This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft File: PtQqBIdwVgYBXlow2h5w9Aflnpk.mft (raw, json) Hash identifier: GHqV6W08JxXQ8KM2UyjUgZNa5pJKUMqU+TS+e0OZpf0= Subject key identifier: 17:66:FC:D1:65:AE:3D:4A:8A:64:40:1D:4F:03:B8:92:C5:88:41:27 Authority key identifier: 3E:D4:2A:04:87:70:56:06:01:5E:5A:30:DA:1E:70:F4:07:E5:9E:99 Certificate issuer: /CN=3ed42a0487705606015e5a30da1e70f407e59e99 Certificate serial: 019B3DC8349766EA8B9CBF64A78EF8590A4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 22:01:29 +0000 Manifest this update: Sat 20 Dec 2025 22:01:29 +0000 Manifest next update: Sun 21 Dec 2025 22:01:29 +0000 Files and hashes: 1: PtQqBIdwVgYBXlow2h5w9Aflnpk.crl (hash: miVO4zycOP7Ocwh3Eh9iUob8xxxPOp8Zyo3DEQHVVAk=) 2: Ygud2H3mQvpplx2m1ZwaXdOogYA.roa (hash: /wnaFbQu+otS41ERWGG+1dFZ6eGw9L5BsokLI2OTM5g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c8:34:97:66:ea:8b:9c:bf:64:a7:8e:f8:59:0a:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ed42a0487705606015e5a30da1e70f407e59e99 Validity Not Before: Dec 20 22:01:29 2025 GMT Not After : Dec 21 22:01:29 2025 GMT Subject: CN=1766fcd165ae3d4a8a64401d4f03b892c5884127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9c:be:af:2f:f7:b5:aa:81:94:46:be:7a:5a: c5:37:ac:56:6e:0f:bf:f5:bb:9c:9d:c2:43:15:f7: b4:9f:d4:24:63:d3:70:0e:a3:8f:60:4a:a0:17:d4: b6:0e:ed:d6:12:92:6e:06:d4:8b:04:b7:ff:1b:34: b9:33:90:ac:ee:c0:b3:e7:ea:c9:f9:8d:01:c4:88: 0f:51:51:38:e8:31:ac:da:8e:da:f7:61:48:17:3f: bc:78:c1:d9:7d:32:6a:9f:9e:e2:98:66:63:84:a0: 0a:37:c6:5c:04:af:9b:7f:cd:01:ee:a6:65:ef:49: e1:6b:72:20:17:62:c1:98:a5:cb:93:58:75:f8:23: 24:6c:fe:2a:91:10:ab:5d:16:66:5b:dc:6c:c9:d6: e9:99:e6:f1:2d:94:bc:fb:76:42:cd:6b:cf:0b:4a: 15:bd:96:13:5d:3f:c4:32:31:03:4e:0b:41:fd:54: 49:64:88:df:67:53:b9:80:20:9c:63:56:f6:a8:e3: 40:68:15:3f:49:01:35:2f:f9:ff:28:49:a5:f2:87: 8e:fa:7f:b9:6e:cc:8f:2b:92:df:61:1e:d9:d4:cb: b4:dd:15:d5:69:95:a2:a3:3c:65:0d:0c:35:02:7e: 18:9a:17:08:f7:14:c6:cb:1a:01:7d:20:fd:cf:da: 13:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:66:FC:D1:65:AE:3D:4A:8A:64:40:1D:4F:03:B8:92:C5:88:41:27 X509v3 Authority Key Identifier: keyid:3E:D4:2A:04:87:70:56:06:01:5E:5A:30:DA:1E:70:F4:07:E5:9E:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:cd:11:55:ef:c4:3c:69:17:b8:32:84:a8:dc:56:fb:b9:33: 62:ce:b6:c3:d7:d8:4a:f8:32:65:34:6c:58:55:2d:1f:25:4a: 90:1e:ea:0d:06:93:07:db:96:58:83:ea:b9:09:5a:43:73:dc: ad:9a:f6:d2:f8:fb:aa:c5:2e:e7:71:f5:ee:8b:ae:3c:1a:3a: c2:2f:45:7b:8b:38:f8:7f:f1:93:48:0f:d9:db:c2:79:66:41: 7f:c2:71:64:8b:67:88:d5:d8:5c:0a:20:a4:e6:38:e8:b2:6b: e5:47:28:50:e0:c8:e2:18:80:34:f5:ee:54:f8:d0:b9:fe:bb: 01:4a:c4:a1:f9:d8:bf:26:7d:c0:e5:9f:d4:98:5a:2f:4a:be: 52:a2:d5:e1:67:66:6b:e7:b2:35:14:48:80:73:1e:11:04:c9: 47:bc:22:e3:4e:b9:69:b7:1d:f8:be:71:3c:22:bd:e0:d8:bb: cb:4e:00:b5:83:4c:c6:66:8a:b0:78:58:74:9e:98:15:4d:97: 06:5c:28:65:41:55:71:23:99:02:eb:6a:6f:1b:4c:30:69:1c: 42:d1:1a:69:4a:09:fe:a2:b7:9b:5c:06:b9:f8:4e:9d:85:fe: 54:03:d2:c5:40:8c:20:34:4b:a4:ba:55:3b:93:05:e9:f4:ce: 79:4b:35:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9yDSXZuqLnL9kp474WQpPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZDQyYTA0ODc3MDU2MDYwMTVlNWEzMGRhMWU3MGY0MDdl NTllOTkwHhcNMjUxMjIwMjIwMTI5WhcNMjUxMjIxMjIwMTI5WjAzMTEwLwYDVQQD EygxNzY2ZmNkMTY1YWUzZDRhOGE2NDQwMWQ0ZjAzYjg5MmM1ODg0MTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspy+ry/3taqBlEa+elrFN6xWbg+/ 9bucncJDFfe0n9QkY9NwDqOPYEqgF9S2Du3WEpJuBtSLBLf/GzS5M5Cs7sCz5+rJ +Y0BxIgPUVE46DGs2o7a92FIFz+8eMHZfTJqn57imGZjhKAKN8ZcBK+bf80B7qZl 70nha3IgF2LBmKXLk1h1+CMkbP4qkRCrXRZmW9xsydbpmebxLZS8+3ZCzWvPC0oV vZYTXT/EMjEDTgtB/VRJZIjfZ1O5gCCcY1b2qONAaBU/SQE1L/n/KEml8oeO+n+5 bsyPK5LfYR7Z1Mu03RXVaZWiozxlDQw1An4YmhcI9xTGyxoBfSD9z9oTEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBdm/NFlrj1KimRAHU8DuJLFiEEnMB8GA1UdIwQY MBaAFD7UKgSHcFYGAV5aMNoecPQH5Z6ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHRRcUJJZHdWZ1lCWGxvdzJoNXc5QWZsbnBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9mYzkzYjEtMDY0ZS00NGFiLTkwZGEt ODI2MjUzOWRlNDZmLzEvUHRRcUJJZHdWZ1lCWGxvdzJoNXc5QWZsbnBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9mYzkzYjEtMDY0ZS00NGFiLTkwZGEtODI2MjUzOWRlNDZm LzEvUHRRcUJJZHdWZ1lCWGxvdzJoNXc5QWZsbnBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcc0RVe/E PGkXuDKEqNxW+7kzYs62w9fYSvgyZTRsWFUtHyVKkB7qDQaTB9uWWIPquQlaQ3Pc rZr20vj7qsUu53H17ouuPBo6wi9Fe4s4+H/xk0gP2dvCeWZBf8JxZItniNXYXAog pOY46LJr5UcoUODI4hiANPXuVPjQuf67AUrEofnYvyZ9wOWf1JhaL0q+UqLV4Wdm a+eyNRRIgHMeEQTJR7wi4065abcd+L5xPCK94Ni7y04AtYNMxmaKsHhYdJ6YFU2X BlwoZUFVcSOZAutqbxtMMGkcQtEaaUoJ/qK3m1wGufhOnYX+VAPSxUCMIDRLpLpV O5MF6fTOeUs1Lw== -----END CERTIFICATE-----Generated at Sun Dec 21 03:03:55 2025 by rpki-client