This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.mft File: rcpuVKzQJs76NitCJ7iQgcClAEk.mft (raw, json) Hash identifier: 0Op3eQn3TaP5/pZ3sxv/WKhFp48YyT/HeTvCLeQ7Czk= Subject key identifier: 23:13:A7:2B:FB:BE:13:CD:1D:40:DB:ED:1B:D4:FF:6E:30:A3:50:A2 Authority key identifier: AD:CA:6E:54:AC:D0:26:CE:FA:36:2B:42:27:B8:90:81:C0:A5:00:49 Certificate issuer: /CN=adca6e54acd026cefa362b4227b89081c0a50049 Certificate serial: 019B2D0B594ECC84B23209E4A617E480E3B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rcpuVKzQJs76NitCJ7iQgcClAEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.mft Manifest number: 04DF Signing time: Wed 17 Dec 2025 16:01:17 +0000 Manifest this update: Wed 17 Dec 2025 16:01:17 +0000 Manifest next update: Thu 18 Dec 2025 16:01:17 +0000 Files and hashes: 1: Il8CSveHvqeNn_p3vs8bpbLd6io.roa (hash: uiHORBlA13Y/5lqKteAG7JddRpbP5NcKY0DSl6kuJ/A=) 2: rcpuVKzQJs76NitCJ7iQgcClAEk.crl (hash: 7Ng22PmpDpVFIdEYmC/W4EqiI6cco5btprQYmbGa2LQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.mft rsync://rpki.ripe.net/repository/DEFAULT/rcpuVKzQJs76NitCJ7iQgcClAEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 16:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:59:4e:cc:84:b2:32:09:e4:a6:17:e4:80:e3:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adca6e54acd026cefa362b4227b89081c0a50049 Validity Not Before: Dec 17 16:01:17 2025 GMT Not After : Dec 18 16:01:17 2025 GMT Subject: CN=2313a72bfbbe13cd1d40dbed1bd4ff6e30a350a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:25:9e:54:ad:ea:41:29:b9:5b:1d:b1:ae:f3: 8a:64:ba:d9:9e:21:d2:73:d9:e1:88:3e:e2:01:17: b6:54:41:e5:43:77:e5:95:6f:28:f9:91:58:e9:72: c4:49:d8:2c:f8:bd:69:a2:bf:7a:d8:63:33:54:2d: 6a:b6:7f:87:f7:d7:79:cd:0c:e1:5e:b9:19:2e:40: df:7d:2a:af:ef:36:68:3e:d6:a8:39:5b:77:01:45: 33:89:ca:5e:12:72:1b:81:60:92:57:27:d4:70:f6: 24:8b:be:07:2e:75:a1:85:3f:19:ae:6c:34:d6:59: 17:e9:f4:28:60:79:c3:e6:ba:8a:e3:7c:3f:38:32: 4c:02:f4:ff:1a:af:3d:0b:f3:0f:88:67:51:88:12: 41:51:fa:dc:27:23:87:2f:ba:e5:60:4e:d9:20:6a: c7:ee:32:5f:95:3b:54:7c:35:9f:4f:74:01:5a:6c: 97:19:12:fe:8e:e3:d3:fb:59:89:85:4a:55:8a:e8: 53:a8:7b:86:ef:1f:b9:94:7a:5e:81:22:1d:e7:da: 56:13:65:13:28:a0:b2:f5:8f:24:06:70:8a:05:b3: 03:f9:4b:fe:3c:ba:e2:14:d3:de:bc:55:30:c7:ca: 27:c9:79:8e:44:a3:d0:4f:23:3d:76:e2:71:12:dd: 33:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:13:A7:2B:FB:BE:13:CD:1D:40:DB:ED:1B:D4:FF:6E:30:A3:50:A2 X509v3 Authority Key Identifier: keyid:AD:CA:6E:54:AC:D0:26:CE:FA:36:2B:42:27:B8:90:81:C0:A5:00:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcpuVKzQJs76NitCJ7iQgcClAEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:e9:b7:36:44:11:cd:7a:c8:f1:bd:fd:00:98:0f:42:39:47: dd:35:67:f0:ea:fb:03:c5:45:26:a5:3a:f0:89:b1:8a:ea:6d: d4:16:a1:1d:69:11:65:70:e3:48:8b:40:3f:f0:2d:d6:87:df: ac:43:31:76:0e:5f:58:38:93:f8:dc:35:a1:2b:5b:33:5f:ee: bb:9c:f6:2c:f0:13:1c:e6:60:52:12:7d:f8:90:4a:2d:ea:78: da:f5:9c:19:9f:af:7b:7b:74:fb:12:22:0e:5c:e1:2e:9f:15: 61:a5:ab:81:f7:9d:0f:bc:13:9e:18:7d:92:43:48:7d:0b:36: 03:30:14:4f:ae:e8:e5:61:97:2f:10:ab:71:11:c2:6d:a5:18: 42:ea:5e:a4:94:b0:45:04:4b:85:45:c8:ae:b9:a9:da:83:5e: f2:1f:cf:a3:08:97:4d:62:6d:2b:9b:0e:44:3c:1c:f7:e1:a9: da:a5:86:56:d8:4a:d3:f1:1e:e3:a5:c6:c9:b8:b0:08:cd:ed: 0e:c0:99:bb:29:cb:43:b9:91:1b:c8:2c:4b:3d:65:f1:f1:f1: a6:71:b3:00:df:09:9e:8e:39:35:aa:4c:6a:34:56:db:6e:b6: 01:e8:46:ab:23:f9:78:df:0a:15:a8:b3:26:b6:a9:83:3a:3a: ff:ff:cf:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstC1lOzISyMgnkphfkgOO4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkY2E2ZTU0YWNkMDI2Y2VmYTM2MmI0MjI3Yjg5MDgxYzBh NTAwNDkwHhcNMjUxMjE3MTYwMTE3WhcNMjUxMjE4MTYwMTE3WjAzMTEwLwYDVQQD EygyMzEzYTcyYmZiYmUxM2NkMWQ0MGRiZWQxYmQ0ZmY2ZTMwYTM1MGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8iWeVK3qQSm5Wx2xrvOKZLrZniHS c9nhiD7iARe2VEHlQ3fllW8o+ZFY6XLESdgs+L1por962GMzVC1qtn+H99d5zQzh XrkZLkDffSqv7zZoPtaoOVt3AUUzicpeEnIbgWCSVyfUcPYki74HLnWhhT8Zrmw0 1lkX6fQoYHnD5rqK43w/ODJMAvT/Gq89C/MPiGdRiBJBUfrcJyOHL7rlYE7ZIGrH 7jJflTtUfDWfT3QBWmyXGRL+juPT+1mJhUpViuhTqHuG7x+5lHpegSId59pWE2UT KKCy9Y8kBnCKBbMD+Uv+PLriFNPevFUwx8onyXmORKPQTyM9duJxEt0zLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCMTpyv7vhPNHUDb7RvU/24wo1CiMB8GA1UdIwQY MBaAFK3KblSs0CbO+jYrQie4kIHApQBJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmNwdVZLelFKczc2Tml0Q0o3aVFnY0NsQUVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9iMTcyYjctNmFlNS00NmUxLWIwYzAt MDA2NWU0YTg5MGI0LzEvcmNwdVZLelFKczc2Tml0Q0o3aVFnY0NsQUVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9iMTcyYjctNmFlNS00NmUxLWIwYzAtMDA2NWU0YTg5MGI0 LzEvcmNwdVZLelFKczc2Tml0Q0o3aVFnY0NsQUVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcOm3NkQR zXrI8b39AJgPQjlH3TVn8Or7A8VFJqU68Imxiupt1BahHWkRZXDjSItAP/At1off rEMxdg5fWDiT+Nw1oStbM1/uu5z2LPATHOZgUhJ9+JBKLep42vWcGZ+ve3t0+xIi DlzhLp8VYaWrgfedD7wTnhh9kkNIfQs2AzAUT67o5WGXLxCrcRHCbaUYQupepJSw RQRLhUXIrrmp2oNe8h/PowiXTWJtK5sORDwc9+Gp2qWGVthK0/Ee46XGybiwCM3t DsCZuynLQ7mRG8gsSz1l8fHxpnGzAN8Jno45NapMajRW2262AehGqyP5eN8KFaiz Jrapgzo6///PoQ== -----END CERTIFICATE-----Generated at Wed Dec 17 23:54:27 2025 by rpki-client