This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft File: ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft (raw, json) Hash identifier: ipQx1iDS1Gojx282kAA4N0CDBI4iZX3ArhxDY4UEMrk= Subject key identifier: D3:BE:A5:3D:D8:80:02:85:E5:0B:00:4A:8B:16:09:0F:A0:61:EB:1D Authority key identifier: A6:94:F0:05:F5:97:7C:32:3E:CD:BE:A9:C5:F8:CC:A3:69:E6:5C:67 Certificate issuer: /CN=a694f005f5977c323ecdbea9c5f8cca369e65c67 Certificate serial: 019B51BCE2F15D6076CE4DC0D7DB994445D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft Manifest number: 1793 Signing time: Wed 24 Dec 2025 19:01:31 +0000 Manifest this update: Wed 24 Dec 2025 19:01:31 +0000 Manifest next update: Thu 25 Dec 2025 19:01:31 +0000 Files and hashes: 1: La2Bx3Kg3yNgjzXlOayck9yYHYs.roa (hash: RlSJSM6obvvJNVAHyjc4ol2rPsLp9JSNr1eJ2DwTo2Q=) 2: MrkyT3HsZnc05eV0DUl_cIOGSb0.roa (hash: Rbd1whscUt8OERBLf2JXNylefFQ5sp0l42mdjx1lxUo=) 3: bkH9wHIb-OrCqJuyQRHuIXtQk1c.roa (hash: JMTNFJ1w/NwtHoH0YImfgSSrGbnKKHMXYAPq6CQxkXc=) 4: ppTwBfWXfDI-zb6pxfjMo2nmXGc.crl (hash: aKOixOgPq9jzEGElgYEyRLSkthmu4NF+bdhGPjB2Vis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:e2:f1:5d:60:76:ce:4d:c0:d7:db:99:44:45:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a694f005f5977c323ecdbea9c5f8cca369e65c67 Validity Not Before: Dec 24 19:01:31 2025 GMT Not After : Dec 25 19:01:31 2025 GMT Subject: CN=d3bea53dd8800285e50b004a8b16090fa061eb1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:57:e4:be:77:75:20:d8:1e:99:fe:f3:9f:14: 8a:dc:c9:3f:86:70:5a:e6:ac:29:55:14:c0:1a:7a: d5:67:60:a7:b2:7c:89:76:1c:e2:ae:25:0d:75:2f: 58:51:89:b5:87:02:a7:61:74:d9:af:b4:74:3a:a9: e1:9b:d6:1d:09:8e:4d:11:53:90:1e:3d:53:07:d9: b2:91:3e:c3:6a:21:03:19:c4:e9:ad:1c:b0:f3:1e: 9e:5a:3d:6f:45:5e:89:a9:b0:e2:9f:a9:6d:3f:26: bf:62:de:f2:ec:fa:f4:29:ff:6c:5d:44:b0:15:84: 7c:27:af:a1:20:78:6c:86:d9:05:9e:ea:42:8a:1d: 04:16:72:2f:42:20:fa:a4:86:12:05:fb:d7:51:0a: 3c:b1:37:00:c5:30:89:88:a5:90:e7:4a:70:20:44: f8:ff:59:c0:71:12:7c:75:4e:77:9b:37:55:cd:b8: 0e:ab:28:ed:16:cd:ce:f9:c4:cd:53:f8:e6:c8:a7: 11:ce:7f:c3:0a:03:47:13:e8:47:49:b7:55:14:45: 26:a5:aa:34:fe:3e:05:96:d2:d6:de:92:05:06:74: 26:dc:8b:dc:a1:6b:b4:ac:f3:f0:d0:2f:9c:74:f9: cc:6b:b4:5f:07:2a:13:3a:52:74:87:22:88:ff:72: 93:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:BE:A5:3D:D8:80:02:85:E5:0B:00:4A:8B:16:09:0F:A0:61:EB:1D X509v3 Authority Key Identifier: keyid:A6:94:F0:05:F5:97:7C:32:3E:CD:BE:A9:C5:F8:CC:A3:69:E6:5C:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:de:1f:0f:ee:d4:7a:5c:75:2c:ba:ce:d6:67:76:c9:56:ee: 70:a8:c2:f4:7b:3a:bd:98:51:1a:24:63:08:7a:f9:40:e5:fc: 91:89:01:7f:e4:a8:54:95:da:f5:36:5b:28:c4:d7:c8:8f:d7: 73:8a:39:49:6f:91:07:48:56:ca:73:51:83:d8:89:fc:e1:a5: 90:ce:fe:ae:7b:d5:43:87:f7:a9:cc:db:76:43:fe:9b:40:49: 50:7f:d7:81:74:df:76:a3:3f:34:f1:a9:68:e7:8d:89:dd:4e: ea:d2:9b:f0:f6:db:c0:ce:a0:11:74:40:0d:29:b3:38:92:6c: 55:ae:ee:a5:b7:3c:00:16:1f:d8:8b:c7:18:93:4a:54:b2:e5: f9:92:26:f5:2e:e1:52:26:ab:b5:88:29:34:31:07:6f:d5:6c: 6e:11:19:27:9e:ae:9f:7b:bc:71:76:6e:cd:35:ac:5c:52:60: d6:c9:ef:34:2f:62:76:86:0b:5e:8a:98:e8:26:3e:b8:44:8a: e7:bf:3b:ae:19:a0:44:ec:b9:be:f1:2e:5e:d6:e2:26:1a:ec: 06:26:a1:9c:45:49:78:1e:15:f3:74:c5:d5:e8:b6:7b:fc:af: 76:e2:33:81:c7:8e:77:07:fd:24:83:1a:83:de:3a:ab:52:e5: 53:4a:df:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvOLxXWB2zk3A19uZREXUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2OTRmMDA1ZjU5NzdjMzIzZWNkYmVhOWM1ZjhjY2EzNjll NjVjNjcwHhcNMjUxMjI0MTkwMTMxWhcNMjUxMjI1MTkwMTMxWjAzMTEwLwYDVQQD EyhkM2JlYTUzZGQ4ODAwMjg1ZTUwYjAwNGE4YjE2MDkwZmEwNjFlYjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ffkvnd1INgemf7znxSK3Mk/hnBa 5qwpVRTAGnrVZ2CnsnyJdhziriUNdS9YUYm1hwKnYXTZr7R0Oqnhm9YdCY5NEVOQ Hj1TB9mykT7DaiEDGcTprRyw8x6eWj1vRV6JqbDin6ltPya/Yt7y7Pr0Kf9sXUSw FYR8J6+hIHhshtkFnupCih0EFnIvQiD6pIYSBfvXUQo8sTcAxTCJiKWQ50pwIET4 /1nAcRJ8dU53mzdVzbgOqyjtFs3O+cTNU/jmyKcRzn/DCgNHE+hHSbdVFEUmpao0 /j4FltLW3pIFBnQm3IvcoWu0rPPw0C+cdPnMa7RfByoTOlJ0hyKI/3KTaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNO+pT3YgAKF5QsASosWCQ+gYesdMB8GA1UdIwQY MBaAFKaU8AX1l3wyPs2+qcX4zKNp5lxnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHBUd0JmV1hmREktemI2cHhmak1vMm5tWEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9jNzkxODctMGQ3YS00OTBiLTkyYjAt MWI1MjdjZTE2NTExLzEvcHBUd0JmV1hmREktemI2cHhmak1vMm5tWEdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9jNzkxODctMGQ3YS00OTBiLTkyYjAtMWI1MjdjZTE2NTEx LzEvcHBUd0JmV1hmREktemI2cHhmak1vMm5tWEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC94fD+7U elx1LLrO1md2yVbucKjC9Hs6vZhRGiRjCHr5QOX8kYkBf+SoVJXa9TZbKMTXyI/X c4o5SW+RB0hWynNRg9iJ/OGlkM7+rnvVQ4f3qczbdkP+m0BJUH/XgXTfdqM/NPGp aOeNid1O6tKb8PbbwM6gEXRADSmzOJJsVa7upbc8ABYf2IvHGJNKVLLl+ZIm9S7h UiartYgpNDEHb9VsbhEZJ56un3u8cXZuzTWsXFJg1snvNC9idoYLXoqY6CY+uESK 5787rhmgROy5vvEuXtbiJhrsBiahnEVJeB4V83TF1ei2e/yvduIzgceOdwf9JIMa g946q1LlU0rfvQ== -----END CERTIFICATE-----Generated at Thu Dec 25 00:55:22 2025 by rpki-client