This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.mft File: _PU0Avp2-gY3bN6mvNOV4YAHnbc.mft (raw, json) Hash identifier: 0LM0DN95Iko67YfsE83RGtvvojp6gmyGauCVEzjDSI4= Subject key identifier: B8:9C:BA:E2:8E:83:4A:04:BA:C5:32:1D:38:37:B7:35:78:1F:60:BD Authority key identifier: FC:F5:34:02:FA:76:FA:06:37:6C:DE:A6:BC:D3:95:E1:80:07:9D:B7 Certificate issuer: /CN=fcf53402fa76fa06376cdea6bcd395e180079db7 Certificate serial: 019AF1D1ABC41BD32A5B2A9090423A3280E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PU0Avp2-gY3bN6mvNOV4YAHnbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.mft Manifest number: 1470 Signing time: Sat 06 Dec 2025 04:00:41 +0000 Manifest this update: Sat 06 Dec 2025 04:00:41 +0000 Manifest next update: Sun 07 Dec 2025 04:00:41 +0000 Files and hashes: 1: 5QVE77uQnSCLbr9iYF89fXdJU-M.roa (hash: IPgTEo7hNu+XjVm/3xLzVMgF8abs7044xMIbnapyQg8=) 2: _PU0Avp2-gY3bN6mvNOV4YAHnbc.crl (hash: HclyXST1sE75YrpDyVWb+ZGNsImnC0c+MB0hv00l5Jk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.crl rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.mft rsync://rpki.ripe.net/repository/DEFAULT/_PU0Avp2-gY3bN6mvNOV4YAHnbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ab:c4:1b:d3:2a:5b:2a:90:90:42:3a:32:80:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcf53402fa76fa06376cdea6bcd395e180079db7 Validity Not Before: Dec 6 04:00:41 2025 GMT Not After : Dec 7 04:00:41 2025 GMT Subject: CN=b89cbae28e834a04bac5321d3837b735781f60bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:1b:d1:b6:52:2c:76:12:88:c9:57:a7:e8:d8: 84:8d:38:8d:e0:99:74:fa:8a:04:6f:c6:25:2d:eb: 2d:d1:0c:52:b6:3d:67:f6:d6:f4:a6:c0:78:c7:b6: 38:15:fc:71:1f:9e:96:20:ff:8c:f5:0d:37:71:0b: c0:88:1d:33:8c:bb:ac:0f:d9:f8:ac:26:93:96:06: 3c:28:7c:0e:25:66:15:2c:2e:a8:bb:c8:6f:eb:d2: a4:24:f4:7b:76:a9:17:c1:ba:91:9b:2d:f1:a8:30: fa:a8:d3:c7:b6:7c:d6:ec:72:54:c2:d0:90:b6:fb: 44:e9:b4:06:9d:1e:1d:42:f8:48:de:3b:df:4d:93: 51:a9:1c:00:86:d3:af:8c:d9:36:21:54:99:4a:ae: 35:b7:1f:1f:ae:19:d9:61:35:65:79:3b:5d:05:8c: 2d:d5:4a:e5:13:36:01:34:10:c7:d1:d9:97:43:85: 21:16:8d:38:c1:76:25:1b:31:46:3c:33:c1:7e:2d: 65:e7:82:00:03:8c:ee:51:af:c8:eb:c8:14:6d:46: 8e:26:af:4a:3a:32:a2:17:00:a4:09:cd:60:22:8f: ee:00:14:a5:24:6c:45:bf:e5:95:c5:cc:3f:cb:b0: 5a:6d:f3:9e:ee:52:d8:19:ba:df:51:1f:d4:8b:ad: 1c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:9C:BA:E2:8E:83:4A:04:BA:C5:32:1D:38:37:B7:35:78:1F:60:BD X509v3 Authority Key Identifier: keyid:FC:F5:34:02:FA:76:FA:06:37:6C:DE:A6:BC:D3:95:E1:80:07:9D:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PU0Avp2-gY3bN6mvNOV4YAHnbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:21:95:ed:5a:3f:46:27:ce:58:ad:3a:88:eb:e1:a5:97:5c: 27:56:e7:fa:ca:36:db:4c:a4:d5:06:9c:b3:91:c2:3c:38:67: 6e:55:33:3d:5a:3f:ed:2c:99:2f:94:f3:87:44:1f:13:9e:57: e7:f0:f7:f9:27:a2:ea:83:06:dc:ad:4a:1f:d4:6d:27:2c:c6: 2b:c7:a1:ec:ed:64:16:b5:c6:6c:45:58:33:6f:40:a8:27:23: cf:65:b2:8f:69:25:7e:3a:00:9e:77:63:ab:30:21:f3:90:93: 7e:f7:5c:35:5b:fa:0c:07:4f:8c:9c:0e:c2:93:3b:f3:5b:1d: f0:02:5c:9d:48:cb:c8:8d:f5:63:65:3e:63:fa:bc:9d:9d:9c: fa:b7:53:38:76:93:96:df:30:6e:23:1c:73:a8:ce:f7:56:3b: 8e:ae:25:55:ee:9a:6a:57:14:e1:b6:13:d0:ac:c3:82:a2:e5: 74:8c:71:4f:6c:f3:73:49:44:eb:dc:de:71:50:f3:ea:fe:f9: 4e:c7:99:4f:18:b2:08:9f:69:10:0c:46:ac:52:b1:20:ec:3a: f8:26:6c:25:24:9f:7c:e8:a1:4c:a6:a7:b8:be:bd:77:6e:60: dc:94:8b:1b:58:94:c5:06:d0:dd:ae:e8:20:d9:42:20:f2:d5: 51:7b:bf:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0avEG9MqWyqQkEI6MoDhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjZjUzNDAyZmE3NmZhMDYzNzZjZGVhNmJjZDM5NWUxODAw NzlkYjcwHhcNMjUxMjA2MDQwMDQxWhcNMjUxMjA3MDQwMDQxWjAzMTEwLwYDVQQD EyhiODljYmFlMjhlODM0YTA0YmFjNTMyMWQzODM3YjczNTc4MWY2MGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBvRtlIsdhKIyVen6NiEjTiN4Jl0 +ooEb8YlLest0QxStj1n9tb0psB4x7Y4FfxxH56WIP+M9Q03cQvAiB0zjLusD9n4 rCaTlgY8KHwOJWYVLC6ou8hv69KkJPR7dqkXwbqRmy3xqDD6qNPHtnzW7HJUwtCQ tvtE6bQGnR4dQvhI3jvfTZNRqRwAhtOvjNk2IVSZSq41tx8frhnZYTVleTtdBYwt 1UrlEzYBNBDH0dmXQ4UhFo04wXYlGzFGPDPBfi1l54IAA4zuUa/I68gUbUaOJq9K OjKiFwCkCc1gIo/uABSlJGxFv+WVxcw/y7BabfOe7lLYGbrfUR/Ui60ckQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLicuuKOg0oEusUyHTg3tzV4H2C9MB8GA1UdIwQY MBaAFPz1NAL6dvoGN2zeprzTleGAB523MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1BVMEF2cDItZ1kzYk42bXZOT1Y0WUFIbmJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84YzgzMTMtZWQxYy00MTRiLWI0Y2Mt NWVkMDU3MDI1NTE2LzEvX1BVMEF2cDItZ1kzYk42bXZOT1Y0WUFIbmJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni84YzgzMTMtZWQxYy00MTRiLWI0Y2MtNWVkMDU3MDI1NTE2 LzEvX1BVMEF2cDItZ1kzYk42bXZOT1Y0WUFIbmJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARSGV7Vo/ RifOWK06iOvhpZdcJ1bn+so220yk1Qacs5HCPDhnblUzPVo/7SyZL5Tzh0QfE55X 5/D3+Sei6oMG3K1KH9RtJyzGK8eh7O1kFrXGbEVYM29AqCcjz2Wyj2klfjoAnndj qzAh85CTfvdcNVv6DAdPjJwOwpM781sd8AJcnUjLyI31Y2U+Y/q8nZ2c+rdTOHaT lt8wbiMcc6jO91Y7jq4lVe6aalcU4bYT0KzDgqLldIxxT2zzc0lE69zecVDz6v75 TseZTxiyCJ9pEAxGrFKxIOw6+CZsJSSffOihTKanuL69d25g3JSLG1iUxQbQ3a7o INlCIPLVUXu/aw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:07:19 2025 by rpki-client