This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft File: pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft (raw, json) Hash identifier: jyxwrnqc8iOYgFWXv0iahAit5WgTCRnug98jnrn0RRY= Subject key identifier: D5:0D:84:C6:0B:92:DD:8C:F7:BC:76:1B:12:8E:0A:9A:F5:A4:9E:50 Authority key identifier: A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95 Certificate issuer: /CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395 Certificate serial: 019B3BA22F14689E1E6184C4B3D7BA421DE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 12:00:43 +0000 Manifest this update: Sat 20 Dec 2025 12:00:43 +0000 Manifest next update: Sun 21 Dec 2025 12:00:43 +0000 Files and hashes: 1: 561vyQubUBVe_MLgzSiqqYxU6_Y.roa (hash: 6HivC1fxPXMlCdAVu0fVBq06y4Hg53XB3H7/WZM7Ul4=) 2: pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl (hash: DF+LQsf+ZrOxf0smM9ha1KsyKqHJ2f+8TXVtMQKJg90=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 12:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:2f:14:68:9e:1e:61:84:c4:b3:d7:ba:42:1d:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395 Validity Not Before: Dec 20 12:00:43 2025 GMT Not After : Dec 21 12:00:43 2025 GMT Subject: CN=d50d84c60b92dd8cf7bc761b128e0a9af5a49e50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fb:a0:19:ee:78:4e:ed:2c:90:c1:26:52:a2: 5f:cd:e6:f7:9f:12:c7:d2:52:07:64:4e:3e:9b:d8: e1:b5:0c:53:aa:78:e1:45:81:52:9a:3d:ab:ff:23: 60:a6:4e:f7:43:25:14:93:3d:ff:c5:4d:65:07:c5: f8:2b:56:a0:e1:c8:82:5a:c6:e1:74:ab:bc:0e:9a: e0:e9:79:3e:43:1c:fb:95:f6:97:4c:f7:ee:89:ca: 8c:ae:c9:50:f6:fc:bb:cc:b4:cd:94:76:18:6b:6f: aa:ad:01:24:b4:5d:67:93:2a:cf:31:b6:36:7e:1c: e4:de:b0:3a:0a:cf:16:23:1b:1d:9b:2e:85:6c:f4: 4a:b7:dd:18:47:e7:35:43:2f:b6:15:7b:6c:5e:42: 9a:30:2e:09:06:83:3c:ca:a6:39:1e:e1:1e:3c:18: d4:55:e8:02:86:10:14:f4:66:7e:6a:bc:90:39:aa: 70:1b:10:91:e3:d7:39:51:34:3e:8f:7d:bf:63:8a: 0e:b9:59:fa:48:70:e8:3f:08:b5:f4:72:b2:0c:10: 55:5f:92:76:81:85:bc:91:6a:f7:7b:bc:9b:ab:0e: 60:aa:2a:45:5a:15:75:d5:b2:d4:97:6b:e6:23:f6: bc:d0:27:3b:fa:fc:55:74:e3:34:95:3a:88:aa:80: ef:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:0D:84:C6:0B:92:DD:8C:F7:BC:76:1B:12:8E:0A:9A:F5:A4:9E:50 X509v3 Authority Key Identifier: keyid:A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:c9:2f:b2:68:9e:16:5a:43:ae:7a:a2:66:21:8f:95:0b:64: 28:d5:27:62:12:13:b2:74:e0:b6:a3:3a:59:ab:f1:50:84:f8: 54:5c:51:c8:1a:86:3a:2b:6f:4c:6e:15:5e:02:3f:fc:79:c8: 94:8b:7e:fe:75:9d:5e:d8:04:85:64:3d:01:4d:a4:05:87:06: c4:c5:25:e8:8e:a4:00:32:75:a9:20:d7:ac:0e:69:58:ca:c8: 60:6f:eb:7a:b4:a8:d4:4e:d2:42:8c:d5:c4:f1:66:91:10:0f: c7:06:fc:25:32:9d:53:13:11:80:62:90:65:57:30:6c:97:2e: 63:85:0f:76:eb:16:e4:6f:9f:1e:6a:d9:8a:05:c4:89:8e:1b: 65:16:97:e0:76:91:c6:3c:ca:6a:75:ab:8e:44:4c:7d:99:9d: 1b:d8:dd:9a:74:e4:7c:c2:86:65:27:25:ac:5d:b2:63:bd:76: dd:2f:33:fe:a1:d4:50:c6:35:f4:e2:2d:3b:ae:a1:9f:94:20: 94:5c:09:9b:5f:1d:b5:be:0c:bb:7a:c7:5e:eb:6c:41:d5:b2: 6b:9d:5e:14:6d:6f:8a:bb:6d:de:a2:63:71:2c:02:43:26:07: 9d:53:fa:7b:16:0a:55:0c:06:90:a2:04:c2:55:19:f0:94:81: 20:9d:a0:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7oi8UaJ4eYYTEs9e6Qh3kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZjUyM2Q5NDgzODdkOGM1ZmNkZjc1MmUwYTFjYzQwOGNm ZTgzOTUwHhcNMjUxMjIwMTIwMDQzWhcNMjUxMjIxMTIwMDQzWjAzMTEwLwYDVQQD EyhkNTBkODRjNjBiOTJkZDhjZjdiYzc2MWIxMjhlMGE5YWY1YTQ5ZTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvugGe54Tu0skMEmUqJfzeb3nxLH 0lIHZE4+m9jhtQxTqnjhRYFSmj2r/yNgpk73QyUUkz3/xU1lB8X4K1ag4ciCWsbh dKu8Dprg6Xk+Qxz7lfaXTPfuicqMrslQ9vy7zLTNlHYYa2+qrQEktF1nkyrPMbY2 fhzk3rA6Cs8WIxsdmy6FbPRKt90YR+c1Qy+2FXtsXkKaMC4JBoM8yqY5HuEePBjU VegChhAU9GZ+aryQOapwGxCR49c5UTQ+j32/Y4oOuVn6SHDoPwi19HKyDBBVX5J2 gYW8kWr3e7ybqw5gqipFWhV11bLUl2vmI/a80Cc7+vxVdOM0lTqIqoDv1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNUNhMYLkt2M97x2GxKOCpr1pJ5QMB8GA1UdIwQY MBaAFKT1I9lIOH2MX833UuChzECM/oOVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFBVajJVZzRmWXhmemZkUzRLSE1RSXotZzVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wODVjMzUtMjhhYy00MjQxLWI5NTEt MjBhOTAwYmM3NzZhLzEvcFBVajJVZzRmWXhmemZkUzRLSE1RSXotZzVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8wODVjMzUtMjhhYy00MjQxLWI5NTEtMjBhOTAwYmM3NzZh LzEvcFBVajJVZzRmWXhmemZkUzRLSE1RSXotZzVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKskvsmie FlpDrnqiZiGPlQtkKNUnYhITsnTgtqM6WavxUIT4VFxRyBqGOitvTG4VXgI//HnI lIt+/nWdXtgEhWQ9AU2kBYcGxMUl6I6kADJ1qSDXrA5pWMrIYG/rerSo1E7SQozV xPFmkRAPxwb8JTKdUxMRgGKQZVcwbJcuY4UPdusW5G+fHmrZigXEiY4bZRaX4HaR xjzKanWrjkRMfZmdG9jdmnTkfMKGZSclrF2yY7123S8z/qHUUMY19OItO66hn5Qg lFwJm18dtb4Mu3rHXutsQdWya51eFG1virtt3qJjcSwCQyYHnVP6exYKVQwGkKIE wlUZ8JSBIJ2gtg== -----END CERTIFICATE-----Generated at Sat Dec 20 21:10:25 2025 by rpki-client