This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.mft File: pUCr0ZiCysgLdm1yrY_sJKuVUK8.mft (raw, json) Hash identifier: Gh5/8KNAlPpnT6NYOaYBApIy03Y8cGfQDNipzey+0rc= Subject key identifier: A8:75:49:67:4B:52:2A:F3:B8:84:D5:EC:A7:A0:DD:E9:A8:C7:93:C5 Authority key identifier: A5:40:AB:D1:98:82:CA:C8:0B:76:6D:72:AD:8F:EC:24:AB:95:50:AF Certificate issuer: /CN=a540abd19882cac80b766d72ad8fec24ab9550af Certificate serial: 019AF19BAA0802502CABB2694D59BCA45795 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUCr0ZiCysgLdm1yrY_sJKuVUK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.mft Manifest number: 012D Signing time: Sat 06 Dec 2025 03:01:41 +0000 Manifest this update: Sat 06 Dec 2025 03:01:41 +0000 Manifest next update: Sun 07 Dec 2025 03:01:41 +0000 Files and hashes: 1: pUCr0ZiCysgLdm1yrY_sJKuVUK8.crl (hash: G87CaeLAQzKunisrKE7fv3irYug3P2SXa41e1hzPqe8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.mft rsync://rpki.ripe.net/repository/DEFAULT/pUCr0ZiCysgLdm1yrY_sJKuVUK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:aa:08:02:50:2c:ab:b2:69:4d:59:bc:a4:57:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a540abd19882cac80b766d72ad8fec24ab9550af Validity Not Before: Dec 6 03:01:41 2025 GMT Not After : Dec 7 03:01:41 2025 GMT Subject: CN=a87549674b522af3b884d5eca7a0dde9a8c793c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c4:cc:db:5d:ef:9a:88:07:ad:ff:3f:f9:4c: 97:bd:91:c8:e4:b3:16:7b:f0:46:de:40:d1:38:61: eb:12:99:d6:fb:a0:19:3f:58:1c:3c:34:4d:26:ca: d5:b7:cf:6c:1c:0b:c1:4d:81:62:77:03:63:af:c5: 1d:2d:3b:2b:65:3b:6a:39:b4:85:13:36:28:f1:9d: b0:f6:31:0b:0c:e2:f1:4e:82:39:ca:b4:a5:13:8f: fd:a5:c1:3f:11:0a:2b:33:0e:8f:90:ca:3a:3a:fc: 05:e4:2d:f6:c1:b7:18:9a:aa:6c:00:68:f4:1f:03: 50:55:8b:e4:c5:8f:71:70:9c:12:70:1c:cc:c8:a5: a5:b0:10:42:9f:9c:b5:1d:fc:43:ee:28:40:38:c3: 98:f6:2f:6a:1e:8f:1f:39:71:16:b6:f9:f2:e8:6c: 4f:ba:95:cf:b1:c2:1e:2b:83:5f:81:09:40:46:27: f7:ef:92:a7:c7:db:32:9c:c4:83:78:25:7d:5b:06: 90:78:61:8a:24:f8:de:5f:03:d1:ff:94:35:eb:c7: 77:51:6c:bf:bb:0d:3a:89:c4:dd:07:34:60:3c:b5: 02:44:3a:5a:1d:a1:42:60:e0:c7:5e:76:ae:a7:73: 39:bb:65:58:25:8e:e9:da:ea:8c:f3:7b:a0:65:62: a4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:75:49:67:4B:52:2A:F3:B8:84:D5:EC:A7:A0:DD:E9:A8:C7:93:C5 X509v3 Authority Key Identifier: keyid:A5:40:AB:D1:98:82:CA:C8:0B:76:6D:72:AD:8F:EC:24:AB:95:50:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUCr0ZiCysgLdm1yrY_sJKuVUK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ea:f9:22:3f:d1:50:f7:3f:b8:a0:3a:f5:a8:3a:6b:5e:ca:23: c7:46:da:1c:8f:85:7b:32:c7:05:4f:51:46:86:84:20:dc:f0: b3:ab:0f:7d:c6:6e:15:4a:50:68:34:95:15:11:4e:93:ac:59: a8:5b:06:4c:14:5b:be:c5:c3:ee:52:67:11:90:35:25:66:82: 55:85:af:c9:23:96:d8:b1:ce:d2:4a:77:9b:07:85:fd:4f:1e: fa:d3:2c:f8:8e:2f:af:64:85:aa:31:3f:77:d6:4b:e4:7a:37: d4:c4:0c:31:cd:0a:7d:58:6f:7f:dd:ca:56:a2:71:23:37:8c: 68:14:10:1e:ca:5f:0a:0e:80:30:01:10:32:9f:c1:5b:01:c5: e9:be:02:7d:dc:eb:1f:55:f3:bd:96:14:c4:fd:1f:f3:ca:38: d9:3f:54:7d:ff:81:f6:e2:06:9d:4b:20:f1:54:92:5b:42:ed: 07:3e:9f:5a:1d:83:db:3d:68:9a:58:42:7e:ad:e8:4d:b5:f5: 02:e2:fc:7d:4d:3b:9d:72:e9:b8:aa:dd:65:c4:92:a9:f8:9d: b4:4f:08:08:db:3e:ab:fb:96:7d:5e:6a:90:79:8e:e2:99:8e: f6:a8:82:e7:85:5b:a6:5d:d8:2a:5a:bb:ee:28:42:fe:39:5f: 4e:b6:c6:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm6oIAlAsq7JpTVm8pFeVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NDBhYmQxOTg4MmNhYzgwYjc2NmQ3MmFkOGZlYzI0YWI5 NTUwYWYwHhcNMjUxMjA2MDMwMTQxWhcNMjUxMjA3MDMwMTQxWjAzMTEwLwYDVQQD EyhhODc1NDk2NzRiNTIyYWYzYjg4NGQ1ZWNhN2EwZGRlOWE4Yzc5M2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscTM213vmogHrf8/+UyXvZHI5LMW e/BG3kDROGHrEpnW+6AZP1gcPDRNJsrVt89sHAvBTYFidwNjr8UdLTsrZTtqObSF EzYo8Z2w9jELDOLxToI5yrSlE4/9pcE/EQorMw6PkMo6OvwF5C32wbcYmqpsAGj0 HwNQVYvkxY9xcJwScBzMyKWlsBBCn5y1HfxD7ihAOMOY9i9qHo8fOXEWtvny6GxP upXPscIeK4NfgQlARif375Knx9synMSDeCV9WwaQeGGKJPjeXwPR/5Q168d3UWy/ uw06icTdBzRgPLUCRDpaHaFCYODHXnaup3M5u2VYJY7p2uqM83ugZWKkDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKh1SWdLUirzuITV7Keg3emox5PFMB8GA1UdIwQY MBaAFKVAq9GYgsrIC3Ztcq2P7CSrlVCvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFVDcjBaaUN5c2dMZG0xeXJZX3NKS3VWVUs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy83NmMzZGYtYTY5Yi00NWQxLTkxNzIt ZGViMTM5YzRmMWI2LzEvcFVDcjBaaUN5c2dMZG0xeXJZX3NKS3VWVUs4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy83NmMzZGYtYTY5Yi00NWQxLTkxNzItZGViMTM5YzRmMWI2 LzEvcFVDcjBaaUN5c2dMZG0xeXJZX3NKS3VWVUs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6vkiP9FQ 9z+4oDr1qDprXsojx0baHI+FezLHBU9RRoaEINzws6sPfcZuFUpQaDSVFRFOk6xZ qFsGTBRbvsXD7lJnEZA1JWaCVYWvySOW2LHO0kp3mweF/U8e+tMs+I4vr2SFqjE/ d9ZL5Ho31MQMMc0KfVhvf93KVqJxIzeMaBQQHspfCg6AMAEQMp/BWwHF6b4Cfdzr H1XzvZYUxP0f88o42T9Uff+B9uIGnUsg8VSSW0LtBz6fWh2D2z1omlhCfq3oTbX1 AuL8fU07nXLpuKrdZcSSqfidtE8ICNs+q/uWfV5qkHmO4pmO9qiC54Vbpl3YKlq7 7ihC/jlfTrbGsw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:39:02 2025 by rpki-client