This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d1205b-072f-46c1-8170-0705bccd1f2a/1/PT1pq2LI2IJfK6S0g9Djk-JTTu8.mft File: PT1pq2LI2IJfK6S0g9Djk-JTTu8.mft (raw, json) Hash identifier: DtcoQgaRpyc5F7Rh22BVLb/2QmS8PRxRdKCuTh3ijeo= Subject key identifier: 95:91:E2:92:6D:07:AD:91:8D:4B:C6:30:2D:EB:EA:B1:25:D4:7D:45 Authority key identifier: 3D:3D:69:AB:62:C8:D8:82:5F:2B:A4:B4:83:D0:E3:93:E2:53:4E:EF Certificate issuer: /CN=3d3d69ab62c8d8825f2ba4b483d0e393e2534eef Certificate serial: 019B38A20BA030BE403D476368199DA4BE01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PT1pq2LI2IJfK6S0g9Djk-JTTu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/d1205b-072f-46c1-8170-0705bccd1f2a/1/PT1pq2LI2IJfK6S0g9Djk-JTTu8.mft Manifest number: 1574 Signing time: Fri 19 Dec 2025 22:01:42 +0000 Manifest this update: Fri 19 Dec 2025 22:01:42 +0000 Manifest next update: Sat 20 Dec 2025 22:01:42 +0000 Files and hashes: 1: PT1pq2LI2IJfK6S0g9Djk-JTTu8.crl (hash: tpCbvu20Fumo+yADhsdsDiWDjR0thHxlfRUdRV0rD9U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/d1205b-072f-46c1-8170-0705bccd1f2a/1/PT1pq2LI2IJfK6S0g9Djk-JTTu8.crl rsync://rpki.ripe.net/repository/DEFAULT/99/d1205b-072f-46c1-8170-0705bccd1f2a/1/PT1pq2LI2IJfK6S0g9Djk-JTTu8.mft rsync://rpki.ripe.net/repository/DEFAULT/PT1pq2LI2IJfK6S0g9Djk-JTTu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:0b:a0:30:be:40:3d:47:63:68:19:9d:a4:be:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d3d69ab62c8d8825f2ba4b483d0e393e2534eef Validity Not Before: Dec 19 22:01:42 2025 GMT Not After : Dec 20 22:01:42 2025 GMT Subject: CN=9591e2926d07ad918d4bc6302debeab125d47d45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4a:c5:71:05:ff:78:7f:f4:26:df:b8:f4:f2: bf:bf:7e:80:2b:32:0f:3d:89:f6:0f:19:4a:6e:77: ef:28:e7:8e:bb:a6:d9:f5:61:0d:4d:37:b3:90:e8: ba:90:0f:ce:85:61:84:f7:36:f6:7b:04:ef:42:67: 8f:68:7d:3b:24:2d:3f:7a:7a:15:e6:02:8b:1b:11: 48:58:94:fc:60:24:b3:9a:b1:06:42:f1:99:ef:3e: 29:ab:77:30:c8:32:fe:22:23:5b:19:34:f6:b1:c7: ea:af:f3:b8:cd:59:e1:c8:21:96:c6:4b:c5:15:fe: 46:e6:22:08:56:52:ec:68:da:a8:68:b9:79:35:2c: 8b:0b:98:1a:55:6d:29:90:c9:1b:cb:27:bd:8f:2c: 90:5d:76:05:3e:cc:ff:c6:a1:61:c9:9c:ce:24:b1: 8d:52:be:f7:74:a4:96:fc:49:06:0c:f8:b1:53:e8: 31:ab:8c:3a:9c:09:7f:e5:9f:8d:2e:17:18:fb:0d: b1:17:d3:a8:0f:4c:73:2e:50:a3:b5:90:c9:af:6c: 3d:7c:8b:b3:0a:fd:a3:4a:94:21:2a:3b:d2:b4:34: ea:e4:00:fd:b8:d0:c3:f9:75:25:46:95:0d:9c:2a: 85:75:0e:0c:58:f7:39:a1:a8:cf:de:08:cd:34:1f: 16:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:91:E2:92:6D:07:AD:91:8D:4B:C6:30:2D:EB:EA:B1:25:D4:7D:45 X509v3 Authority Key Identifier: keyid:3D:3D:69:AB:62:C8:D8:82:5F:2B:A4:B4:83:D0:E3:93:E2:53:4E:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT1pq2LI2IJfK6S0g9Djk-JTTu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d1205b-072f-46c1-8170-0705bccd1f2a/1/PT1pq2LI2IJfK6S0g9Djk-JTTu8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d1205b-072f-46c1-8170-0705bccd1f2a/1/PT1pq2LI2IJfK6S0g9Djk-JTTu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:b3:40:c4:30:ab:bf:8d:0c:3f:d1:75:03:80:bb:4e:64:ca: fc:cb:49:de:bb:46:36:7a:71:1d:3c:45:29:c1:51:1b:aa:7d: dd:24:2a:e7:55:6a:29:14:c0:f2:38:bb:56:b1:f4:2a:a0:fb: 27:9d:08:52:30:a7:12:31:49:f2:0b:00:02:69:00:e0:84:ec: a6:d0:33:33:6d:cd:fe:27:76:a7:ee:ef:05:d5:ab:fa:33:3e: a6:61:d0:fe:54:53:c9:16:7e:aa:f4:02:88:29:d9:03:28:19: 49:c9:4b:61:80:12:53:5b:6e:cd:05:25:62:8b:dc:41:ce:84: de:9e:6d:5c:a5:3e:ad:65:3d:1e:83:54:52:f1:1d:f6:8d:29: a1:5c:f4:8c:8d:d2:2b:fc:c3:79:c6:92:11:e1:5d:99:4f:71: 16:39:68:9e:bd:52:30:6c:b6:1d:30:6f:c2:b3:d7:c0:76:d2: ad:91:ac:a6:61:3d:ed:5a:2b:3f:65:a8:70:0b:ed:ed:3e:10: 65:21:02:fe:66:2e:b6:d4:12:91:f2:b3:34:90:93:86:b9:19: 17:4f:c2:9c:b2:3f:41:67:33:a1:e5:fb:98:e7:54:94:d9:2c: a4:6f:82:86:a0:15:16:33:c1:7f:1c:58:70:e0:d6:8c:f2:f9: d7:17:dd:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4ogugML5APUdjaBmdpL4BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkM2Q2OWFiNjJjOGQ4ODI1ZjJiYTRiNDgzZDBlMzkzZTI1 MzRlZWYwHhcNMjUxMjE5MjIwMTQyWhcNMjUxMjIwMjIwMTQyWjAzMTEwLwYDVQQD Eyg5NTkxZTI5MjZkMDdhZDkxOGQ0YmM2MzAyZGViZWFiMTI1ZDQ3ZDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnErFcQX/eH/0Jt+49PK/v36AKzIP PYn2DxlKbnfvKOeOu6bZ9WENTTezkOi6kA/OhWGE9zb2ewTvQmePaH07JC0/enoV 5gKLGxFIWJT8YCSzmrEGQvGZ7z4pq3cwyDL+IiNbGTT2scfqr/O4zVnhyCGWxkvF Ff5G5iIIVlLsaNqoaLl5NSyLC5gaVW0pkMkbyye9jyyQXXYFPsz/xqFhyZzOJLGN Ur73dKSW/EkGDPixU+gxq4w6nAl/5Z+NLhcY+w2xF9OoD0xzLlCjtZDJr2w9fIuz Cv2jSpQhKjvStDTq5AD9uNDD+XUlRpUNnCqFdQ4MWPc5oajP3gjNNB8W4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJWR4pJtB62RjUvGMC3r6rEl1H1FMB8GA1UdIwQY MBaAFD09aatiyNiCXyuktIPQ45PiU07vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFQxcHEyTEkySUpmSzZTMGc5RGprLUpUVHU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kMTIwNWItMDcyZi00NmMxLTgxNzAt MDcwNWJjY2QxZjJhLzEvUFQxcHEyTEkySUpmSzZTMGc5RGprLUpUVHU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9kMTIwNWItMDcyZi00NmMxLTgxNzAtMDcwNWJjY2QxZjJh LzEvUFQxcHEyTEkySUpmSzZTMGc5RGprLUpUVHU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALrNAxDCr v40MP9F1A4C7TmTK/MtJ3rtGNnpxHTxFKcFRG6p93SQq51VqKRTA8ji7VrH0KqD7 J50IUjCnEjFJ8gsAAmkA4ITsptAzM23N/id2p+7vBdWr+jM+pmHQ/lRTyRZ+qvQC iCnZAygZSclLYYASU1tuzQUlYovcQc6E3p5tXKU+rWU9HoNUUvEd9o0poVz0jI3S K/zDecaSEeFdmU9xFjlonr1SMGy2HTBvwrPXwHbSrZGspmE97VorP2WocAvt7T4Q ZSEC/mYuttQSkfKzNJCThrkZF0/CnLI/QWczoeX7mOdUlNkspG+ChqAVFjPBfxxY cODWjPL51xfdXA== -----END CERTIFICATE-----Generated at Sat Dec 20 05:34:07 2025 by rpki-client