This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.mft File: PpvRijUxNTVm7RgUDK10GQW-r64.mft (raw, json) Hash identifier: 6JXxpqkW/FicM4ssyLfrkXHP7xiE4A8NPsqnLhgUCXM= Subject key identifier: E0:9A:13:37:86:91:9B:05:A1:DE:D5:7B:4B:67:58:92:48:1B:3A:74 Authority key identifier: 3E:9B:D1:8A:35:31:35:35:66:ED:18:14:0C:AD:74:19:05:BE:AF:AE Certificate issuer: /CN=3e9bd18a3531353566ed18140cad741905beafae Certificate serial: 019B3BA25090FA086CFCFD626D5356B163E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PpvRijUxNTVm7RgUDK10GQW-r64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.mft Manifest number: 2E Signing time: Sat 20 Dec 2025 12:00:51 +0000 Manifest this update: Sat 20 Dec 2025 12:00:51 +0000 Manifest next update: Sun 21 Dec 2025 12:00:51 +0000 Files and hashes: 1: PpvRijUxNTVm7RgUDK10GQW-r64.crl (hash: S8CfyHx/zP6roCSCZDeqLnGxJ1LwCbMLvmDTg+ATI6k=) 2: QnmSXREuoJoxyzq3KCupQRfwqgk.roa (hash: MCtPZ5mabEHaId0q3vGImpY/QoJAaPrM8Arw2t98V0U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.mft rsync://rpki.ripe.net/repository/DEFAULT/PpvRijUxNTVm7RgUDK10GQW-r64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:50:90:fa:08:6c:fc:fd:62:6d:53:56:b1:63:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e9bd18a3531353566ed18140cad741905beafae Validity Not Before: Dec 20 12:00:51 2025 GMT Not After : Dec 21 12:00:51 2025 GMT Subject: CN=e09a133786919b05a1ded57b4b675892481b3a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:dd:0a:bc:81:05:72:7f:1e:98:5f:eb:cd:ba: 3d:96:5a:69:9b:76:00:bc:63:a3:ef:a0:a1:6a:a0: 55:cb:b4:b8:46:73:1b:92:d2:2a:8e:08:15:4e:ae: 35:28:de:09:19:5c:36:78:0f:8c:e1:43:e3:91:0c: f6:36:98:18:91:fd:01:3f:4f:a7:ea:c0:ab:0b:f4: fa:2d:16:32:e6:2a:6b:88:14:9a:21:0a:c7:ae:af: 7a:64:93:b1:e6:2b:d9:e4:6a:c5:d2:a7:bb:bc:a9: bc:60:a7:d9:e7:3f:2f:08:c1:8a:12:12:38:24:3f: de:ee:8f:ae:13:3b:78:6d:79:30:91:2f:f0:ef:54: 51:de:e9:51:6d:84:b2:b5:59:97:cc:68:52:1b:86: 3b:9f:e9:40:1b:83:db:02:a2:89:2a:ab:6b:32:70: eb:28:f8:f7:bf:36:c1:53:8d:c5:b5:de:55:88:8c: b7:34:03:78:04:5b:8d:b9:7c:39:66:02:33:8f:5a: e1:52:e9:89:c3:7c:a4:c4:3e:7d:4a:9c:8b:69:bf: 55:e2:ca:08:f0:c2:a6:06:e0:2f:ad:38:01:fc:54: 58:93:17:42:1f:a5:33:cf:77:61:b3:a0:82:63:45: b5:83:38:35:6f:e7:5b:1d:8d:2c:80:08:5e:9c:4a: 64:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:9A:13:37:86:91:9B:05:A1:DE:D5:7B:4B:67:58:92:48:1B:3A:74 X509v3 Authority Key Identifier: keyid:3E:9B:D1:8A:35:31:35:35:66:ED:18:14:0C:AD:74:19:05:BE:AF:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PpvRijUxNTVm7RgUDK10GQW-r64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:05:b3:fb:d0:cc:3c:94:b0:4a:57:e6:b8:73:c9:7b:3d:d6: b5:14:b6:85:54:5f:32:f4:f4:65:22:99:3d:d2:cb:f2:60:b0: 6a:a6:e9:85:6e:75:fd:8e:26:50:e9:2e:3d:92:f9:82:b6:51: 70:37:f7:af:d7:a7:5f:4f:ac:e5:3c:20:48:91:5a:80:33:c7: 48:46:88:5c:ca:91:fa:12:3e:2c:f0:f1:22:3e:a8:f9:be:88: d8:ab:5e:bb:c1:2c:d9:9a:8e:c8:ed:b8:de:d4:6a:79:8d:9f: 58:ab:03:95:69:07:fa:75:44:e1:da:36:07:60:55:ad:64:dc: a3:a0:a2:94:89:77:17:7e:69:6b:9e:5d:e2:cd:c8:86:ba:d1: a5:7d:69:86:1b:f0:79:ac:18:b4:08:42:e8:53:dc:b1:01:7d: b4:c5:04:ac:f4:66:2c:ca:10:69:7d:34:03:29:ab:0d:de:26: c4:4e:07:ea:59:6c:3d:e0:20:3d:6a:b8:8f:a7:d9:57:4e:ae: cb:c1:2a:c2:06:fa:d0:01:9c:99:bd:96:35:84:d7:65:2f:17: 10:8b:17:2f:48:26:4a:b8:b8:5e:bf:86:48:47:ec:d8:44:a2: a0:71:ea:47:60:d5:a2:2f:02:9b:cf:e4:41:ef:d1:dc:36:65: 68:50:3f:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7olCQ+ghs/P1ibVNWsWPmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlOWJkMThhMzUzMTM1MzU2NmVkMTgxNDBjYWQ3NDE5MDVi ZWFmYWUwHhcNMjUxMjIwMTIwMDUxWhcNMjUxMjIxMTIwMDUxWjAzMTEwLwYDVQQD EyhlMDlhMTMzNzg2OTE5YjA1YTFkZWQ1N2I0YjY3NTg5MjQ4MWIzYTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd0KvIEFcn8emF/rzbo9llppm3YA vGOj76ChaqBVy7S4RnMbktIqjggVTq41KN4JGVw2eA+M4UPjkQz2NpgYkf0BP0+n 6sCrC/T6LRYy5ipriBSaIQrHrq96ZJOx5ivZ5GrF0qe7vKm8YKfZ5z8vCMGKEhI4 JD/e7o+uEzt4bXkwkS/w71RR3ulRbYSytVmXzGhSG4Y7n+lAG4PbAqKJKqtrMnDr KPj3vzbBU43Ftd5ViIy3NAN4BFuNuXw5ZgIzj1rhUumJw3ykxD59SpyLab9V4soI 8MKmBuAvrTgB/FRYkxdCH6Uzz3dhs6CCY0W1gzg1b+dbHY0sgAhenEpkDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOCaEzeGkZsFod7Ve0tnWJJIGzp0MB8GA1UdIwQY MBaAFD6b0Yo1MTU1Zu0YFAytdBkFvq+uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHB2UmlqVXhOVFZtN1JnVURLMTBHUVctcjY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS84NmRiYjQtNmFlNC00NzZlLWE2MDEt ZWEyNzdiNDkyZjFlLzEvUHB2UmlqVXhOVFZtN1JnVURLMTBHUVctcjY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS84NmRiYjQtNmFlNC00NzZlLWE2MDEtZWEyNzdiNDkyZjFl LzEvUHB2UmlqVXhOVFZtN1JnVURLMTBHUVctcjY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVAWz+9DM PJSwSlfmuHPJez3WtRS2hVRfMvT0ZSKZPdLL8mCwaqbphW51/Y4mUOkuPZL5grZR cDf3r9enX0+s5TwgSJFagDPHSEaIXMqR+hI+LPDxIj6o+b6I2Kteu8Es2ZqOyO24 3tRqeY2fWKsDlWkH+nVE4do2B2BVrWTco6CilIl3F35pa55d4s3IhrrRpX1phhvw eawYtAhC6FPcsQF9tMUErPRmLMoQaX00AymrDd4mxE4H6llsPeAgPWq4j6fZV06u y8Eqwgb60AGcmb2WNYTXZS8XEIsXL0gmSri4Xr+GSEfs2ESioHHqR2DVoi8Cm8/k Qe/R3DZlaFA/xg== -----END CERTIFICATE-----Generated at Sat Dec 20 16:07:46 2025 by rpki-client