This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft File: pPP3bj7O8kl-ET6ju664U_YvWP4.mft (raw, json) Hash identifier: ZVDx/sfrbns0SWyicKDOrUvDgAnxv0j332A8GWJ0JdI= Subject key identifier: E6:AE:30:B0:B6:15:9A:14:BA:88:5D:0E:BD:95:57:F0:9B:07:CF:AF Authority key identifier: A4:F3:F7:6E:3E:CE:F2:49:7E:11:3E:A3:BB:AE:B8:53:F6:2F:58:FE Certificate issuer: /CN=a4f3f76e3ecef2497e113ea3bbaeb853f62f58fe Certificate serial: 019B3F483A3048542E5EDE154669192C3473 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPP3bj7O8kl-ET6ju664U_YvWP4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft Manifest number: 0E1E Signing time: Sun 21 Dec 2025 05:00:56 +0000 Manifest this update: Sun 21 Dec 2025 05:00:56 +0000 Manifest next update: Mon 22 Dec 2025 05:00:56 +0000 Files and hashes: 1: 66ywR3ba4enexaVdWoqndnOvp4U.roa (hash: Qkz3r6su/bj0dLkhbVaX1i/95TsjjuS65tg9qxOjli4=) 2: pPP3bj7O8kl-ET6ju664U_YvWP4.crl (hash: LA0RdvSR+jo0GcZjhyK4p6HJQdx7N/qH/LdV/rxiMTU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft rsync://rpki.ripe.net/repository/DEFAULT/pPP3bj7O8kl-ET6ju664U_YvWP4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:3a:30:48:54:2e:5e:de:15:46:69:19:2c:34:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4f3f76e3ecef2497e113ea3bbaeb853f62f58fe Validity Not Before: Dec 21 05:00:56 2025 GMT Not After : Dec 22 05:00:56 2025 GMT Subject: CN=e6ae30b0b6159a14ba885d0ebd9557f09b07cfaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c8:6b:d1:03:f4:74:16:99:90:a5:c8:6d:96: f6:78:c4:49:21:fb:d4:c0:c9:e5:c7:81:1f:e2:dd: 2d:f7:18:60:ea:4f:02:35:1f:65:0a:b1:27:a2:61: aa:81:ee:8a:6e:eb:59:ac:42:28:b1:78:72:01:f4: 00:10:ea:48:0e:ce:9a:3f:6e:a8:1c:5c:78:cb:69: 2f:a4:ac:2e:67:26:0c:89:1f:2b:2e:35:8e:9e:3f: 8e:a4:f3:d3:88:7f:62:a1:c4:15:85:e2:39:75:62: f0:fd:cb:4c:2d:93:86:bf:74:09:53:2a:8a:b2:c9: ba:99:46:6f:d2:a4:ce:e0:c7:6d:23:38:76:81:59: 09:64:94:6a:0a:45:f2:4d:df:87:33:e9:01:87:f3: b6:4f:b0:2e:45:d8:b7:4e:62:f4:0e:c2:b2:8d:be: 53:34:32:29:e5:4e:08:f9:1d:64:f4:e9:86:7b:bb: d5:4a:fa:98:e7:c0:fb:88:67:db:e0:e5:38:3f:47: 29:78:b3:ab:00:eb:6b:d0:15:cf:9b:b3:5c:fd:a9: ce:4d:cc:1b:e1:75:fa:e5:fc:8a:c9:a4:3a:53:9d: a0:d9:ec:da:db:8b:04:54:5c:75:67:df:bc:5b:49: 11:23:f0:c2:a6:fa:d1:5b:06:37:a8:71:57:81:19: cc:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:AE:30:B0:B6:15:9A:14:BA:88:5D:0E:BD:95:57:F0:9B:07:CF:AF X509v3 Authority Key Identifier: keyid:A4:F3:F7:6E:3E:CE:F2:49:7E:11:3E:A3:BB:AE:B8:53:F6:2F:58:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPP3bj7O8kl-ET6ju664U_YvWP4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:3f:8f:e1:a3:f7:75:26:85:0f:ce:53:4d:9b:3a:29:7b:3b: 2f:b8:4c:0a:8c:88:f4:d1:4c:7b:a9:e4:a9:e8:e6:a2:7d:ac: 90:2e:24:4d:3b:bb:b3:46:d7:70:68:60:bf:20:3b:a1:23:a7: c9:80:a9:a6:25:46:11:59:66:f1:e8:63:35:dd:44:0e:38:b9: e0:a3:fc:f7:48:69:0d:3a:a5:4c:e5:48:fd:ae:50:97:a1:f8: 01:e1:9a:ec:ff:88:41:72:c8:2c:1e:07:1d:e0:32:d9:1b:61: 74:83:f1:f2:03:6c:bc:a8:9d:da:6e:b2:a3:c1:d7:ac:5a:07: f0:05:75:e7:f8:ac:d0:c5:cd:20:d7:fd:07:d4:cf:95:b7:17: e3:57:eb:6e:f2:da:1f:1e:ed:aa:ab:aa:58:f8:fd:7d:7b:20: 27:cc:88:2d:6b:b8:c6:5b:69:7b:df:8a:a6:2d:74:04:e4:3f: 16:85:84:d8:9d:13:59:37:50:ba:16:9d:9e:22:0f:e5:ff:59: 30:7b:39:10:5d:72:a2:9a:35:e2:d3:41:c7:66:2b:4a:e4:b1: c0:8f:dd:56:cc:ef:e4:9c:df:85:ed:e1:d2:ca:3e:50:ed:2d: 23:cb:20:1d:8b:b8:90:56:e8:04:ea:7e:3a:60:3e:53:6f:de: d8:45:4f:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SDowSFQuXt4VRmkZLDRzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZjNmNzZlM2VjZWYyNDk3ZTExM2VhM2JiYWViODUzZjYy ZjU4ZmUwHhcNMjUxMjIxMDUwMDU2WhcNMjUxMjIyMDUwMDU2WjAzMTEwLwYDVQQD EyhlNmFlMzBiMGI2MTU5YTE0YmE4ODVkMGViZDk1NTdmMDliMDdjZmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtshr0QP0dBaZkKXIbZb2eMRJIfvU wMnlx4Ef4t0t9xhg6k8CNR9lCrEnomGqge6KbutZrEIosXhyAfQAEOpIDs6aP26o HFx4y2kvpKwuZyYMiR8rLjWOnj+OpPPTiH9iocQVheI5dWLw/ctMLZOGv3QJUyqK ssm6mUZv0qTO4MdtIzh2gVkJZJRqCkXyTd+HM+kBh/O2T7AuRdi3TmL0DsKyjb5T NDIp5U4I+R1k9OmGe7vVSvqY58D7iGfb4OU4P0cpeLOrAOtr0BXPm7Nc/anOTcwb 4XX65fyKyaQ6U52g2eza24sEVFx1Z9+8W0kRI/DCpvrRWwY3qHFXgRnMJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOauMLC2FZoUuohdDr2VV/CbB8+vMB8GA1UdIwQY MBaAFKTz924+zvJJfhE+o7uuuFP2L1j+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFBQM2JqN084a2wtRVQ2anU2NjRVX1l2V1A0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9kNmM1NWEtODYyOC00MjlmLWEyZWMt NGYyYzE5YmQ1NGQ3LzEvcFBQM2JqN084a2wtRVQ2anU2NjRVX1l2V1A0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9kNmM1NWEtODYyOC00MjlmLWEyZWMtNGYyYzE5YmQ1NGQ3 LzEvcFBQM2JqN084a2wtRVQ2anU2NjRVX1l2V1A0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaj+P4aP3 dSaFD85TTZs6KXs7L7hMCoyI9NFMe6nkqejmon2skC4kTTu7s0bXcGhgvyA7oSOn yYCppiVGEVlm8ehjNd1EDji54KP890hpDTqlTOVI/a5Ql6H4AeGa7P+IQXLILB4H HeAy2RthdIPx8gNsvKid2m6yo8HXrFoH8AV15/is0MXNINf9B9TPlbcX41frbvLa Hx7tqquqWPj9fXsgJ8yILWu4xltpe9+Kpi10BOQ/FoWE2J0TWTdQuhadniIP5f9Z MHs5EF1yopo14tNBx2YrSuSxwI/dVszv5Jzfhe3h0so+UO0tI8sgHYu4kFboBOp+ OmA+U2/e2EVPNg== -----END CERTIFICATE-----Generated at Sun Dec 21 12:04:14 2025 by rpki-client