This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/pUiu2QpeI7SnNpVgjztleL_exhU.mft File: pUiu2QpeI7SnNpVgjztleL_exhU.mft (raw, json) Hash identifier: xpVyr0e1cFgwClYY7k2kQURs7VVwUt/kwMHSveCf4Aw= Subject key identifier: 4F:16:76:4D:6B:5D:96:1C:2C:EF:6E:D5:1F:51:D3:E9:23:86:E6:7E Authority key identifier: A5:48:AE:D9:0A:5E:23:B4:A7:36:95:60:8F:3B:65:78:BF:DE:C6:15 Certificate issuer: /CN=a548aed90a5e23b4a73695608f3b6578bfdec615 Certificate serial: 019B3CEC0F28710639AE43CADF9FD35756CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUiu2QpeI7SnNpVgjztleL_exhU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/pUiu2QpeI7SnNpVgjztleL_exhU.mft Manifest number: 104F Signing time: Sat 20 Dec 2025 18:01:01 +0000 Manifest this update: Sat 20 Dec 2025 18:01:01 +0000 Manifest next update: Sun 21 Dec 2025 18:01:01 +0000 Files and hashes: 1: O4HPjKtfYNvc1lksPI1mIC2KoZE.roa (hash: G5jnz6Oa7fbgHp+PjYrqWRfRXq38tvNWQ9FfwitWKvo=) 2: pUiu2QpeI7SnNpVgjztleL_exhU.crl (hash: GPvLEniogVydiCIjHYVNYTKd5jv4zAZ1om1LemyudOs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/pUiu2QpeI7SnNpVgjztleL_exhU.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/pUiu2QpeI7SnNpVgjztleL_exhU.mft rsync://rpki.ripe.net/repository/DEFAULT/pUiu2QpeI7SnNpVgjztleL_exhU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:0f:28:71:06:39:ae:43:ca:df:9f:d3:57:56:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a548aed90a5e23b4a73695608f3b6578bfdec615 Validity Not Before: Dec 20 18:01:01 2025 GMT Not After : Dec 21 18:01:01 2025 GMT Subject: CN=4f16764d6b5d961c2cef6ed51f51d3e92386e67e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1a:61:04:2a:17:94:2b:c7:7c:0a:b0:76:81: d9:8d:2f:b4:b3:0f:a5:0d:f2:aa:19:4f:25:b0:d8: b5:59:11:20:35:c7:77:ab:19:0a:89:c3:69:9e:64: e4:cc:6b:2b:e6:49:f1:76:4c:32:f1:55:4c:cc:1e: 5e:01:09:a9:46:9a:49:0b:77:70:78:58:63:5d:46: e1:be:9e:82:ba:f2:47:56:39:6c:5d:c4:59:51:c9: a2:41:5f:64:fb:63:25:74:0d:c7:9e:8f:ae:73:ae: 11:2f:59:84:6f:0a:be:6e:38:a7:f4:1a:3b:08:bf: ff:a4:3f:d9:0a:84:4f:45:d9:e4:5c:20:ba:ac:51: ea:14:71:85:6b:ac:a8:a2:88:42:79:5e:2c:4e:54: 19:2c:70:3d:36:d3:21:93:f6:e1:8d:4b:e3:3c:09: c4:30:6f:63:af:ae:32:48:04:15:b6:05:69:9d:13: c6:84:f8:d4:53:72:91:e7:77:f8:42:08:08:2c:05: a5:63:5c:a6:58:ca:61:19:36:82:cc:af:6b:d5:4b: b1:a9:48:20:6c:1b:d6:e8:78:32:fd:aa:5b:ab:82: b9:35:93:1b:e6:e8:cd:f9:04:0f:54:51:1d:55:5a: 06:a8:c9:25:bd:e4:ec:63:82:59:dd:f9:ce:91:7b: 59:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:16:76:4D:6B:5D:96:1C:2C:EF:6E:D5:1F:51:D3:E9:23:86:E6:7E X509v3 Authority Key Identifier: keyid:A5:48:AE:D9:0A:5E:23:B4:A7:36:95:60:8F:3B:65:78:BF:DE:C6:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUiu2QpeI7SnNpVgjztleL_exhU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/pUiu2QpeI7SnNpVgjztleL_exhU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/pUiu2QpeI7SnNpVgjztleL_exhU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:98:26:b3:45:c5:60:79:5a:6b:22:92:79:3e:2d:7c:e2:23: da:6d:5c:ce:b7:0e:85:d3:36:c7:26:60:cf:d9:eb:54:23:a0: 30:c6:9b:e0:dc:d3:c0:68:b2:21:ec:41:a5:c8:68:90:43:1b: 17:1b:13:60:81:30:d3:a0:9a:85:c5:7a:12:08:c8:b0:e7:ec: 7a:27:af:b2:95:df:f5:a5:7b:a6:ec:5e:8e:19:56:49:c3:5a: 57:70:b1:5d:08:c8:21:27:08:ac:ed:5f:03:29:6b:4c:21:f0: 81:ad:1a:95:20:ae:8c:a1:a7:02:ce:c9:b8:24:79:93:65:09: 10:39:9a:c1:86:22:0e:c1:cc:81:41:78:b9:68:1f:91:a4:67: a6:7f:bf:65:e6:64:76:76:b3:2f:d5:f4:e4:1d:02:38:40:8d: 19:7b:cd:25:6c:ee:da:2c:67:10:98:30:54:ff:08:1d:0d:55: 2b:87:89:52:fb:3d:76:13:cb:95:30:58:96:ff:53:dc:72:42: 63:e3:06:0e:59:ca:42:e1:4f:7c:62:c9:dc:a3:47:fd:2c:4f: d7:a2:f5:6c:60:fd:c0:2b:86:94:01:bc:99:cc:df:88:84:38: 32:d1:02:45:ce:ac:ec:c3:8e:63:60:59:d0:2a:ed:20:fe:fe: c0:86:11:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87A8ocQY5rkPK35/TV1bKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NDhhZWQ5MGE1ZTIzYjRhNzM2OTU2MDhmM2I2NTc4YmZk ZWM2MTUwHhcNMjUxMjIwMTgwMTAxWhcNMjUxMjIxMTgwMTAxWjAzMTEwLwYDVQQD Eyg0ZjE2NzY0ZDZiNWQ5NjFjMmNlZjZlZDUxZjUxZDNlOTIzODZlNjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshphBCoXlCvHfAqwdoHZjS+0sw+l DfKqGU8lsNi1WREgNcd3qxkKicNpnmTkzGsr5knxdkwy8VVMzB5eAQmpRppJC3dw eFhjXUbhvp6CuvJHVjlsXcRZUcmiQV9k+2MldA3Hno+uc64RL1mEbwq+bjin9Bo7 CL//pD/ZCoRPRdnkXCC6rFHqFHGFa6yooohCeV4sTlQZLHA9NtMhk/bhjUvjPAnE MG9jr64ySAQVtgVpnRPGhPjUU3KR53f4QggILAWlY1ymWMphGTaCzK9r1UuxqUgg bBvW6Hgy/apbq4K5NZMb5ujN+QQPVFEdVVoGqMklveTsY4JZ3fnOkXtZvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE8Wdk1rXZYcLO9u1R9R0+kjhuZ+MB8GA1UdIwQY MBaAFKVIrtkKXiO0pzaVYI87ZXi/3sYVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFVpdTJRcGVJN1NuTnBWZ2p6dGxlTF9leGhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83NDY2YzItNTZkNC00OTRhLWIyNjct NTQ2M2I3MWUyNmRlLzEvcFVpdTJRcGVJN1NuTnBWZ2p6dGxlTF9leGhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy83NDY2YzItNTZkNC00OTRhLWIyNjctNTQ2M2I3MWUyNmRl LzEvcFVpdTJRcGVJN1NuTnBWZ2p6dGxlTF9leGhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZpgms0XF YHlaayKSeT4tfOIj2m1czrcOhdM2xyZgz9nrVCOgMMab4NzTwGiyIexBpchokEMb FxsTYIEw06CahcV6EgjIsOfseievspXf9aV7puxejhlWScNaV3CxXQjIIScIrO1f AylrTCHwga0alSCujKGnAs7JuCR5k2UJEDmawYYiDsHMgUF4uWgfkaRnpn+/ZeZk dnazL9X05B0COECNGXvNJWzu2ixnEJgwVP8IHQ1VK4eJUvs9dhPLlTBYlv9T3HJC Y+MGDlnKQuFPfGLJ3KNH/SxP16L1bGD9wCuGlAG8mczfiIQ4MtECRc6s7MOOY2BZ 0CrtIP7+wIYRxg== -----END CERTIFICATE-----Generated at Sat Dec 20 23:07:55 2025 by rpki-client