This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft File: ppR2gdoNt_55MV7G29oov41mD8A.mft (raw, json) Hash identifier: hrgxtbnRf+DKujHWZmf9k70Gt8H3rvmrQNKHtp/DMKA= Subject key identifier: 00:C5:C4:61:34:21:FA:E3:66:66:CE:D4:06:25:7A:FE:71:A1:65:3B Authority key identifier: A6:94:76:81:DA:0D:B7:FE:79:31:5E:C6:DB:DA:28:BF:8D:66:0F:C0 Certificate issuer: /CN=a6947681da0db7fe79315ec6dbda28bf8d660fc0 Certificate serial: 019B378ED1549084C8B3C49FEB25558DE2E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft Manifest number: 1787 Signing time: Fri 19 Dec 2025 17:01:05 +0000 Manifest this update: Fri 19 Dec 2025 17:01:05 +0000 Manifest next update: Sat 20 Dec 2025 17:01:05 +0000 Files and hashes: 1: W6o9lvJcnnR6KT19lEo85DcjBW4.roa (hash: 4q2mkPLtF8C2yzu3YKcCMenK0cywITJjv++cimOpwfA=) 2: ppR2gdoNt_55MV7G29oov41mD8A.crl (hash: pB5opIbxGKKOA7nC9RKd5kXtwJTMDiccI1B4BHFGGwU=) 3: uGLt9hGh4szGgjBLbl_ULXYRxjI.roa (hash: WEHghF5NVFRIrBkSAbOMCvIKt32/zSBJMSFPbhfZlrM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8e:d1:54:90:84:c8:b3:c4:9f:eb:25:55:8d:e2:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6947681da0db7fe79315ec6dbda28bf8d660fc0 Validity Not Before: Dec 19 17:01:05 2025 GMT Not After : Dec 20 17:01:05 2025 GMT Subject: CN=00c5c4613421fae36666ced406257afe71a1653b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d5:c9:76:70:f5:f0:dc:c5:07:48:db:a6:09: 3e:2a:26:bb:21:b8:1c:38:8b:f4:4c:85:7f:de:ea: fb:2b:c6:94:08:1c:73:bf:1b:3e:28:ca:8f:54:c8: ce:28:1a:78:f3:21:39:51:dd:fe:32:97:01:ce:f4: 59:dd:4c:b9:6b:bc:d0:94:77:be:f4:1f:99:63:e0: 88:f7:b0:58:58:af:dd:b3:d3:ec:8e:e4:87:8d:cf: 2f:21:e0:12:e9:d4:81:83:7a:1f:87:3b:8b:f4:09: 6c:22:0b:29:48:a4:62:b7:24:a1:f5:bd:03:ac:3f: 53:d7:39:0d:b6:15:82:99:77:c1:e9:62:94:13:47: 3a:9e:53:37:0d:b7:e7:62:d2:0e:d6:f0:1a:3f:e4: da:ee:6c:77:ec:f7:07:53:41:0b:2a:7b:cf:16:7e: b3:60:09:b3:a4:47:0c:cf:40:c7:db:ac:5e:ec:84: 70:27:fd:f3:c6:dd:ca:f9:91:fa:57:fc:df:56:28: 29:12:de:1e:78:0d:d4:35:b6:cc:e1:50:bb:39:a1: 83:a6:62:53:7a:f1:6a:ca:44:12:8e:01:0a:35:7e: ab:d1:c1:95:22:d2:d6:a3:0f:38:55:16:5f:58:0f: 99:c4:46:9c:a9:5f:91:02:b0:28:9c:82:9e:72:77: 27:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C5:C4:61:34:21:FA:E3:66:66:CE:D4:06:25:7A:FE:71:A1:65:3B X509v3 Authority Key Identifier: keyid:A6:94:76:81:DA:0D:B7:FE:79:31:5E:C6:DB:DA:28:BF:8D:66:0F:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:8d:fc:9e:e7:49:ab:4f:b7:f5:f7:f9:69:3e:77:72:ac:13: 9a:45:50:21:55:f1:8e:b2:48:3a:69:1d:27:60:6e:0a:5b:35: 85:8e:49:eb:45:91:ff:f1:8c:0d:ef:61:6e:80:a8:bd:33:6a: 49:9b:a0:fd:9d:ab:48:21:25:1a:ef:cd:81:88:62:38:a2:ea: 74:6c:a8:d2:52:aa:75:0c:6a:3a:8f:d0:9a:61:8b:ac:ed:09: 1b:0a:74:67:c3:fa:0c:14:74:11:4b:95:b0:a6:c1:be:2d:76: 1c:0e:b4:50:33:e6:ea:cb:f0:81:db:3d:45:4d:a7:68:1d:61: 98:47:1e:9b:c0:ad:95:81:9e:02:0b:fc:86:fa:14:81:6a:6a: 91:44:b2:14:19:eb:85:43:6e:b7:38:29:4c:bc:5f:f3:86:df: 93:17:99:bc:7d:08:b4:7c:c7:12:01:25:0a:2a:79:df:44:1e: c0:97:42:50:e4:00:0b:cb:3f:64:d4:4f:75:51:42:09:51:69: f9:72:60:35:24:e0:f1:e9:7a:ca:0e:14:03:c5:6c:16:d2:b9: 7c:41:6e:88:e2:68:05:65:0b:2b:33:a8:12:69:20:67:f1:4d: 5d:4e:4b:ad:a9:8c:b4:40:26:e2:57:21:2e:2f:5f:81:0f:9d: 09:00:b3:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jtFUkITIs8Sf6yVVjeLlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2OTQ3NjgxZGEwZGI3ZmU3OTMxNWVjNmRiZGEyOGJmOGQ2 NjBmYzAwHhcNMjUxMjE5MTcwMTA1WhcNMjUxMjIwMTcwMTA1WjAzMTEwLwYDVQQD EygwMGM1YzQ2MTM0MjFmYWUzNjY2NmNlZDQwNjI1N2FmZTcxYTE2NTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNXJdnD18NzFB0jbpgk+Kia7Ibgc OIv0TIV/3ur7K8aUCBxzvxs+KMqPVMjOKBp48yE5Ud3+MpcBzvRZ3Uy5a7zQlHe+ 9B+ZY+CI97BYWK/ds9PsjuSHjc8vIeAS6dSBg3ofhzuL9AlsIgspSKRitySh9b0D rD9T1zkNthWCmXfB6WKUE0c6nlM3DbfnYtIO1vAaP+Ta7mx37PcHU0ELKnvPFn6z YAmzpEcMz0DH26xe7IRwJ/3zxt3K+ZH6V/zfVigpEt4eeA3UNbbM4VC7OaGDpmJT evFqykQSjgEKNX6r0cGVItLWow84VRZfWA+ZxEacqV+RArAonIKecncnmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFADFxGE0IfrjZmbO1AYlev5xoWU7MB8GA1UdIwQY MBaAFKaUdoHaDbf+eTFextvaKL+NZg/AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHBSMmdkb050XzU1TVY3RzI5b292NDFtRDhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9mNjQ5YTItNTE4ZC00NDU2LTk4YTct MjNjM2RmODJjMjMwLzEvcHBSMmdkb050XzU1TVY3RzI5b292NDFtRDhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9mNjQ5YTItNTE4ZC00NDU2LTk4YTctMjNjM2RmODJjMjMw LzEvcHBSMmdkb050XzU1TVY3RzI5b292NDFtRDhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsY38nudJ q0+39ff5aT53cqwTmkVQIVXxjrJIOmkdJ2BuCls1hY5J60WR//GMDe9hboCovTNq SZug/Z2rSCElGu/NgYhiOKLqdGyo0lKqdQxqOo/QmmGLrO0JGwp0Z8P6DBR0EUuV sKbBvi12HA60UDPm6svwgds9RU2naB1hmEcem8CtlYGeAgv8hvoUgWpqkUSyFBnr hUNutzgpTLxf84bfkxeZvH0ItHzHEgElCip530QewJdCUOQAC8s/ZNRPdVFCCVFp +XJgNSTg8el6yg4UA8VsFtK5fEFuiOJoBWULKzOoEmkgZ/FNXU5LramMtEAm4lch Li9fgQ+dCQCzCw== -----END CERTIFICATE-----Generated at Fri Dec 19 22:57:47 2025 by rpki-client