This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.mft File: PtW83-CttrlBURh__axK6PMRpvE.mft (raw, json) Hash identifier: 7ivM32ij/a8ZQrc34zCE6m5FjDP6xrE2s4mG4m3dsnw= Subject key identifier: 71:F7:49:B4:18:65:7A:D3:8A:3C:27:A7:D8:CE:21:02:4F:E1:B9:41 Authority key identifier: 3E:D5:BC:DF:E0:AD:B6:B9:41:51:18:7F:FD:AC:4A:E8:F3:11:A6:F1 Certificate issuer: /CN=3ed5bcdfe0adb6b94151187ffdac4ae8f311a6f1 Certificate serial: 019B4393487BCAA9C502F43E34411A770A0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PtW83-CttrlBURh__axK6PMRpvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.mft Manifest number: 1720 Signing time: Mon 22 Dec 2025 01:01:24 +0000 Manifest this update: Mon 22 Dec 2025 01:01:24 +0000 Manifest next update: Tue 23 Dec 2025 01:01:24 +0000 Files and hashes: 1: Hg8kBZfVcKLuM_k8GGnGJeVAvdc.roa (hash: ziqa3QYWLFKgPT8ZERs4WMz6NaXL6vju070csDXblpM=) 2: PtW83-CttrlBURh__axK6PMRpvE.crl (hash: ATa0tD/2bKCwcpeEbiT3DuZFDW2YEjQJ9vkV7MlIz6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.mft rsync://rpki.ripe.net/repository/DEFAULT/PtW83-CttrlBURh__axK6PMRpvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 01:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:93:48:7b:ca:a9:c5:02:f4:3e:34:41:1a:77:0a:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ed5bcdfe0adb6b94151187ffdac4ae8f311a6f1 Validity Not Before: Dec 22 01:01:24 2025 GMT Not After : Dec 23 01:01:24 2025 GMT Subject: CN=71f749b418657ad38a3c27a7d8ce21024fe1b941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:13:cb:ae:53:bf:d9:b2:7f:cc:6f:04:73:9b: 30:e7:ce:b5:b5:64:86:66:1c:96:50:e5:e2:00:35: e8:b9:20:c4:74:7f:2e:89:b4:81:16:34:00:71:bd: f3:e6:a5:6b:2c:7d:8a:ba:4b:4b:a2:91:42:c2:96: 88:b4:84:73:01:c0:fa:1d:93:09:1b:a8:c3:9b:87: 0d:e7:05:4c:a0:90:71:e9:89:92:85:7e:05:8b:56: b1:69:95:4e:81:4c:98:f6:54:76:6a:f7:e5:1c:8f: f3:ef:fa:4e:0f:95:a4:64:a1:63:63:d7:ef:39:da: f6:36:79:c1:13:38:b7:ae:81:6c:8d:73:2b:29:7c: 76:fc:fc:70:f0:05:91:70:ba:3b:66:50:cf:98:09: 31:c3:be:49:41:13:ab:b6:7b:9c:01:ad:4e:1d:82: 43:eb:6d:ce:a3:c5:e2:d4:7d:d1:c1:fd:e1:5a:43: 9d:58:0f:28:61:68:ae:2e:e5:7b:4c:fc:bb:4a:a0: 08:52:56:7c:fb:dd:6f:aa:19:dd:03:a6:3d:49:43: bf:91:76:e6:18:79:c9:ec:46:a3:40:74:e9:36:b6: bc:83:90:fd:89:da:31:9c:a0:de:6d:1a:ad:f1:bf: 5a:f0:8c:75:8d:83:88:88:6d:4d:33:4b:70:8a:e2: f8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:F7:49:B4:18:65:7A:D3:8A:3C:27:A7:D8:CE:21:02:4F:E1:B9:41 X509v3 Authority Key Identifier: keyid:3E:D5:BC:DF:E0:AD:B6:B9:41:51:18:7F:FD:AC:4A:E8:F3:11:A6:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtW83-CttrlBURh__axK6PMRpvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:75:ed:20:49:6e:3c:01:38:a7:3a:26:7e:c7:af:bf:09:98: c3:2a:07:51:80:b4:c9:d4:7f:22:b3:c8:91:78:3f:0e:d5:c7: 7a:93:4e:09:af:31:5e:ef:3e:b8:d9:c1:de:95:33:b7:72:5c: f6:65:ed:b8:1e:ba:e8:75:28:28:0f:47:b5:96:81:21:6a:d3: 02:60:b6:84:b8:52:c8:b0:c7:95:03:89:30:64:e5:78:04:08: 1a:a2:1d:26:20:8c:d7:ed:d8:7e:9a:21:05:9a:58:cd:01:63: e3:e3:ef:ea:f7:a1:7e:79:58:a9:f9:05:3a:a6:90:bb:d2:e5: 01:ad:69:6b:f7:db:e1:f2:b6:da:f5:f2:ef:58:04:de:81:93: 39:79:6e:0a:b5:38:f1:f3:3c:58:c5:8d:10:b2:aa:69:62:65: ef:f1:66:ff:2a:1f:2c:e6:25:9c:d5:7c:f6:5b:66:5b:01:68: ba:a8:c1:9c:92:4a:b0:73:1c:80:c6:c7:ff:36:07:c2:09:2b: 51:26:d1:40:41:f3:8a:c2:1e:f8:49:84:7b:ba:9e:9e:43:a5: bb:c7:8f:70:6c:21:52:50:30:aa:ab:44:c6:fe:be:46:bc:15: 99:08:41:e9:b0:1d:e5:44:5c:66:fe:61:3a:05:d4:03:29:b3: 41:76:b2:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDk0h7yqnFAvQ+NEEadwoMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZDViY2RmZTBhZGI2Yjk0MTUxMTg3ZmZkYWM0YWU4ZjMx MWE2ZjEwHhcNMjUxMjIyMDEwMTI0WhcNMjUxMjIzMDEwMTI0WjAzMTEwLwYDVQQD Eyg3MWY3NDliNDE4NjU3YWQzOGEzYzI3YTdkOGNlMjEwMjRmZTFiOTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRPLrlO/2bJ/zG8Ec5sw5861tWSG ZhyWUOXiADXouSDEdH8uibSBFjQAcb3z5qVrLH2KuktLopFCwpaItIRzAcD6HZMJ G6jDm4cN5wVMoJBx6YmShX4Fi1axaZVOgUyY9lR2avflHI/z7/pOD5WkZKFjY9fv Odr2NnnBEzi3roFsjXMrKXx2/Pxw8AWRcLo7ZlDPmAkxw75JQROrtnucAa1OHYJD 623Oo8Xi1H3Rwf3hWkOdWA8oYWiuLuV7TPy7SqAIUlZ8+91vqhndA6Y9SUO/kXbm GHnJ7EajQHTpNra8g5D9idoxnKDebRqt8b9a8Ix1jYOIiG1NM0twiuL4TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHH3SbQYZXrTijwnp9jOIQJP4blBMB8GA1UdIwQY MBaAFD7VvN/grba5QVEYf/2sSujzEabxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHRXODMtQ3R0cmxCVVJoX19heEs2UE1ScHZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8xYjgyOTItODZlNy00ZmI1LWEzODct MmFlOTBjM2ZhZTMxLzEvUHRXODMtQ3R0cmxCVVJoX19heEs2UE1ScHZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy8xYjgyOTItODZlNy00ZmI1LWEzODctMmFlOTBjM2ZhZTMx LzEvUHRXODMtQ3R0cmxCVVJoX19heEs2UE1ScHZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPHXtIElu PAE4pzomfsevvwmYwyoHUYC0ydR/IrPIkXg/DtXHepNOCa8xXu8+uNnB3pUzt3Jc 9mXtuB666HUoKA9HtZaBIWrTAmC2hLhSyLDHlQOJMGTleAQIGqIdJiCM1+3Yfpoh BZpYzQFj4+Pv6vehfnlYqfkFOqaQu9LlAa1pa/fb4fK22vXy71gE3oGTOXluCrU4 8fM8WMWNELKqaWJl7/Fm/yofLOYlnNV89ltmWwFouqjBnJJKsHMcgMbH/zYHwgkr USbRQEHzisIe+EmEe7qenkOlu8ePcGwhUlAwqqtExv6+RrwVmQhB6bAd5URcZv5h OgXUAymzQXayog== -----END CERTIFICATE-----Generated at Mon Dec 22 09:38:31 2025 by rpki-client