 2026 by rpki-client