This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft File: pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft (raw, json) Hash identifier: 7YAtsROlKMmSVdJXli37due+Y5gai7XXe0dFDtGGTXk= Subject key identifier: 83:0A:08:D4:96:34:4E:13:AA:90:6D:91:0C:F2:B7:C8:57:CA:E6:02 Authority key identifier: A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC Certificate issuer: /CN=a5472b1473bc781b70440315c83d119c8abc86fc Certificate serial: 019B2D4216724B028B014E52FC0668DAF09A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft Manifest number: 14DB Signing time: Wed 17 Dec 2025 17:01:04 +0000 Manifest this update: Wed 17 Dec 2025 17:01:04 +0000 Manifest next update: Thu 18 Dec 2025 17:01:04 +0000 Files and hashes: 1: 2fiCKenUyZEGcgyEcbC3Fxz5B0o.roa (hash: C3sRzOd2/ABXN5AYlIy2eOFDIIGwTRNmpvXK9lls8wk=) 2: FKocTxCwOpTwhx81CYxQkqkOggY.roa (hash: 4ohmnB8YwygbCXyKutj9jSnUxcPLc8vBK0YjqJ6KB28=) 3: pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl (hash: YLojgSpF8LDJD4SCIS9bTeKJVsKQ2RAkeNvCuxcPsts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:42:16:72:4b:02:8b:01:4e:52:fc:06:68:da:f0:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5472b1473bc781b70440315c83d119c8abc86fc Validity Not Before: Dec 17 17:01:04 2025 GMT Not After : Dec 18 17:01:04 2025 GMT Subject: CN=830a08d496344e13aa906d910cf2b7c857cae602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f1:9a:95:31:b2:a8:99:7b:6a:2f:5d:da:9e: 58:7b:c7:da:2d:1d:e6:52:ae:59:85:66:d0:80:b4: bf:12:d9:c4:6f:7d:88:17:15:88:7a:47:08:01:d2: 18:85:64:41:f3:d5:57:2c:65:6c:d4:f7:6e:9e:87: b3:12:31:b1:5b:5c:ab:6b:47:0b:e2:5b:aa:c0:11: b2:27:ca:e6:83:31:42:b9:7a:d3:bb:68:0e:9e:f3: 48:ee:24:21:d8:ba:a7:62:a6:a9:4c:e4:17:25:83: 2c:51:d4:9c:a0:e8:26:da:05:0b:d5:0f:5b:3f:c7: f2:91:78:5c:67:36:58:5e:4e:df:40:44:0e:e9:3a: f1:cb:a5:7b:2d:1f:de:fc:94:71:bb:6b:2b:67:a1: 9f:1e:a2:f9:0e:35:9e:35:d1:22:fa:45:a7:a2:b7: 4a:30:b0:50:50:56:ee:26:9d:d7:cc:b8:8f:3a:90: 38:41:68:88:2e:0e:62:53:ad:77:2d:89:a6:ca:53: cb:1d:6e:fe:8a:0e:cc:f0:7b:2c:ed:de:9d:b2:2f: 2f:49:33:03:fb:1e:26:09:e9:47:88:02:90:0d:07: 20:93:21:52:a4:1c:13:c2:65:7d:05:d2:ed:2b:ff: 26:9e:5f:71:54:fe:04:c4:68:de:ee:c2:9e:1b:55: 3a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:0A:08:D4:96:34:4E:13:AA:90:6D:91:0C:F2:B7:C8:57:CA:E6:02 X509v3 Authority Key Identifier: keyid:A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:b0:05:26:96:64:7e:64:18:41:a5:74:a3:37:0a:1e:98:4a: 87:fd:b5:ad:0c:b2:cd:19:ff:e0:7b:b4:5e:91:2b:e6:74:1b: bc:60:9d:33:40:d3:76:d2:4a:e4:b8:4b:56:df:b2:6c:c8:80: f9:cc:a6:5d:47:94:20:e4:19:04:5a:6b:23:72:75:cc:e7:91: ec:6f:b6:97:ee:25:36:9c:44:e4:95:00:8e:22:88:28:8f:91: d8:86:75:62:88:ca:3f:ae:61:db:52:51:ff:6c:57:87:45:c7: e9:d3:9f:89:94:b0:72:a6:44:73:99:3c:ae:cd:48:5e:a1:7d: e3:fc:d2:0e:41:69:47:0d:a2:9d:3c:40:8f:24:d3:64:c6:2b: bf:a0:9d:28:39:7e:f2:1a:1d:e6:95:c5:72:ac:72:e0:0d:b8: 38:f5:a6:9c:5b:0d:60:7d:c2:9b:17:35:f7:7c:2d:e4:c9:f7: 2e:75:ad:bc:30:cc:5a:fd:fe:9c:9b:58:66:8a:bb:75:f6:c7: 38:1a:47:25:df:47:57:93:0f:41:fc:64:55:9c:4b:d0:fe:2e: 8f:ab:c5:35:fb:b8:83:d7:aa:f6:6a:ff:94:e1:82:21:0b:02: 6f:73:51:a9:61:25:a7:b4:58:96:03:7e:a0:8c:8f:02:25:2a: 39:51:4b:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstQhZySwKLAU5S/AZo2vCaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NDcyYjE0NzNiYzc4MWI3MDQ0MDMxNWM4M2QxMTljOGFi Yzg2ZmMwHhcNMjUxMjE3MTcwMTA0WhcNMjUxMjE4MTcwMTA0WjAzMTEwLwYDVQQD Eyg4MzBhMDhkNDk2MzQ0ZTEzYWE5MDZkOTEwY2YyYjdjODU3Y2FlNjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vGalTGyqJl7ai9d2p5Ye8faLR3m Uq5ZhWbQgLS/EtnEb32IFxWIekcIAdIYhWRB89VXLGVs1PdunoezEjGxW1yra0cL 4luqwBGyJ8rmgzFCuXrTu2gOnvNI7iQh2LqnYqapTOQXJYMsUdScoOgm2gUL1Q9b P8fykXhcZzZYXk7fQEQO6Trxy6V7LR/e/JRxu2srZ6GfHqL5DjWeNdEi+kWnordK MLBQUFbuJp3XzLiPOpA4QWiILg5iU613LYmmylPLHW7+ig7M8Hss7d6dsi8vSTMD +x4mCelHiAKQDQcgkyFSpBwTwmV9BdLtK/8mnl9xVP4ExGje7sKeG1U6qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIMKCNSWNE4TqpBtkQzyt8hXyuYCMB8GA1UdIwQY MBaAFKVHKxRzvHgbcEQDFcg9EZyKvIb8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFVjckZITzhlQnR3UkFNVnlEMFJuSXE4aHZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8zMDExMmYtMGU5ZC00ZmM4LWI4NTQt YjE1NjViMjU1ODU0LzEvcFVjckZITzhlQnR3UkFNVnlEMFJuSXE4aHZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8zMDExMmYtMGU5ZC00ZmM4LWI4NTQtYjE1NjViMjU1ODU0 LzEvcFVjckZITzhlQnR3UkFNVnlEMFJuSXE4aHZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb7AFJpZk fmQYQaV0ozcKHphKh/21rQyyzRn/4Hu0XpEr5nQbvGCdM0DTdtJK5LhLVt+ybMiA +cymXUeUIOQZBFprI3J1zOeR7G+2l+4lNpxE5JUAjiKIKI+R2IZ1YojKP65h21JR /2xXh0XH6dOfiZSwcqZEc5k8rs1IXqF94/zSDkFpRw2inTxAjyTTZMYrv6CdKDl+ 8hod5pXFcqxy4A24OPWmnFsNYH3Cmxc193wt5Mn3LnWtvDDMWv3+nJtYZoq7dfbH OBpHJd9HV5MPQfxkVZxL0P4uj6vFNfu4g9eq9mr/lOGCIQsCb3NRqWElp7RYlgN+ oIyPAiUqOVFLqw== -----END CERTIFICATE-----Generated at Wed Dec 17 19:37:25 2025 by rpki-client