This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft File: pPEx4-FQWNk__dtgrHCDvvidLoY.mft (raw, json) Hash identifier: bnttXUWPxrAg3DO25+cS/I06USFdXGjwpldwqvpI43A= Subject key identifier: 56:0D:1B:72:ED:46:0C:0E:42:9F:3C:10:65:20:76:83:5F:30:14:2B Authority key identifier: A4:F1:31:E3:E1:50:58:D9:3F:FD:DB:60:AC:70:83:BE:F8:9D:2E:86 Certificate issuer: /CN=a4f131e3e15058d93ffddb60ac7083bef89d2e86 Certificate serial: 019B60537E910DC94BDC793D10C4B2758B31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft Manifest number: 0A24 Signing time: Sat 27 Dec 2025 15:00:43 +0000 Manifest this update: Sat 27 Dec 2025 15:00:43 +0000 Manifest next update: Sun 28 Dec 2025 15:00:43 +0000 Files and hashes: 1: Cc4909gwaI-DgMxZjqOBV0ftw7g.roa (hash: puxPlTPwGGajuBJpoUjLb8aY1yOEYFbygGRRSG/6dfY=) 2: ie21omNrQcDm6s8rAnnCfP0t5RQ.roa (hash: mEaLFd1UOa9vUWrxCFXqOi9Y8DlDh7A8FeEm27sklyo=) 3: pPEx4-FQWNk__dtgrHCDvvidLoY.crl (hash: yNCtrqyEyetz5Tl427KwDm3O4gSUVuxHsgcj/AVWwkc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.crl rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 15:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:60:53:7e:91:0d:c9:4b:dc:79:3d:10:c4:b2:75:8b:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4f131e3e15058d93ffddb60ac7083bef89d2e86 Validity Not Before: Dec 27 15:00:43 2025 GMT Not After : Dec 28 15:00:43 2025 GMT Subject: CN=560d1b72ed460c0e429f3c10652076835f30142b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:23:d4:20:8b:50:3d:0b:5d:ec:b2:1b:e1:63: 5b:e8:47:0f:f3:26:d9:ac:24:7c:c5:77:0a:f2:57: cf:1b:7a:34:dc:9e:b2:53:f3:c2:b7:91:b1:3a:e2: 26:58:b0:f4:04:a0:73:a6:e3:07:f8:c4:0a:4d:29: 3a:76:a2:88:2a:56:85:ee:fd:60:92:3e:14:7e:03: 42:96:2e:1e:51:f5:48:9d:a0:79:61:08:8e:35:c4: b3:d2:c8:15:42:b6:0c:90:0d:28:42:09:3f:f9:5c: 77:f6:ef:fb:6f:65:d8:d1:90:e3:7b:e7:3a:9d:5d: 10:23:a9:fb:22:d4:ee:ca:60:4d:32:d4:63:75:bb: 72:00:11:50:34:f8:67:b2:1d:a8:79:db:a3:cf:8f: 0b:f2:cf:26:33:82:93:8a:0a:40:97:fa:92:c3:71: bb:57:34:3e:1e:bf:fe:4a:cf:0a:7e:70:b4:aa:43: ab:c9:b7:7c:21:0a:6f:5a:b5:66:b6:00:ce:cd:d0: f0:d7:9f:38:ef:2f:95:25:fb:92:fa:b7:e5:34:02: e5:bd:01:f7:4e:99:af:db:a8:9b:bf:02:3b:97:a4: 55:a4:9f:f3:82:07:9c:4e:da:cc:c3:8a:de:3b:92: 6b:f9:aa:b5:db:95:a8:51:02:aa:c5:14:93:d9:43: 9f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:0D:1B:72:ED:46:0C:0E:42:9F:3C:10:65:20:76:83:5F:30:14:2B X509v3 Authority Key Identifier: keyid:A4:F1:31:E3:E1:50:58:D9:3F:FD:DB:60:AC:70:83:BE:F8:9D:2E:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:47:87:82:f4:d0:99:e4:76:10:c1:e7:cc:c5:1d:3f:ce:e3: d2:10:a1:dc:f7:db:8c:8b:fa:11:5b:28:ca:b0:cf:a8:73:30: 32:85:c2:d3:72:5e:33:81:07:3c:3d:62:5b:3a:43:0f:b8:ab: 6a:4f:16:e1:66:14:09:43:5e:60:1d:bb:0d:e3:99:b1:fb:01: b5:58:8a:1f:f2:98:a8:ca:5a:e0:0f:04:f7:d2:41:28:3f:69: 65:d7:d3:8b:7b:f4:ae:74:59:ca:07:ac:88:37:83:c3:63:0b: a5:3b:0a:ab:66:55:77:62:31:16:6d:38:46:6a:2d:d8:ce:44: 2b:74:c2:b2:a4:0f:e9:25:4c:bc:7e:60:f1:89:02:2b:05:4e: ae:55:c1:a1:d2:56:99:68:10:83:65:61:03:af:83:fd:58:66: e0:11:9b:b3:10:99:14:e5:7c:07:85:a2:0c:bf:a5:61:90:78: 98:d7:a5:0f:36:d2:9e:e0:b4:44:2c:77:85:7a:2b:cc:00:cd: a2:2c:98:28:7b:17:69:cb:10:6d:0b:14:80:b9:f9:db:c8:98: ac:10:74:22:b7:2e:9e:de:0d:3e:ae:c4:fc:ba:51:cc:e5:29: 23:9d:b0:95:3c:13:3e:76:48:74:e3:4f:6d:1c:b5:e8:ac:50: 8a:39:3c:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtgU36RDclL3Hk9EMSydYsxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZjEzMWUzZTE1MDU4ZDkzZmZkZGI2MGFjNzA4M2JlZjg5 ZDJlODYwHhcNMjUxMjI3MTUwMDQzWhcNMjUxMjI4MTUwMDQzWjAzMTEwLwYDVQQD Eyg1NjBkMWI3MmVkNDYwYzBlNDI5ZjNjMTA2NTIwNzY4MzVmMzAxNDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSPUIItQPQtd7LIb4WNb6EcP8ybZ rCR8xXcK8lfPG3o03J6yU/PCt5GxOuImWLD0BKBzpuMH+MQKTSk6dqKIKlaF7v1g kj4UfgNCli4eUfVInaB5YQiONcSz0sgVQrYMkA0oQgk/+Vx39u/7b2XY0ZDje+c6 nV0QI6n7ItTuymBNMtRjdbtyABFQNPhnsh2oedujz48L8s8mM4KTigpAl/qSw3G7 VzQ+Hr/+Ss8KfnC0qkOrybd8IQpvWrVmtgDOzdDw15847y+VJfuS+rflNALlvQH3 Tpmv26ibvwI7l6RVpJ/zggecTtrMw4reO5Jr+aq125WoUQKqxRST2UOfPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFYNG3LtRgwOQp88EGUgdoNfMBQrMB8GA1UdIwQY MBaAFKTxMePhUFjZP/3bYKxwg774nS6GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFBFeDQtRlFXTmtfX2R0Z3JIQ0R2dmlkTG9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84NDJlN2YtMDM1MC00YjAyLWE5OTQt ZjcxYTQ5ZWJhNDhhLzEvcFBFeDQtRlFXTmtfX2R0Z3JIQ0R2dmlkTG9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi84NDJlN2YtMDM1MC00YjAyLWE5OTQtZjcxYTQ5ZWJhNDhh LzEvcFBFeDQtRlFXTmtfX2R0Z3JIQ0R2dmlkTG9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkEeHgvTQ meR2EMHnzMUdP87j0hCh3PfbjIv6EVsoyrDPqHMwMoXC03JeM4EHPD1iWzpDD7ir ak8W4WYUCUNeYB27DeOZsfsBtViKH/KYqMpa4A8E99JBKD9pZdfTi3v0rnRZyges iDeDw2MLpTsKq2ZVd2IxFm04Rmot2M5EK3TCsqQP6SVMvH5g8YkCKwVOrlXBodJW mWgQg2VhA6+D/Vhm4BGbsxCZFOV8B4WiDL+lYZB4mNelDzbSnuC0RCx3hXorzADN oiyYKHsXacsQbQsUgLn528iYrBB0Ircunt4NPq7E/LpRzOUpI52wlTwTPnZIdONP bRy16KxQijk89g== -----END CERTIFICATE-----Generated at Sat Dec 27 22:32:54 2025 by rpki-client