This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.mft File: PUx5OUBiN2vKY6Y6C_lzmSqfgKI.mft (raw, json) Hash identifier: wDSOxyfebCa5BnxrKSPpCPblUoQ1A9QgFR5j9myg5XI= Subject key identifier: 5B:D7:84:CC:17:2A:20:C1:99:75:5D:E3:51:D7:5D:B7:63:DB:2C:F0 Authority key identifier: 3D:4C:79:39:40:62:37:6B:CA:63:A6:3A:0B:F9:73:99:2A:9F:80:A2 Certificate issuer: /CN=3d4c79394062376bca63a63a0bf973992a9f80a2 Certificate serial: 019AF12D913AF29851E78836844C8E5FE1BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.mft Manifest number: 0F5A Signing time: Sat 06 Dec 2025 01:01:26 +0000 Manifest this update: Sat 06 Dec 2025 01:01:26 +0000 Manifest next update: Sun 07 Dec 2025 01:01:26 +0000 Files and hashes: 1: PUx5OUBiN2vKY6Y6C_lzmSqfgKI.crl (hash: AvRKhwu36FPqJ0KNGtmgDm+BJtw6Iv61j+A46Si3ibg=) 2: yQbKC99XDhYm8cHYtCzNNvOq7pA.roa (hash: RfdjXnuMOAkekc3w4VyM+j8sngFlhqDHkrg6JoAkaVA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.crl rsync://rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.mft rsync://rpki.ripe.net/repository/DEFAULT/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:91:3a:f2:98:51:e7:88:36:84:4c:8e:5f:e1:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d4c79394062376bca63a63a0bf973992a9f80a2 Validity Not Before: Dec 6 01:01:26 2025 GMT Not After : Dec 7 01:01:26 2025 GMT Subject: CN=5bd784cc172a20c199755de351d75db763db2cf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fd:4f:f6:90:94:40:4d:68:89:85:ee:68:5d: 47:88:6c:f8:5f:9a:85:66:48:c4:13:9b:12:56:4c: 93:68:cf:4e:32:f6:56:58:3f:ed:d4:14:3c:81:5b: 5e:88:de:50:dc:07:66:01:96:a4:54:7f:f2:d4:cd: 51:ae:37:23:0f:9a:ff:79:fb:7d:7e:ae:c7:35:85: 09:64:3c:d1:52:58:29:01:96:bc:72:a3:a8:96:28: f0:7b:94:f4:0b:91:fe:1c:30:fa:f9:87:0f:26:22: 53:df:65:3a:ea:66:d0:91:25:e5:65:5d:6c:c6:0f: 1b:d4:f2:c5:fb:c8:75:e4:d1:4e:7a:04:9e:21:c3: 4e:d5:b7:cf:45:0f:e6:64:ac:17:b2:d6:1e:70:17: 87:c6:13:71:e0:71:4a:d4:1a:8f:aa:73:e6:ef:96: 20:5f:e4:ca:3a:6c:f3:42:c5:ac:ae:7d:5c:da:50: 4f:9b:e4:8e:0b:34:f2:21:66:de:87:f7:9d:af:24: da:75:26:73:3a:64:07:17:23:16:c6:d8:03:d2:e1: f4:12:16:d9:74:f1:f4:89:5f:9f:08:79:6a:47:22: 69:9f:e1:7a:9b:31:ea:0f:99:f1:4a:54:19:f3:99: 0a:a2:7a:72:59:f0:4e:6e:6d:9d:9c:a4:cc:5c:ee: 4e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D7:84:CC:17:2A:20:C1:99:75:5D:E3:51:D7:5D:B7:63:DB:2C:F0 X509v3 Authority Key Identifier: keyid:3D:4C:79:39:40:62:37:6B:CA:63:A6:3A:0B:F9:73:99:2A:9F:80:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:3e:96:5c:80:88:33:37:4c:d3:e8:b4:3f:0b:1b:59:b7:79: 71:86:fa:7b:ed:1f:c8:60:c0:35:5d:37:e1:e0:5c:29:71:3c: d5:6f:86:d8:79:62:31:e7:b5:9b:f9:fd:7a:4e:44:34:41:ec: dc:32:fc:5d:f0:b3:c9:e0:7b:ce:39:40:d3:fe:e5:f5:e1:c3: 99:40:1d:ce:fd:c6:48:4a:51:17:06:c8:5a:7c:6a:0f:3d:eb: f7:75:d7:94:c7:5a:ed:68:2e:22:7c:d4:bc:9d:14:c0:df:94: eb:17:67:57:19:ec:3d:8c:a5:e8:f1:39:f0:ef:6f:bd:19:f0: bc:85:89:4a:1e:4d:99:3f:a5:a6:14:e8:10:99:0c:66:71:e4: 92:7e:7d:1f:d2:33:3a:ec:7d:a0:3f:d7:83:0e:74:41:2c:8a: 3b:07:88:4e:e1:67:a0:fe:77:39:5b:65:24:b6:3c:54:43:6d: ee:03:ce:26:84:c6:90:af:8b:52:f4:96:07:2f:20:84:a0:8c: 49:87:f4:8b:13:1d:91:e8:e2:f9:38:e8:b9:18:fd:d0:c4:ef: 97:f2:a4:6b:a0:a6:04:da:62:00:e1:9b:79:c4:0d:d0:0b:ba: c0:7d:cf:52:e9:17:0e:18:f9:dc:da:f4:a5:74:b7:3f:42:95: 32:25:75:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLZE68phR54g2hEyOX+G7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkNGM3OTM5NDA2MjM3NmJjYTYzYTYzYTBiZjk3Mzk5MmE5 ZjgwYTIwHhcNMjUxMjA2MDEwMTI2WhcNMjUxMjA3MDEwMTI2WjAzMTEwLwYDVQQD Eyg1YmQ3ODRjYzE3MmEyMGMxOTk3NTVkZTM1MWQ3NWRiNzYzZGIyY2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApv1P9pCUQE1oiYXuaF1HiGz4X5qF ZkjEE5sSVkyTaM9OMvZWWD/t1BQ8gVteiN5Q3AdmAZakVH/y1M1RrjcjD5r/eft9 fq7HNYUJZDzRUlgpAZa8cqOolijwe5T0C5H+HDD6+YcPJiJT32U66mbQkSXlZV1s xg8b1PLF+8h15NFOegSeIcNO1bfPRQ/mZKwXstYecBeHxhNx4HFK1BqPqnPm75Yg X+TKOmzzQsWsrn1c2lBPm+SOCzTyIWbeh/edryTadSZzOmQHFyMWxtgD0uH0EhbZ dPH0iV+fCHlqRyJpn+F6mzHqD5nxSlQZ85kKonpyWfBObm2dnKTMXO5OxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFvXhMwXKiDBmXVd41HXXbdj2yzwMB8GA1UdIwQY MBaAFD1MeTlAYjdrymOmOgv5c5kqn4CiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFV4NU9VQmlOMnZLWTZZNkNfbHptU3FmZ0tJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8wYTg2NTEtNjJlYy00OWY0LWJkZTAt MTU1Yzc1YTQ1YzI3LzEvUFV4NU9VQmlOMnZLWTZZNkNfbHptU3FmZ0tJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS8wYTg2NTEtNjJlYy00OWY0LWJkZTAtMTU1Yzc1YTQ1YzI3 LzEvUFV4NU9VQmlOMnZLWTZZNkNfbHptU3FmZ0tJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIT6WXICI MzdM0+i0PwsbWbd5cYb6e+0fyGDANV034eBcKXE81W+G2HliMee1m/n9ek5ENEHs 3DL8XfCzyeB7zjlA0/7l9eHDmUAdzv3GSEpRFwbIWnxqDz3r93XXlMda7WguInzU vJ0UwN+U6xdnVxnsPYyl6PE58O9vvRnwvIWJSh5NmT+lphToEJkMZnHkkn59H9Iz Oux9oD/Xgw50QSyKOweITuFnoP53OVtlJLY8VENt7gPOJoTGkK+LUvSWBy8ghKCM SYf0ixMdkeji+TjouRj90MTvl/Kka6CmBNpiAOGbecQN0Au6wH3PUukXDhj53Nr0 pXS3P0KVMiV1ZA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:21 2025 by rpki-client