This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/pUiu2QpeI7SnNpVgjztleL_exhU.mft File: pUiu2QpeI7SnNpVgjztleL_exhU.mft (raw, json) Hash identifier: wDY3M6qnIR6tti5Y/V2vulAfVYqg7MgBqm8cjxjEH9o= Subject key identifier: 7C:D5:E9:89:55:E3:57:B5:78:83:28:CD:E5:BF:4A:8D:08:B7:8C:92 Authority key identifier: A5:48:AE:D9:0A:5E:23:B4:A7:36:95:60:8F:3B:65:78:BF:DE:C6:15 Certificate issuer: /CN=a548aed90a5e23b4a73695608f3b6578bfdec615 Certificate serial: 019AF19B94756E24B8524CFA255E45E3DD0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUiu2QpeI7SnNpVgjztleL_exhU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/pUiu2QpeI7SnNpVgjztleL_exhU.mft Manifest number: 1028 Signing time: Sat 06 Dec 2025 03:01:36 +0000 Manifest this update: Sat 06 Dec 2025 03:01:36 +0000 Manifest next update: Sun 07 Dec 2025 03:01:36 +0000 Files and hashes: 1: O4HPjKtfYNvc1lksPI1mIC2KoZE.roa (hash: G5jnz6Oa7fbgHp+PjYrqWRfRXq38tvNWQ9FfwitWKvo=) 2: pUiu2QpeI7SnNpVgjztleL_exhU.crl (hash: 6SKQ08S3VUAyoEzkW9bmtC6i9vQYoEKF3GDr95MqnFk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/pUiu2QpeI7SnNpVgjztleL_exhU.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/pUiu2QpeI7SnNpVgjztleL_exhU.mft rsync://rpki.ripe.net/repository/DEFAULT/pUiu2QpeI7SnNpVgjztleL_exhU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:94:75:6e:24:b8:52:4c:fa:25:5e:45:e3:dd:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a548aed90a5e23b4a73695608f3b6578bfdec615 Validity Not Before: Dec 6 03:01:36 2025 GMT Not After : Dec 7 03:01:36 2025 GMT Subject: CN=7cd5e98955e357b5788328cde5bf4a8d08b78c92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9a:13:da:4b:88:0a:53:f3:37:83:ec:b3:e7: ea:b8:e3:09:ef:9e:81:4c:ca:e6:e3:0b:af:23:0e: 05:92:09:c6:b9:8f:da:ed:2a:3c:59:3f:31:41:d3: 15:ce:93:d2:4a:d5:f6:2b:b6:80:73:7b:e1:41:87: be:3e:72:d4:d5:8a:41:eb:eb:08:16:ea:e7:91:cf: 09:ef:74:13:df:50:1a:c9:35:d8:63:76:18:d1:20: e8:7b:7e:ff:7f:64:8f:ae:5c:1c:37:14:04:3c:cf: 51:cd:96:5b:de:f2:a4:c2:a7:62:9a:fb:13:2b:97: e5:d0:5f:7d:35:3b:c6:ce:e4:82:13:65:da:32:3e: 3c:6d:2a:e6:52:a5:57:c8:d8:61:77:37:26:49:58: db:8b:ff:35:a1:b0:d2:1e:c9:73:1c:e3:2a:12:6f: 92:53:f1:50:32:fd:8a:02:59:69:30:73:9e:96:8b: 77:13:2d:81:72:1e:78:0a:a7:b5:3d:ee:69:b7:e9: 3b:dd:9e:18:65:fc:46:eb:5b:d9:fd:c5:15:3a:df: 55:25:ce:68:eb:ee:2b:0d:ee:12:48:eb:ed:56:fe: fd:b1:2d:1f:74:cd:84:8a:dc:ed:c7:00:ce:85:81: 49:bc:96:bb:e5:73:32:74:bb:0c:c3:09:37:29:85: b8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:D5:E9:89:55:E3:57:B5:78:83:28:CD:E5:BF:4A:8D:08:B7:8C:92 X509v3 Authority Key Identifier: keyid:A5:48:AE:D9:0A:5E:23:B4:A7:36:95:60:8F:3B:65:78:BF:DE:C6:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUiu2QpeI7SnNpVgjztleL_exhU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/pUiu2QpeI7SnNpVgjztleL_exhU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/pUiu2QpeI7SnNpVgjztleL_exhU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:d7:2c:fb:e5:a7:40:b1:0e:b3:ff:9c:16:c6:e3:8d:55:b0: 80:4f:c2:1b:13:84:62:62:ac:4b:67:56:d7:c3:60:2f:38:d6: d4:34:93:ed:82:6f:41:a3:0f:0c:d2:e4:eb:ac:2c:7b:4b:fc: 66:df:6c:c1:38:68:c8:5b:2e:48:e3:5b:09:44:d5:76:07:29: d4:d0:5d:a3:a7:92:a6:e1:de:c4:da:71:af:50:ac:68:80:45: e5:18:c2:5e:a7:c4:07:11:23:2d:5d:94:cf:27:04:21:2d:ef: e8:65:08:76:28:dd:fb:17:d1:ae:5d:95:d7:70:28:38:a2:55: 23:c3:52:10:57:04:1c:8c:52:37:63:74:2d:8a:07:c3:23:33: 47:0e:b8:fa:67:38:f1:81:7b:b3:fa:da:00:12:d8:d5:74:03: 2a:cd:f7:65:d0:4c:e8:87:9d:de:59:e0:ec:05:32:32:0e:de: 75:56:98:93:4e:29:b1:eb:c3:b1:c5:aa:69:e0:e9:4e:7a:b5: 9c:c9:8e:f8:ed:4f:6c:61:36:7d:f6:ce:91:b3:74:5b:ac:d3: 88:55:5e:ef:80:f5:fc:02:56:c7:b2:c9:28:0d:c4:c1:ad:56: da:c7:c8:e6:e3:b7:48:4b:0b:c1:e5:37:ea:2c:1d:50:c9:96: 1d:3f:9c:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm5R1biS4Ukz6JV5F490KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NDhhZWQ5MGE1ZTIzYjRhNzM2OTU2MDhmM2I2NTc4YmZk ZWM2MTUwHhcNMjUxMjA2MDMwMTM2WhcNMjUxMjA3MDMwMTM2WjAzMTEwLwYDVQQD Eyg3Y2Q1ZTk4OTU1ZTM1N2I1Nzg4MzI4Y2RlNWJmNGE4ZDA4Yjc4YzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJoT2kuIClPzN4Pss+fquOMJ756B TMrm4wuvIw4FkgnGuY/a7So8WT8xQdMVzpPSStX2K7aAc3vhQYe+PnLU1YpB6+sI Furnkc8J73QT31AayTXYY3YY0SDoe37/f2SPrlwcNxQEPM9RzZZb3vKkwqdimvsT K5fl0F99NTvGzuSCE2XaMj48bSrmUqVXyNhhdzcmSVjbi/81obDSHslzHOMqEm+S U/FQMv2KAllpMHOelot3Ey2Bch54Cqe1Pe5pt+k73Z4YZfxG61vZ/cUVOt9VJc5o 6+4rDe4SSOvtVv79sS0fdM2EitztxwDOhYFJvJa75XMydLsMwwk3KYW4xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHzV6YlV41e1eIMozeW/So0It4ySMB8GA1UdIwQY MBaAFKVIrtkKXiO0pzaVYI87ZXi/3sYVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFVpdTJRcGVJN1NuTnBWZ2p6dGxlTF9leGhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83NDY2YzItNTZkNC00OTRhLWIyNjct NTQ2M2I3MWUyNmRlLzEvcFVpdTJRcGVJN1NuTnBWZ2p6dGxlTF9leGhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy83NDY2YzItNTZkNC00OTRhLWIyNjctNTQ2M2I3MWUyNmRl LzEvcFVpdTJRcGVJN1NuTnBWZ2p6dGxlTF9leGhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAENcs++Wn QLEOs/+cFsbjjVWwgE/CGxOEYmKsS2dW18NgLzjW1DST7YJvQaMPDNLk66wse0v8 Zt9swThoyFsuSONbCUTVdgcp1NBdo6eSpuHexNpxr1CsaIBF5RjCXqfEBxEjLV2U zycEIS3v6GUIdijd+xfRrl2V13AoOKJVI8NSEFcEHIxSN2N0LYoHwyMzRw64+mc4 8YF7s/raABLY1XQDKs33ZdBM6Ied3lng7AUyMg7edVaYk04psevDscWqaeDpTnq1 nMmO+O1PbGE2ffbOkbN0W6zTiFVe74D1/AJWx7LJKA3Ewa1W2sfI5uO3SEsLweU3 6iwdUMmWHT+c6g== -----END CERTIFICATE-----Generated at Sat Dec 6 14:13:34 2025 by rpki-client