This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft File: PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft (raw, json) Hash identifier: Nbc/Zv8wHdfhTwvV3LoKzmdLcRbO8JHV5eH1fvyhDOM= Subject key identifier: 26:BC:DF:B7:6E:3F:CF:38:C6:43:5F:59:02:D5:70:7E:99:97:80:3E Authority key identifier: 3D:55:51:02:99:81:84:FD:A7:C3:01:2E:86:19:00:94:8F:CF:27:73 Certificate issuer: /CN=3d555102998184fda7c3012e861900948fcf2773 Certificate serial: 019B251A47658C4078A38323796A1356FDB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PVVRApmBhP2nwwEuhhkAlI_PJ3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft Manifest number: CC Signing time: Tue 16 Dec 2025 03:00:37 +0000 Manifest this update: Tue 16 Dec 2025 03:00:37 +0000 Manifest next update: Wed 17 Dec 2025 03:00:37 +0000 Files and hashes: 1: PVVRApmBhP2nwwEuhhkAlI_PJ3M.crl (hash: kR89er7kUanWhiIQhOZeOx84/vpRleD7C3JXiVv11iE=) 2: yHDz_dgw2HNuVtS7NpKaJLAB8-Y.roa (hash: +cBZOUimuRqIk7jDWcn04PYJ9cM7ifN5PFGvV7TP168=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft rsync://rpki.ripe.net/repository/DEFAULT/PVVRApmBhP2nwwEuhhkAlI_PJ3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 03:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:1a:47:65:8c:40:78:a3:83:23:79:6a:13:56:fd:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d555102998184fda7c3012e861900948fcf2773 Validity Not Before: Dec 16 03:00:37 2025 GMT Not After : Dec 17 03:00:37 2025 GMT Subject: CN=26bcdfb76e3fcf38c6435f5902d5707e9997803e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7e:9a:1c:22:e5:70:e7:63:1a:31:aa:83:51: 7b:87:b3:20:00:84:34:61:ba:5d:65:28:72:61:42: 27:b1:12:95:36:3f:5e:19:c2:2d:c8:91:df:aa:4d: 8a:05:e9:ed:a1:34:9c:fc:1b:22:b8:12:45:14:b8: 4d:c5:ba:85:ed:8e:9a:f9:f1:88:3c:e5:7d:85:4b: 14:a0:f2:bb:21:d3:cf:5b:07:3f:db:39:7a:08:59: c2:00:18:7e:44:df:73:fd:8c:1a:a3:37:93:4c:09: df:85:5c:08:95:6b:c1:41:2d:af:72:e7:d1:05:12: 20:14:b0:71:ed:20:4d:24:4d:3a:5b:57:41:e6:7a: 65:9c:d3:0e:ed:f6:74:9d:e1:9d:e5:23:42:98:d6: 8e:61:f0:1f:05:77:64:61:5e:89:de:d2:8d:ac:90: 05:02:3d:a0:34:f0:5c:cb:76:1a:33:88:b6:fd:c4: 20:0f:e3:d7:52:66:28:63:c5:95:f6:81:17:3f:f3: 82:e8:7f:0b:46:42:33:d1:ed:61:a5:07:45:b1:2d: 9e:6f:e8:88:93:9f:2b:f4:3e:43:3a:64:31:3d:a3: e9:d3:d7:11:66:b8:d3:43:da:80:e1:82:24:72:44: 75:44:db:ba:55:94:c7:74:c2:06:83:a5:90:41:0f: 64:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:BC:DF:B7:6E:3F:CF:38:C6:43:5F:59:02:D5:70:7E:99:97:80:3E X509v3 Authority Key Identifier: keyid:3D:55:51:02:99:81:84:FD:A7:C3:01:2E:86:19:00:94:8F:CF:27:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PVVRApmBhP2nwwEuhhkAlI_PJ3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:dc:9f:53:64:b3:1f:0a:48:4c:29:82:45:66:48:60:d9:24: 9d:ea:a3:72:59:8c:87:68:5e:b9:06:06:d5:1c:ab:51:da:b9: 1f:b9:89:0d:c4:d0:a7:fd:ea:85:b0:ea:f1:94:f4:71:24:4f: 73:17:6b:68:c8:75:ac:fa:25:db:f4:c8:9c:28:93:0f:89:f1: db:1d:8d:86:88:c2:58:1c:79:3b:99:e8:34:1e:07:93:9b:ba: ea:6a:3b:ce:18:36:7b:80:3f:55:ea:09:28:45:28:7a:f1:a0: 61:a2:97:4c:da:6e:a9:3e:64:6c:39:d0:c7:05:c5:7e:77:4f: 86:0b:a3:ca:76:03:3a:9f:8d:9e:47:f9:06:03:da:79:63:25: 8e:ab:55:8b:ab:bb:5f:6f:3d:57:47:c0:b7:41:4e:11:de:a0: 30:45:3d:74:f0:38:63:84:a0:5d:d9:9f:03:f9:28:a3:20:d8: 69:17:89:2d:3c:fb:44:e2:f9:b5:f5:60:50:17:7c:66:a8:09: f1:2b:eb:7f:ce:08:19:55:58:f5:15:69:f5:24:45:fd:9b:a1: 74:ba:2e:58:46:00:ae:f7:a1:4c:3d:2c:57:7d:6d:ef:fe:bc: de:0f:c7:20:0f:1e:57:5d:cf:e5:c9:1e:d5:b1:5d:76:4a:f0: f3:1c:f0:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslGkdljEB4o4MjeWoTVv22MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkNTU1MTAyOTk4MTg0ZmRhN2MzMDEyZTg2MTkwMDk0OGZj ZjI3NzMwHhcNMjUxMjE2MDMwMDM3WhcNMjUxMjE3MDMwMDM3WjAzMTEwLwYDVQQD EygyNmJjZGZiNzZlM2ZjZjM4YzY0MzVmNTkwMmQ1NzA3ZTk5OTc4MDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmX6aHCLlcOdjGjGqg1F7h7MgAIQ0 YbpdZShyYUInsRKVNj9eGcItyJHfqk2KBentoTSc/BsiuBJFFLhNxbqF7Y6a+fGI POV9hUsUoPK7IdPPWwc/2zl6CFnCABh+RN9z/YwaozeTTAnfhVwIlWvBQS2vcufR BRIgFLBx7SBNJE06W1dB5nplnNMO7fZ0neGd5SNCmNaOYfAfBXdkYV6J3tKNrJAF Aj2gNPBcy3YaM4i2/cQgD+PXUmYoY8WV9oEXP/OC6H8LRkIz0e1hpQdFsS2eb+iI k58r9D5DOmQxPaPp09cRZrjTQ9qA4YIkckR1RNu6VZTHdMIGg6WQQQ9kQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCa837duP884xkNfWQLVcH6Zl4A+MB8GA1UdIwQY MBaAFD1VUQKZgYT9p8MBLoYZAJSPzydzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFZWUkFwbUJoUDJud3dFdWhoa0FsSV9QSjNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8yNzMzY2UtZTliOS00YWI5LTk1MGMt YzI4YmRhMjMwY2I0LzEvUFZWUkFwbUJoUDJud3dFdWhoa0FsSV9QSjNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8yNzMzY2UtZTliOS00YWI5LTk1MGMtYzI4YmRhMjMwY2I0 LzEvUFZWUkFwbUJoUDJud3dFdWhoa0FsSV9QSjNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANNyfU2Sz HwpITCmCRWZIYNkkneqjclmMh2heuQYG1RyrUdq5H7mJDcTQp/3qhbDq8ZT0cSRP cxdraMh1rPol2/TInCiTD4nx2x2NhojCWBx5O5noNB4Hk5u66mo7zhg2e4A/VeoJ KEUoevGgYaKXTNpuqT5kbDnQxwXFfndPhgujynYDOp+Nnkf5BgPaeWMljqtVi6u7 X289V0fAt0FOEd6gMEU9dPA4Y4SgXdmfA/kooyDYaReJLTz7ROL5tfVgUBd8ZqgJ 8Svrf84IGVVY9RVp9SRF/ZuhdLouWEYArvehTD0sV31t7/683g/HIA8eV13P5cke 1bFddkrw8xzwfA== -----END CERTIFICATE-----Generated at Tue Dec 16 11:45:17 2025 by rpki-client