This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.mft File: PUx5OUBiN2vKY6Y6C_lzmSqfgKI.mft (raw, json) Hash identifier: AciN2b+DjiZFwbT1j380F6xMWIKqxdEPe3wdUqnBwcw= Subject key identifier: 17:6A:4F:6C:1D:DF:98:A5:3E:5E:B7:BD:C4:14:22:4D:12:6D:DD:28 Authority key identifier: 3D:4C:79:39:40:62:37:6B:CA:63:A6:3A:0B:F9:73:99:2A:9F:80:A2 Certificate issuer: /CN=3d4c79394062376bca63a63a0bf973992a9f80a2 Certificate serial: 019B34C438A2A959A6369FBD5FAC8C5DE5B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.mft Manifest number: 0F7D Signing time: Fri 19 Dec 2025 04:00:33 +0000 Manifest this update: Fri 19 Dec 2025 04:00:33 +0000 Manifest next update: Sat 20 Dec 2025 04:00:33 +0000 Files and hashes: 1: PUx5OUBiN2vKY6Y6C_lzmSqfgKI.crl (hash: X1G54VaN3o2c8IL4h92V5BzWhivu/9+L+4FaXajBuBE=) 2: yQbKC99XDhYm8cHYtCzNNvOq7pA.roa (hash: RfdjXnuMOAkekc3w4VyM+j8sngFlhqDHkrg6JoAkaVA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.crl rsync://rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.mft rsync://rpki.ripe.net/repository/DEFAULT/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:38:a2:a9:59:a6:36:9f:bd:5f:ac:8c:5d:e5:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d4c79394062376bca63a63a0bf973992a9f80a2 Validity Not Before: Dec 19 04:00:33 2025 GMT Not After : Dec 20 04:00:33 2025 GMT Subject: CN=176a4f6c1ddf98a53e5eb7bdc414224d126ddd28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5f:20:02:e0:5a:33:f9:92:ff:05:09:fb:0f: 3f:2b:6f:db:bf:98:9d:7d:55:9b:45:be:d2:d8:66: d3:38:b6:ae:eb:18:d9:66:e5:e8:13:f8:36:26:0f: 07:a9:b6:8c:39:0f:14:a2:88:7c:f0:53:bf:5d:20: a6:30:f2:fd:6e:6e:ae:cc:8d:40:0c:cf:9a:70:c9: d8:c5:0c:0d:7b:f2:37:3d:15:81:dc:ff:e9:f8:9f: 32:d5:7d:09:4e:06:26:a8:dc:66:fc:f6:60:b2:d8: 46:f3:08:69:cb:bd:04:55:5a:0a:11:76:4c:ca:cc: 22:8b:34:52:cf:c2:65:77:9a:25:6f:4e:61:a8:1b: 6b:40:58:1d:61:1f:0c:60:04:35:92:d6:44:8c:98: 54:93:e8:83:95:fc:cd:a0:d0:43:d6:e3:e1:54:ed: dc:49:a7:d3:30:d0:16:ce:f4:7d:a6:c1:e0:6f:89: e7:1b:8a:06:d1:cb:f9:f4:9f:ce:ad:10:0b:c9:50: f1:4e:71:0f:bf:b8:27:66:8b:59:fd:fc:a4:14:04: 2f:19:ea:03:00:1d:16:0d:86:2b:c7:82:3e:30:17: 7b:68:c3:6a:cc:16:13:9c:cc:7b:8c:a4:76:4f:ff: 47:68:1f:b8:ec:02:b9:df:fd:f1:12:fc:eb:8b:37: ed:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:6A:4F:6C:1D:DF:98:A5:3E:5E:B7:BD:C4:14:22:4D:12:6D:DD:28 X509v3 Authority Key Identifier: keyid:3D:4C:79:39:40:62:37:6B:CA:63:A6:3A:0B:F9:73:99:2A:9F:80:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:8c:21:c2:80:1f:df:f8:3d:0c:e6:18:a6:6c:87:d6:d0:87: a3:da:96:d2:9d:2c:5d:44:44:d6:c1:a7:ad:4f:c1:8d:f4:a5: 6a:f5:78:a8:96:0b:8c:63:d0:7f:fc:f0:3e:d0:21:0c:2d:7e: f6:63:59:4a:55:fb:de:26:f9:bb:cf:53:30:de:de:04:fc:75: a9:9c:94:b7:f8:53:07:38:97:8c:bc:ed:47:a5:2b:22:68:53: a3:13:eb:d9:3c:23:9b:05:08:09:a2:bc:07:c3:d5:a1:f4:41: b5:3c:bb:b9:b0:9e:64:01:8f:21:32:5a:14:45:54:8e:5b:a3: 27:a2:41:74:af:0a:be:55:c3:21:46:df:b2:28:e0:1f:d4:64: bf:64:17:40:dc:82:08:55:0b:49:43:c8:ec:d7:e9:e4:49:95: 89:af:d5:0c:dc:93:43:2f:fb:87:8f:29:ec:08:fa:0f:fb:cd: 4c:a5:ff:5b:c2:9f:88:4d:21:7a:40:39:ac:ce:a8:e8:d0:28: d5:bf:7a:1a:a8:1b:dc:10:8c:d6:92:6c:eb:ed:41:be:2f:9d: 7d:a4:12:7e:30:33:b0:29:85:11:2e:5c:8b:0b:ad:09:be:25: 59:b0:c6:33:77:cf:60:77:3e:c4:c6:f9:5f:dc:68:73:d4:eb: 37:81:c3:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xDiiqVmmNp+9X6yMXeW2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkNGM3OTM5NDA2MjM3NmJjYTYzYTYzYTBiZjk3Mzk5MmE5 ZjgwYTIwHhcNMjUxMjE5MDQwMDMzWhcNMjUxMjIwMDQwMDMzWjAzMTEwLwYDVQQD EygxNzZhNGY2YzFkZGY5OGE1M2U1ZWI3YmRjNDE0MjI0ZDEyNmRkZDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm18gAuBaM/mS/wUJ+w8/K2/bv5id fVWbRb7S2GbTOLau6xjZZuXoE/g2Jg8HqbaMOQ8Uooh88FO/XSCmMPL9bm6uzI1A DM+acMnYxQwNe/I3PRWB3P/p+J8y1X0JTgYmqNxm/PZgsthG8whpy70EVVoKEXZM yswiizRSz8Jld5olb05hqBtrQFgdYR8MYAQ1ktZEjJhUk+iDlfzNoNBD1uPhVO3c SafTMNAWzvR9psHgb4nnG4oG0cv59J/OrRALyVDxTnEPv7gnZotZ/fykFAQvGeoD AB0WDYYrx4I+MBd7aMNqzBYTnMx7jKR2T/9HaB+47AK53/3xEvzrizftLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBdqT2wd35ilPl63vcQUIk0Sbd0oMB8GA1UdIwQY MBaAFD1MeTlAYjdrymOmOgv5c5kqn4CiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFV4NU9VQmlOMnZLWTZZNkNfbHptU3FmZ0tJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8wYTg2NTEtNjJlYy00OWY0LWJkZTAt MTU1Yzc1YTQ1YzI3LzEvUFV4NU9VQmlOMnZLWTZZNkNfbHptU3FmZ0tJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS8wYTg2NTEtNjJlYy00OWY0LWJkZTAtMTU1Yzc1YTQ1YzI3 LzEvUFV4NU9VQmlOMnZLWTZZNkNfbHptU3FmZ0tJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjYwhwoAf 3/g9DOYYpmyH1tCHo9qW0p0sXURE1sGnrU/BjfSlavV4qJYLjGPQf/zwPtAhDC1+ 9mNZSlX73ib5u89TMN7eBPx1qZyUt/hTBziXjLztR6UrImhToxPr2TwjmwUICaK8 B8PVofRBtTy7ubCeZAGPITJaFEVUjlujJ6JBdK8KvlXDIUbfsijgH9Rkv2QXQNyC CFULSUPI7Nfp5EmVia/VDNyTQy/7h48p7Aj6D/vNTKX/W8KfiE0hekA5rM6o6NAo 1b96Gqgb3BCM1pJs6+1Bvi+dfaQSfjAzsCmFES5ciwutCb4lWbDGM3fPYHc+xMb5 X9xoc9TrN4HDDw== -----END CERTIFICATE-----Generated at Fri Dec 19 05:47:32 2025 by rpki-client