This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft File: pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft (raw, json) Hash identifier: mmQeUfBic7RCB2j+LddwrIseyem8tkCx8BDIbnFqk/Q= Subject key identifier: 6D:0B:BD:0B:26:7C:CF:4B:A0:61:20:D1:FE:42:7F:15:AF:0D:30:9C Authority key identifier: A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95 Certificate issuer: /CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395 Certificate serial: 019B4738B4E826BCA16A345320EB4B972FD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 18:00:57 +0000 Manifest this update: Mon 22 Dec 2025 18:00:57 +0000 Manifest next update: Tue 23 Dec 2025 18:00:57 +0000 Files and hashes: 1: 561vyQubUBVe_MLgzSiqqYxU6_Y.roa (hash: 6HivC1fxPXMlCdAVu0fVBq06y4Hg53XB3H7/WZM7Ul4=) 2: pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl (hash: CA5zM7aX7paoKQB6v5MAwGhRHseJ12IGc8OQFoSmjTk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 18:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:38:b4:e8:26:bc:a1:6a:34:53:20:eb:4b:97:2f:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395 Validity Not Before: Dec 22 18:00:57 2025 GMT Not After : Dec 23 18:00:57 2025 GMT Subject: CN=6d0bbd0b267ccf4ba06120d1fe427f15af0d309c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e0:cf:06:c6:ee:68:5f:a7:6b:16:8f:33:85: 70:fe:3a:e0:72:22:42:49:dd:9c:65:3e:a0:00:c3: dd:56:84:bf:3c:d0:6e:74:01:c1:83:f9:49:ae:cc: 92:b0:3d:e1:fb:99:7d:fe:39:64:74:30:7b:34:7e: a8:90:0d:3b:2a:5b:d7:0e:b5:43:d6:7f:ad:a8:be: 47:99:66:96:90:c9:fb:f6:1c:ea:af:b5:d6:4d:d1: 51:64:b0:2e:c6:86:04:dd:ec:e9:15:5d:be:95:5b: 89:1d:4e:96:5d:20:ca:8c:41:b9:66:1a:f5:59:7d: 36:c9:65:3d:3b:73:72:41:9a:a5:c5:db:4d:f5:cd: 42:5d:3b:14:9d:84:0b:8e:e4:bc:91:01:aa:27:3b: 6e:25:67:78:92:06:fc:61:b4:57:69:2e:01:5a:80: 83:2e:b4:1e:87:0c:e7:17:8b:bb:72:18:87:c0:de: 79:10:c8:66:72:9d:6e:d1:c0:eb:fa:14:ba:f0:75: e0:be:65:9b:e7:1e:58:23:d3:10:46:47:a9:9c:d0: 98:88:61:f8:34:37:6e:19:3d:00:6a:77:d9:d6:94: 2c:10:7c:a9:1e:0b:8c:a2:cb:e6:89:30:7d:7a:7d: e7:32:59:fd:73:2e:45:f3:34:89:a1:a3:b5:33:57: 33:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:0B:BD:0B:26:7C:CF:4B:A0:61:20:D1:FE:42:7F:15:AF:0D:30:9C X509v3 Authority Key Identifier: keyid:A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:d7:08:d1:60:8c:f7:e6:82:07:30:c4:b0:15:e1:ae:67:d2: 48:da:84:36:da:85:94:8c:81:46:34:45:c0:61:41:f7:b0:ec: 51:31:63:b1:e8:4f:f0:1c:a6:65:5f:87:3f:34:42:bf:0b:7c: 3f:ef:75:c8:3f:7e:42:33:ca:af:7c:c9:8a:e9:b4:24:20:63: ae:f7:df:76:d1:c1:3d:fb:17:f8:f9:a4:7b:ff:90:92:49:cc: 76:f5:a1:3d:a3:cd:15:d2:41:2c:4d:15:c3:e8:ef:b6:3e:a5: 13:d1:25:34:5f:be:c6:6f:bb:08:55:c8:2d:21:19:90:29:be: d3:55:4a:eb:68:7b:06:28:1c:f6:dd:93:8b:85:1e:9f:17:70: da:36:4a:67:16:6f:13:70:4f:30:2b:02:9d:f6:49:b5:59:a2: 04:33:06:da:71:68:ea:fe:01:2d:d7:6f:c2:a9:23:d3:86:ca: 62:b9:c8:1d:7c:6e:54:a6:99:e8:4b:2b:d0:77:f5:26:81:55: 73:0d:a5:28:23:fa:26:5a:83:0a:25:b8:7f:09:17:bd:72:ea: 79:3f:7e:88:38:57:31:df:1c:02:5f:d6:7a:54:f5:fb:55:7d: 96:81:88:53:f2:ac:19:37:f0:06:da:36:62:ad:07:65:8c:4c: db:9e:3f:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHOLToJryhajRTIOtLly/QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZjUyM2Q5NDgzODdkOGM1ZmNkZjc1MmUwYTFjYzQwOGNm ZTgzOTUwHhcNMjUxMjIyMTgwMDU3WhcNMjUxMjIzMTgwMDU3WjAzMTEwLwYDVQQD Eyg2ZDBiYmQwYjI2N2NjZjRiYTA2MTIwZDFmZTQyN2YxNWFmMGQzMDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteDPBsbuaF+naxaPM4Vw/jrgciJC Sd2cZT6gAMPdVoS/PNBudAHBg/lJrsySsD3h+5l9/jlkdDB7NH6okA07KlvXDrVD 1n+tqL5HmWaWkMn79hzqr7XWTdFRZLAuxoYE3ezpFV2+lVuJHU6WXSDKjEG5Zhr1 WX02yWU9O3NyQZqlxdtN9c1CXTsUnYQLjuS8kQGqJztuJWd4kgb8YbRXaS4BWoCD LrQehwznF4u7chiHwN55EMhmcp1u0cDr+hS68HXgvmWb5x5YI9MQRkepnNCYiGH4 NDduGT0AanfZ1pQsEHypHguMosvmiTB9en3nMln9cy5F8zSJoaO1M1czFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG0LvQsmfM9LoGEg0f5CfxWvDTCcMB8GA1UdIwQY MBaAFKT1I9lIOH2MX833UuChzECM/oOVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFBVajJVZzRmWXhmemZkUzRLSE1RSXotZzVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wODVjMzUtMjhhYy00MjQxLWI5NTEt MjBhOTAwYmM3NzZhLzEvcFBVajJVZzRmWXhmemZkUzRLSE1RSXotZzVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8wODVjMzUtMjhhYy00MjQxLWI5NTEtMjBhOTAwYmM3NzZh LzEvcFBVajJVZzRmWXhmemZkUzRLSE1RSXotZzVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjdcI0WCM 9+aCBzDEsBXhrmfSSNqENtqFlIyBRjRFwGFB97DsUTFjsehP8BymZV+HPzRCvwt8 P+91yD9+QjPKr3zJium0JCBjrvffdtHBPfsX+Pmke/+QkknMdvWhPaPNFdJBLE0V w+jvtj6lE9ElNF++xm+7CFXILSEZkCm+01VK62h7Bigc9t2Ti4Uenxdw2jZKZxZv E3BPMCsCnfZJtVmiBDMG2nFo6v4BLddvwqkj04bKYrnIHXxuVKaZ6Esr0Hf1JoFV cw2lKCP6JlqDCiW4fwkXvXLqeT9+iDhXMd8cAl/WelT1+1V9loGIU/KsGTfwBto2 Yq0HZYxM254/sw== -----END CERTIFICATE-----Generated at Tue Dec 23 02:00:08 2025 by rpki-client