This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft File: PP8fKxF18GBdAl5RAXNpwcqLGkY.mft (raw, json) Hash identifier: UGCpLFVmSjHwHMWykTAF6D5YkYYGeDPzbJVj8+/RZKQ= Subject key identifier: 57:2F:E1:55:37:07:EB:16:31:A6:60:18:F7:74:66:A5:F8:45:28:BB Authority key identifier: 3C:FF:1F:2B:11:75:F0:60:5D:02:5E:51:01:73:69:C1:CA:8B:1A:46 Certificate issuer: /CN=3cff1f2b1175f0605d025e51017369c1ca8b1a46 Certificate serial: 019B4392A22130CE49D62BFD8EB782BD87BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft Manifest number: 178C Signing time: Mon 22 Dec 2025 01:00:41 +0000 Manifest this update: Mon 22 Dec 2025 01:00:41 +0000 Manifest next update: Tue 23 Dec 2025 01:00:41 +0000 Files and hashes: 1: PP8fKxF18GBdAl5RAXNpwcqLGkY.crl (hash: Ib2AiOIIe0yT5TSwdbxYDc1vUWociPTC8/g0ZaoCRY0=) 2: rEJUWBjq_sWfsa1cNiXjG-c5ovw.roa (hash: ZZH1S0+UsBnMa9sS+gXeBGEXEb7GWoo4AFZx2+gdykk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:92:a2:21:30:ce:49:d6:2b:fd:8e:b7:82:bd:87:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cff1f2b1175f0605d025e51017369c1ca8b1a46 Validity Not Before: Dec 22 01:00:41 2025 GMT Not After : Dec 23 01:00:41 2025 GMT Subject: CN=572fe1553707eb1631a66018f77466a5f84528bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5b:cc:23:33:52:02:46:39:05:93:7b:a1:11: 68:4e:6f:27:17:32:f9:08:e0:42:00:fb:4b:e4:93: 7f:47:69:74:21:cb:8d:d2:76:e5:9c:0a:ee:63:27: 8e:5f:b9:85:44:47:95:86:cc:2b:b4:92:2d:f0:6f: 5e:23:18:e1:0a:bf:98:e8:57:a9:a7:ce:0e:a9:82: 2f:a9:96:24:15:bf:b4:4d:6f:ea:99:6e:a2:09:35: c3:00:f1:10:ed:a7:b6:89:90:3d:08:a4:a7:b2:87: a0:12:b1:37:ae:81:b6:1b:7f:c6:0b:77:ac:39:98: c8:16:78:01:37:92:71:f8:10:85:e1:bc:c2:e8:92: 9f:4d:0f:e6:28:13:bf:64:6f:80:59:46:92:44:d8: dc:50:3a:3a:a2:d5:1d:e7:2d:15:6c:0c:43:58:5e: 58:28:e0:a2:8c:cb:4d:44:bd:70:88:67:6e:a1:cb: 8a:91:65:f4:f1:43:1e:af:d7:ac:18:f3:a8:33:c0: 70:ec:1b:85:86:e4:d0:cb:35:de:ab:e6:19:f5:83: c0:54:a3:aa:67:e4:96:a9:9c:17:01:58:f9:54:5a: 02:f7:c0:94:ce:86:1d:27:dd:83:3e:68:0d:f7:0f: d7:ae:52:10:ce:de:01:f3:b4:bd:7f:f2:17:0a:53: e4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:2F:E1:55:37:07:EB:16:31:A6:60:18:F7:74:66:A5:F8:45:28:BB X509v3 Authority Key Identifier: keyid:3C:FF:1F:2B:11:75:F0:60:5D:02:5E:51:01:73:69:C1:CA:8B:1A:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:bb:23:02:45:1b:96:a5:b7:f2:8b:21:98:ed:6d:18:58:7b: 77:bb:8e:25:aa:3e:26:73:25:20:2e:ba:cf:f1:ff:6f:00:cb: b4:9c:f2:e5:be:0a:22:87:91:b6:cf:b7:31:03:df:a0:70:8f: 8c:98:60:97:3b:85:fe:83:e7:b7:40:b6:62:c9:c2:97:8a:14: 26:84:44:08:3a:2b:a1:b3:95:fc:a6:eb:93:85:ea:33:66:9c: ae:1e:a1:b0:fa:d3:9e:bf:25:81:1e:87:35:ec:e0:20:4e:11: 76:4e:cd:db:c0:ce:5e:af:c2:0d:ef:d0:07:5c:28:8e:9d:9b: a1:d8:c1:bd:d9:4a:85:4e:8e:51:c2:27:58:65:b4:b7:9f:86: 58:c3:a7:ec:5d:ac:88:b4:8f:d6:68:0d:42:e8:a1:2f:09:8f: f0:2a:61:4a:e6:5c:39:c4:af:c8:7d:b0:ca:8e:2f:c1:ee:7e: 1b:03:38:f4:f2:2c:66:c0:70:53:ad:a5:b4:11:09:f9:05:c6: c9:69:3f:c4:5a:8b:7a:0c:27:1e:2f:c4:84:f6:4a:be:c4:6e: ca:38:c0:2b:80:38:0d:f0:52:02:97:7c:1d:19:26:75:3f:bb: d1:c8:fb:ea:a9:04:70:5a:2c:e7:19:2a:b3:e2:93:1f:a7:45: 42:20:a6:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDkqIhMM5J1iv9jreCvYe9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjZmYxZjJiMTE3NWYwNjA1ZDAyNWU1MTAxNzM2OWMxY2E4 YjFhNDYwHhcNMjUxMjIyMDEwMDQxWhcNMjUxMjIzMDEwMDQxWjAzMTEwLwYDVQQD Eyg1NzJmZTE1NTM3MDdlYjE2MzFhNjYwMThmNzc0NjZhNWY4NDUyOGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1vMIzNSAkY5BZN7oRFoTm8nFzL5 COBCAPtL5JN/R2l0IcuN0nblnAruYyeOX7mFREeVhswrtJIt8G9eIxjhCr+Y6Fep p84OqYIvqZYkFb+0TW/qmW6iCTXDAPEQ7ae2iZA9CKSnsoegErE3roG2G3/GC3es OZjIFngBN5Jx+BCF4bzC6JKfTQ/mKBO/ZG+AWUaSRNjcUDo6otUd5y0VbAxDWF5Y KOCijMtNRL1wiGduocuKkWX08UMer9esGPOoM8Bw7BuFhuTQyzXeq+YZ9YPAVKOq Z+SWqZwXAVj5VFoC98CUzoYdJ92DPmgN9w/XrlIQzt4B87S9f/IXClPkhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFcv4VU3B+sWMaZgGPd0ZqX4RSi7MB8GA1UdIwQY MBaAFDz/HysRdfBgXQJeUQFzacHKixpGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFA4Zkt4RjE4R0JkQWw1UkFYTnB3Y3FMR2tZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hYzc5NDktYTFjYS00N2Y0LWIzOTMt MmJmMzRjNTI2MmU3LzEvUFA4Zkt4RjE4R0JkQWw1UkFYTnB3Y3FMR2tZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9hYzc5NDktYTFjYS00N2Y0LWIzOTMtMmJmMzRjNTI2MmU3 LzEvUFA4Zkt4RjE4R0JkQWw1UkFYTnB3Y3FMR2tZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANrsjAkUb lqW38oshmO1tGFh7d7uOJao+JnMlIC66z/H/bwDLtJzy5b4KIoeRts+3MQPfoHCP jJhglzuF/oPnt0C2YsnCl4oUJoRECDorobOV/Kbrk4XqM2acrh6hsPrTnr8lgR6H NezgIE4Rdk7N28DOXq/CDe/QB1wojp2bodjBvdlKhU6OUcInWGW0t5+GWMOn7F2s iLSP1mgNQuihLwmP8CphSuZcOcSvyH2wyo4vwe5+GwM49PIsZsBwU62ltBEJ+QXG yWk/xFqLegwnHi/EhPZKvsRuyjjAK4A4DfBSApd8HRkmdT+70cj76qkEcFos5xkq s+KTH6dFQiCm9A== -----END CERTIFICATE-----Generated at Mon Dec 22 06:23:55 2025 by rpki-client