This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/27eba1-3ea1-4191-9699-9f004101ce4c/1/PpeXKwFXszTha_kfKifuDi3BOag.mft File: PpeXKwFXszTha_kfKifuDi3BOag.mft (raw, json) Hash identifier: LcpNT8iSlqMX/BN4ElkoPjJ8XN7q9I6LaPoLWaYAoWM= Subject key identifier: D7:C9:85:96:A9:22:FD:BD:79:10:1C:ED:54:16:6E:00:E6:0B:90:EA Authority key identifier: 3E:97:97:2B:01:57:B3:34:E1:6B:F9:1F:2A:27:EE:0E:2D:C1:39:A8 Certificate issuer: /CN=3e97972b0157b334e16bf91f2a27ee0e2dc139a8 Certificate serial: 019B37C5B21FDC88FFFEEAE5AF4F8699D7DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PpeXKwFXszTha_kfKifuDi3BOag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/27eba1-3ea1-4191-9699-9f004101ce4c/1/PpeXKwFXszTha_kfKifuDi3BOag.mft Manifest number: 03F3 Signing time: Fri 19 Dec 2025 18:01:01 +0000 Manifest this update: Fri 19 Dec 2025 18:01:01 +0000 Manifest next update: Sat 20 Dec 2025 18:01:01 +0000 Files and hashes: 1: PpeXKwFXszTha_kfKifuDi3BOag.crl (hash: PGd5vRrm6hSbGXoB5kb7IlTOj1Gsv6Zryy7spLAFaww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/27eba1-3ea1-4191-9699-9f004101ce4c/1/PpeXKwFXszTha_kfKifuDi3BOag.crl rsync://rpki.ripe.net/repository/DEFAULT/97/27eba1-3ea1-4191-9699-9f004101ce4c/1/PpeXKwFXszTha_kfKifuDi3BOag.mft rsync://rpki.ripe.net/repository/DEFAULT/PpeXKwFXszTha_kfKifuDi3BOag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:b2:1f:dc:88:ff:fe:ea:e5:af:4f:86:99:d7:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e97972b0157b334e16bf91f2a27ee0e2dc139a8 Validity Not Before: Dec 19 18:01:01 2025 GMT Not After : Dec 20 18:01:01 2025 GMT Subject: CN=d7c98596a922fdbd79101ced54166e00e60b90ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:e8:3b:d9:0a:c2:fe:95:28:ac:41:b5:53:80: c7:3c:c3:cc:de:96:bf:84:5c:5f:44:b0:fa:b8:e0: c9:0f:95:73:ad:03:96:cf:cf:8f:0d:d5:9a:27:3a: a3:1a:a3:c8:cf:d8:fb:74:00:da:05:da:90:b1:e5: aa:c0:17:99:14:db:c4:32:41:43:cf:1d:7e:df:5a: a0:32:23:2a:9e:1e:03:62:00:e5:ba:a4:37:3f:7d: 4c:68:eb:37:55:5d:25:4d:d7:bf:7a:94:a7:90:c6: d0:02:e6:97:36:ac:bc:b2:e2:20:94:f6:9c:26:f3: 38:a3:f4:2a:29:b4:2a:63:6b:98:69:f1:d8:78:21: 1e:ac:fd:9e:3e:33:e9:a3:b3:78:23:f6:d5:aa:6c: 4c:f0:f7:40:fe:d2:a9:46:b0:54:db:cc:a5:4c:7a: 63:fc:db:2b:92:c7:c9:81:35:7c:c6:e1:f3:99:2c: 7c:1c:06:2f:eb:87:91:e6:88:99:b4:e0:b8:b8:0e: 08:ec:81:c4:d0:bc:97:80:d1:c7:f8:1c:37:5a:d5: c2:dd:85:d9:be:be:bd:02:94:9f:97:e2:1d:f5:6a: 95:db:75:b3:b5:fd:e9:3c:a7:f2:26:1b:9b:be:1c: 17:f2:9e:ee:b1:42:5e:4a:8c:0d:0c:67:dc:8a:89: 32:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:C9:85:96:A9:22:FD:BD:79:10:1C:ED:54:16:6E:00:E6:0B:90:EA X509v3 Authority Key Identifier: keyid:3E:97:97:2B:01:57:B3:34:E1:6B:F9:1F:2A:27:EE:0E:2D:C1:39:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PpeXKwFXszTha_kfKifuDi3BOag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/27eba1-3ea1-4191-9699-9f004101ce4c/1/PpeXKwFXszTha_kfKifuDi3BOag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/27eba1-3ea1-4191-9699-9f004101ce4c/1/PpeXKwFXszTha_kfKifuDi3BOag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:74:ff:68:37:72:13:83:4a:8d:64:ac:e7:ba:d7:f2:bc:c7: 26:c4:59:1f:45:b5:b3:a0:18:f9:91:f3:07:d9:58:d1:e0:3e: 23:7c:34:ba:18:9f:59:ad:d7:2d:97:65:bd:c4:13:30:f7:5d: 6d:1a:5f:22:49:bf:56:d7:ac:e7:7c:a6:8b:e5:da:58:36:25: c8:8a:90:46:8b:18:df:e2:79:50:17:b9:89:70:71:1f:92:93: 88:a5:74:59:92:82:21:dc:e3:47:fb:85:68:81:85:89:14:d0: d7:7d:d4:4b:1a:90:bf:8c:9b:0d:ef:03:54:a9:8e:d2:9d:2d: 37:e8:d9:40:d3:3f:9e:43:e7:ce:64:7e:3b:7a:bf:ff:4b:d2: f8:11:72:ca:19:93:f0:6e:b5:be:46:94:83:e8:e1:ef:da:bd: 77:e3:94:a6:29:ea:96:ec:2e:f2:a9:35:c4:54:77:fe:36:62: 3a:b4:78:be:7e:e1:19:a7:48:0d:67:78:b1:08:1f:fa:b9:9c: f3:8a:65:f0:a6:ce:1a:d0:99:05:2b:b4:2a:2e:7e:da:32:c3: d4:b8:8b:a4:84:f4:a1:e2:80:4d:fb:31:ed:a8:4d:70:dd:b8: 45:3c:4a:62:4a:24:f3:00:fc:0f:6a:66:8b:33:90:ea:2f:75: 0b:15:31:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xbIf3Ij//urlr0+GmdfbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlOTc5NzJiMDE1N2IzMzRlMTZiZjkxZjJhMjdlZTBlMmRj MTM5YTgwHhcNMjUxMjE5MTgwMTAxWhcNMjUxMjIwMTgwMTAxWjAzMTEwLwYDVQQD EyhkN2M5ODU5NmE5MjJmZGJkNzkxMDFjZWQ1NDE2NmUwMGU2MGI5MGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8+g72QrC/pUorEG1U4DHPMPM3pa/ hFxfRLD6uODJD5VzrQOWz8+PDdWaJzqjGqPIz9j7dADaBdqQseWqwBeZFNvEMkFD zx1+31qgMiMqnh4DYgDluqQ3P31MaOs3VV0lTde/epSnkMbQAuaXNqy8suIglPac JvM4o/QqKbQqY2uYafHYeCEerP2ePjPpo7N4I/bVqmxM8PdA/tKpRrBU28ylTHpj /NsrksfJgTV8xuHzmSx8HAYv64eR5oiZtOC4uA4I7IHE0LyXgNHH+Bw3WtXC3YXZ vr69ApSfl+Id9WqV23Wztf3pPKfyJhubvhwX8p7usUJeSowNDGfciokyFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNfJhZapIv29eRAc7VQWbgDmC5DqMB8GA1UdIwQY MBaAFD6XlysBV7M04Wv5Hyon7g4twTmoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHBlWEt3RlhzelRoYV9rZktpZnVEaTNCT2FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8yN2ViYTEtM2VhMS00MTkxLTk2OTkt OWYwMDQxMDFjZTRjLzEvUHBlWEt3RlhzelRoYV9rZktpZnVEaTNCT2FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8yN2ViYTEtM2VhMS00MTkxLTk2OTktOWYwMDQxMDFjZTRj LzEvUHBlWEt3RlhzelRoYV9rZktpZnVEaTNCT2FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeXT/aDdy E4NKjWSs57rX8rzHJsRZH0W1s6AY+ZHzB9lY0eA+I3w0uhifWa3XLZdlvcQTMPdd bRpfIkm/Vtes53ymi+XaWDYlyIqQRosY3+J5UBe5iXBxH5KTiKV0WZKCIdzjR/uF aIGFiRTQ133USxqQv4ybDe8DVKmO0p0tN+jZQNM/nkPnzmR+O3q//0vS+BFyyhmT 8G61vkaUg+jh79q9d+OUpinqluwu8qk1xFR3/jZiOrR4vn7hGadIDWd4sQgf+rmc 84pl8KbOGtCZBSu0Ki5+2jLD1LiLpIT0oeKATfsx7ahNcN24RTxKYkok8wD8D2pm izOQ6i91CxUxqg== -----END CERTIFICATE-----Generated at Sat Dec 20 01:48:06 2025 by rpki-client