This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft File: ppR2gdoNt_55MV7G29oov41mD8A.mft (raw, json) Hash identifier: dkfYKWpEXRSiZ7GD8jNzvTWwZaho49P0hwVqEKvcAPg= Subject key identifier: F3:1D:37:28:87:C3:41:86:BD:E0:EA:9D:B8:D2:6E:0F:91:2C:75:DF Authority key identifier: A6:94:76:81:DA:0D:B7:FE:79:31:5E:C6:DB:DA:28:BF:8D:66:0F:C0 Certificate issuer: /CN=a6947681da0db7fe79315ec6dbda28bf8d660fc0 Certificate serial: 019B432519AE2998D92AE3251561631E92FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 23:01:03 +0000 Manifest this update: Sun 21 Dec 2025 23:01:03 +0000 Manifest next update: Mon 22 Dec 2025 23:01:03 +0000 Files and hashes: 1: W6o9lvJcnnR6KT19lEo85DcjBW4.roa (hash: 4q2mkPLtF8C2yzu3YKcCMenK0cywITJjv++cimOpwfA=) 2: ppR2gdoNt_55MV7G29oov41mD8A.crl (hash: Q4Ofkvjvfw6qENYKWJdy/M9MPmcjKwCNO2SeP+Nqy6M=) 3: uGLt9hGh4szGgjBLbl_ULXYRxjI.roa (hash: WEHghF5NVFRIrBkSAbOMCvIKt32/zSBJMSFPbhfZlrM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:25:19:ae:29:98:d9:2a:e3:25:15:61:63:1e:92:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6947681da0db7fe79315ec6dbda28bf8d660fc0 Validity Not Before: Dec 21 23:01:03 2025 GMT Not After : Dec 22 23:01:03 2025 GMT Subject: CN=f31d372887c34186bde0ea9db8d26e0f912c75df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:21:9c:8d:1f:49:dc:fb:5f:9e:f1:24:6c:7c: 51:5b:b4:18:29:1f:50:b7:3c:be:9b:13:e1:b4:60: 1d:e0:ad:6c:cf:40:c3:38:67:55:d9:ce:39:b5:70: c7:f3:96:73:7e:1f:92:80:be:25:00:8f:a1:5f:2f: 92:81:5a:d7:54:8d:1f:88:38:fc:e2:a0:fa:01:5e: 63:f2:36:e1:9f:72:0f:39:b6:28:38:53:63:85:9e: 49:a1:a6:28:6e:a5:b9:23:a7:ce:ab:25:bf:bf:15: 77:84:ec:e8:72:97:95:66:33:2d:8e:c1:ac:c0:01: e7:6c:c7:ae:e4:99:d9:4d:b1:0a:07:00:18:3a:0c: b9:00:35:3b:b9:79:41:43:f9:5e:3e:85:1f:ca:c2: 45:97:10:bb:cf:de:99:7c:8c:42:3d:1c:67:f5:8d: 4f:fa:af:43:ce:5a:28:38:87:6e:1b:05:4d:67:97: 5d:11:c1:e7:5a:ce:06:a2:9c:72:8b:4c:95:02:27: d3:9a:8d:bf:71:43:07:99:d0:fd:eb:0d:36:1d:e4: 6a:91:72:b3:bb:e9:79:fc:dc:57:c9:2d:39:7f:22: c0:89:58:3b:cb:7c:05:44:c0:d2:30:19:ad:f7:39: 69:90:b0:f4:df:d3:53:cf:15:df:2a:de:89:b0:b8: 3f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:1D:37:28:87:C3:41:86:BD:E0:EA:9D:B8:D2:6E:0F:91:2C:75:DF X509v3 Authority Key Identifier: keyid:A6:94:76:81:DA:0D:B7:FE:79:31:5E:C6:DB:DA:28:BF:8D:66:0F:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:fc:96:12:3c:07:cc:d4:93:02:43:34:06:83:c0:bb:fd:52: e8:1f:4e:27:0e:67:56:e4:4d:ca:f9:0d:13:45:a1:2f:d2:3d: ec:30:1a:96:88:97:58:a4:80:69:3b:b0:c1:67:de:bd:9f:a9: 10:67:a1:9a:fa:ec:61:e6:89:24:c0:e8:90:b2:41:ed:bc:55: f2:04:6f:76:40:40:63:02:a4:aa:05:9d:0e:6b:70:53:f0:d4: 27:02:af:2a:26:75:f4:3d:3b:dd:4b:ab:c0:4e:23:db:85:d5: 13:4d:21:7a:b1:35:4e:29:95:be:8e:09:a2:14:34:cd:8e:5b: 3b:66:6d:e2:dc:11:6c:72:e4:5c:93:03:da:dc:e4:b1:f5:c0: 07:a5:10:1e:db:be:45:3d:62:56:66:f3:87:3f:94:d4:91:d6: ae:ad:53:91:2b:f5:bf:2f:ae:e6:19:9d:24:f4:9e:32:ee:14: 3f:43:4e:7e:51:99:c7:8a:84:20:25:15:b5:9b:db:2c:6c:ba: 2c:66:aa:04:7d:25:a0:71:b1:cf:a1:cf:8a:98:e5:88:31:41: 33:3c:d7:2b:f7:92:49:df:4b:6a:13:9c:fa:fb:a1:d8:e1:aa: 0a:ff:8c:73:ac:45:87:e8:98:07:83:85:b0:7c:c7:4c:d1:1f: bf:d5:73:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJRmuKZjZKuMlFWFjHpL7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2OTQ3NjgxZGEwZGI3ZmU3OTMxNWVjNmRiZGEyOGJmOGQ2 NjBmYzAwHhcNMjUxMjIxMjMwMTAzWhcNMjUxMjIyMjMwMTAzWjAzMTEwLwYDVQQD EyhmMzFkMzcyODg3YzM0MTg2YmRlMGVhOWRiOGQyNmUwZjkxMmM3NWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyGcjR9J3PtfnvEkbHxRW7QYKR9Q tzy+mxPhtGAd4K1sz0DDOGdV2c45tXDH85Zzfh+SgL4lAI+hXy+SgVrXVI0fiDj8 4qD6AV5j8jbhn3IPObYoOFNjhZ5JoaYobqW5I6fOqyW/vxV3hOzocpeVZjMtjsGs wAHnbMeu5JnZTbEKBwAYOgy5ADU7uXlBQ/lePoUfysJFlxC7z96ZfIxCPRxn9Y1P +q9DzlooOIduGwVNZ5ddEcHnWs4Gopxyi0yVAifTmo2/cUMHmdD96w02HeRqkXKz u+l5/NxXyS05fyLAiVg7y3wFRMDSMBmt9zlpkLD039NTzxXfKt6JsLg/jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPMdNyiHw0GGveDqnbjSbg+RLHXfMB8GA1UdIwQY MBaAFKaUdoHaDbf+eTFextvaKL+NZg/AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHBSMmdkb050XzU1TVY3RzI5b292NDFtRDhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9mNjQ5YTItNTE4ZC00NDU2LTk4YTct MjNjM2RmODJjMjMwLzEvcHBSMmdkb050XzU1TVY3RzI5b292NDFtRDhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9mNjQ5YTItNTE4ZC00NDU2LTk4YTctMjNjM2RmODJjMjMw LzEvcHBSMmdkb050XzU1TVY3RzI5b292NDFtRDhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh/yWEjwH zNSTAkM0BoPAu/1S6B9OJw5nVuRNyvkNE0WhL9I97DAaloiXWKSAaTuwwWfevZ+p EGehmvrsYeaJJMDokLJB7bxV8gRvdkBAYwKkqgWdDmtwU/DUJwKvKiZ19D073Uur wE4j24XVE00herE1TimVvo4JohQ0zY5bO2Zt4twRbHLkXJMD2tzksfXAB6UQHtu+ RT1iVmbzhz+U1JHWrq1TkSv1vy+u5hmdJPSeMu4UP0NOflGZx4qEICUVtZvbLGy6 LGaqBH0loHGxz6HPipjliDFBMzzXK/eSSd9LahOc+vuh2OGqCv+Mc6xFh+iYB4OF sHzHTNEfv9Vzgw== -----END CERTIFICATE-----Generated at Mon Dec 22 02:16:53 2025 by rpki-client