This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft File: PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft (raw, json) Hash identifier: W0mCZyC+nIwrMJBYEVBCF2AfLpDegwma+JocZsou4+Q= Subject key identifier: 46:B2:4A:12:41:1C:24:15:FA:1B:CC:84:B4:69:D2:A5:C7:32:95:E0 Authority key identifier: 3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C Certificate issuer: /CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c Certificate serial: 019B112611677B9DB205C7CE3273728C0888 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft Manifest number: 0EB7 Signing time: Fri 12 Dec 2025 06:01:05 +0000 Manifest this update: Fri 12 Dec 2025 06:01:05 +0000 Manifest next update: Sat 13 Dec 2025 06:01:05 +0000 Files and hashes: 1: PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl (hash: rTkAc1K+Ejjb9kr68st/ZgUCJtN3tuXliBJzYG3l4vg=) 2: Zudt2t67uMUQbMO8N99rmxJB1wQ.roa (hash: SIlAW/DlBSg5+XbRtnFyzPAIYziyY+yFv6/k5lPUFJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 06:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:26:11:67:7b:9d:b2:05:c7:ce:32:73:72:8c:08:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c Validity Not Before: Dec 12 06:01:05 2025 GMT Not After : Dec 13 06:01:05 2025 GMT Subject: CN=46b24a12411c2415fa1bcc84b469d2a5c73295e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:99:cd:81:3d:74:a4:ea:f6:49:0a:37:3e:d8: b1:a1:e7:5c:10:b8:e8:20:e1:23:83:cd:66:23:30: 2e:4a:34:10:5c:8c:74:34:93:4b:7a:79:63:af:1a: f5:45:8b:82:c4:58:9e:6f:16:3e:9b:92:b7:45:e5: ce:f5:f5:2a:0b:ad:51:31:46:13:05:19:cd:bd:7c: 6a:52:23:35:2a:e9:0f:de:db:c6:22:bf:e1:59:be: 1e:23:7b:3b:cd:c4:54:36:e4:7d:a3:b7:0b:5b:5b: c3:a9:b9:1d:01:59:e4:bc:a5:a4:d4:a3:b1:53:ed: 59:d7:5e:41:ec:a3:f3:b2:69:b7:35:b6:ec:e6:93: 56:10:db:26:e4:3c:18:a3:dd:05:ac:5f:15:c6:32: a3:0f:25:1f:4c:4c:10:b0:ae:ed:91:ae:d2:5f:9c: 7c:aa:b9:3e:7f:cf:f2:fd:f3:8a:1a:1c:bd:82:f1: f6:41:18:41:c1:22:18:3f:90:ae:da:f1:e1:49:a4: b5:6e:f2:35:48:1a:34:2f:ed:46:ec:8f:63:c8:13: 46:88:cb:5c:00:37:8b:ac:e5:ec:69:63:00:7d:6e: 9b:d4:17:7e:f4:9f:30:72:8f:cd:4b:19:fc:1d:aa: 30:a8:cd:4b:82:96:5f:b8:b9:f7:cf:ce:12:6a:73: d4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:B2:4A:12:41:1C:24:15:FA:1B:CC:84:B4:69:D2:A5:C7:32:95:E0 X509v3 Authority Key Identifier: keyid:3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:f4:f4:7e:bb:e7:9e:f3:e5:a8:27:fa:e4:73:0d:e2:16:7f: 42:e5:07:99:80:c2:9a:93:a0:6a:b5:8d:a9:36:0f:99:a5:08: e1:3c:44:f3:79:c5:7a:2d:f3:f7:f0:49:20:83:3e:9b:6c:df: 64:68:01:e2:85:2e:57:b7:bc:0b:e0:1a:9f:b8:47:f8:3b:cb: 90:67:30:1f:99:3a:e1:86:77:fe:7e:ca:a2:07:e7:d6:6f:38: cf:49:9c:22:19:22:85:be:73:2a:0c:53:02:c1:09:95:25:cf: 18:aa:4b:ae:43:67:24:66:ae:f7:ec:86:86:f4:1c:d6:60:73: 5b:b7:7a:b5:8f:bb:78:a4:97:17:e6:eb:8a:d2:47:9c:ba:b1: 0b:71:95:c1:e3:bf:79:a0:2e:91:4a:6b:20:77:8a:a2:db:72: 39:ee:92:08:8c:b8:c4:cd:54:c9:0a:ae:dd:3e:a3:34:3e:b8: f1:cc:6d:63:a4:6b:ad:fd:f6:66:64:fc:09:d2:eb:e1:8e:86: 71:0b:e7:bc:61:3d:8d:9c:58:06:cb:3e:eb:cd:28:8c:67:d4: ee:8b:63:38:8d:4c:55:46:f8:29:58:73:32:65:ec:4b:66:14: e6:80:5e:89:43:77:aa:9a:e0:54:90:8f:48:27:fd:75:75:25: b6:83:a6:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRJhFne52yBcfOMnNyjAiIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjZmFhNDBmNjI2M2UwMGQxMjkxNjk4NTc2YTYxN2E1YjVk NjhhOWMwHhcNMjUxMjEyMDYwMTA1WhcNMjUxMjEzMDYwMTA1WjAzMTEwLwYDVQQD Eyg0NmIyNGExMjQxMWMyNDE1ZmExYmNjODRiNDY5ZDJhNWM3MzI5NWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pnNgT10pOr2SQo3PtixoedcELjo IOEjg81mIzAuSjQQXIx0NJNLenljrxr1RYuCxFiebxY+m5K3ReXO9fUqC61RMUYT BRnNvXxqUiM1KukP3tvGIr/hWb4eI3s7zcRUNuR9o7cLW1vDqbkdAVnkvKWk1KOx U+1Z115B7KPzsmm3Nbbs5pNWENsm5DwYo90FrF8VxjKjDyUfTEwQsK7tka7SX5x8 qrk+f8/y/fOKGhy9gvH2QRhBwSIYP5Cu2vHhSaS1bvI1SBo0L+1G7I9jyBNGiMtc ADeLrOXsaWMAfW6b1Bd+9J8wco/NSxn8HaowqM1LgpZfuLn3z84SanPUnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEayShJBHCQV+hvMhLRp0qXHMpXgMB8GA1UdIwQY MBaAFDz6pA9iY+ANEpFphXamF6W11oqcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFBxa0QySmo0QTBTa1dtRmRxWVhwYlhXaXB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC84NDVhZWUtZGFhYy00NjQxLTlmMzEt OWU3ZjBmOTQxMDQ5LzEvUFBxa0QySmo0QTBTa1dtRmRxWVhwYlhXaXB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC84NDVhZWUtZGFhYy00NjQxLTlmMzEtOWU3ZjBmOTQxMDQ5 LzEvUFBxa0QySmo0QTBTa1dtRmRxWVhwYlhXaXB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI/T0frvn nvPlqCf65HMN4hZ/QuUHmYDCmpOgarWNqTYPmaUI4TxE83nFei3z9/BJIIM+m2zf ZGgB4oUuV7e8C+Aan7hH+DvLkGcwH5k64YZ3/n7Kogfn1m84z0mcIhkihb5zKgxT AsEJlSXPGKpLrkNnJGau9+yGhvQc1mBzW7d6tY+7eKSXF+britJHnLqxC3GVweO/ eaAukUprIHeKottyOe6SCIy4xM1UyQqu3T6jND648cxtY6Rrrf32ZmT8CdLr4Y6G cQvnvGE9jZxYBss+680ojGfU7otjOI1MVUb4KVhzMmXsS2YU5oBeiUN3qprgVJCP SCf9dXUltoOmRw== -----END CERTIFICATE-----Generated at Fri Dec 12 13:14:47 2025 by rpki-client