This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.mft File: puiiWpN5KlizotgPsarZWeZa7d8.mft (raw, json) Hash identifier: C/9VzS/grT5oyJRDPd5jvP/v68pTgSHCfG1HI+daOYU= Subject key identifier: FE:76:3A:67:38:BA:57:42:46:3A:D9:D9:41:D6:3F:66:42:30:AF:1E Authority key identifier: A6:E8:A2:5A:93:79:2A:58:B3:A2:D8:0F:B1:AA:D9:59:E6:5A:ED:DF Certificate issuer: /CN=a6e8a25a93792a58b3a2d80fb1aad959e65aeddf Certificate serial: 019B2EF9C9D594B8F6F3890D1638DA9EB259 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/puiiWpN5KlizotgPsarZWeZa7d8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.mft Manifest number: 16DB Signing time: Thu 18 Dec 2025 01:01:20 +0000 Manifest this update: Thu 18 Dec 2025 01:01:20 +0000 Manifest next update: Fri 19 Dec 2025 01:01:20 +0000 Files and hashes: 1: puiiWpN5KlizotgPsarZWeZa7d8.crl (hash: iUmgu6mnV7pVLncdp7mvQT2zuWIhcb1uPE9PV0dTCrM=) 2: wEf0XFewVLDEH498_3ycA_iLwpA.roa (hash: jj8EG5dFJudLiKXib9hP+9XTMUS6HXp2GHHzc8cEo24=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.mft rsync://rpki.ripe.net/repository/DEFAULT/puiiWpN5KlizotgPsarZWeZa7d8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:c9:d5:94:b8:f6:f3:89:0d:16:38:da:9e:b2:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6e8a25a93792a58b3a2d80fb1aad959e65aeddf Validity Not Before: Dec 18 01:01:20 2025 GMT Not After : Dec 19 01:01:20 2025 GMT Subject: CN=fe763a6738ba5742463ad9d941d63f664230af1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e9:55:12:12:cb:9d:78:cb:c2:ab:9f:47:6d: 75:b3:7d:07:df:ad:d3:9f:9e:f2:7e:92:8b:da:a5: 3f:15:7d:fa:20:7b:4f:44:ce:94:75:27:92:e8:d6: 24:4d:ed:89:18:5c:f4:2b:ef:d0:bb:54:0b:34:bd: 44:75:54:ae:b1:4a:3e:28:1d:e6:cd:87:c0:04:ae: e6:a8:fb:bd:d6:06:2f:a0:17:64:c3:e1:14:7c:72: 90:49:e5:3b:48:06:2f:74:c3:10:e5:0f:64:a6:77: ff:f0:e9:0a:0d:01:d1:13:c6:e6:f8:47:20:41:09: e6:f6:99:b9:c9:d8:ec:f4:43:4a:90:8f:9f:67:71: 67:e6:31:85:57:d4:f3:65:8e:6e:3b:42:6d:ed:8c: 7a:8a:28:f2:56:58:a4:c1:1b:e4:48:40:65:3f:67: 44:43:40:4c:93:a0:a8:90:3f:aa:53:27:bb:e0:9e: 50:db:cc:d8:40:20:ce:f8:89:b4:b4:38:32:80:48: e9:6e:4e:e0:79:fd:31:a1:f8:82:e8:9f:b9:2a:5f: e0:93:22:51:4b:08:8b:e1:56:57:86:66:30:a0:4b: e6:5a:9c:a1:74:c9:b6:43:b5:b6:de:56:4c:0a:44: 44:98:26:4c:9a:9d:e8:1e:1d:3c:e4:ef:ea:be:00: 48:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:76:3A:67:38:BA:57:42:46:3A:D9:D9:41:D6:3F:66:42:30:AF:1E X509v3 Authority Key Identifier: keyid:A6:E8:A2:5A:93:79:2A:58:B3:A2:D8:0F:B1:AA:D9:59:E6:5A:ED:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/puiiWpN5KlizotgPsarZWeZa7d8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:ce:5c:e1:fd:f9:d7:33:f9:e5:7e:22:7f:25:41:e0:6b:a9: f0:ca:eb:80:c3:e4:28:86:fb:74:2e:84:bb:be:f8:44:c2:15: 94:21:66:0b:32:4d:1c:91:05:35:72:da:11:82:ba:04:61:2c: 8c:0e:07:0a:17:c8:aa:59:03:f0:97:38:cb:6d:e0:39:d8:87: 8f:7e:b5:6f:7c:c4:c0:c2:e9:16:c3:83:7e:64:38:23:36:d1: 7d:6a:fa:4b:35:b6:32:b6:0b:35:2c:d6:21:3c:70:fb:c1:fb: 18:03:ba:49:85:f6:19:98:97:16:34:b9:87:ac:95:b6:41:94: f3:d5:a3:82:d4:8e:ec:96:a1:67:2b:88:6d:63:0e:1e:f9:3b: c4:a0:3b:d1:88:a6:17:16:28:b4:bf:87:43:b3:b7:7e:f0:88: 41:ab:4e:b9:d4:0e:c7:28:60:9a:15:49:2f:76:20:68:69:02: 88:c1:ac:c1:cb:0c:9b:d2:12:6d:69:02:b0:04:f6:ea:fe:77: d4:0a:29:ab:63:31:7a:2d:4f:eb:c2:c7:69:ff:08:22:84:9d: bc:59:95:a0:b2:4b:54:67:6a:e1:72:b4:b6:a0:33:c7:43:fe: 21:a4:79:33:c5:74:ee:7e:25:a0:3a:64:bb:2f:35:2d:1f:58: fe:85:e2:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+cnVlLj284kNFjjanrJZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2ZThhMjVhOTM3OTJhNThiM2EyZDgwZmIxYWFkOTU5ZTY1 YWVkZGYwHhcNMjUxMjE4MDEwMTIwWhcNMjUxMjE5MDEwMTIwWjAzMTEwLwYDVQQD EyhmZTc2M2E2NzM4YmE1NzQyNDYzYWQ5ZDk0MWQ2M2Y2NjQyMzBhZjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OlVEhLLnXjLwqufR211s30H363T n57yfpKL2qU/FX36IHtPRM6UdSeS6NYkTe2JGFz0K+/Qu1QLNL1EdVSusUo+KB3m zYfABK7mqPu91gYvoBdkw+EUfHKQSeU7SAYvdMMQ5Q9kpnf/8OkKDQHRE8bm+Ecg QQnm9pm5ydjs9ENKkI+fZ3Fn5jGFV9TzZY5uO0Jt7Yx6iijyVlikwRvkSEBlP2dE Q0BMk6CokD+qUye74J5Q28zYQCDO+Im0tDgygEjpbk7gef0xofiC6J+5Kl/gkyJR SwiL4VZXhmYwoEvmWpyhdMm2Q7W23lZMCkREmCZMmp3oHh085O/qvgBIgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP52Omc4uldCRjrZ2UHWP2ZCMK8eMB8GA1UdIwQY MBaAFKboolqTeSpYs6LYD7Gq2VnmWu3fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHVpaVdwTjVLbGl6b3RnUHNhclpXZVphN2Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80YzZlNzUtYTgwMC00ZDRmLThhYzct NGVhZWIyYTIzYjI3LzEvcHVpaVdwTjVLbGl6b3RnUHNhclpXZVphN2Q4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS80YzZlNzUtYTgwMC00ZDRmLThhYzctNGVhZWIyYTIzYjI3 LzEvcHVpaVdwTjVLbGl6b3RnUHNhclpXZVphN2Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAs5c4f35 1zP55X4ifyVB4Gup8MrrgMPkKIb7dC6Eu774RMIVlCFmCzJNHJEFNXLaEYK6BGEs jA4HChfIqlkD8Jc4y23gOdiHj361b3zEwMLpFsODfmQ4IzbRfWr6SzW2MrYLNSzW ITxw+8H7GAO6SYX2GZiXFjS5h6yVtkGU89WjgtSO7JahZyuIbWMOHvk7xKA70Yim FxYotL+HQ7O3fvCIQatOudQOxyhgmhVJL3YgaGkCiMGswcsMm9ISbWkCsAT26v53 1Aopq2Mxei1P68LHaf8IIoSdvFmVoLJLVGdq4XK0tqAzx0P+IaR5M8V07n4loDpk uy81LR9Y/oXibw== -----END CERTIFICATE-----Generated at Thu Dec 18 09:23:19 2025 by rpki-client