This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.mft File: PpvRijUxNTVm7RgUDK10GQW-r64.mft (raw, json) Hash identifier: EiBvCWbFnTodU5Df1Hb4ty4jElSkrtbvKwT3t0CPa+g= Subject key identifier: 58:A1:DE:32:AE:2A:12:2C:34:A7:31:53:70:F0:42:46:A2:AE:A3:26 Authority key identifier: 3E:9B:D1:8A:35:31:35:35:66:ED:18:14:0C:AD:74:19:05:BE:AF:AE Certificate issuer: /CN=3e9bd18a3531353566ed18140cad741905beafae Certificate serial: 019AFD9F58908977123F9FE407B9385E7221 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PpvRijUxNTVm7RgUDK10GQW-r64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.mft Manifest number: 0D Signing time: Mon 08 Dec 2025 11:01:09 +0000 Manifest this update: Mon 08 Dec 2025 11:01:09 +0000 Manifest next update: Tue 09 Dec 2025 11:01:09 +0000 Files and hashes: 1: 03eGanIB24DOZ7MKOXSZJGh-5cA.roa (hash: iyZvfLEmfTPTO9GO7+ZlUk9hdJrJwgF8x+Hodf8w1sU=) 2: PpvRijUxNTVm7RgUDK10GQW-r64.crl (hash: UBd1SXCVmuJi/paCEX1xUU58Z0TW0t2pATrNNeNz3q0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.mft rsync://rpki.ripe.net/repository/DEFAULT/PpvRijUxNTVm7RgUDK10GQW-r64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 11:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fd:9f:58:90:89:77:12:3f:9f:e4:07:b9:38:5e:72:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e9bd18a3531353566ed18140cad741905beafae Validity Not Before: Dec 8 11:01:09 2025 GMT Not After : Dec 9 11:01:09 2025 GMT Subject: CN=58a1de32ae2a122c34a7315370f04246a2aea326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fd:bd:6b:b1:33:88:82:70:aa:f9:23:d7:11: f1:38:a3:35:69:94:dc:6d:d5:78:ab:e1:d7:4a:81: 99:08:d3:a5:f5:32:7d:f4:52:8c:a2:08:20:d3:0d: 6f:72:b2:ef:e5:5c:3b:54:39:50:b8:48:08:84:cf: ae:c5:a9:fc:03:e0:f8:ef:f6:2a:cb:13:74:bd:ff: 5c:73:3f:24:5b:fd:f3:f8:a1:6b:b0:a3:26:a2:ca: 9a:19:63:0d:d5:7e:fb:2b:9d:2a:67:f2:7e:86:97: 4b:84:3a:99:99:97:f1:71:68:5a:42:76:a9:78:eb: 07:89:41:bc:7d:9f:be:5f:16:49:1f:1e:48:4b:25: 7a:77:2d:e8:37:c6:3d:55:fe:37:5a:f8:f6:03:9a: 99:41:fe:69:62:56:88:0f:f6:1f:5c:31:62:b3:13: a5:05:0d:55:8d:83:e7:a8:63:c8:7a:24:f3:a9:84: 28:31:40:46:6b:bf:a2:56:76:b7:7a:98:69:84:6a: b3:07:25:f3:9b:ac:cc:d5:fb:c4:13:02:e9:41:c5: 97:82:29:45:1a:79:8d:21:b7:73:01:91:cb:d6:c3: 40:62:1d:f5:c3:24:c5:33:65:c3:dd:56:dd:4b:cd: 25:a9:f3:b2:f7:fc:ea:20:03:da:3b:a5:63:ab:51: 61:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A1:DE:32:AE:2A:12:2C:34:A7:31:53:70:F0:42:46:A2:AE:A3:26 X509v3 Authority Key Identifier: keyid:3E:9B:D1:8A:35:31:35:35:66:ED:18:14:0C:AD:74:19:05:BE:AF:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PpvRijUxNTVm7RgUDK10GQW-r64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:c4:30:93:6d:69:52:e9:a0:47:1d:71:26:6e:d3:93:20:45: 19:cb:44:34:1e:99:2a:b9:7b:6f:7c:91:c1:d3:37:e3:09:33: fe:65:c3:68:73:f7:3f:57:bb:7e:0b:95:4a:d6:80:62:62:1b: 3b:48:5e:02:7f:cb:36:28:f9:90:61:e1:97:5a:69:54:df:cd: b7:ea:94:3b:89:5e:80:c5:8d:94:e0:f1:fb:2b:51:d5:4c:48: 2c:fd:1f:fa:aa:29:5f:af:b2:98:47:b9:31:e9:89:3f:89:2d: 1e:c2:18:c6:cf:0c:a0:55:b0:c9:01:59:25:d7:10:ae:22:d4: f8:34:42:b1:3a:7c:53:c6:f8:e9:16:e0:54:ab:12:6b:bd:3f: 61:29:d3:e9:55:f6:e5:bb:9e:66:c9:4e:b5:d1:58:8e:96:cc: ab:2e:dc:18:76:9b:4b:1d:28:13:f8:4e:4c:15:41:b1:c1:19: 20:d0:2d:f9:08:ca:74:5a:52:99:dc:38:40:9e:98:97:b2:e0: 06:3c:b8:4b:8d:54:ff:3e:49:a4:53:37:a9:33:ff:92:dd:ea: 64:8b:0e:b2:32:7e:5c:57:74:2b:7b:96:8b:9b:2a:8a:08:d1: 5d:63:3a:64:df:60:81:1f:ae:80:13:34:6d:92:02:2a:4c:34: 4d:1e:06:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr9n1iQiXcSP5/kB7k4XnIhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlOWJkMThhMzUzMTM1MzU2NmVkMTgxNDBjYWQ3NDE5MDVi ZWFmYWUwHhcNMjUxMjA4MTEwMTA5WhcNMjUxMjA5MTEwMTA5WjAzMTEwLwYDVQQD Eyg1OGExZGUzMmFlMmExMjJjMzRhNzMxNTM3MGYwNDI0NmEyYWVhMzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxP29a7EziIJwqvkj1xHxOKM1aZTc bdV4q+HXSoGZCNOl9TJ99FKMoggg0w1vcrLv5Vw7VDlQuEgIhM+uxan8A+D47/Yq yxN0vf9ccz8kW/3z+KFrsKMmosqaGWMN1X77K50qZ/J+hpdLhDqZmZfxcWhaQnap eOsHiUG8fZ++XxZJHx5ISyV6dy3oN8Y9Vf43Wvj2A5qZQf5pYlaID/YfXDFisxOl BQ1VjYPnqGPIeiTzqYQoMUBGa7+iVna3ephphGqzByXzm6zM1fvEEwLpQcWXgilF GnmNIbdzAZHL1sNAYh31wyTFM2XD3VbdS80lqfOy9/zqIAPaO6Vjq1FhnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFih3jKuKhIsNKcxU3DwQkairqMmMB8GA1UdIwQY MBaAFD6b0Yo1MTU1Zu0YFAytdBkFvq+uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHB2UmlqVXhOVFZtN1JnVURLMTBHUVctcjY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS84NmRiYjQtNmFlNC00NzZlLWE2MDEt ZWEyNzdiNDkyZjFlLzEvUHB2UmlqVXhOVFZtN1JnVURLMTBHUVctcjY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS84NmRiYjQtNmFlNC00NzZlLWE2MDEtZWEyNzdiNDkyZjFl LzEvUHB2UmlqVXhOVFZtN1JnVURLMTBHUVctcjY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ8Qwk21p UumgRx1xJm7TkyBFGctENB6ZKrl7b3yRwdM34wkz/mXDaHP3P1e7fguVStaAYmIb O0heAn/LNij5kGHhl1ppVN/Nt+qUO4legMWNlODx+ytR1UxILP0f+qopX6+ymEe5 MemJP4ktHsIYxs8MoFWwyQFZJdcQriLU+DRCsTp8U8b46RbgVKsSa70/YSnT6VX2 5bueZslOtdFYjpbMqy7cGHabSx0oE/hOTBVBscEZINAt+QjKdFpSmdw4QJ6Yl7Lg Bjy4S41U/z5JpFM3qTP/kt3qZIsOsjJ+XFd0K3uWi5sqigjRXWM6ZN9ggR+ugBM0 bZICKkw0TR4GAg== -----END CERTIFICATE-----Generated at Mon Dec 8 20:50:15 2025 by rpki-client