This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft File: pDCUIgOqL405Co2uULhamEUE_Zw.mft (raw, json) Hash identifier: pr7X8cX3zQFBzSpuRmgDmhZDgMIJ3ZoaK7sUJsJhuQ0= Subject key identifier: A7:98:91:1B:C2:1D:8F:39:15:95:CD:D0:95:BE:F1:F9:7B:64:0F:3E Authority key identifier: A4:30:94:22:03:AA:2F:8D:39:0A:8D:AE:50:B8:5A:98:45:04:FD:9C Certificate issuer: /CN=a430942203aa2f8d390a8dae50b85a984504fd9c Certificate serial: 019AF65397A6062D77E01EFF7030E623A884 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDCUIgOqL405Co2uULhamEUE_Zw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft Manifest number: 115F Signing time: Sun 07 Dec 2025 01:01:04 +0000 Manifest this update: Sun 07 Dec 2025 01:01:04 +0000 Manifest next update: Mon 08 Dec 2025 01:01:04 +0000 Files and hashes: 1: mxHqegiIzk-5yKnAa0W9InQ8xh8.roa (hash: 1T8S7F5C1unZ11xq+jwLnSOyvWawPuJqcLvoyNmvP44=) 2: pDCUIgOqL405Co2uULhamEUE_Zw.crl (hash: szA/5EEeOV6XwwSh38aK8f5iSosBP6HcEQS+rflN8bw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft rsync://rpki.ripe.net/repository/DEFAULT/pDCUIgOqL405Co2uULhamEUE_Zw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:97:a6:06:2d:77:e0:1e:ff:70:30:e6:23:a8:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a430942203aa2f8d390a8dae50b85a984504fd9c Validity Not Before: Dec 7 01:01:04 2025 GMT Not After : Dec 8 01:01:04 2025 GMT Subject: CN=a798911bc21d8f391595cdd095bef1f97b640f3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:50:9e:f1:ca:f1:f6:d5:73:f9:2d:4d:be:7a: dd:73:4c:58:18:91:ae:9a:78:24:42:c0:d1:d1:c3: 50:dc:cd:f7:e7:1a:c3:22:25:86:8a:85:aa:27:08: 47:50:b1:95:4a:fb:00:c0:aa:be:27:e4:b1:7b:85: bb:6d:af:ee:76:49:a1:89:a2:36:90:7c:b4:53:6c: 1d:c9:0e:d5:6f:fc:0f:d9:3e:1d:b6:90:e6:84:61: 23:01:2c:0e:e8:b2:c8:19:63:c1:c7:80:5f:23:e9: 2f:18:82:2c:e4:1b:14:a4:6a:c0:e1:cf:fa:5e:77: 94:d7:01:7c:aa:fd:86:29:54:be:dd:9d:fe:8d:b1: 12:eb:3f:eb:79:e5:2b:69:a8:27:fd:96:97:85:34: b5:e7:82:65:75:e5:98:f0:95:ab:7f:92:61:28:e8: 02:63:1b:8e:20:88:22:aa:68:5a:56:b7:52:40:db: 6c:fc:ef:c4:4e:0c:14:b1:a0:a5:38:9b:fb:89:64: 0e:79:9a:d7:bc:6a:c9:b5:0c:8f:0a:e8:ed:28:fb: 5f:43:74:5d:76:90:bc:14:07:33:2b:35:d7:f3:71: 03:0b:da:49:87:6b:3c:15:8d:39:af:e6:d2:23:a7: 7e:fc:09:89:bf:e7:9f:bc:bd:35:17:1e:d3:fa:27: a2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:98:91:1B:C2:1D:8F:39:15:95:CD:D0:95:BE:F1:F9:7B:64:0F:3E X509v3 Authority Key Identifier: keyid:A4:30:94:22:03:AA:2F:8D:39:0A:8D:AE:50:B8:5A:98:45:04:FD:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDCUIgOqL405Co2uULhamEUE_Zw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:f3:eb:3e:a0:0d:d9:2a:f8:3f:d5:3e:db:71:03:77:85:43: e1:cc:3a:e2:55:bb:fa:fc:f2:e8:df:ff:8c:95:55:fd:d3:bb: 32:5b:86:0b:3c:9d:b6:0a:00:6b:74:37:84:ff:65:fa:e1:75: 20:c3:4b:07:2f:3f:91:88:f5:6e:07:a5:a3:d6:c3:ac:6c:b1: 43:d7:bb:13:4f:05:08:69:0c:b2:5f:f7:9c:ce:53:70:23:7d: ec:63:3f:2f:47:76:69:b0:92:89:c7:69:72:d0:5f:68:00:97: 93:20:95:13:ec:73:89:3e:65:b1:a1:26:d5:4e:3b:b1:2d:c3: 7d:b0:6f:01:d1:fd:81:bb:b9:4b:af:d3:77:13:cc:2c:a9:0d: 44:2d:0d:ce:79:bd:03:69:ea:7b:e9:57:57:75:90:5c:92:82: 69:c9:94:bd:24:de:93:06:41:01:8f:b3:db:42:d9:b8:6a:17: 53:27:77:90:8a:3e:c6:f7:76:9e:e8:50:a5:9f:b4:86:83:06: 06:6f:00:22:4f:b2:1e:57:b4:e4:e7:b5:31:48:a9:6f:53:27: 57:80:8a:04:3c:89:5a:50:fc:87:5a:10:26:27:46:8b:5d:69: b5:52:cc:4c:73:8c:c4:17:fb:ed:8e:9d:6c:67:3d:dd:b2:cd: a7:3f:e9:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U5emBi134B7/cDDmI6iEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MzA5NDIyMDNhYTJmOGQzOTBhOGRhZTUwYjg1YTk4NDUw NGZkOWMwHhcNMjUxMjA3MDEwMTA0WhcNMjUxMjA4MDEwMTA0WjAzMTEwLwYDVQQD EyhhNzk4OTExYmMyMWQ4ZjM5MTU5NWNkZDA5NWJlZjFmOTdiNjQwZjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1Ce8crx9tVz+S1Nvnrdc0xYGJGu mngkQsDR0cNQ3M335xrDIiWGioWqJwhHULGVSvsAwKq+J+Sxe4W7ba/udkmhiaI2 kHy0U2wdyQ7Vb/wP2T4dtpDmhGEjASwO6LLIGWPBx4BfI+kvGIIs5BsUpGrA4c/6 XneU1wF8qv2GKVS+3Z3+jbES6z/reeUraagn/ZaXhTS154JldeWY8JWrf5JhKOgC YxuOIIgiqmhaVrdSQNts/O/ETgwUsaClOJv7iWQOeZrXvGrJtQyPCujtKPtfQ3Rd dpC8FAczKzXX83EDC9pJh2s8FY05r+bSI6d+/AmJv+efvL01Fx7T+iei2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKeYkRvCHY85FZXN0JW+8fl7ZA8+MB8GA1UdIwQY MBaAFKQwlCIDqi+NOQqNrlC4WphFBP2cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcERDVUlnT3FMNDA1Q28ydVVMaGFtRVVFX1p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9jNTI5NTMtZjk2ZC00ZTRjLThkZGIt MWJmMGY3YjRkZjMwLzEvcERDVUlnT3FMNDA1Q28ydVVMaGFtRVVFX1p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9jNTI5NTMtZjk2ZC00ZTRjLThkZGItMWJmMGY3YjRkZjMw LzEvcERDVUlnT3FMNDA1Q28ydVVMaGFtRVVFX1p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApPPrPqAN 2Sr4P9U+23EDd4VD4cw64lW7+vzy6N//jJVV/dO7MluGCzydtgoAa3Q3hP9l+uF1 IMNLBy8/kYj1bgelo9bDrGyxQ9e7E08FCGkMsl/3nM5TcCN97GM/L0d2abCSicdp ctBfaACXkyCVE+xziT5lsaEm1U47sS3DfbBvAdH9gbu5S6/TdxPMLKkNRC0Nznm9 A2nqe+lXV3WQXJKCacmUvSTekwZBAY+z20LZuGoXUyd3kIo+xvd2nuhQpZ+0hoMG Bm8AIk+yHle05Oe1MUipb1MnV4CKBDyJWlD8h1oQJidGi11ptVLMTHOMxBf77Y6d bGc93bLNpz/pOg== -----END CERTIFICATE-----Generated at Sun Dec 7 06:41:52 2025 by rpki-client