This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.mft File: rcpuVKzQJs76NitCJ7iQgcClAEk.mft (raw, json) Hash identifier: 6HtpH6xTIA0q2heUgURIl6BOAJvb3NEuIfqD5pWqtHE= Subject key identifier: 0F:5B:92:34:29:71:A0:E2:3D:F4:0C:08:9F:2D:FE:BD:8E:BB:95:4E Authority key identifier: AD:CA:6E:54:AC:D0:26:CE:FA:36:2B:42:27:B8:90:81:C0:A5:00:49 Certificate issuer: /CN=adca6e54acd026cefa362b4227b89081c0a50049 Certificate serial: 019B30E857CEAA996003285C3CFE11AC9EDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rcpuVKzQJs76NitCJ7iQgcClAEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.mft Manifest number: 04E1 Signing time: Thu 18 Dec 2025 10:01:31 +0000 Manifest this update: Thu 18 Dec 2025 10:01:31 +0000 Manifest next update: Fri 19 Dec 2025 10:01:31 +0000 Files and hashes: 1: Il8CSveHvqeNn_p3vs8bpbLd6io.roa (hash: uiHORBlA13Y/5lqKteAG7JddRpbP5NcKY0DSl6kuJ/A=) 2: rcpuVKzQJs76NitCJ7iQgcClAEk.crl (hash: HbTMLeoCsv87jzladYidHW4akBSTErxea5vcl1v6foo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.mft rsync://rpki.ripe.net/repository/DEFAULT/rcpuVKzQJs76NitCJ7iQgcClAEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:57:ce:aa:99:60:03:28:5c:3c:fe:11:ac:9e:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adca6e54acd026cefa362b4227b89081c0a50049 Validity Not Before: Dec 18 10:01:31 2025 GMT Not After : Dec 19 10:01:31 2025 GMT Subject: CN=0f5b92342971a0e23df40c089f2dfebd8ebb954e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:18:87:55:58:e4:92:c1:0e:6b:b9:54:9f:10: 91:03:08:c1:22:e0:4f:76:91:22:98:0c:e6:f1:c5: 61:7d:ed:ac:04:a7:cf:4c:ef:8b:f6:89:f4:9a:ac: 87:3c:a9:b3:88:d7:de:c5:fe:fd:7b:45:da:6d:5e: 1e:f9:2a:98:64:9f:76:6f:5b:68:f2:da:e6:3a:bf: 15:de:36:fb:c3:74:4b:8e:22:c9:1f:a7:fd:98:42: 37:8d:2d:a8:1f:b2:ea:e1:40:cb:18:e5:a1:bf:f9: d2:e0:14:02:ad:bf:e0:38:74:60:c4:7d:b3:31:99: 76:21:f7:07:76:bf:67:ee:9d:c6:c2:09:89:34:e0: b3:f0:76:66:a5:57:88:20:68:2c:75:07:c3:2f:12: 11:cf:97:82:a8:5f:c5:05:49:0b:af:7b:cf:be:43: 25:0b:38:06:99:90:19:d4:46:4e:1c:b6:75:7d:dc: 94:ed:d1:c2:98:11:0a:b1:5d:b3:1a:16:d6:51:be: a1:d3:b6:10:7b:3f:f1:c8:f6:c2:77:f8:d2:6b:4c: 65:5a:5c:0a:fa:cd:92:8d:da:77:7d:4a:fe:98:04: d7:f2:97:cc:aa:d9:62:8e:ac:60:fd:5b:10:10:38: b3:45:17:4c:8e:d3:ae:0e:6a:32:bd:8d:c0:ab:cb: 63:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:5B:92:34:29:71:A0:E2:3D:F4:0C:08:9F:2D:FE:BD:8E:BB:95:4E X509v3 Authority Key Identifier: keyid:AD:CA:6E:54:AC:D0:26:CE:FA:36:2B:42:27:B8:90:81:C0:A5:00:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcpuVKzQJs76NitCJ7iQgcClAEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:b3:d6:b6:bb:94:c6:00:e6:29:be:70:77:5e:fb:55:5f:c4: 80:58:b1:d8:67:62:b7:49:f3:90:70:ac:68:12:bd:51:1c:97: 21:fa:c2:94:de:43:57:2c:45:33:3d:1b:8a:72:34:be:df:84: 5f:0b:3c:5b:6a:9d:46:24:8d:fb:59:30:94:ef:ff:33:f7:37: 89:e8:46:44:78:2d:e8:0f:5f:9c:cd:00:4b:e0:a1:79:d8:d0: ba:b6:7c:31:28:1c:3f:a0:16:7e:f9:5c:0f:a1:85:f3:df:5f: d6:7d:24:44:19:92:8f:a9:f7:e4:98:8f:27:22:ed:ff:d8:53: 01:82:4c:c7:73:e3:69:13:5f:29:3b:01:cc:16:70:76:ee:a7: 86:ad:50:34:f7:ec:55:9f:e6:c7:24:31:9f:57:70:83:56:2b: b8:1a:82:56:28:9f:0e:ba:7d:21:29:f2:20:ee:40:f9:0c:6b: 59:72:60:e9:37:00:26:c7:42:56:01:f4:81:5b:72:39:f6:ce: 95:70:d8:d9:3d:74:10:9d:16:4b:6e:a1:46:15:4f:5d:49:eb: 0f:ef:d2:c9:be:17:e5:ea:b4:ba:16:5c:70:d5:13:d5:e4:95: d0:8d:3e:7d:e0:01:e7:09:fa:ad:fd:6c:a6:95:6e:13:f6:c7: 82:c1:14:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6FfOqplgAyhcPP4RrJ7aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkY2E2ZTU0YWNkMDI2Y2VmYTM2MmI0MjI3Yjg5MDgxYzBh NTAwNDkwHhcNMjUxMjE4MTAwMTMxWhcNMjUxMjE5MTAwMTMxWjAzMTEwLwYDVQQD EygwZjViOTIzNDI5NzFhMGUyM2RmNDBjMDg5ZjJkZmViZDhlYmI5NTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBiHVVjkksEOa7lUnxCRAwjBIuBP dpEimAzm8cVhfe2sBKfPTO+L9on0mqyHPKmziNfexf79e0XabV4e+SqYZJ92b1to 8trmOr8V3jb7w3RLjiLJH6f9mEI3jS2oH7Lq4UDLGOWhv/nS4BQCrb/gOHRgxH2z MZl2IfcHdr9n7p3GwgmJNOCz8HZmpVeIIGgsdQfDLxIRz5eCqF/FBUkLr3vPvkMl CzgGmZAZ1EZOHLZ1fdyU7dHCmBEKsV2zGhbWUb6h07YQez/xyPbCd/jSa0xlWlwK +s2Sjdp3fUr+mATX8pfMqtlijqxg/VsQEDizRRdMjtOuDmoyvY3Aq8tjIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA9bkjQpcaDiPfQMCJ8t/r2Ou5VOMB8GA1UdIwQY MBaAFK3KblSs0CbO+jYrQie4kIHApQBJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmNwdVZLelFKczc2Tml0Q0o3aVFnY0NsQUVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9iMTcyYjctNmFlNS00NmUxLWIwYzAt MDA2NWU0YTg5MGI0LzEvcmNwdVZLelFKczc2Tml0Q0o3aVFnY0NsQUVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9iMTcyYjctNmFlNS00NmUxLWIwYzAtMDA2NWU0YTg5MGI0 LzEvcmNwdVZLelFKczc2Tml0Q0o3aVFnY0NsQUVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmLPWtruU xgDmKb5wd177VV/EgFix2Gdit0nzkHCsaBK9URyXIfrClN5DVyxFMz0binI0vt+E Xws8W2qdRiSN+1kwlO//M/c3iehGRHgt6A9fnM0AS+ChedjQurZ8MSgcP6AWfvlc D6GF899f1n0kRBmSj6n35JiPJyLt/9hTAYJMx3PjaRNfKTsBzBZwdu6nhq1QNPfs VZ/mxyQxn1dwg1YruBqCViifDrp9ISnyIO5A+QxrWXJg6TcAJsdCVgH0gVtyOfbO lXDY2T10EJ0WS26hRhVPXUnrD+/Syb4X5eq0uhZccNUT1eSV0I0+feAB5wn6rf1s ppVuE/bHgsEUWw== -----END CERTIFICATE-----Generated at Thu Dec 18 11:54:32 2025 by rpki-client