This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft
File: ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft (raw, json)
Hash identifier: 5WrH34j9LWWWXRJp5LsbO01+TDLOJlf6LJohWFTvyoc=
Subject key identifier: 35:01:A8:FC:DD:7B:88:6D:32:3E:9A:BE:9D:23:7A:3B:1D:33:75:F5
Authority key identifier: A6:94:F0:05:F5:97:7C:32:3E:CD:BE:A9:C5:F8:CC:A3:69:E6:5C:67
Certificate issuer: /CN=a694f005f5977c323ecdbea9c5f8cca369e65c67
Certificate serial: 019B3E6D87A3DC80295B6A52B1DCB4CF441A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft
Manifest number: 1789
Signing time: Sun 21 Dec 2025 01:02:03 +0000
Manifest this update: Sun 21 Dec 2025 01:02:03 +0000
Manifest next update: Mon 22 Dec 2025 01:02:03 +0000
Files and hashes: 1: La2Bx3Kg3yNgjzXlOayck9yYHYs.roa (hash: RlSJSM6obvvJNVAHyjc4ol2rPsLp9JSNr1eJ2DwTo2Q=)
2: MrkyT3HsZnc05eV0DUl_cIOGSb0.roa (hash: Rbd1whscUt8OERBLf2JXNylefFQ5sp0l42mdjx1lxUo=)
3: bkH9wHIb-OrCqJuyQRHuIXtQk1c.roa (hash: JMTNFJ1w/NwtHoH0YImfgSSrGbnKKHMXYAPq6CQxkXc=)
4: ppTwBfWXfDI-zb6pxfjMo2nmXGc.crl (hash: pskTE+qzQ4dYLlCkiWxxIvvHaVGC1btck8BWevVTfso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 19:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3e:6d:87:a3:dc:80:29:5b:6a:52:b1:dc:b4:cf:44:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a694f005f5977c323ecdbea9c5f8cca369e65c67
Validity
Not Before: Dec 21 01:02:03 2025 GMT
Not After : Dec 22 01:02:03 2025 GMT
Subject: CN=3501a8fcdd7b886d323e9abe9d237a3b1d3375f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:58:75:e8:91:88:87:12:76:1a:47:30:69:71:
d5:31:49:d8:f7:2f:bd:14:44:86:42:1d:5e:dd:0e:
9a:4a:04:78:08:cd:38:49:0b:f4:1e:ab:a6:4e:49:
17:c2:d4:e4:85:fb:1c:7b:a6:8f:a1:69:87:22:69:
72:ca:31:d4:e2:e4:16:8c:52:1f:2b:6a:3f:b2:c4:
de:20:6a:7c:da:dd:90:cb:b5:74:56:63:6c:24:71:
aa:e1:d5:8f:6d:b3:6a:24:0c:2b:5b:2f:53:3b:bf:
c3:6e:99:1f:6c:30:90:58:e8:56:2e:75:48:59:b8:
de:91:20:7e:48:39:e3:4b:f6:da:55:04:dc:bd:80:
9a:d7:23:01:8c:75:10:44:60:12:95:8b:c8:ed:fe:
c4:6b:05:26:fb:6a:1a:13:11:e3:a4:2f:cc:f3:21:
b7:74:03:9b:14:19:dd:de:76:b6:3b:bf:f4:ee:92:
31:f2:19:8b:ff:f9:f1:05:6c:70:65:6f:78:0e:d3:
58:92:dc:9a:84:1e:38:ad:34:a1:c6:31:3d:9e:86:
d3:ff:22:54:8c:b4:46:3e:37:5d:45:af:d7:f3:ac:
b9:45:29:42:f8:b6:1f:f5:67:6b:a7:93:fe:1e:f6:
a7:12:4e:21:90:c3:c1:d9:c6:34:55:33:c3:fa:1a:
40:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:01:A8:FC:DD:7B:88:6D:32:3E:9A:BE:9D:23:7A:3B:1D:33:75:F5
X509v3 Authority Key Identifier:
keyid:A6:94:F0:05:F5:97:7C:32:3E:CD:BE:A9:C5:F8:CC:A3:69:E6:5C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:0e:da:ee:33:35:be:ab:1a:09:0e:d0:60:aa:3f:3a:d6:08:
53:47:76:6e:80:43:0f:ea:3e:44:f0:3a:08:43:b5:ad:0b:01:
24:30:98:91:90:77:49:dd:aa:ec:59:94:e2:8d:03:9c:17:2d:
3f:0e:61:54:89:f0:a3:8a:00:93:0b:a9:cc:69:0a:26:a2:3f:
0b:75:3a:cc:9a:fb:2d:5d:9e:62:db:4a:ee:09:9e:3b:8b:fe:
d1:59:f6:05:1d:cb:f8:29:2e:9d:c3:71:6e:4e:ee:27:7f:02:
f0:39:67:1b:1d:bf:d8:3a:06:28:6f:14:96:b1:37:70:50:b8:
f9:20:70:3b:fc:6b:c7:ef:6d:81:5f:77:34:48:cc:cd:3c:8f:
5c:02:62:62:3b:65:4e:ef:91:2f:1e:67:63:7c:1d:8b:75:bb:
1e:e9:51:a4:ea:f9:bc:0b:9d:cf:e8:11:7e:8e:c9:5a:f8:ea:
d9:f1:f8:92:7e:ee:db:9c:97:a6:57:44:9d:d8:c5:b5:ce:7e:
46:a8:fb:f0:e8:cb:f1:4f:66:96:5c:81:d5:2f:de:c4:23:e7:
ca:e1:b2:5d:8d:e3:09:62:e7:1b:d7:e0:16:6d:ef:d4:e5:b5:
45:7d:4c:af:c0:b1:53:84:ff:83:70:8c:3e:03:9c:bc:f5:46:
53:95:b2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 04:07:47 2025 by rpki-client