This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft File: PP8fKxF18GBdAl5RAXNpwcqLGkY.mft (raw, json) Hash identifier: zXqFBZEABA2VHHtNEXARt9aFPZck6yDAJIXD6ztPwcA= Subject key identifier: 5C:05:D8:47:CE:97:42:FD:2F:C4:AA:D0:FC:D4:A0:BE:19:6E:EC:67 Authority key identifier: 3C:FF:1F:2B:11:75:F0:60:5D:02:5E:51:01:73:69:C1:CA:8B:1A:46 Certificate issuer: /CN=3cff1f2b1175f0605d025e51017369c1ca8b1a46 Certificate serial: 019B5ABF3DA3B873B64D2392D19E885247BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 13:00:41 +0000 Manifest this update: Fri 26 Dec 2025 13:00:41 +0000 Manifest next update: Sat 27 Dec 2025 13:00:41 +0000 Files and hashes: 1: PP8fKxF18GBdAl5RAXNpwcqLGkY.crl (hash: y7Jgga50FN5GnE7dWLBcTHG8aCJOQRVFZxUwjxQ39NE=) 2: rEJUWBjq_sWfsa1cNiXjG-c5ovw.roa (hash: ZZH1S0+UsBnMa9sS+gXeBGEXEb7GWoo4AFZx2+gdykk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:3d:a3:b8:73:b6:4d:23:92:d1:9e:88:52:47:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cff1f2b1175f0605d025e51017369c1ca8b1a46 Validity Not Before: Dec 26 13:00:41 2025 GMT Not After : Dec 27 13:00:41 2025 GMT Subject: CN=5c05d847ce9742fd2fc4aad0fcd4a0be196eec67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2f:d3:5d:bb:84:ab:35:b9:51:71:fb:a7:3c: a1:28:6d:3a:81:c1:57:ba:63:12:ab:21:6a:24:51: ca:b7:30:bb:bd:d2:2d:47:0d:94:5e:84:1f:49:90: f8:b7:1c:2d:a3:60:54:23:dd:e0:23:04:dd:7d:97: e3:d9:45:a3:ab:d3:2b:34:86:8b:50:13:d3:3f:13: 39:80:ca:e4:9d:e8:8e:51:c9:7b:8d:d7:f0:b8:37: cd:85:7d:a8:7e:ce:84:8a:d2:b7:88:ed:ac:54:a7: e2:16:51:f9:b0:95:d3:36:8f:64:e6:59:84:1f:a6: 87:63:03:a7:63:a8:6b:2a:c2:b2:2f:f7:2b:00:df: 5a:4c:48:1b:66:b2:b6:a9:2b:1a:11:16:10:d6:6f: 77:1b:d2:13:a1:f3:8d:bd:fc:a2:4c:4d:c1:20:aa: 0f:bb:46:76:1c:9d:1d:88:03:a2:5c:56:0d:f3:b8: a6:d5:a5:42:67:00:38:bb:ec:df:34:55:4a:69:3c: 27:4d:b9:bc:51:56:f5:d1:b3:bf:f5:b8:97:a7:43: 06:7b:cd:b7:7a:a4:08:a2:b9:a5:3d:21:cd:f4:65: de:e6:3f:12:ae:b7:f0:64:d1:67:ed:37:0b:b6:08: f7:f5:93:f7:f2:0b:20:c5:72:cf:5a:74:c0:a2:d7: f9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:05:D8:47:CE:97:42:FD:2F:C4:AA:D0:FC:D4:A0:BE:19:6E:EC:67 X509v3 Authority Key Identifier: keyid:3C:FF:1F:2B:11:75:F0:60:5D:02:5E:51:01:73:69:C1:CA:8B:1A:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:37:6b:a5:7e:30:86:ba:71:d4:89:8a:54:5b:a9:fe:64:a8: d5:4c:e5:ae:49:9a:28:bb:8c:8b:b9:e9:69:64:b1:b2:57:c1: e0:0b:86:6b:3b:cb:2f:bc:f5:87:7d:e4:f1:04:ed:08:83:ae: 18:ee:3f:78:e9:f6:f3:2d:08:35:7e:e8:7b:ca:76:b6:37:cb: 2e:16:64:8f:a3:ee:9d:7f:f3:71:3d:68:b2:df:73:15:e5:b3: c1:ca:b7:ac:85:45:e3:f7:95:58:d6:e9:42:fe:e5:b1:48:1c: 94:f5:fa:3c:fe:2f:00:f7:66:5c:03:ef:46:bc:a1:d2:a7:2c: bb:21:1b:3d:82:66:c8:b5:fe:50:75:c6:5a:52:e6:59:43:01: b2:fc:4f:00:67:3b:c9:8f:54:44:f9:b0:07:49:2d:66:a1:0b: 52:be:fa:dc:d2:14:a0:02:33:62:66:e0:7a:e0:34:50:15:79: fd:d7:23:c2:19:c9:b3:ca:cf:e2:b7:d9:b1:6e:e1:e3:00:4a: c4:42:02:4b:8a:29:6c:05:fd:c5:32:25:cd:d9:38:92:f2:30: ff:ae:a0:13:65:a5:30:49:ee:95:1e:45:53:cf:48:e0:be:a8: 8f:44:d2:05:4b:5b:4f:28:03:61:83:5b:d7:a3:44:c3:44:71: 72:bb:3a:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtavz2juHO2TSOS0Z6IUke7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjZmYxZjJiMTE3NWYwNjA1ZDAyNWU1MTAxNzM2OWMxY2E4 YjFhNDYwHhcNMjUxMjI2MTMwMDQxWhcNMjUxMjI3MTMwMDQxWjAzMTEwLwYDVQQD Eyg1YzA1ZDg0N2NlOTc0MmZkMmZjNGFhZDBmY2Q0YTBiZTE5NmVlYzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1i/TXbuEqzW5UXH7pzyhKG06gcFX umMSqyFqJFHKtzC7vdItRw2UXoQfSZD4txwto2BUI93gIwTdfZfj2UWjq9MrNIaL UBPTPxM5gMrkneiOUcl7jdfwuDfNhX2ofs6EitK3iO2sVKfiFlH5sJXTNo9k5lmE H6aHYwOnY6hrKsKyL/crAN9aTEgbZrK2qSsaERYQ1m93G9ITofONvfyiTE3BIKoP u0Z2HJ0diAOiXFYN87im1aVCZwA4u+zfNFVKaTwnTbm8UVb10bO/9biXp0MGe823 eqQIormlPSHN9GXe5j8SrrfwZNFn7TcLtgj39ZP38gsgxXLPWnTAotf55wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFwF2EfOl0L9L8Sq0PzUoL4ZbuxnMB8GA1UdIwQY MBaAFDz/HysRdfBgXQJeUQFzacHKixpGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFA4Zkt4RjE4R0JkQWw1UkFYTnB3Y3FMR2tZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hYzc5NDktYTFjYS00N2Y0LWIzOTMt MmJmMzRjNTI2MmU3LzEvUFA4Zkt4RjE4R0JkQWw1UkFYTnB3Y3FMR2tZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9hYzc5NDktYTFjYS00N2Y0LWIzOTMtMmJmMzRjNTI2MmU3 LzEvUFA4Zkt4RjE4R0JkQWw1UkFYTnB3Y3FMR2tZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArjdrpX4w hrpx1ImKVFup/mSo1UzlrkmaKLuMi7npaWSxslfB4AuGazvLL7z1h33k8QTtCIOu GO4/eOn28y0INX7oe8p2tjfLLhZkj6PunX/zcT1ost9zFeWzwcq3rIVF4/eVWNbp Qv7lsUgclPX6PP4vAPdmXAPvRryh0qcsuyEbPYJmyLX+UHXGWlLmWUMBsvxPAGc7 yY9URPmwB0ktZqELUr763NIUoAIzYmbgeuA0UBV5/dcjwhnJs8rP4rfZsW7h4wBK xEICS4opbAX9xTIlzdk4kvIw/66gE2WlMEnulR5FU89I4L6oj0TSBUtbTygDYYNb 16NEw0Rxcrs6mA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:57:04 2025 by rpki-client