This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft File: ppWERHKPWreqgm9DeABc5nkgDVI.mft (raw, json) Hash identifier: 7TyX2CI/nVIBQFTdrdeFXlPwfWYVj4z7aRxf16zEEfg= Subject key identifier: 62:06:D2:8F:44:C8:B3:E3:56:C6:D1:8A:58:59:88:69:8E:2F:7C:F0 Authority key identifier: A6:95:84:44:72:8F:5A:B7:AA:82:6F:43:78:00:5C:E6:79:20:0D:52 Certificate issuer: /CN=a6958444728f5ab7aa826f4378005ce679200d52 Certificate serial: 019B80F0E61B0F793C5C3F24926337BB4EB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft Manifest number: 17AB Signing time: Fri 02 Jan 2026 23:00:29 +0000 Manifest this update: Fri 02 Jan 2026 23:00:29 +0000 Manifest next update: Sat 03 Jan 2026 23:00:29 +0000 Files and hashes: 1: MvAQn98nXI-pzUTu-tvnQV3730A.roa (hash: MNGv8KMiMdRhLMioPsnMtgqiuDzFEe7d9ay8edeo/r8=) 2: ppWERHKPWreqgm9DeABc5nkgDVI.crl (hash: SDGwT48WS7IPIGdiQFj0lL2l2MweI1RP+h/SgvwGOM8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:80:f0:e6:1b:0f:79:3c:5c:3f:24:92:63:37:bb:4e:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6958444728f5ab7aa826f4378005ce679200d52 Validity Not Before: Jan 2 23:00:29 2026 GMT Not After : Jan 3 23:00:29 2026 GMT Subject: CN=6206d28f44c8b3e356c6d18a585988698e2f7cf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0f:b7:1e:ab:fd:98:78:fc:6f:c4:06:8a:04: 29:ef:2d:3e:c3:d2:36:8f:d4:40:85:ac:fb:ca:26: 5f:c3:91:ec:c6:8c:ce:d6:b0:20:98:37:9d:8d:53: e4:4e:1b:52:4a:9b:76:61:5c:38:1e:d7:d7:05:81: 7d:59:59:da:65:9d:22:83:87:81:67:d9:9f:44:b4: ff:23:0c:82:a5:8b:10:c8:de:1a:15:f8:ff:e1:45: 88:88:6c:2e:fc:c6:62:3d:b8:20:d4:95:c3:a5:1f: cd:71:24:c5:0a:52:b9:e0:1b:23:c2:3c:9e:17:1b: dd:5d:83:3e:d0:e4:02:9f:18:cc:c5:72:bb:1b:cd: 44:c6:c0:df:0e:1d:40:38:99:18:5e:75:68:a2:a0: a2:cb:af:1c:bd:bd:05:9a:1e:60:81:57:8e:af:26: 77:57:02:74:9a:83:5d:99:8d:5f:43:30:85:f8:32: ba:32:50:b9:fe:a4:50:58:f6:0f:31:18:ed:84:7b: 73:05:58:51:97:e3:17:a8:62:d4:e5:71:62:47:0f: f9:1d:9c:fe:bf:98:0e:a4:c1:cb:8b:07:77:4a:1c: c5:c2:04:56:29:78:70:46:3c:e7:10:62:e4:e1:1e: 72:be:38:b5:19:f6:6e:a6:5a:6e:21:6d:59:20:16: a5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:06:D2:8F:44:C8:B3:E3:56:C6:D1:8A:58:59:88:69:8E:2F:7C:F0 X509v3 Authority Key Identifier: keyid:A6:95:84:44:72:8F:5A:B7:AA:82:6F:43:78:00:5C:E6:79:20:0D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:a9:c8:1d:8a:bd:48:00:6f:a0:fa:db:55:1c:9e:00:93:89: 7a:78:68:97:27:2e:21:59:5d:55:9c:3e:1e:6e:8a:ec:4d:d0: 87:ed:85:a4:0f:92:17:04:1e:55:22:cc:48:b4:bc:86:90:d5: dd:be:65:53:3d:3e:91:d3:c4:53:3b:50:68:07:63:57:73:a5: 5b:dd:36:d7:e0:52:7c:39:1e:d6:a6:66:ab:4f:3a:00:1a:74: e5:a7:94:1e:42:99:06:62:02:36:ee:af:f9:d2:52:50:e5:e5: eb:2e:68:bf:ab:c0:c1:b0:a4:35:17:f0:f0:72:46:21:44:e7: 9f:b8:95:58:4f:99:2f:13:c1:26:62:cc:ed:74:bf:9a:53:3e: 90:9f:33:6a:6a:d4:70:74:f5:1b:de:66:69:4f:6a:a5:13:e9: f6:09:51:88:da:a8:3d:a7:54:53:d7:37:07:31:5f:ee:31:b1: 57:0a:35:84:57:7c:5a:74:a6:a6:2b:99:10:c1:a4:c9:51:2f: 17:49:50:c4:cf:a2:38:aa:35:27:f5:66:f3:77:44:93:02:45: 75:fa:2a:06:eb:d2:ef:0f:11:39:56:f3:c2:01:a6:cc:ef:35: c0:48:f4:47:74:1f:ec:07:9c:11:fb:f9:51:44:fe:b7:e1:77: 44:35:3e:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuA8OYbD3k8XD8kkmM3u06yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2OTU4NDQ0NzI4ZjVhYjdhYTgyNmY0Mzc4MDA1Y2U2Nzky MDBkNTIwHhcNMjYwMTAyMjMwMDI5WhcNMjYwMTAzMjMwMDI5WjAzMTEwLwYDVQQD Eyg2MjA2ZDI4ZjQ0YzhiM2UzNTZjNmQxOGE1ODU5ODg2OThlMmY3Y2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAww+3Hqv9mHj8b8QGigQp7y0+w9I2 j9RAhaz7yiZfw5HsxozO1rAgmDedjVPkThtSSpt2YVw4HtfXBYF9WVnaZZ0ig4eB Z9mfRLT/IwyCpYsQyN4aFfj/4UWIiGwu/MZiPbgg1JXDpR/NcSTFClK54Bsjwjye FxvdXYM+0OQCnxjMxXK7G81ExsDfDh1AOJkYXnVooqCiy68cvb0Fmh5ggVeOryZ3 VwJ0moNdmY1fQzCF+DK6MlC5/qRQWPYPMRjthHtzBVhRl+MXqGLU5XFiRw/5HZz+ v5gOpMHLiwd3ShzFwgRWKXhwRjznEGLk4R5yvji1GfZuplpuIW1ZIBal+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGIG0o9EyLPjVsbRilhZiGmOL3zwMB8GA1UdIwQY MBaAFKaVhERyj1q3qoJvQ3gAXOZ5IA1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHBXRVJIS1BXcmVxZ205RGVBQmM1bmtnRFZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iZGMxZjEtYzE1Ny00MDhiLWFmZTEt MWI1MTFjNjYzOTc4LzEvcHBXRVJIS1BXcmVxZ205RGVBQmM1bmtnRFZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9iZGMxZjEtYzE1Ny00MDhiLWFmZTEtMWI1MTFjNjYzOTc4 LzEvcHBXRVJIS1BXcmVxZ205RGVBQmM1bmtnRFZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVqnIHYq9 SABvoPrbVRyeAJOJenholycuIVldVZw+Hm6K7E3Qh+2FpA+SFwQeVSLMSLS8hpDV 3b5lUz0+kdPEUztQaAdjV3OlW9021+BSfDke1qZmq086ABp05aeUHkKZBmICNu6v +dJSUOXl6y5ov6vAwbCkNRfw8HJGIUTnn7iVWE+ZLxPBJmLM7XS/mlM+kJ8zamrU cHT1G95maU9qpRPp9glRiNqoPadUU9c3BzFf7jGxVwo1hFd8WnSmpiuZEMGkyVEv F0lQxM+iOKo1J/Vm83dEkwJFdfoqBuvS7w8ROVbzwgGmzO81wEj0R3Qf7AecEfv5 UUT+t+F3RDU+NA== -----END CERTIFICATE-----Generated at Sat Jan 3 06:29:58 2026 by rpki-client