This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft File: ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft (raw, json) Hash identifier: tNz/vPYf5U70TedaAQQozVQByaeeg4mDjAghb/RX0V0= Subject key identifier: CA:F4:E6:ED:36:58:B4:DE:7E:F8:B3:AB:C1:0C:54:9B:29:BB:AE:82 Authority key identifier: A6:94:F0:05:F5:97:7C:32:3E:CD:BE:A9:C5:F8:CC:A3:69:E6:5C:67 Certificate issuer: /CN=a694f005f5977c323ecdbea9c5f8cca369e65c67 Certificate serial: 019B405B643A2408B49B9D84ED5EA6A134A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 10:01:29 +0000 Manifest this update: Sun 21 Dec 2025 10:01:29 +0000 Manifest next update: Mon 22 Dec 2025 10:01:29 +0000 Files and hashes: 1: La2Bx3Kg3yNgjzXlOayck9yYHYs.roa (hash: RlSJSM6obvvJNVAHyjc4ol2rPsLp9JSNr1eJ2DwTo2Q=) 2: MrkyT3HsZnc05eV0DUl_cIOGSb0.roa (hash: Rbd1whscUt8OERBLf2JXNylefFQ5sp0l42mdjx1lxUo=) 3: bkH9wHIb-OrCqJuyQRHuIXtQk1c.roa (hash: JMTNFJ1w/NwtHoH0YImfgSSrGbnKKHMXYAPq6CQxkXc=) 4: ppTwBfWXfDI-zb6pxfjMo2nmXGc.crl (hash: lWtQZYqNu/mdDEXfimS6iqljM4Q6g10Xdfs2I8sxnQ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:64:3a:24:08:b4:9b:9d:84:ed:5e:a6:a1:34:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a694f005f5977c323ecdbea9c5f8cca369e65c67 Validity Not Before: Dec 21 10:01:29 2025 GMT Not After : Dec 22 10:01:29 2025 GMT Subject: CN=caf4e6ed3658b4de7ef8b3abc10c549b29bbae82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:89:66:f2:ef:ce:e9:a4:71:42:ca:50:b0:d9: 22:4b:e2:f1:1f:29:8c:78:e2:46:fb:fc:be:9a:48: 83:19:b9:73:da:37:61:59:30:20:5c:0c:59:8a:9c: 06:1b:8d:93:9c:ee:84:b8:8d:b2:b2:c1:df:1f:b1: fb:23:cf:69:e4:36:12:9e:55:8d:4b:dd:87:4c:29: 85:58:76:82:69:38:8a:47:58:06:87:fb:78:8c:0b: d0:2b:64:9c:75:af:b5:36:56:d2:42:89:49:8e:98: 54:09:4c:81:da:bd:06:a1:ed:45:3c:71:99:b5:a8: 08:b5:27:a6:ed:c0:18:5c:26:f6:c5:63:72:17:92: 8f:71:4d:20:5f:2d:f9:7b:8b:34:21:d4:ba:1c:b5: 77:61:68:78:91:6d:0c:25:fd:8c:d8:8b:cd:b2:4c: a1:f7:ae:04:1b:3a:3a:74:de:da:cc:92:af:73:10: 5e:23:83:79:dc:1a:ea:58:60:87:5c:cd:64:6c:7e: 54:78:89:8e:35:0f:b7:3c:59:8e:ab:28:06:55:7d: 02:f9:ee:81:eb:50:22:86:8b:63:37:14:67:7f:d9: ea:01:3f:a9:c0:e8:fc:bd:49:91:e1:17:38:05:3d: a0:13:d3:7c:ca:83:6b:1f:40:9c:65:9e:76:7a:d4: 9a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:F4:E6:ED:36:58:B4:DE:7E:F8:B3:AB:C1:0C:54:9B:29:BB:AE:82 X509v3 Authority Key Identifier: keyid:A6:94:F0:05:F5:97:7C:32:3E:CD:BE:A9:C5:F8:CC:A3:69:E6:5C:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:6f:a9:b6:30:a6:c9:fe:fa:7a:83:c9:f0:cd:56:b5:9a:74: d4:8f:d5:da:17:5b:1b:e4:0b:21:7e:54:7a:e6:a8:6d:4e:e5: 4c:9b:2a:9b:54:92:6a:81:6b:25:60:63:88:b3:b9:e9:19:64: 6c:41:ff:a7:f9:6f:fa:a4:1d:90:4f:ce:f4:ba:2a:d3:44:05: 76:20:4b:9d:78:8c:19:e2:92:45:cb:ab:23:5b:f9:3e:07:3c: 8e:43:fa:a4:6c:f5:83:d9:86:2e:c4:b4:b4:fb:27:37:a6:56: 70:c1:c4:82:93:b5:f9:86:60:8c:e1:6c:6b:3b:89:8e:97:a7: 08:66:9c:a7:21:4b:66:be:a3:5d:85:f2:35:06:9f:ba:c0:2b: e0:a2:11:55:ec:3f:34:11:66:18:24:82:49:c1:34:55:f5:9e: 25:f0:4d:86:cb:40:d6:fc:44:6b:8e:39:03:0f:64:b6:ce:10: 00:0e:30:c5:96:46:1f:49:22:bd:94:98:17:36:42:93:73:7b: be:cb:77:0f:a1:c7:c2:31:d2:0d:2d:6c:31:bf:1a:51:86:dc: b1:de:63:68:b6:82:72:1a:78:1c:bd:4d:7a:39:e3:40:0c:a2: 11:69:43:c8:9d:61:7a:97:60:6e:06:bf:3b:1a:56:99:3e:7e: 3d:c0:fe:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW2Q6JAi0m52E7V6moTShMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2OTRmMDA1ZjU5NzdjMzIzZWNkYmVhOWM1ZjhjY2EzNjll NjVjNjcwHhcNMjUxMjIxMTAwMTI5WhcNMjUxMjIyMTAwMTI5WjAzMTEwLwYDVQQD EyhjYWY0ZTZlZDM2NThiNGRlN2VmOGIzYWJjMTBjNTQ5YjI5YmJhZTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuolm8u/O6aRxQspQsNkiS+LxHymM eOJG+/y+mkiDGblz2jdhWTAgXAxZipwGG42TnO6EuI2yssHfH7H7I89p5DYSnlWN S92HTCmFWHaCaTiKR1gGh/t4jAvQK2Scda+1NlbSQolJjphUCUyB2r0Goe1FPHGZ tagItSem7cAYXCb2xWNyF5KPcU0gXy35e4s0IdS6HLV3YWh4kW0MJf2M2IvNskyh 964EGzo6dN7azJKvcxBeI4N53BrqWGCHXM1kbH5UeImONQ+3PFmOqygGVX0C+e6B 61AihotjNxRnf9nqAT+pwOj8vUmR4Rc4BT2gE9N8yoNrH0CcZZ52etSa7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMr05u02WLTefvizq8EMVJspu66CMB8GA1UdIwQY MBaAFKaU8AX1l3wyPs2+qcX4zKNp5lxnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHBUd0JmV1hmREktemI2cHhmak1vMm5tWEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9jNzkxODctMGQ3YS00OTBiLTkyYjAt MWI1MjdjZTE2NTExLzEvcHBUd0JmV1hmREktemI2cHhmak1vMm5tWEdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9jNzkxODctMGQ3YS00OTBiLTkyYjAtMWI1MjdjZTE2NTEx LzEvcHBUd0JmV1hmREktemI2cHhmak1vMm5tWEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsG+ptjCm yf76eoPJ8M1WtZp01I/V2hdbG+QLIX5UeuaobU7lTJsqm1SSaoFrJWBjiLO56Rlk bEH/p/lv+qQdkE/O9Loq00QFdiBLnXiMGeKSRcurI1v5Pgc8jkP6pGz1g9mGLsS0 tPsnN6ZWcMHEgpO1+YZgjOFsazuJjpenCGacpyFLZr6jXYXyNQafusAr4KIRVew/ NBFmGCSCScE0VfWeJfBNhstA1vxEa445Aw9kts4QAA4wxZZGH0kivZSYFzZCk3N7 vst3D6HHwjHSDS1sMb8aUYbcsd5jaLaCchp4HL1NejnjQAyiEWlDyJ1hepdgbga/ OxpWmT5+PcD+jg== -----END CERTIFICATE-----Generated at Sun Dec 21 13:22:51 2025 by rpki-client