This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft File: pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft (raw, json) Hash identifier: Ta4aV7xTJHL7y/insk9XDc5jfKX/q56ZZHigXJ6J23U= Subject key identifier: 33:EB:06:97:5E:D3:B8:C2:57:67:AF:52:43:F7:9C:2B:B6:27:34:A0 Authority key identifier: A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95 Certificate issuer: /CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395 Certificate serial: 019B1CBBEC8F12BDEB47A6DBEC3BDE5AB0E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft Manifest number: 1777 Signing time: Sun 14 Dec 2025 12:00:36 +0000 Manifest this update: Sun 14 Dec 2025 12:00:36 +0000 Manifest next update: Mon 15 Dec 2025 12:00:36 +0000 Files and hashes: 1: 561vyQubUBVe_MLgzSiqqYxU6_Y.roa (hash: 6HivC1fxPXMlCdAVu0fVBq06y4Hg53XB3H7/WZM7Ul4=) 2: pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl (hash: etj3g7ugyhUecaTYWH8S2UaJD1B9Nfa2NjiHXtEA6AY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:bb:ec:8f:12:bd:eb:47:a6:db:ec:3b:de:5a:b0:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395 Validity Not Before: Dec 14 12:00:36 2025 GMT Not After : Dec 15 12:00:36 2025 GMT Subject: CN=33eb06975ed3b8c25767af5243f79c2bb62734a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:4d:95:21:eb:d6:7e:46:95:80:7d:3f:35:0b: 75:a3:88:36:10:1c:8f:a9:a2:81:c5:10:cb:3d:55: 1a:f7:ac:87:a7:33:4f:eb:d5:5e:3c:30:68:9d:43: a5:5d:5c:0e:b3:a2:b2:4f:de:e5:31:54:24:c3:5a: 1d:17:70:29:91:b9:d2:f3:3d:ad:73:e8:40:2f:a5: fe:ec:6e:d2:8d:91:6d:dd:1e:17:37:40:60:26:c2: 21:e7:33:64:25:b5:73:50:51:e8:70:c6:06:72:d4: 55:58:d3:4c:1d:1f:17:a3:3d:e7:c2:de:20:9c:b5: 2f:e0:e3:d1:eb:e1:5e:ac:21:e2:17:2c:3c:85:52: af:06:56:d2:c0:1f:62:5d:5b:33:ae:a3:23:82:f7: cd:91:9e:05:05:bc:7e:b4:ff:e3:a1:20:94:fb:a7: 59:78:e9:d8:06:11:dd:fd:df:86:b7:2f:77:17:54: ec:b9:76:31:8f:c1:b2:dc:2b:14:b7:48:b0:cb:a3: 58:38:09:7a:89:75:bc:7b:5a:da:7a:0b:ff:5a:6a: 07:ec:0e:89:5f:7a:9c:01:d1:89:56:45:f8:d6:35: ac:cf:06:71:cd:c2:d8:79:38:8d:5a:4a:9a:40:9a: a9:cb:76:ac:01:d1:30:0d:33:99:1d:12:f0:52:15: 82:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:EB:06:97:5E:D3:B8:C2:57:67:AF:52:43:F7:9C:2B:B6:27:34:A0 X509v3 Authority Key Identifier: keyid:A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:79:87:e8:c4:a1:bb:c1:72:17:2b:c8:bb:02:e4:17:b5:8d: ad:6d:f5:1e:49:c3:cc:46:04:ec:9b:0b:bb:01:46:6b:b0:89: dd:26:f2:71:ca:1d:6d:53:56:ad:49:a3:5b:51:b8:1e:54:dc: 09:20:5f:76:e8:b6:6c:5e:d5:93:66:ff:8b:09:d2:ac:e5:fb: 34:7a:57:bb:ff:b4:74:f2:fd:ad:a2:f9:eb:e9:e5:59:e5:b8: cf:21:cd:df:47:5b:73:80:1b:bf:fd:3b:e8:36:2f:58:36:d6: 16:d0:e7:64:b0:be:a7:d1:71:37:50:fd:c6:e8:ea:65:d1:5b: 06:91:74:4f:57:bf:fa:1b:0f:68:9e:37:42:4a:03:b5:56:81: 72:af:67:8b:ba:1a:4d:15:0b:bb:78:71:d5:01:4e:80:5e:a4: ef:5e:79:dd:6f:ed:8d:bb:b6:b2:1b:66:31:d1:4f:6a:f5:b5: cc:79:29:5d:ad:c8:1e:54:a2:82:05:7d:55:1f:4a:70:94:54: 81:2c:2b:65:cb:9d:00:ae:59:17:74:32:8d:47:a7:70:a1:2c: 24:da:0d:61:7d:ff:71:ee:ec:60:53:b2:39:97:6e:12:49:40: 67:c1:c2:c1:00:eb:ad:3f:ad:90:64:fc:65:f4:4c:f6:49:a5: 0b:29:40:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscu+yPEr3rR6bb7DveWrDhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZjUyM2Q5NDgzODdkOGM1ZmNkZjc1MmUwYTFjYzQwOGNm ZTgzOTUwHhcNMjUxMjE0MTIwMDM2WhcNMjUxMjE1MTIwMDM2WjAzMTEwLwYDVQQD EygzM2ViMDY5NzVlZDNiOGMyNTc2N2FmNTI0M2Y3OWMyYmI2MjczNGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4k2VIevWfkaVgH0/NQt1o4g2EByP qaKBxRDLPVUa96yHpzNP69VePDBonUOlXVwOs6KyT97lMVQkw1odF3ApkbnS8z2t c+hAL6X+7G7SjZFt3R4XN0BgJsIh5zNkJbVzUFHocMYGctRVWNNMHR8Xoz3nwt4g nLUv4OPR6+FerCHiFyw8hVKvBlbSwB9iXVszrqMjgvfNkZ4FBbx+tP/joSCU+6dZ eOnYBhHd/d+Gty93F1TsuXYxj8Gy3CsUt0iwy6NYOAl6iXW8e1raegv/WmoH7A6J X3qcAdGJVkX41jWszwZxzcLYeTiNWkqaQJqpy3asAdEwDTOZHRLwUhWCbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDPrBpde07jCV2evUkP3nCu2JzSgMB8GA1UdIwQY MBaAFKT1I9lIOH2MX833UuChzECM/oOVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFBVajJVZzRmWXhmemZkUzRLSE1RSXotZzVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wODVjMzUtMjhhYy00MjQxLWI5NTEt MjBhOTAwYmM3NzZhLzEvcFBVajJVZzRmWXhmemZkUzRLSE1RSXotZzVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8wODVjMzUtMjhhYy00MjQxLWI5NTEtMjBhOTAwYmM3NzZh LzEvcFBVajJVZzRmWXhmemZkUzRLSE1RSXotZzVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhnmH6MSh u8FyFyvIuwLkF7WNrW31HknDzEYE7JsLuwFGa7CJ3SbyccodbVNWrUmjW1G4HlTc CSBfdui2bF7Vk2b/iwnSrOX7NHpXu/+0dPL9raL56+nlWeW4zyHN30dbc4Abv/07 6DYvWDbWFtDnZLC+p9FxN1D9xujqZdFbBpF0T1e/+hsPaJ43QkoDtVaBcq9ni7oa TRULu3hx1QFOgF6k71553W/tjbu2shtmMdFPavW1zHkpXa3IHlSiggV9VR9KcJRU gSwrZcudAK5ZF3QyjUencKEsJNoNYX3/ce7sYFOyOZduEklAZ8HCwQDrrT+tkGT8 ZfRM9kmlCylALw== -----END CERTIFICATE-----Generated at Sun Dec 14 17:28:50 2025 by rpki-client