This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft File: PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft (raw, json) Hash identifier: p/qL8ePVhf+okYvGxQzEKgVK4W4ApSxaU11AfptXLZE= Subject key identifier: 91:F3:1E:10:23:A7:96:EB:DC:5C:85:42:27:58:FD:99:09:C3:D4:B1 Authority key identifier: 3C:FE:E2:EA:3C:DE:08:73:A1:91:BD:D7:95:22:73:99:B5:6A:43:BA Certificate issuer: /CN=3cfee2ea3cde0873a191bdd795227399b56a43ba Certificate serial: 019B3AFE0850DE1D519C34C364A006795777 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft Manifest number: AC Signing time: Sat 20 Dec 2025 09:01:25 +0000 Manifest this update: Sat 20 Dec 2025 09:01:25 +0000 Manifest next update: Sun 21 Dec 2025 09:01:25 +0000 Files and hashes: 1: PP7i6jzeCHOhkb3XlSJzmbVqQ7o.crl (hash: obErfUlEOkyeSdesBIsRMTDRsxQr37GE7tF52yYIIqw=) 2: jr0RBSPTUaBgSpWvcYrsuz04Sl4.roa (hash: e3OTBQIY/Ada+fXq3XpOy4yH3jmNIsJ/kNlwBeX9MM0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft rsync://rpki.ripe.net/repository/DEFAULT/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fe:08:50:de:1d:51:9c:34:c3:64:a0:06:79:57:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cfee2ea3cde0873a191bdd795227399b56a43ba Validity Not Before: Dec 20 09:01:25 2025 GMT Not After : Dec 21 09:01:25 2025 GMT Subject: CN=91f31e1023a796ebdc5c85422758fd9909c3d4b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5d:de:14:ee:8b:3f:18:05:d3:70:2b:f0:0f: b6:a5:28:54:be:8b:d0:4a:9a:ae:1b:af:f2:44:3e: 88:1e:70:4b:ac:7c:42:bb:11:8c:36:a0:fb:ec:82: 47:8f:28:59:e9:62:36:bf:ac:e7:f3:8e:00:78:de: 0b:d5:85:fa:61:4d:00:97:bb:03:d1:5b:69:c1:53: 37:00:52:4c:00:0f:20:09:26:09:ff:f8:c8:be:1b: 0d:ba:70:89:8a:83:97:58:08:fc:4e:e4:4d:0f:42: 4c:74:d1:c7:83:a1:48:17:3e:d8:88:db:ee:d4:4d: 30:b2:51:77:4a:f9:d8:5b:ea:a8:61:e3:7b:5d:9e: ae:8d:4b:81:62:e9:fc:73:15:ea:4a:68:d5:5e:f2: de:d1:9f:56:60:a9:8e:ca:fb:8f:3c:8b:72:29:c0: f6:11:58:c4:94:d3:17:f8:46:14:67:f9:a9:a1:82: 09:4f:03:70:79:ca:40:08:ec:c5:eb:6c:fd:05:0b: b3:6d:b0:26:22:bd:66:c9:c6:6e:c3:fe:b8:d4:01: 43:80:a2:ed:64:5f:45:d8:66:18:a0:be:87:b6:33: 6a:e4:da:6c:25:83:e1:cc:c4:39:c9:9f:86:6c:24: fa:33:ac:d8:15:59:8b:84:43:64:d7:37:19:2e:fb: d4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:F3:1E:10:23:A7:96:EB:DC:5C:85:42:27:58:FD:99:09:C3:D4:B1 X509v3 Authority Key Identifier: keyid:3C:FE:E2:EA:3C:DE:08:73:A1:91:BD:D7:95:22:73:99:B5:6A:43:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:bb:28:d5:e8:d2:35:e2:f9:e5:d6:c7:74:fd:31:1e:98:21: 99:63:db:22:69:55:69:14:70:d5:f6:a1:31:aa:e6:9d:1a:d5: 21:f0:0d:21:88:86:d6:b6:98:e4:ec:40:42:6d:cd:9e:ba:82: 25:dd:03:99:7d:a6:26:eb:45:c7:e2:27:9b:74:50:5d:e8:bd: 1b:59:5d:d5:15:2b:16:41:29:0c:c9:cf:e4:68:1f:11:50:e8: 5b:0a:9d:54:97:19:0e:d5:32:74:19:9e:f9:77:82:e5:41:e0: 77:80:59:cf:1b:9b:15:e4:99:e1:52:4d:a1:bb:81:df:b0:85: 6d:b1:b2:3d:25:48:51:ab:01:8a:d8:1b:29:c0:fa:87:ac:39: ad:8b:9f:b2:ff:5c:d6:35:e5:f4:6d:38:55:53:86:0a:a0:5d: dc:b4:a3:c5:ae:a5:39:a4:60:60:98:40:37:91:5e:70:8a:3e: ee:77:9e:97:6f:71:59:fa:c0:8f:c3:11:56:22:7e:1f:0b:1a: fe:38:4e:34:a0:a5:3d:c7:b5:98:9f:5e:8c:98:84:39:81:ba: ef:58:0d:91:e9:cb:a0:8b:7d:87:6e:e7:29:1c:22:ba:bb:08: 0e:62:61:43:77:27:af:88:9d:eb:ff:7c:a7:52:e9:9c:70:dc: ee:50:e2:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/ghQ3h1RnDTDZKAGeVd3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjZmVlMmVhM2NkZTA4NzNhMTkxYmRkNzk1MjI3Mzk5YjU2 YTQzYmEwHhcNMjUxMjIwMDkwMTI1WhcNMjUxMjIxMDkwMTI1WjAzMTEwLwYDVQQD Eyg5MWYzMWUxMDIzYTc5NmViZGM1Yzg1NDIyNzU4ZmQ5OTA5YzNkNGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr13eFO6LPxgF03Ar8A+2pShUvovQ SpquG6/yRD6IHnBLrHxCuxGMNqD77IJHjyhZ6WI2v6zn844AeN4L1YX6YU0Al7sD 0VtpwVM3AFJMAA8gCSYJ//jIvhsNunCJioOXWAj8TuRND0JMdNHHg6FIFz7YiNvu 1E0wslF3SvnYW+qoYeN7XZ6ujUuBYun8cxXqSmjVXvLe0Z9WYKmOyvuPPItyKcD2 EVjElNMX+EYUZ/mpoYIJTwNwecpACOzF62z9BQuzbbAmIr1mycZuw/641AFDgKLt ZF9F2GYYoL6HtjNq5NpsJYPhzMQ5yZ+GbCT6M6zYFVmLhENk1zcZLvvUeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHzHhAjp5br3FyFQidY/ZkJw9SxMB8GA1UdIwQY MBaAFDz+4uo83ghzoZG915Uic5m1akO6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFA3aTZqemVDSE9oa2IzWGxTSnptYlZxUTdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9mNjY4ZTAtZmIzNi00NWEwLTk3MWYt NmIyZjlkMTUxNTE5LzEvUFA3aTZqemVDSE9oa2IzWGxTSnptYlZxUTdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9mNjY4ZTAtZmIzNi00NWEwLTk3MWYtNmIyZjlkMTUxNTE5 LzEvUFA3aTZqemVDSE9oa2IzWGxTSnptYlZxUTdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf7so1ejS NeL55dbHdP0xHpghmWPbImlVaRRw1fahMarmnRrVIfANIYiG1raY5OxAQm3NnrqC Jd0DmX2mJutFx+Inm3RQXei9G1ld1RUrFkEpDMnP5GgfEVDoWwqdVJcZDtUydBme +XeC5UHgd4BZzxubFeSZ4VJNobuB37CFbbGyPSVIUasBitgbKcD6h6w5rYufsv9c 1jXl9G04VVOGCqBd3LSjxa6lOaRgYJhAN5FecIo+7neel29xWfrAj8MRViJ+Hwsa /jhONKClPce1mJ9ejJiEOYG671gNkenLoIt9h27nKRwiursIDmJhQ3cnr4id6/98 p1LpnHDc7lDiTA== -----END CERTIFICATE-----Generated at Sat Dec 20 15:12:12 2025 by rpki-client