This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft File: pPTBZVXW8DttbI0KjMvhrx6uxDo.mft (raw, json) Hash identifier: rfVBOPSSt1igoRR6JdIPZcFtfOul13cW+Qqqrx0+szA= Subject key identifier: CE:A4:0F:C7:7C:B7:63:A7:44:F1:F3:13:59:0F:9F:97:8C:AA:2C:30 Authority key identifier: A4:F4:C1:65:55:D6:F0:3B:6D:6C:8D:0A:8C:CB:E1:AF:1E:AE:C4:3A Certificate issuer: /CN=a4f4c16555d6f03b6d6c8d0a8ccbe1af1eaec43a Certificate serial: 019B1E3D2B1A2275401BEC54489B0FBE2E8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPTBZVXW8DttbI0KjMvhrx6uxDo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft Manifest number: 015E Signing time: Sun 14 Dec 2025 19:01:23 +0000 Manifest this update: Sun 14 Dec 2025 19:01:23 +0000 Manifest next update: Mon 15 Dec 2025 19:01:23 +0000 Files and hashes: 1: 23JWsnJj-jb8Wa8yxWmE89jRhEc.roa (hash: hyRLz7Lb6AY/XCQzJ69T02ZWEp1ZBMf9ccg5gtbuPtQ=) 2: pPTBZVXW8DttbI0KjMvhrx6uxDo.crl (hash: nGm+AhaVrzdSzG82TGySLZump5xyp2ISZYh9jURV2SI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft rsync://rpki.ripe.net/repository/DEFAULT/pPTBZVXW8DttbI0KjMvhrx6uxDo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 19:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:3d:2b:1a:22:75:40:1b:ec:54:48:9b:0f:be:2e:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4f4c16555d6f03b6d6c8d0a8ccbe1af1eaec43a Validity Not Before: Dec 14 19:01:23 2025 GMT Not After : Dec 15 19:01:23 2025 GMT Subject: CN=cea40fc77cb763a744f1f313590f9f978caa2c30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cb:e2:78:fb:b5:93:3d:2b:17:7a:fa:1f:2f: 67:ce:da:e7:52:64:1a:8d:d0:4e:5f:12:08:2f:f9: cf:61:4f:08:a7:e0:8b:4e:0c:7b:f1:22:a3:99:c9: d7:bb:5c:e5:f1:d5:74:51:bd:95:fe:6b:2a:38:b5: 14:8e:88:de:1e:e4:64:84:71:39:40:74:45:c9:44: b8:38:45:f5:5a:7d:8a:68:d6:b0:34:53:68:6b:68: 97:66:b2:0a:5a:43:3d:79:a1:17:99:88:be:b5:07: 74:b4:70:8e:37:4f:43:98:4a:f2:8e:d9:34:8f:33: bb:12:17:85:1c:6d:a9:5c:39:b4:26:c8:42:58:65: 72:2a:a6:66:2e:fc:5a:83:0d:85:a4:cd:93:6f:cd: 82:4b:1f:c1:ee:13:7a:97:8f:c5:9e:22:85:8c:0b: 45:38:7c:23:e1:33:76:c3:b5:e1:f7:07:4f:bc:15: 68:25:69:1b:fd:ce:90:72:19:ab:26:90:e7:ab:81: 9c:3b:57:8a:d9:4a:4c:77:5e:d2:58:f3:1c:2c:12: 8e:a2:04:cc:05:d8:33:4a:5b:bc:e6:17:8c:27:5e: 77:2a:fa:70:47:7e:df:60:6f:cc:eb:3e:df:ee:fa: d5:0e:ea:91:7f:c1:d4:8a:d7:10:81:02:bf:d4:a9: d3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A4:0F:C7:7C:B7:63:A7:44:F1:F3:13:59:0F:9F:97:8C:AA:2C:30 X509v3 Authority Key Identifier: keyid:A4:F4:C1:65:55:D6:F0:3B:6D:6C:8D:0A:8C:CB:E1:AF:1E:AE:C4:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPTBZVXW8DttbI0KjMvhrx6uxDo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:dd:a1:4a:e4:8c:5c:85:23:bf:0c:97:91:3a:d9:b7:21:1a: 69:1f:76:61:18:e6:e1:78:5f:2b:78:05:31:62:08:0a:09:dc: 2f:db:5d:e8:49:77:53:e5:05:b3:44:4e:5d:91:12:c0:62:ec: 10:a8:0d:65:cc:94:55:18:c5:41:9e:9b:f1:b8:c6:72:03:2d: 04:73:b3:15:2d:7d:17:44:07:93:22:e3:b2:bd:9b:7f:b7:9c: 2d:9f:40:68:40:26:89:85:3b:6d:be:35:3f:0e:f8:ca:c1:4a: 43:eb:3b:ff:10:a3:85:17:c2:8f:dd:d4:ab:22:b2:af:e7:14: 5e:90:3f:e2:f2:4a:d2:4e:e8:32:48:67:be:d0:9f:c6:ac:19: 58:0a:c5:f2:8f:2e:5a:a3:9e:3a:34:fa:09:83:23:dc:37:e4: b2:30:6c:4a:63:cb:b5:a8:4a:d9:eb:7d:a0:98:86:aa:6d:07: 08:07:a4:b1:eb:ec:bf:21:f3:a6:c0:48:88:d3:5a:2b:8d:25: 36:c0:8f:99:36:8d:ea:5a:e2:3d:f3:f1:90:a8:3e:fc:ad:5d: 97:28:c1:93:e8:cc:71:86:9d:e6:a5:b0:1e:e8:e4:bd:0b:70: ff:70:47:b1:68:b9:fd:16:9b:9b:20:62:fe:6b:69:4b:00:43: 6c:bf:8f:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsePSsaInVAG+xUSJsPvi6OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZjRjMTY1NTVkNmYwM2I2ZDZjOGQwYThjY2JlMWFmMWVh ZWM0M2EwHhcNMjUxMjE0MTkwMTIzWhcNMjUxMjE1MTkwMTIzWjAzMTEwLwYDVQQD EyhjZWE0MGZjNzdjYjc2M2E3NDRmMWYzMTM1OTBmOWY5NzhjYWEyYzMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8viePu1kz0rF3r6Hy9nztrnUmQa jdBOXxIIL/nPYU8Ip+CLTgx78SKjmcnXu1zl8dV0Ub2V/msqOLUUjojeHuRkhHE5 QHRFyUS4OEX1Wn2KaNawNFNoa2iXZrIKWkM9eaEXmYi+tQd0tHCON09DmEryjtk0 jzO7EheFHG2pXDm0JshCWGVyKqZmLvxagw2FpM2Tb82CSx/B7hN6l4/FniKFjAtF OHwj4TN2w7Xh9wdPvBVoJWkb/c6QchmrJpDnq4GcO1eK2UpMd17SWPMcLBKOogTM BdgzSlu85heMJ153KvpwR37fYG/M6z7f7vrVDuqRf8HUitcQgQK/1KnT0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6kD8d8t2OnRPHzE1kPn5eMqiwwMB8GA1UdIwQY MBaAFKT0wWVV1vA7bWyNCozL4a8ersQ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFBUQlpWWFc4RHR0YkkwS2pNdmhyeDZ1eERvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9kOTQyOTQtNzk5OS00MDA5LTlkZDYt MjU2N2Y0YTliMTM5LzEvcFBUQlpWWFc4RHR0YkkwS2pNdmhyeDZ1eERvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9kOTQyOTQtNzk5OS00MDA5LTlkZDYtMjU2N2Y0YTliMTM5 LzEvcFBUQlpWWFc4RHR0YkkwS2pNdmhyeDZ1eERvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFt2hSuSM XIUjvwyXkTrZtyEaaR92YRjm4XhfK3gFMWIICgncL9td6El3U+UFs0ROXZESwGLs EKgNZcyUVRjFQZ6b8bjGcgMtBHOzFS19F0QHkyLjsr2bf7ecLZ9AaEAmiYU7bb41 Pw74ysFKQ+s7/xCjhRfCj93UqyKyr+cUXpA/4vJK0k7oMkhnvtCfxqwZWArF8o8u WqOeOjT6CYMj3DfksjBsSmPLtahK2et9oJiGqm0HCAeksevsvyHzpsBIiNNaK40l NsCPmTaN6lriPfPxkKg+/K1dlyjBk+jMcYad5qWwHujkvQtw/3BHsWi5/RabmyBi /mtpSwBDbL+PiQ== -----END CERTIFICATE-----Generated at Mon Dec 15 04:15:11 2025 by rpki-client