This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft File: pPP3bj7O8kl-ET6ju664U_YvWP4.mft (raw, json) Hash identifier: 7m60LjGQBItV+N1mXBcb9HbuiF5Xja2bnglCV3aucZs= Subject key identifier: 26:CC:3D:D1:19:63:0C:57:21:D9:F3:87:D0:A2:D9:7D:05:D1:95:B3 Authority key identifier: A4:F3:F7:6E:3E:CE:F2:49:7E:11:3E:A3:BB:AE:B8:53:F6:2F:58:FE Certificate issuer: /CN=a4f3f76e3ecef2497e113ea3bbaeb853f62f58fe Certificate serial: 019B5A51D798959E82DA499108E6C99B29DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPP3bj7O8kl-ET6ju664U_YvWP4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft Manifest number: 0E2C Signing time: Fri 26 Dec 2025 11:01:11 +0000 Manifest this update: Fri 26 Dec 2025 11:01:11 +0000 Manifest next update: Sat 27 Dec 2025 11:01:11 +0000 Files and hashes: 1: 66ywR3ba4enexaVdWoqndnOvp4U.roa (hash: Qkz3r6su/bj0dLkhbVaX1i/95TsjjuS65tg9qxOjli4=) 2: pPP3bj7O8kl-ET6ju664U_YvWP4.crl (hash: DuBoDWGS53cZGil/1M1fp5/6W73MXPXUoU1rs+roLXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft rsync://rpki.ripe.net/repository/DEFAULT/pPP3bj7O8kl-ET6ju664U_YvWP4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:d7:98:95:9e:82:da:49:91:08:e6:c9:9b:29:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4f3f76e3ecef2497e113ea3bbaeb853f62f58fe Validity Not Before: Dec 26 11:01:11 2025 GMT Not After : Dec 27 11:01:11 2025 GMT Subject: CN=26cc3dd119630c5721d9f387d0a2d97d05d195b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b3:e7:41:fc:e4:d3:d8:c6:d9:6b:4b:72:ad: 65:52:01:58:35:85:de:e4:d9:2f:0b:c9:2b:49:cb: 0e:4c:ae:03:4c:32:05:9f:c3:d0:41:83:b1:93:79: 6c:db:75:ba:72:e8:46:52:a5:22:f0:93:12:be:65: 91:15:f5:57:10:8f:b9:a5:8d:4c:ea:21:4c:9b:84: 93:ca:60:6d:94:f4:1c:3a:26:d1:d2:34:5e:8f:04: c7:1a:05:fa:a3:d1:b7:f2:66:0b:ad:b1:f3:b9:bb: 49:a6:3d:ae:9a:b9:d7:f2:3b:e2:84:33:d5:fe:5c: 89:36:b6:59:fa:a0:db:e3:58:22:06:25:c9:fb:29: f3:a1:d0:01:b4:ee:20:64:f9:4b:d3:30:e5:40:9f: b3:e4:1c:81:b6:53:8e:99:5e:11:5c:40:3e:13:63: 29:0c:f2:9b:f3:8f:a0:a5:32:36:4f:23:e8:e1:af: ff:91:ff:fd:6e:d9:eb:4e:d6:3c:81:4a:ed:cf:b2: e1:8d:87:92:71:65:03:dd:56:3f:86:8a:e6:11:53: 8b:6a:db:4d:e6:e9:2f:de:12:07:e2:c0:68:1a:02: 97:a4:91:61:8e:4d:1a:c4:56:db:9c:56:2c:db:01: 41:c9:f1:8f:03:93:8b:f2:5f:d6:b0:ba:b8:3a:05: 0f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:CC:3D:D1:19:63:0C:57:21:D9:F3:87:D0:A2:D9:7D:05:D1:95:B3 X509v3 Authority Key Identifier: keyid:A4:F3:F7:6E:3E:CE:F2:49:7E:11:3E:A3:BB:AE:B8:53:F6:2F:58:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPP3bj7O8kl-ET6ju664U_YvWP4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:10:3f:c0:be:0d:32:6c:33:f6:52:66:ac:e2:09:a4:dc:95: 77:c9:bb:c8:2e:da:02:a2:d2:56:bd:16:66:84:d8:9c:e1:c6: 86:9c:33:09:fd:da:8c:fe:8e:4a:82:6e:2e:fd:7f:41:e1:7f: f9:3f:2c:d0:34:ff:b3:81:b6:72:94:74:81:6c:d1:76:de:e2: d5:d5:8b:b6:ba:24:39:fe:8e:07:e0:6c:ec:2e:bf:fd:6e:c9: b6:3b:61:85:bc:22:e4:7d:75:74:04:e0:16:43:f3:a8:90:d5: b0:64:98:76:72:21:cb:ed:e7:db:bc:c0:c3:94:e1:15:fb:c9: 9f:a6:e1:92:4b:46:f1:bf:24:ab:18:cc:62:b0:ce:6b:b2:de: a6:cb:23:96:66:8a:01:72:39:f6:fd:b4:6f:3d:0a:f3:d1:b3: 7d:e0:36:3e:56:f7:3f:94:07:f0:db:a3:6b:6a:73:08:c9:62: 0a:9f:5d:02:58:e2:00:83:bc:25:59:1a:15:a9:68:69:72:9e: e5:ee:2e:6c:7a:f3:79:94:57:48:f4:d0:0a:4c:9c:b0:97:96: f8:b8:85:fe:3b:60:16:58:c0:39:fa:dc:d0:32:6b:05:29:d5: 86:08:a6:a5:e2:41:49:21:4b:e0:b5:e6:6a:0d:c5:79:6a:65: 29:31:3c:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUdeYlZ6C2kmRCObJmynfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZjNmNzZlM2VjZWYyNDk3ZTExM2VhM2JiYWViODUzZjYy ZjU4ZmUwHhcNMjUxMjI2MTEwMTExWhcNMjUxMjI3MTEwMTExWjAzMTEwLwYDVQQD EygyNmNjM2RkMTE5NjMwYzU3MjFkOWYzODdkMGEyZDk3ZDA1ZDE5NWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrPnQfzk09jG2WtLcq1lUgFYNYXe 5NkvC8krScsOTK4DTDIFn8PQQYOxk3ls23W6cuhGUqUi8JMSvmWRFfVXEI+5pY1M 6iFMm4STymBtlPQcOibR0jRejwTHGgX6o9G38mYLrbHzubtJpj2umrnX8jvihDPV /lyJNrZZ+qDb41giBiXJ+ynzodABtO4gZPlL0zDlQJ+z5ByBtlOOmV4RXEA+E2Mp DPKb84+gpTI2TyPo4a//kf/9btnrTtY8gUrtz7LhjYeScWUD3VY/hormEVOLattN 5ukv3hIH4sBoGgKXpJFhjk0axFbbnFYs2wFByfGPA5OL8l/WsLq4OgUPvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCbMPdEZYwxXIdnzh9Ci2X0F0ZWzMB8GA1UdIwQY MBaAFKTz924+zvJJfhE+o7uuuFP2L1j+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFBQM2JqN084a2wtRVQ2anU2NjRVX1l2V1A0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9kNmM1NWEtODYyOC00MjlmLWEyZWMt NGYyYzE5YmQ1NGQ3LzEvcFBQM2JqN084a2wtRVQ2anU2NjRVX1l2V1A0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9kNmM1NWEtODYyOC00MjlmLWEyZWMtNGYyYzE5YmQ1NGQ3 LzEvcFBQM2JqN084a2wtRVQ2anU2NjRVX1l2V1A0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlBA/wL4N Mmwz9lJmrOIJpNyVd8m7yC7aAqLSVr0WZoTYnOHGhpwzCf3ajP6OSoJuLv1/QeF/ +T8s0DT/s4G2cpR0gWzRdt7i1dWLtrokOf6OB+Bs7C6//W7Jtjthhbwi5H11dATg FkPzqJDVsGSYdnIhy+3n27zAw5ThFfvJn6bhkktG8b8kqxjMYrDOa7LepssjlmaK AXI59v20bz0K89GzfeA2Plb3P5QH8Nuja2pzCMliCp9dAljiAIO8JVkaFaloaXKe 5e4ubHrzeZRXSPTQCkycsJeW+LiF/jtgFljAOfrc0DJrBSnVhgimpeJBSSFL4LXm ag3FeWplKTE8ug== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:47 2025 by rpki-client