This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft File: pDCUIgOqL405Co2uULhamEUE_Zw.mft (raw, json) Hash identifier: /cfcBUWZv+iqL19UNRHoxiXGtuwLvzXrmkwdTf2l9jc= Subject key identifier: C9:20:42:98:F2:0E:4E:D2:DD:A3:2A:08:BC:D0:82:75:A1:1A:F9:D0 Authority key identifier: A4:30:94:22:03:AA:2F:8D:39:0A:8D:AE:50:B8:5A:98:45:04:FD:9C Certificate issuer: /CN=a430942203aa2f8d390a8dae50b85a984504fd9c Certificate serial: 019B2C66886051106A5F030B7D293B6658E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDCUIgOqL405Co2uULhamEUE_Zw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft Manifest number: 117B Signing time: Wed 17 Dec 2025 13:01:15 +0000 Manifest this update: Wed 17 Dec 2025 13:01:15 +0000 Manifest next update: Thu 18 Dec 2025 13:01:15 +0000 Files and hashes: 1: mxHqegiIzk-5yKnAa0W9InQ8xh8.roa (hash: 1T8S7F5C1unZ11xq+jwLnSOyvWawPuJqcLvoyNmvP44=) 2: pDCUIgOqL405Co2uULhamEUE_Zw.crl (hash: U7e/8Ikt7Z0CuSuWp7z2possFQLAiOChN7dTzOiKsV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft rsync://rpki.ripe.net/repository/DEFAULT/pDCUIgOqL405Co2uULhamEUE_Zw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 13:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:88:60:51:10:6a:5f:03:0b:7d:29:3b:66:58:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a430942203aa2f8d390a8dae50b85a984504fd9c Validity Not Before: Dec 17 13:01:15 2025 GMT Not After : Dec 18 13:01:15 2025 GMT Subject: CN=c9204298f20e4ed2dda32a08bcd08275a11af9d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d1:f5:28:1c:38:e6:88:85:d1:87:5b:b4:71: 15:85:d6:f3:be:02:00:3f:dc:80:bd:53:9f:e6:cb: 1b:e3:9e:e5:1a:0b:4c:bd:78:cd:f8:f7:5f:be:37: 8d:51:1d:bf:3d:f6:25:9f:ec:90:bb:cb:b4:5b:ee: f4:36:e1:51:46:58:4e:98:87:39:d7:ec:f4:ad:23: f5:ad:7b:0d:b3:05:81:54:13:2c:eb:af:13:be:c9: e4:6e:2d:d3:a0:5c:9a:b8:fb:fa:e3:02:8a:1f:8c: a5:b0:16:9e:01:81:91:4d:56:4f:56:bb:7c:e7:23: 3a:9c:71:fe:0b:62:60:e8:0a:60:e8:49:2d:3b:4f: 88:61:d3:f1:4d:31:ce:79:f1:e1:e5:9e:09:19:32: e4:26:34:8f:76:8d:84:19:4c:b7:fd:3b:fe:ee:87: 9e:fd:38:42:b6:84:c6:eb:14:90:4e:e3:54:cb:c6: fa:84:b6:01:b6:56:b3:28:2b:37:af:82:49:f0:f4: 58:6e:95:6e:2d:dc:b1:4d:68:95:52:ef:1e:42:62: f0:98:e8:d8:b6:a4:76:2c:c1:ad:fa:29:93:2f:b2: fa:17:2f:7e:1a:91:89:f7:89:ea:d4:ec:5d:7b:c5: 3a:79:a9:e1:df:60:88:92:35:12:dd:f7:c7:b5:c6: 4e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:20:42:98:F2:0E:4E:D2:DD:A3:2A:08:BC:D0:82:75:A1:1A:F9:D0 X509v3 Authority Key Identifier: keyid:A4:30:94:22:03:AA:2F:8D:39:0A:8D:AE:50:B8:5A:98:45:04:FD:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDCUIgOqL405Co2uULhamEUE_Zw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:6b:36:14:ca:0f:b6:ef:ad:f3:60:28:6b:ec:77:d8:9d:59: ce:e9:0c:48:8c:bb:80:36:10:55:76:d5:14:55:16:57:fd:e2: d4:3d:a3:7a:7d:2d:b9:8e:5e:79:54:0c:b2:03:6f:2f:d5:1f: 22:80:e5:7e:20:4b:53:dc:5e:63:50:67:dc:8f:ba:0d:79:83: 93:db:99:e6:31:25:55:99:74:d2:b1:80:84:f6:b1:d7:c4:da: 4a:46:27:a1:e6:57:a5:3e:70:13:ed:d3:02:fb:75:e2:ec:76: 4e:a9:0f:22:83:f7:00:9a:d9:91:d7:06:7e:36:eb:89:5b:c2: e4:24:ec:30:8a:44:d4:d0:81:ec:88:24:53:17:98:bd:08:22: cc:17:c0:ed:27:16:d0:ae:37:96:8a:12:1f:d8:3d:40:64:18: 9a:1d:d7:52:8d:05:0d:fd:2b:03:b4:92:01:00:4f:44:90:dc: ef:b5:d3:db:e3:ae:de:65:1d:ed:21:98:2d:53:66:c8:b7:3d: ba:60:13:b2:ef:2c:7a:02:20:28:61:f0:98:40:d2:06:4e:da: 86:70:56:30:46:b2:8b:26:eb:fb:0b:f1:42:e7:e9:32:61:2f: 94:92:ce:61:92:9c:4b:1e:2d:cf:8f:54:39:fc:c4:c0:b2:cf: bd:93:1d:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZohgURBqXwMLfSk7ZljnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MzA5NDIyMDNhYTJmOGQzOTBhOGRhZTUwYjg1YTk4NDUw NGZkOWMwHhcNMjUxMjE3MTMwMTE1WhcNMjUxMjE4MTMwMTE1WjAzMTEwLwYDVQQD EyhjOTIwNDI5OGYyMGU0ZWQyZGRhMzJhMDhiY2QwODI3NWExMWFmOWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6NH1KBw45oiF0YdbtHEVhdbzvgIA P9yAvVOf5ssb457lGgtMvXjN+PdfvjeNUR2/PfYln+yQu8u0W+70NuFRRlhOmIc5 1+z0rSP1rXsNswWBVBMs668Tvsnkbi3ToFyauPv64wKKH4ylsBaeAYGRTVZPVrt8 5yM6nHH+C2Jg6Apg6EktO0+IYdPxTTHOefHh5Z4JGTLkJjSPdo2EGUy3/Tv+7oee /ThCtoTG6xSQTuNUy8b6hLYBtlazKCs3r4JJ8PRYbpVuLdyxTWiVUu8eQmLwmOjY tqR2LMGt+imTL7L6Fy9+GpGJ94nq1Oxde8U6eanh32CIkjUS3ffHtcZO1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMkgQpjyDk7S3aMqCLzQgnWhGvnQMB8GA1UdIwQY MBaAFKQwlCIDqi+NOQqNrlC4WphFBP2cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcERDVUlnT3FMNDA1Q28ydVVMaGFtRVVFX1p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9jNTI5NTMtZjk2ZC00ZTRjLThkZGIt MWJmMGY3YjRkZjMwLzEvcERDVUlnT3FMNDA1Q28ydVVMaGFtRVVFX1p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9jNTI5NTMtZjk2ZC00ZTRjLThkZGItMWJmMGY3YjRkZjMw LzEvcERDVUlnT3FMNDA1Q28ydVVMaGFtRVVFX1p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbWs2FMoP tu+t82Aoa+x32J1ZzukMSIy7gDYQVXbVFFUWV/3i1D2jen0tuY5eeVQMsgNvL9Uf IoDlfiBLU9xeY1Bn3I+6DXmDk9uZ5jElVZl00rGAhPax18TaSkYnoeZXpT5wE+3T Avt14ux2TqkPIoP3AJrZkdcGfjbriVvC5CTsMIpE1NCB7IgkUxeYvQgizBfA7ScW 0K43looSH9g9QGQYmh3XUo0FDf0rA7SSAQBPRJDc77XT2+Ou3mUd7SGYLVNmyLc9 umATsu8segIgKGHwmEDSBk7ahnBWMEayiybr+wvxQufpMmEvlJLOYZKcSx4tz49U OfzEwLLPvZMdug== -----END CERTIFICATE-----Generated at Wed Dec 17 20:47:34 2025 by rpki-client