This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft File: pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft (raw, json) Hash identifier: 3X/+jnL/Hl95WhkuBGNEQ0HPetWvllgc1Y6sZO0dvIQ= Subject key identifier: 1F:5D:4D:FA:67:80:AB:53:34:81:50:30:54:66:B2:D6:67:71:84:E9 Authority key identifier: A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC Certificate issuer: /CN=a5472b1473bc781b70440315c83d119c8abc86fc Certificate serial: 019B258884C8BDF9DB682875185CB3DB64A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft Manifest number: 14D7 Signing time: Tue 16 Dec 2025 05:01:02 +0000 Manifest this update: Tue 16 Dec 2025 05:01:02 +0000 Manifest next update: Wed 17 Dec 2025 05:01:02 +0000 Files and hashes: 1: 2fiCKenUyZEGcgyEcbC3Fxz5B0o.roa (hash: C3sRzOd2/ABXN5AYlIy2eOFDIIGwTRNmpvXK9lls8wk=) 2: FKocTxCwOpTwhx81CYxQkqkOggY.roa (hash: 4ohmnB8YwygbCXyKutj9jSnUxcPLc8vBK0YjqJ6KB28=) 3: pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl (hash: xBOnCXeDPw39+oqnxfBtnwurMydHVzpY/EKPuj48UqI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 05:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:88:84:c8:bd:f9:db:68:28:75:18:5c:b3:db:64:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5472b1473bc781b70440315c83d119c8abc86fc Validity Not Before: Dec 16 05:01:02 2025 GMT Not After : Dec 17 05:01:02 2025 GMT Subject: CN=1f5d4dfa6780ab53348150305466b2d6677184e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4e:01:be:79:97:24:42:02:cc:8e:d6:c6:ff: 64:3f:10:f2:cd:9e:d8:6b:8c:2f:33:4f:48:c9:82: 5b:34:da:9c:82:c6:91:bd:a4:b1:2d:7a:b2:15:0d: 58:f2:c7:17:67:6e:4c:70:d0:30:bc:f9:e7:53:17: 81:7e:70:51:22:6a:ec:68:9d:19:7c:3b:2b:40:99: f5:a7:17:43:2c:c2:d8:82:73:19:9b:e8:a7:bb:de: 93:b2:b5:b3:d3:13:3a:64:4d:9d:fc:fa:4d:e4:55: 5d:8d:ad:cf:1e:e6:59:2f:d3:90:47:1c:4a:7e:10: f2:15:97:2c:2d:f3:1f:26:17:07:98:99:1f:ae:c4: e6:7c:68:63:7c:b3:a7:ec:62:ff:bd:ee:9b:dc:0e: 30:02:06:e5:78:e1:f8:c3:66:5e:39:5b:83:c2:67: dd:e6:39:98:c5:11:72:42:7c:68:7a:b7:c3:2e:25: 47:8b:89:bb:34:7e:ed:8a:2b:b6:6f:d2:f0:2e:47: 95:53:89:84:ea:8e:06:cf:09:ed:16:a3:15:0e:c1: 41:31:b1:e6:d2:11:e4:f3:06:02:70:00:5f:24:35: 43:6b:f7:0b:89:c8:ec:56:4d:9d:03:5d:56:86:fa: e7:a3:d4:f4:fe:23:bc:31:2c:c9:39:5c:61:f4:f4: ab:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:5D:4D:FA:67:80:AB:53:34:81:50:30:54:66:B2:D6:67:71:84:E9 X509v3 Authority Key Identifier: keyid:A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:50:b7:02:27:64:47:2a:da:4a:8d:2b:75:19:83:e8:45:12: b5:7c:02:7f:f6:b3:08:a9:07:9f:0a:fd:1f:57:8e:36:4a:00: 0e:9d:7f:35:ec:c6:8a:c7:aa:7c:a4:76:ce:93:f8:95:d6:87: 58:96:0e:8a:4b:e3:0a:8b:2f:ac:0d:92:53:15:b8:3e:78:cd: e4:ee:50:7d:9f:65:fb:2e:3f:75:3c:0b:53:71:46:2b:2c:e7: 10:75:f5:dc:4e:b8:a8:e1:d6:61:cb:c7:69:f5:f9:1b:48:ce: cf:20:9f:12:e4:7d:a7:4b:0c:b1:68:12:e7:8f:75:14:07:b0: d4:96:bb:e3:f9:9a:5b:1f:60:a5:94:40:1a:8f:23:d6:ba:13: 3c:2e:67:b1:7d:ba:22:1e:e9:dc:4b:2a:b6:03:a0:65:33:f6: 59:6a:e5:78:bf:30:6d:36:36:11:37:7f:63:fb:90:cd:ce:93: 61:34:5e:8b:cb:be:92:32:b6:e2:18:fc:ee:a4:1e:37:ad:88: 9f:1c:e9:76:c5:db:a5:7c:2b:4c:c3:96:e7:43:45:77:86:01: f7:65:e1:39:93:9c:2b:1a:e7:1d:a4:3e:52:ea:6c:4a:9c:73: 98:2c:1f:c6:ad:58:e8:d0:46:a9:92:e5:44:c3:ac:1d:cc:f9: 2e:f1:77:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsliITIvfnbaCh1GFyz22ShMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NDcyYjE0NzNiYzc4MWI3MDQ0MDMxNWM4M2QxMTljOGFi Yzg2ZmMwHhcNMjUxMjE2MDUwMTAyWhcNMjUxMjE3MDUwMTAyWjAzMTEwLwYDVQQD EygxZjVkNGRmYTY3ODBhYjUzMzQ4MTUwMzA1NDY2YjJkNjY3NzE4NGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvE4BvnmXJEICzI7Wxv9kPxDyzZ7Y a4wvM09IyYJbNNqcgsaRvaSxLXqyFQ1Y8scXZ25McNAwvPnnUxeBfnBRImrsaJ0Z fDsrQJn1pxdDLMLYgnMZm+inu96TsrWz0xM6ZE2d/PpN5FVdja3PHuZZL9OQRxxK fhDyFZcsLfMfJhcHmJkfrsTmfGhjfLOn7GL/ve6b3A4wAgbleOH4w2ZeOVuDwmfd 5jmYxRFyQnxoerfDLiVHi4m7NH7tiiu2b9LwLkeVU4mE6o4GzwntFqMVDsFBMbHm 0hHk8wYCcABfJDVDa/cLicjsVk2dA11Whvrno9T0/iO8MSzJOVxh9PSrAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB9dTfpngKtTNIFQMFRmstZncYTpMB8GA1UdIwQY MBaAFKVHKxRzvHgbcEQDFcg9EZyKvIb8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFVjckZITzhlQnR3UkFNVnlEMFJuSXE4aHZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8zMDExMmYtMGU5ZC00ZmM4LWI4NTQt YjE1NjViMjU1ODU0LzEvcFVjckZITzhlQnR3UkFNVnlEMFJuSXE4aHZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8zMDExMmYtMGU5ZC00ZmM4LWI4NTQtYjE1NjViMjU1ODU0 LzEvcFVjckZITzhlQnR3UkFNVnlEMFJuSXE4aHZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaVC3Aidk RyraSo0rdRmD6EUStXwCf/azCKkHnwr9H1eONkoADp1/NezGiseqfKR2zpP4ldaH WJYOikvjCosvrA2SUxW4PnjN5O5QfZ9l+y4/dTwLU3FGKyznEHX13E64qOHWYcvH afX5G0jOzyCfEuR9p0sMsWgS5491FAew1Ja74/maWx9gpZRAGo8j1roTPC5nsX26 Ih7p3EsqtgOgZTP2WWrleL8wbTY2ETd/Y/uQzc6TYTRei8u+kjK24hj87qQeN62I nxzpdsXbpXwrTMOW50NFd4YB92XhOZOcKxrnHaQ+UupsSpxzmCwfxq1Y6NBGqZLl RMOsHcz5LvF3Vg== -----END CERTIFICATE-----Generated at Tue Dec 16 14:26:55 2025 by rpki-client