This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft File: pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft (raw, json) Hash identifier: JfJzeAv3Gyx1GPkelYWvsAGeYNS0z0JAY0OGRNYYjMQ= Subject key identifier: 6F:64:E5:DE:4E:72:1F:D4:A1:7A:0F:5B:79:BC:81:0C:3A:3E:17:C6 Authority key identifier: A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC Certificate issuer: /CN=a5472b1473bc781b70440315c83d119c8abc86fc Certificate serial: 019B27774AF799F8D663D91DA7156968CCDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft Manifest number: 14D8 Signing time: Tue 16 Dec 2025 14:01:27 +0000 Manifest this update: Tue 16 Dec 2025 14:01:27 +0000 Manifest next update: Wed 17 Dec 2025 14:01:27 +0000 Files and hashes: 1: 2fiCKenUyZEGcgyEcbC3Fxz5B0o.roa (hash: C3sRzOd2/ABXN5AYlIy2eOFDIIGwTRNmpvXK9lls8wk=) 2: FKocTxCwOpTwhx81CYxQkqkOggY.roa (hash: 4ohmnB8YwygbCXyKutj9jSnUxcPLc8vBK0YjqJ6KB28=) 3: pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl (hash: ZyXpRb6beleCmRdx905TOiCtNK3B9TQc49m5lLCedsA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:77:4a:f7:99:f8:d6:63:d9:1d:a7:15:69:68:cc:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5472b1473bc781b70440315c83d119c8abc86fc Validity Not Before: Dec 16 14:01:27 2025 GMT Not After : Dec 17 14:01:27 2025 GMT Subject: CN=6f64e5de4e721fd4a17a0f5b79bc810c3a3e17c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8f:3b:e2:45:e8:32:a5:68:ad:40:20:7f:0b: a3:8a:17:da:bd:c6:4c:dd:82:26:a4:d9:b5:af:8d: 54:c3:61:10:37:20:b5:32:fe:d3:f5:ea:4e:c3:7f: ee:fa:e9:e0:f7:98:9b:73:2e:0f:ac:f4:56:da:a2: 57:9c:c5:ac:98:f7:41:0e:b9:74:2f:67:0f:83:fd: 43:9a:c0:02:6a:c9:41:5b:b2:ed:52:4b:fd:8c:89: 05:84:64:56:96:d2:80:5f:0d:1a:66:ee:6c:76:56: cc:8c:30:cd:fa:b2:5e:b8:1e:fc:4f:05:d9:e6:fd: b8:b0:33:88:f3:38:b7:bd:cf:e8:ed:f3:8d:f9:35: 0c:38:ba:08:8e:4f:a5:83:94:cc:27:d2:e4:d7:b5: 6c:57:c3:09:79:a8:00:71:e4:90:20:c7:2a:82:47: 1f:19:ee:4f:88:e3:36:9c:56:a2:ad:b4:6f:3c:27: bb:14:fa:ba:15:af:56:d2:6b:72:df:28:43:44:21: 68:b0:4f:d3:66:f9:47:9f:5d:5d:40:71:94:fc:4a: 46:0a:7a:d3:52:0e:94:31:d6:7d:d6:8b:2c:e3:7f: ff:4b:31:cf:91:4d:73:cf:45:25:5e:36:da:e8:ce: 9c:87:4d:76:b3:03:1a:02:4d:8e:3a:0c:c1:6c:9a: a8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:64:E5:DE:4E:72:1F:D4:A1:7A:0F:5B:79:BC:81:0C:3A:3E:17:C6 X509v3 Authority Key Identifier: keyid:A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:fb:0b:4c:4c:28:c2:5c:43:70:75:69:ef:76:57:b6:64:c4: c3:9b:ce:66:49:11:85:f9:41:98:d8:b1:5d:e2:f1:5a:c5:ba: 1c:71:3f:25:2e:1d:90:e4:c1:a9:d9:38:3d:5b:6c:db:e4:31: 4b:84:74:1f:b4:33:30:b0:d3:ca:89:e2:21:1d:48:a9:33:0a: 4b:ff:ba:8e:d4:36:9e:10:05:df:5a:d5:4c:d9:64:b8:76:d4: 19:7b:72:f1:c2:33:34:3f:46:cf:c7:4e:b4:bf:9a:1b:5c:8a: e3:8e:3c:b6:41:8f:65:fb:87:e2:40:1a:58:d8:22:0b:8c:d2: 69:ac:41:2e:d9:5d:8c:92:8c:81:e3:3a:e0:e2:70:60:82:53: 76:0a:f6:43:b0:db:99:97:bf:58:e7:af:e1:03:f1:79:cb:7d: d6:c6:bd:5f:96:6a:0c:1d:05:07:4d:d1:5f:f2:d3:4d:c3:43: 15:0e:89:e1:af:cf:6d:e9:c4:14:6e:e1:96:fa:75:fa:7b:6c: 54:39:94:b3:9b:f9:76:65:d5:55:ac:51:88:89:df:b0:d8:66: cb:48:bf:ad:02:bf:08:b8:af:b7:96:5e:a1:b0:ae:38:9e:9a: 02:37:3f:fb:28:0c:7d:72:88:ea:7d:ed:87:c6:92:55:3d:53: 60:35:28:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnd0r3mfjWY9kdpxVpaMzcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NDcyYjE0NzNiYzc4MWI3MDQ0MDMxNWM4M2QxMTljOGFi Yzg2ZmMwHhcNMjUxMjE2MTQwMTI3WhcNMjUxMjE3MTQwMTI3WjAzMTEwLwYDVQQD Eyg2ZjY0ZTVkZTRlNzIxZmQ0YTE3YTBmNWI3OWJjODEwYzNhM2UxN2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4874kXoMqVorUAgfwujihfavcZM 3YImpNm1r41Uw2EQNyC1Mv7T9epOw3/u+ung95ibcy4PrPRW2qJXnMWsmPdBDrl0 L2cPg/1DmsACaslBW7LtUkv9jIkFhGRWltKAXw0aZu5sdlbMjDDN+rJeuB78TwXZ 5v24sDOI8zi3vc/o7fON+TUMOLoIjk+lg5TMJ9Lk17VsV8MJeagAceSQIMcqgkcf Ge5PiOM2nFairbRvPCe7FPq6Fa9W0mty3yhDRCFosE/TZvlHn11dQHGU/EpGCnrT Ug6UMdZ91oss43//SzHPkU1zz0UlXjba6M6ch012swMaAk2OOgzBbJqoZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG9k5d5Och/UoXoPW3m8gQw6PhfGMB8GA1UdIwQY MBaAFKVHKxRzvHgbcEQDFcg9EZyKvIb8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFVjckZITzhlQnR3UkFNVnlEMFJuSXE4aHZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8zMDExMmYtMGU5ZC00ZmM4LWI4NTQt YjE1NjViMjU1ODU0LzEvcFVjckZITzhlQnR3UkFNVnlEMFJuSXE4aHZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8zMDExMmYtMGU5ZC00ZmM4LWI4NTQtYjE1NjViMjU1ODU0 LzEvcFVjckZITzhlQnR3UkFNVnlEMFJuSXE4aHZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgvsLTEwo wlxDcHVp73ZXtmTEw5vOZkkRhflBmNixXeLxWsW6HHE/JS4dkOTBqdk4PVts2+Qx S4R0H7QzMLDTyoniIR1IqTMKS/+6jtQ2nhAF31rVTNlkuHbUGXty8cIzND9Gz8dO tL+aG1yK4448tkGPZfuH4kAaWNgiC4zSaaxBLtldjJKMgeM64OJwYIJTdgr2Q7Db mZe/WOev4QPxect91sa9X5ZqDB0FB03RX/LTTcNDFQ6J4a/PbenEFG7hlvp1+nts VDmUs5v5dmXVVaxRiInfsNhmy0i/rQK/CLivt5ZeobCuOJ6aAjc/+ygMfXKI6n3t h8aSVT1TYDUoDQ== -----END CERTIFICATE-----Generated at Tue Dec 16 16:05:23 2025 by rpki-client