This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft File: pcUihESYJRJgyNqrvCxeGp6PNf4.mft (raw, json) Hash identifier: U1tYPwmQ3xe7PRdp1HhwF4zQyudhgWiVbu7eA5+9VyA= Subject key identifier: C4:45:EF:93:4C:53:86:F0:D2:01:24:AA:76:8A:72:6A:09:7E:E6:04 Authority key identifier: A5:C5:22:84:44:98:25:12:60:C8:DA:AB:BC:2C:5E:1A:9E:8F:35:FE Certificate issuer: /CN=a5c522844498251260c8daabbc2c5e1a9e8f35fe Certificate serial: 019B4EBB71E16EBCBFB9B9910CD77E5D57EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcUihESYJRJgyNqrvCxeGp6PNf4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft Manifest number: 0E47 Signing time: Wed 24 Dec 2025 05:01:05 +0000 Manifest this update: Wed 24 Dec 2025 05:01:05 +0000 Manifest next update: Thu 25 Dec 2025 05:01:05 +0000 Files and hashes: 1: mjQr1y7CThAMWtspCv07qky-Fa8.roa (hash: 1Julh/eRIdAGf0PUhXIsjYftTFh05ZaBnAtvljFrsQs=) 2: pcUihESYJRJgyNqrvCxeGp6PNf4.crl (hash: VAQspeKszCAtv4zkY8piGfzpw/0LwbK5UiGIYsSjHPY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft rsync://rpki.ripe.net/repository/DEFAULT/pcUihESYJRJgyNqrvCxeGp6PNf4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 05:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:bb:71:e1:6e:bc:bf:b9:b9:91:0c:d7:7e:5d:57:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5c522844498251260c8daabbc2c5e1a9e8f35fe Validity Not Before: Dec 24 05:01:05 2025 GMT Not After : Dec 25 05:01:05 2025 GMT Subject: CN=c445ef934c5386f0d20124aa768a726a097ee604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c7:08:aa:5f:d2:55:21:3e:ed:78:33:d8:13: 86:57:19:6a:1b:5f:13:26:69:5f:ac:b0:6e:b6:71: bf:c7:41:55:fe:26:19:51:05:f3:a0:42:73:2f:47: 8d:13:13:c3:58:fc:71:f4:f1:e4:90:29:52:0a:b4: 47:29:3e:a2:23:da:7a:66:c3:02:66:0c:50:52:f2: 7f:d2:ef:07:9e:28:6d:05:e9:1f:3d:f2:db:37:bb: d6:3f:2f:98:e2:9f:8d:b9:c2:80:89:f2:dd:86:a9: d6:14:96:4c:04:ff:7a:1d:f5:66:da:b3:2c:c8:b3: 7b:01:a5:65:a4:ec:9a:1a:55:83:81:65:a4:51:af: 30:19:5e:74:29:ae:2a:f9:e3:74:55:1d:97:bd:b8: 0b:35:9b:ca:d1:42:b2:b7:b1:03:07:bc:0f:70:51: 02:0a:da:58:b6:da:e8:6a:8b:9d:7a:e8:e0:10:22: 56:6f:95:d5:99:1e:1b:31:af:9e:b2:4d:bb:37:bc: c1:37:f8:aa:6f:70:3f:c9:32:83:ae:06:31:81:51: a8:71:d8:eb:4d:2d:e9:ca:70:c2:dc:44:d5:68:c2: 28:90:52:17:e1:b6:16:8a:98:03:57:40:10:f1:cc: e9:4c:dc:80:30:c5:02:fe:8b:f1:78:95:af:73:d6: 49:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:45:EF:93:4C:53:86:F0:D2:01:24:AA:76:8A:72:6A:09:7E:E6:04 X509v3 Authority Key Identifier: keyid:A5:C5:22:84:44:98:25:12:60:C8:DA:AB:BC:2C:5E:1A:9E:8F:35:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcUihESYJRJgyNqrvCxeGp6PNf4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:3d:3a:52:64:00:95:ca:27:28:db:d8:c6:53:70:fb:a6:47: 28:fa:07:c6:af:e3:3e:34:6d:d2:88:a4:ca:09:d5:68:ac:b5: 67:01:fd:e1:66:4b:e5:f1:89:16:0f:e2:03:05:42:9a:66:5e: aa:d1:f7:35:79:01:0b:36:15:4e:a9:91:04:6d:a7:8b:9f:77: ca:06:39:7d:a7:4c:35:c2:b8:63:64:92:b1:73:46:cb:84:cf: 7a:7f:98:db:f4:69:e1:d0:33:67:f3:a4:50:75:7c:1d:e4:6e: 48:b0:86:35:bf:9e:bf:ee:15:58:2b:b9:91:37:7f:0d:8b:0b: 43:dd:85:08:7e:fc:5b:72:78:54:7c:00:d7:33:98:a7:67:32: da:6d:0b:ce:b2:aa:42:c4:24:c7:81:a8:32:33:fd:b4:fe:5e: e2:87:2a:96:ca:61:bc:ef:79:5c:cd:39:07:eb:2e:49:25:e1: 56:87:b0:7f:26:c5:18:c1:f3:ca:9f:bd:d8:d8:8c:2b:bf:6d: 97:67:00:9b:71:60:fd:48:bb:35:63:09:bd:f0:b2:6c:3f:0f: 35:af:f3:36:b2:56:3b:63:8e:39:0a:cd:49:f3:25:90:9f:c2: 29:82:5c:0f:c8:1a:01:0c:e3:89:69:3f:e4:d0:12:5c:b3:31: 8f:d5:2b:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOu3Hhbry/ubmRDNd+XVfuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YzUyMjg0NDQ5ODI1MTI2MGM4ZGFhYmJjMmM1ZTFhOWU4 ZjM1ZmUwHhcNMjUxMjI0MDUwMTA1WhcNMjUxMjI1MDUwMTA1WjAzMTEwLwYDVQQD EyhjNDQ1ZWY5MzRjNTM4NmYwZDIwMTI0YWE3NjhhNzI2YTA5N2VlNjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0scIql/SVSE+7Xgz2BOGVxlqG18T JmlfrLButnG/x0FV/iYZUQXzoEJzL0eNExPDWPxx9PHkkClSCrRHKT6iI9p6ZsMC ZgxQUvJ/0u8HnihtBekfPfLbN7vWPy+Y4p+NucKAifLdhqnWFJZMBP96HfVm2rMs yLN7AaVlpOyaGlWDgWWkUa8wGV50Ka4q+eN0VR2XvbgLNZvK0UKyt7EDB7wPcFEC CtpYttroaoudeujgECJWb5XVmR4bMa+esk27N7zBN/iqb3A/yTKDrgYxgVGocdjr TS3pynDC3ETVaMIokFIX4bYWipgDV0AQ8czpTNyAMMUC/ovxeJWvc9ZJmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMRF75NMU4bw0gEkqnaKcmoJfuYEMB8GA1UdIwQY MBaAFKXFIoREmCUSYMjaq7wsXhqejzX+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGNVaWhFU1lKUkpneU5xcnZDeGVHcDZQTmY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8yZWUyMjktNjhjNS00ZjhjLTgwN2Ut NTQ4ZTdmMDI0MzE0LzEvcGNVaWhFU1lKUkpneU5xcnZDeGVHcDZQTmY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8yZWUyMjktNjhjNS00ZjhjLTgwN2UtNTQ4ZTdmMDI0MzE0 LzEvcGNVaWhFU1lKUkpneU5xcnZDeGVHcDZQTmY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfj06UmQA lconKNvYxlNw+6ZHKPoHxq/jPjRt0oikygnVaKy1ZwH94WZL5fGJFg/iAwVCmmZe qtH3NXkBCzYVTqmRBG2ni593ygY5fadMNcK4Y2SSsXNGy4TPen+Y2/Rp4dAzZ/Ok UHV8HeRuSLCGNb+ev+4VWCu5kTd/DYsLQ92FCH78W3J4VHwA1zOYp2cy2m0LzrKq QsQkx4GoMjP9tP5e4ocqlsphvO95XM05B+suSSXhVoewfybFGMHzyp+92NiMK79t l2cAm3Fg/Ui7NWMJvfCybD8PNa/zNrJWO2OOOQrNSfMlkJ/CKYJcD8gaAQzjiWk/ 5NASXLMxj9Ur9A== -----END CERTIFICATE-----Generated at Wed Dec 24 10:32:20 2025 by rpki-client