This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft File: pDCUIgOqL405Co2uULhamEUE_Zw.mft (raw, json) Hash identifier: X1r9W56DBrF42RO6XTHPVK09xsIJQzhv+o7+vlaCwl4= Subject key identifier: 98:21:8C:D7:8C:F1:F8:75:03:81:1F:BC:14:37:04:EA:74:50:F1:B6 Authority key identifier: A4:30:94:22:03:AA:2F:8D:39:0A:8D:AE:50:B8:5A:98:45:04:FD:9C Certificate issuer: /CN=a430942203aa2f8d390a8dae50b85a984504fd9c Certificate serial: 019B1916040990755FFFF133709CDAAA4881 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDCUIgOqL405Co2uULhamEUE_Zw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft Manifest number: 1171 Signing time: Sat 13 Dec 2025 19:00:31 +0000 Manifest this update: Sat 13 Dec 2025 19:00:31 +0000 Manifest next update: Sun 14 Dec 2025 19:00:31 +0000 Files and hashes: 1: mxHqegiIzk-5yKnAa0W9InQ8xh8.roa (hash: 1T8S7F5C1unZ11xq+jwLnSOyvWawPuJqcLvoyNmvP44=) 2: pDCUIgOqL405Co2uULhamEUE_Zw.crl (hash: x9/vuOHIFp+iRH/wT5mi4Av5ERhs+BYLlro/VVkhqRA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft rsync://rpki.ripe.net/repository/DEFAULT/pDCUIgOqL405Co2uULhamEUE_Zw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 19:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:16:04:09:90:75:5f:ff:f1:33:70:9c:da:aa:48:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a430942203aa2f8d390a8dae50b85a984504fd9c Validity Not Before: Dec 13 19:00:31 2025 GMT Not After : Dec 14 19:00:31 2025 GMT Subject: CN=98218cd78cf1f87503811fbc143704ea7450f1b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e8:09:0c:f1:e2:d0:f3:3f:0c:2f:89:0a:d2: 3a:4e:df:5f:fb:57:7c:92:62:b4:fd:37:92:53:10: 03:f6:ef:fc:41:0d:08:4a:5a:f5:49:db:57:48:63: d8:66:7e:84:54:69:f1:92:79:c6:26:99:8f:38:e0: e4:8f:d9:11:c1:a9:aa:5b:0f:b7:a3:7c:7e:24:b3: 39:5f:b4:6e:ec:4a:e7:18:1c:0d:9d:d7:c8:12:2d: 57:d8:c5:a6:62:90:07:20:e3:91:3f:9e:47:4d:1c: 2a:72:bc:94:f6:b3:be:02:30:d7:2f:d6:9e:c6:82: 76:a1:67:92:03:54:83:80:0f:9c:69:28:79:03:c3: 71:8a:7d:60:b4:67:c2:ce:88:41:58:08:17:3c:5f: 0c:08:f1:c9:ac:88:19:d0:ba:57:60:83:bd:4d:3f: 29:11:e3:6e:2f:46:ce:55:7a:e9:e8:33:23:c5:12: ba:c3:de:ac:eb:4c:e9:c6:2f:93:de:0d:1b:c4:bb: da:56:62:e2:c4:ab:2d:df:45:08:b3:e0:ab:ac:c4: f4:97:ad:19:98:b5:34:34:81:ba:c9:12:41:96:c8: 13:1b:d2:1a:f9:f8:9a:f9:40:e2:c5:e2:65:60:3c: cb:0a:56:bc:24:9a:30:73:e4:a0:91:a7:64:3d:19: 80:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:21:8C:D7:8C:F1:F8:75:03:81:1F:BC:14:37:04:EA:74:50:F1:B6 X509v3 Authority Key Identifier: keyid:A4:30:94:22:03:AA:2F:8D:39:0A:8D:AE:50:B8:5A:98:45:04:FD:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDCUIgOqL405Co2uULhamEUE_Zw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:4b:9f:4d:f7:2e:71:7f:f3:ea:74:d2:ad:e5:d1:4b:b9:39: 5f:41:b1:69:cd:57:2c:ce:13:79:7a:23:c3:d4:b2:9b:58:db: 30:6c:f2:23:c5:c8:e6:d6:c0:18:96:c6:79:1c:43:de:0e:93: 3f:c0:5d:21:59:38:56:f6:c3:37:e5:e4:a7:66:79:d4:29:c5: 3f:8a:4b:70:a4:00:4d:89:56:e7:11:35:ae:ad:df:71:93:a5: e0:37:a9:fc:19:6b:03:e8:0b:0a:29:a3:dc:ab:4a:d3:c2:09: 22:c5:d1:15:c2:b8:30:f6:7e:38:97:24:2b:52:cf:bb:d1:28: 1d:97:db:08:03:a9:75:2c:84:f3:81:79:25:98:1c:1d:0e:bc: 62:a0:42:1b:fd:31:04:b5:5b:fd:75:e5:22:a0:02:d9:f5:de: 70:ce:38:ff:15:2c:b6:03:a2:19:69:ff:ed:e0:fb:b8:b2:0b: 06:5c:ef:9c:5b:d3:3b:0d:2f:16:ec:7e:ba:f3:dd:18:f5:31: b3:0b:8b:8b:90:72:11:91:1e:20:34:b7:b1:46:05:61:0c:d4: b2:d2:3d:45:94:1a:78:b2:a4:35:e7:e3:98:4d:a4:28:3a:ae: 53:45:3a:74:16:80:c9:ba:f0:21:11:f5:13:1b:d5:85:ff:50: 82:45:fd:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZFgQJkHVf//EzcJzaqkiBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MzA5NDIyMDNhYTJmOGQzOTBhOGRhZTUwYjg1YTk4NDUw NGZkOWMwHhcNMjUxMjEzMTkwMDMxWhcNMjUxMjE0MTkwMDMxWjAzMTEwLwYDVQQD Eyg5ODIxOGNkNzhjZjFmODc1MDM4MTFmYmMxNDM3MDRlYTc0NTBmMWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4egJDPHi0PM/DC+JCtI6Tt9f+1d8 kmK0/TeSUxAD9u/8QQ0ISlr1SdtXSGPYZn6EVGnxknnGJpmPOODkj9kRwamqWw+3 o3x+JLM5X7Ru7ErnGBwNndfIEi1X2MWmYpAHIOORP55HTRwqcryU9rO+AjDXL9ae xoJ2oWeSA1SDgA+caSh5A8Nxin1gtGfCzohBWAgXPF8MCPHJrIgZ0LpXYIO9TT8p EeNuL0bOVXrp6DMjxRK6w96s60zpxi+T3g0bxLvaVmLixKst30UIs+CrrMT0l60Z mLU0NIG6yRJBlsgTG9Ia+fia+UDixeJlYDzLCla8JJowc+SgkadkPRmA2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJghjNeM8fh1A4EfvBQ3BOp0UPG2MB8GA1UdIwQY MBaAFKQwlCIDqi+NOQqNrlC4WphFBP2cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcERDVUlnT3FMNDA1Q28ydVVMaGFtRVVFX1p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9jNTI5NTMtZjk2ZC00ZTRjLThkZGIt MWJmMGY3YjRkZjMwLzEvcERDVUlnT3FMNDA1Q28ydVVMaGFtRVVFX1p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9jNTI5NTMtZjk2ZC00ZTRjLThkZGItMWJmMGY3YjRkZjMw LzEvcERDVUlnT3FMNDA1Q28ydVVMaGFtRVVFX1p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAekufTfcu cX/z6nTSreXRS7k5X0Gxac1XLM4TeXojw9Sym1jbMGzyI8XI5tbAGJbGeRxD3g6T P8BdIVk4VvbDN+Xkp2Z51CnFP4pLcKQATYlW5xE1rq3fcZOl4Dep/BlrA+gLCimj 3KtK08IJIsXRFcK4MPZ+OJckK1LPu9EoHZfbCAOpdSyE84F5JZgcHQ68YqBCG/0x BLVb/XXlIqAC2fXecM44/xUstgOiGWn/7eD7uLILBlzvnFvTOw0vFux+uvPdGPUx swuLi5ByEZEeIDS3sUYFYQzUstI9RZQaeLKkNefjmE2kKDquU0U6dBaAybrwIRH1 ExvVhf9QgkX98w== -----END CERTIFICATE-----Generated at Sun Dec 14 03:39:57 2025 by rpki-client