This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.mft
File: PtW83-CttrlBURh__axK6PMRpvE.mft (raw, json)
Hash identifier: JKJHZc5OKBI4bD+O9+2UVglsnCmT6Xc2BnsCwbQLf44=
Subject key identifier: 3F:CE:ED:EA:E8:EA:41:DB:70:89:C0:D2:FE:06:C9:CF:95:5E:42:BE
Authority key identifier: 3E:D5:BC:DF:E0:AD:B6:B9:41:51:18:7F:FD:AC:4A:E8:F3:11:A6:F1
Certificate issuer: /CN=3ed5bcdfe0adb6b94151187ffdac4ae8f311a6f1
Certificate serial: 019B1EE21118612F21D70402E3DD544FADD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PtW83-CttrlBURh__axK6PMRpvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.mft
Manifest number: 170D
Signing time: Sun 14 Dec 2025 22:01:30 +0000
Manifest this update: Sun 14 Dec 2025 22:01:30 +0000
Manifest next update: Mon 15 Dec 2025 22:01:30 +0000
Files and hashes: 1: Hg8kBZfVcKLuM_k8GGnGJeVAvdc.roa (hash: ziqa3QYWLFKgPT8ZERs4WMz6NaXL6vju070csDXblpM=)
2: PtW83-CttrlBURh__axK6PMRpvE.crl (hash: b8LgB3oMFkVjJITiKXlnMi2S8bItR0OJZwJFAjRTFtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PtW83-CttrlBURh__axK6PMRpvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Dec 2025 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:1e:e2:11:18:61:2f:21:d7:04:02:e3:dd:54:4f:ad:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ed5bcdfe0adb6b94151187ffdac4ae8f311a6f1
Validity
Not Before: Dec 14 22:01:30 2025 GMT
Not After : Dec 15 22:01:30 2025 GMT
Subject: CN=3fceedeae8ea41db7089c0d2fe06c9cf955e42be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f9:10:35:5d:06:cf:14:74:f9:17:16:57:24:
e8:62:4e:52:6b:83:08:6e:45:b6:9f:de:74:74:7c:
2b:58:80:e3:05:1f:ba:4d:29:70:54:fa:d6:a7:2b:
38:8b:26:b3:a3:54:bd:88:c7:2a:6b:26:c5:d6:5f:
86:f6:32:67:e8:20:b1:9a:2b:96:38:e2:7f:9b:6c:
e4:75:83:ab:98:52:1b:ea:de:7d:6c:f0:36:06:74:
2e:e6:e7:5a:bd:39:11:61:fb:fe:d9:06:1d:a6:6c:
83:5b:6c:f8:e7:cf:50:32:9a:71:c0:22:bd:f7:9a:
11:04:35:3e:c2:79:7a:14:e0:4a:43:d5:1c:25:76:
ad:04:c4:6b:54:b6:89:09:c9:7a:de:05:bb:1c:87:
1e:1f:48:95:92:9e:11:8c:16:4a:c5:2e:7a:18:98:
cc:e4:7e:a5:c8:29:48:64:c4:d8:2d:8b:23:6f:4c:
e6:d4:ce:ce:42:07:b1:88:e3:4a:67:80:37:56:0c:
2e:38:8f:f0:61:1a:84:70:c5:ea:c5:70:69:a5:e6:
a5:eb:ed:23:e0:c6:f6:55:27:ea:75:1d:ab:31:97:
56:18:7a:0d:3d:ca:ba:ec:27:ef:b3:fb:bb:7a:c5:
97:dd:12:11:eb:8d:dc:c9:6b:84:5f:9e:a2:5d:fe:
78:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CE:ED:EA:E8:EA:41:DB:70:89:C0:D2:FE:06:C9:CF:95:5E:42:BE
X509v3 Authority Key Identifier:
keyid:3E:D5:BC:DF:E0:AD:B6:B9:41:51:18:7F:FD:AC:4A:E8:F3:11:A6:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtW83-CttrlBURh__axK6PMRpvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:78:24:17:b6:c1:17:e0:d0:44:63:b9:7e:f8:19:7f:25:d2:
32:dd:de:a7:5a:9e:86:53:36:30:d7:69:e5:4c:45:0e:d5:ae:
aa:a5:9f:45:84:36:ba:d1:27:0e:e7:67:bb:94:e3:6d:a9:72:
86:b4:42:87:18:3d:88:3f:39:40:0b:3d:cd:16:12:32:aa:2d:
e0:9f:4c:18:23:7b:0f:0a:64:04:02:a9:84:22:46:c2:8e:39:
f6:1c:bd:a8:20:e0:9b:e7:de:f6:b0:05:2b:13:c2:95:ac:c0:
15:e4:53:a9:69:80:8d:a3:cc:8d:87:46:6d:af:23:88:ab:45:
68:9e:5c:0a:24:8a:2a:f4:9a:12:aa:db:b6:42:55:20:cc:f8:
62:63:fe:98:d0:03:50:a4:04:24:8c:af:e2:8b:0e:fc:55:f9:
fc:5a:f6:e8:ae:94:5c:6b:e9:26:09:b0:e2:d5:30:2f:d3:4d:
b9:78:49:2e:ff:4f:76:0d:f6:41:3b:9a:70:ed:8b:99:23:3c:
5e:ac:28:95:08:2b:7d:62:7a:f0:ba:ed:a1:14:c7:f3:e3:61:
71:e9:48:a5:6c:38:d9:d5:74:45:ac:f5:6e:05:3e:a1:7d:9c:
35:9c:51:c2:19:36:19:0c:aa:6a:99:57:4c:5d:c1:7e:0c:9a:
86:30:4a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 01:18:44 2025 by rpki-client