This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft File: pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft (raw, json) Hash identifier: eKWuafukk0amPkP3MIMgQRIIhIKMG8ZZPgQIGM4zWX8= Subject key identifier: D0:0D:F3:8A:A5:22:A7:E1:EA:55:F6:AB:BA:C5:FA:CF:BB:0C:94:18 Authority key identifier: A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC Certificate issuer: /CN=a5472b1473bc781b70440315c83d119c8abc86fc Certificate serial: 019B3CB52759EE9B4A3055B1382933307018 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft Manifest number: 14E3 Signing time: Sat 20 Dec 2025 17:01:03 +0000 Manifest this update: Sat 20 Dec 2025 17:01:03 +0000 Manifest next update: Sun 21 Dec 2025 17:01:03 +0000 Files and hashes: 1: 2fiCKenUyZEGcgyEcbC3Fxz5B0o.roa (hash: C3sRzOd2/ABXN5AYlIy2eOFDIIGwTRNmpvXK9lls8wk=) 2: FKocTxCwOpTwhx81CYxQkqkOggY.roa (hash: 4ohmnB8YwygbCXyKutj9jSnUxcPLc8vBK0YjqJ6KB28=) 3: pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl (hash: xcZzR89Jj6mWy34C5EYKXbGiWtnxdrHQbnJWlUIBwFA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:27:59:ee:9b:4a:30:55:b1:38:29:33:30:70:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5472b1473bc781b70440315c83d119c8abc86fc Validity Not Before: Dec 20 17:01:03 2025 GMT Not After : Dec 21 17:01:03 2025 GMT Subject: CN=d00df38aa522a7e1ea55f6abbac5facfbb0c9418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:71:59:e1:ca:34:f7:a1:59:f4:95:6b:3b:f0: 53:a7:4f:d9:32:f1:97:ba:3a:1b:40:e4:df:98:3f: 31:d3:02:6a:4b:ca:8a:44:6d:6f:3c:70:9b:73:a5: a9:c3:af:46:b8:ba:ef:58:12:56:71:5e:db:75:d3: b7:37:07:27:30:80:9f:9e:9c:97:c1:26:be:78:f4: e0:ef:a6:de:9b:da:af:44:72:be:db:8b:03:f1:a0: 41:7d:15:c7:4d:81:87:04:bc:76:ab:c6:cb:e6:40: 39:57:db:43:b8:55:72:9b:db:88:a9:c1:55:33:c9: 0d:5e:f1:0b:18:84:e8:31:32:0e:95:78:45:2f:2a: c9:9a:6d:df:3d:e1:72:7e:5e:f7:ef:d1:cd:73:84: 24:a7:51:ac:ec:9d:70:e6:27:1e:7c:e8:e2:2a:a0: 78:dc:5e:95:65:4d:9d:af:68:8d:d3:18:52:24:ee: ed:93:6c:42:52:6d:06:03:5b:fe:b2:3f:c4:69:a8: a3:75:5f:40:98:82:a8:3b:22:b6:f7:0b:45:88:6c: 85:71:4b:d3:d2:5e:9a:a0:4c:68:8d:9e:f4:45:f4: 3b:2b:2e:8f:78:2b:d7:47:b4:f0:47:f9:01:49:0f: f2:b1:a7:8d:d5:aa:83:84:ea:e2:18:aa:70:5a:f5: d2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:0D:F3:8A:A5:22:A7:E1:EA:55:F6:AB:BA:C5:FA:CF:BB:0C:94:18 X509v3 Authority Key Identifier: keyid:A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:52:2a:24:64:a1:ab:0a:35:2c:e5:49:9e:20:a5:d0:60:47: 33:e3:f1:4e:30:f1:19:78:72:7e:97:9f:1c:7f:a7:39:17:16: f7:9f:ac:99:29:ed:fc:39:8b:05:3e:a9:dc:9b:e2:3f:03:b4: bc:7b:e6:68:c6:9d:84:72:4f:d0:de:32:a7:95:13:8d:86:44: 70:fa:9a:83:7c:a0:e7:89:fd:25:78:09:d9:5d:eb:a5:a5:c2: 9d:bc:68:40:dd:82:30:2c:a3:de:17:f2:57:90:f4:99:fc:30: 81:7a:61:27:b5:c0:82:aa:02:97:f0:ed:e0:44:67:c0:f7:ad: 97:e0:5f:8b:db:36:9b:d7:b9:0f:6d:5d:97:b1:1e:95:36:f4: 9f:c8:05:1b:d2:82:23:9e:63:02:d6:91:84:48:80:b0:60:34: 53:1a:b3:00:db:91:11:26:c8:2f:02:af:41:dc:30:dc:07:7e: 5a:b6:e1:34:c7:2a:ca:3e:59:52:24:b1:ca:72:ba:3e:dc:ae: cb:9f:6a:a1:b9:10:8d:f7:d1:e9:92:6e:02:6e:0a:ce:ba:21: ba:0f:ce:fe:d9:82:e0:89:26:29:fe:6e:be:1a:80:a7:4d:a6: 26:4e:98:ed:b7:e6:64:12:0e:42:51:1d:27:e0:09:33:e5:05: 7d:12:35:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tSdZ7ptKMFWxOCkzMHAYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NDcyYjE0NzNiYzc4MWI3MDQ0MDMxNWM4M2QxMTljOGFi Yzg2ZmMwHhcNMjUxMjIwMTcwMTAzWhcNMjUxMjIxMTcwMTAzWjAzMTEwLwYDVQQD EyhkMDBkZjM4YWE1MjJhN2UxZWE1NWY2YWJiYWM1ZmFjZmJiMGM5NDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXFZ4co096FZ9JVrO/BTp0/ZMvGX ujobQOTfmD8x0wJqS8qKRG1vPHCbc6Wpw69GuLrvWBJWcV7bddO3NwcnMICfnpyX wSa+ePTg76bem9qvRHK+24sD8aBBfRXHTYGHBLx2q8bL5kA5V9tDuFVym9uIqcFV M8kNXvELGIToMTIOlXhFLyrJmm3fPeFyfl7379HNc4Qkp1Gs7J1w5icefOjiKqB4 3F6VZU2dr2iN0xhSJO7tk2xCUm0GA1v+sj/EaaijdV9AmIKoOyK29wtFiGyFcUvT 0l6aoExojZ70RfQ7Ky6PeCvXR7TwR/kBSQ/ysaeN1aqDhOriGKpwWvXSKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNAN84qlIqfh6lX2q7rF+s+7DJQYMB8GA1UdIwQY MBaAFKVHKxRzvHgbcEQDFcg9EZyKvIb8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFVjckZITzhlQnR3UkFNVnlEMFJuSXE4aHZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8zMDExMmYtMGU5ZC00ZmM4LWI4NTQt YjE1NjViMjU1ODU0LzEvcFVjckZITzhlQnR3UkFNVnlEMFJuSXE4aHZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8zMDExMmYtMGU5ZC00ZmM4LWI4NTQtYjE1NjViMjU1ODU0 LzEvcFVjckZITzhlQnR3UkFNVnlEMFJuSXE4aHZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACVIqJGSh qwo1LOVJniCl0GBHM+PxTjDxGXhyfpefHH+nORcW95+smSnt/DmLBT6p3JviPwO0 vHvmaMadhHJP0N4yp5UTjYZEcPqag3yg54n9JXgJ2V3rpaXCnbxoQN2CMCyj3hfy V5D0mfwwgXphJ7XAgqoCl/Dt4ERnwPetl+Bfi9s2m9e5D21dl7EelTb0n8gFG9KC I55jAtaRhEiAsGA0UxqzANuRESbILwKvQdww3Ad+WrbhNMcqyj5ZUiSxynK6Ptyu y59qobkQjffR6ZJuAm4Kzrohug/O/tmC4IkmKf5uvhqAp02mJk6Y7bfmZBIOQlEd J+AJM+UFfRI1TQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:46:44 2025 by rpki-client