This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.mft File: P1ptl_x4eEKUBFeOXMDMZS_ktNQ.mft (raw, json) Hash identifier: idElOkQzLQ5MKa2AU7fIcZMA9LUHx3JgVmhZXHNdEko= Subject key identifier: F6:B8:B1:30:C7:1A:72:C4:E7:AA:A1:D8:A8:15:E2:DB:16:59:D8:A8 Authority key identifier: 3F:5A:6D:97:FC:78:78:42:94:04:57:8E:5C:C0:CC:65:2F:E4:B4:D4 Certificate issuer: /CN=3f5a6d97fc7878429404578e5cc0cc652fe4b4d4 Certificate serial: 019B6467AEE07367279B920B949CEAF5603E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.mft Manifest number: 165E Signing time: Sun 28 Dec 2025 10:01:15 +0000 Manifest this update: Sun 28 Dec 2025 10:01:15 +0000 Manifest next update: Mon 29 Dec 2025 10:01:15 +0000 Files and hashes: 1: P1ptl_x4eEKUBFeOXMDMZS_ktNQ.crl (hash: Iv0UwH1reQy+S1nBThwPHvXWXxG8OKpMvG0WVWY5bCk=) 2: yV6dlaQqykdXmPFxWtSp2DJEhJw.roa (hash: WmIvozgI3vtTkD0hLlFRwt8yL/FQ4uPIVdy3pddOlRc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.crl rsync://rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.mft rsync://rpki.ripe.net/repository/DEFAULT/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:64:67:ae:e0:73:67:27:9b:92:0b:94:9c:ea:f5:60:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f5a6d97fc7878429404578e5cc0cc652fe4b4d4 Validity Not Before: Dec 28 10:01:15 2025 GMT Not After : Dec 29 10:01:15 2025 GMT Subject: CN=f6b8b130c71a72c4e7aaa1d8a815e2db1659d8a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:03:45:da:1a:1d:10:1e:28:88:2f:fa:84:51: c9:80:d3:47:17:fb:ca:ee:25:c1:54:73:f3:47:46: 23:bb:42:1f:0e:fd:16:ed:c8:61:45:93:61:27:0a: f7:9f:35:ef:2f:4d:27:1a:a3:eb:a8:30:1b:22:26: ed:c2:2b:19:d9:c3:6e:cf:e2:f6:b4:fd:e8:00:1f: 59:a1:68:8c:67:0f:49:5c:cd:d9:9c:a2:ab:07:b6: 5e:31:82:10:bc:43:3c:56:25:71:b9:b9:df:eb:98: f1:79:56:67:d5:26:8d:a4:4a:08:f5:4b:e6:af:10: 85:92:aa:43:d0:e8:fe:cb:9b:73:63:aa:03:bf:9c: 59:87:8a:c4:59:02:c0:64:fc:a9:5d:df:6e:2a:72: 07:34:7e:c4:92:7a:03:c3:af:6c:c7:6e:8f:fe:b1: b6:43:74:a2:6a:c5:1b:37:1a:61:60:76:4a:16:f2: bc:b8:cb:ce:94:59:e6:5f:9b:01:1b:90:e9:77:88: 68:8c:4e:e2:07:1c:1d:95:0b:e2:60:1d:ed:f0:62: b9:aa:8f:41:88:0a:d8:3c:a3:11:dc:63:93:5b:5a: 66:f1:f9:dd:19:96:f1:a6:c7:96:34:1a:2c:20:f1: d0:1e:04:61:30:62:94:3a:81:1f:dc:a7:ee:38:c7: 50:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:B8:B1:30:C7:1A:72:C4:E7:AA:A1:D8:A8:15:E2:DB:16:59:D8:A8 X509v3 Authority Key Identifier: keyid:3F:5A:6D:97:FC:78:78:42:94:04:57:8E:5C:C0:CC:65:2F:E4:B4:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:e1:fa:02:be:ef:27:2c:38:98:0d:c1:be:a3:6f:a0:79:ef: 02:d5:fd:40:50:83:49:1a:de:2c:3e:65:8d:90:6d:2a:47:d7: 34:13:65:8c:57:14:f2:f7:8e:e1:ad:5d:de:62:59:ac:e4:8f: 96:c6:1c:34:4f:f0:a6:0e:2a:83:8a:7f:a1:e5:04:c6:78:80: dc:0f:9e:5c:75:be:8f:a0:fc:30:a7:19:b6:4d:10:cd:76:bd: a9:d1:44:68:1e:10:49:61:3a:cc:90:91:a9:ee:4e:7d:2f:93: cb:2f:99:a1:92:fe:ea:bc:93:eb:cf:2d:8d:b9:32:b9:09:22: ee:1f:ec:ad:67:cf:1c:22:00:da:5b:d5:45:c6:90:ee:f0:67: d3:d8:8a:a5:b6:cf:d3:37:8b:18:c8:1d:3b:ec:3e:32:ac:33: df:89:37:d7:98:0f:e7:98:3d:84:5f:4d:54:4d:8e:21:17:db: 62:e9:ac:c2:ca:fa:4c:af:f2:9d:1a:0c:f4:ef:db:dd:a9:74: 12:3b:fe:03:fe:38:8f:13:7f:e8:9e:1e:28:e8:5e:c5:49:1a: 5d:9b:34:56:e5:74:c5:90:2d:96:93:1e:01:77:c5:6c:f4:a2: 9f:33:06:51:43:2a:7d:92:f7:7f:ab:2e:9d:3a:51:c3:e8:3b: af:32:a3:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtkZ67gc2cnm5ILlJzq9WA+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmNWE2ZDk3ZmM3ODc4NDI5NDA0NTc4ZTVjYzBjYzY1MmZl NGI0ZDQwHhcNMjUxMjI4MTAwMTE1WhcNMjUxMjI5MTAwMTE1WjAzMTEwLwYDVQQD EyhmNmI4YjEzMGM3MWE3MmM0ZTdhYWExZDhhODE1ZTJkYjE2NTlkOGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQNF2hodEB4oiC/6hFHJgNNHF/vK 7iXBVHPzR0Yju0IfDv0W7chhRZNhJwr3nzXvL00nGqPrqDAbIibtwisZ2cNuz+L2 tP3oAB9ZoWiMZw9JXM3ZnKKrB7ZeMYIQvEM8ViVxubnf65jxeVZn1SaNpEoI9Uvm rxCFkqpD0Oj+y5tzY6oDv5xZh4rEWQLAZPypXd9uKnIHNH7EknoDw69sx26P/rG2 Q3SiasUbNxphYHZKFvK8uMvOlFnmX5sBG5Dpd4hojE7iBxwdlQviYB3t8GK5qo9B iArYPKMR3GOTW1pm8fndGZbxpseWNBosIPHQHgRhMGKUOoEf3KfuOMdQ6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPa4sTDHGnLE56qh2KgV4tsWWdioMB8GA1UdIwQY MBaAFD9abZf8eHhClARXjlzAzGUv5LTUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDFwdGxfeDRlRUtVQkZlT1hNRE1aU19rdE5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82NWYwYzEtZmU5ZC00YjA5LWI1Mjgt NWRiMDMwYzFmMTRiLzEvUDFwdGxfeDRlRUtVQkZlT1hNRE1aU19rdE5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS82NWYwYzEtZmU5ZC00YjA5LWI1MjgtNWRiMDMwYzFmMTRi LzEvUDFwdGxfeDRlRUtVQkZlT1hNRE1aU19rdE5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASeH6Ar7v Jyw4mA3BvqNvoHnvAtX9QFCDSRreLD5ljZBtKkfXNBNljFcU8veO4a1d3mJZrOSP lsYcNE/wpg4qg4p/oeUExniA3A+eXHW+j6D8MKcZtk0QzXa9qdFEaB4QSWE6zJCR qe5OfS+Tyy+ZoZL+6ryT688tjbkyuQki7h/srWfPHCIA2lvVRcaQ7vBn09iKpbbP 0zeLGMgdO+w+Mqwz34k315gP55g9hF9NVE2OIRfbYumswsr6TK/ynRoM9O/b3al0 Ejv+A/44jxN/6J4eKOhexUkaXZs0VuV0xZAtlpMeAXfFbPSinzMGUUMqfZL3f6su nTpRw+g7rzKjYA== -----END CERTIFICATE-----Generated at Sun Dec 28 11:23:27 2025 by rpki-client