This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft File: ppv5fceDSX88N716huWZSs7ngbA.mft (raw, json) Hash identifier: WsFGfmunuwtM9UhHDXTyVzb5ps3NnfwNr+zcNcjAwCU= Subject key identifier: 14:45:9E:B4:52:79:F1:1A:6C:D6:A5:A8:92:B5:2B:F4:48:17:30:9A Authority key identifier: A6:9B:F9:7D:C7:83:49:7F:3C:37:BD:7A:86:E5:99:4A:CE:E7:81:B0 Certificate issuer: /CN=a69bf97dc783497f3c37bd7a86e5994acee781b0 Certificate serial: 019B5976AA14679049BF25F3E5C51CCB94FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppv5fceDSX88N716huWZSs7ngbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft Manifest number: 118F Signing time: Fri 26 Dec 2025 07:01:47 +0000 Manifest this update: Fri 26 Dec 2025 07:01:47 +0000 Manifest next update: Sat 27 Dec 2025 07:01:47 +0000 Files and hashes: 1: ppv5fceDSX88N716huWZSs7ngbA.crl (hash: 3zxd5+21ikSGNJmE2aPCcBr5LeVCPmm05YJ8yT3pCqA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.crl rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft rsync://rpki.ripe.net/repository/DEFAULT/ppv5fceDSX88N716huWZSs7ngbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:aa:14:67:90:49:bf:25:f3:e5:c5:1c:cb:94:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a69bf97dc783497f3c37bd7a86e5994acee781b0 Validity Not Before: Dec 26 07:01:47 2025 GMT Not After : Dec 27 07:01:47 2025 GMT Subject: CN=14459eb45279f11a6cd6a5a892b52bf44817309a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:c3:8e:87:1c:8e:41:c0:95:63:e3:f3:63:24: 44:df:8c:e9:c4:01:82:3f:2a:3f:6a:76:fc:24:d0: c3:5b:f2:3a:14:5f:57:24:37:70:da:25:0e:8a:d3: 95:64:ea:b6:02:87:53:8f:51:c9:ae:4e:ff:59:ad: 6a:82:86:e9:35:c4:64:11:55:b2:d2:b2:24:80:80: 95:c1:a7:01:8f:c7:86:6d:78:03:a0:ac:62:c0:0d: a0:7c:23:1a:65:84:73:9c:fe:5b:4e:19:63:45:95: e3:0b:06:27:63:8e:2a:27:aa:03:2a:55:b3:70:46: 55:bd:96:aa:c1:1a:6d:88:49:ac:64:f8:79:2b:93: 32:81:62:99:19:51:d0:3f:40:e2:fe:70:28:6e:90: 06:06:97:34:93:ad:e8:c0:e9:9b:a6:ff:76:7b:b5: 54:d8:b7:55:c5:1e:ee:a4:da:79:f9:0f:fa:9f:c1: 3e:4e:06:6b:19:95:85:ae:0f:0a:7e:df:a0:61:c6: ea:1e:14:5e:63:8a:ab:ac:d0:20:45:fe:ad:01:fa: c1:1f:5d:9f:00:9f:46:4c:a4:22:a3:8e:85:1e:ad: 5f:73:c6:06:22:06:f0:80:33:ae:47:ec:d5:73:a7: 57:4a:31:87:59:19:dd:cc:48:97:00:c4:1b:0f:3e: 80:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:45:9E:B4:52:79:F1:1A:6C:D6:A5:A8:92:B5:2B:F4:48:17:30:9A X509v3 Authority Key Identifier: keyid:A6:9B:F9:7D:C7:83:49:7F:3C:37:BD:7A:86:E5:99:4A:CE:E7:81:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppv5fceDSX88N716huWZSs7ngbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:70:c5:f7:7b:41:80:18:a0:b2:a2:24:dc:16:e8:f4:74:67: d4:b5:47:ed:5b:43:60:06:4c:85:04:3e:86:fa:46:7f:c5:07: 1a:3a:7f:a2:46:ef:bd:12:cd:69:dc:4c:0a:56:3b:8c:ff:70: 06:7a:38:79:cf:27:f2:70:6e:dc:30:d5:3c:aa:a9:2d:17:1d: 66:eb:19:6f:f1:24:67:2c:72:f1:f2:6c:b8:fd:e7:36:78:b7: 80:51:8f:d2:c9:02:55:8c:81:ed:0c:bf:98:cb:d9:7f:a6:1a: 0c:18:23:34:4b:66:cb:15:05:fa:d2:a5:4a:88:b0:b4:99:c1: 9e:72:28:d7:91:6e:a7:5f:b0:f2:ad:53:e6:39:28:91:46:41: b7:94:e8:e9:14:ca:27:ae:57:23:d1:2a:82:d3:f1:54:59:e4: 07:41:1e:57:36:d8:07:21:7e:d0:c9:1a:e7:60:68:87:2e:5a: 67:4b:3f:6a:dc:16:c7:7b:20:26:71:6a:e9:40:ae:a7:5e:87: 58:c3:ed:9c:e4:db:aa:c5:28:ef:0e:4b:a6:14:a7:cd:18:4d: e4:c3:ed:6c:4e:89:c1:47:ab:f9:c7:50:bc:cf:9d:85:63:74: b1:89:c3:55:1a:24:37:50:09:b8:4c:45:5e:68:e6:d6:00:82: 0c:9f:e9:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdqoUZ5BJvyXz5cUcy5T8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2OWJmOTdkYzc4MzQ5N2YzYzM3YmQ3YTg2ZTU5OTRhY2Vl NzgxYjAwHhcNMjUxMjI2MDcwMTQ3WhcNMjUxMjI3MDcwMTQ3WjAzMTEwLwYDVQQD EygxNDQ1OWViNDUyNzlmMTFhNmNkNmE1YTg5MmI1MmJmNDQ4MTczMDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MOOhxyOQcCVY+PzYyRE34zpxAGC Pyo/anb8JNDDW/I6FF9XJDdw2iUOitOVZOq2AodTj1HJrk7/Wa1qgobpNcRkEVWy 0rIkgICVwacBj8eGbXgDoKxiwA2gfCMaZYRznP5bThljRZXjCwYnY44qJ6oDKlWz cEZVvZaqwRptiEmsZPh5K5MygWKZGVHQP0Di/nAobpAGBpc0k63owOmbpv92e7VU 2LdVxR7upNp5+Q/6n8E+TgZrGZWFrg8Kft+gYcbqHhReY4qrrNAgRf6tAfrBH12f AJ9GTKQio46FHq1fc8YGIgbwgDOuR+zVc6dXSjGHWRndzEiXAMQbDz6AXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBRFnrRSefEabNalqJK1K/RIFzCaMB8GA1UdIwQY MBaAFKab+X3Hg0l/PDe9eoblmUrO54GwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHB2NWZjZURTWDg4TjcxNmh1V1pTczduZ2JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My85ZTIyYjgtNGViMS00ZDJmLWE4MDct N2I5NGZiNDNiNjBhLzEvcHB2NWZjZURTWDg4TjcxNmh1V1pTczduZ2JBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My85ZTIyYjgtNGViMS00ZDJmLWE4MDctN2I5NGZiNDNiNjBh LzEvcHB2NWZjZURTWDg4TjcxNmh1V1pTczduZ2JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAanDF93tB gBigsqIk3Bbo9HRn1LVH7VtDYAZMhQQ+hvpGf8UHGjp/okbvvRLNadxMClY7jP9w Bno4ec8n8nBu3DDVPKqpLRcdZusZb/EkZyxy8fJsuP3nNni3gFGP0skCVYyB7Qy/ mMvZf6YaDBgjNEtmyxUF+tKlSoiwtJnBnnIo15Fup1+w8q1T5jkokUZBt5To6RTK J65XI9EqgtPxVFnkB0EeVzbYByF+0Mka52Bohy5aZ0s/atwWx3sgJnFq6UCup16H WMPtnOTbqsUo7w5LphSnzRhN5MPtbE6JwUer+cdQvM+dhWN0sYnDVRokN1AJuExF Xmjm1gCCDJ/pPQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:54 2025 by rpki-client