This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft File: pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft (raw, json) Hash identifier: RzgU3WOSoqOS+V4g6gyf3YnnhxiKSSeP0O+frZc3jVE= Subject key identifier: 63:64:68:DE:B0:8D:EB:F7:C1:4D:A6:5E:B4:1C:35:DC:BD:9F:C4:8B Authority key identifier: A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95 Certificate issuer: /CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395 Certificate serial: 019AF61C6B61E5FCC78ACB464B022ED5E81C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft Manifest number: 1763 Signing time: Sun 07 Dec 2025 00:00:48 +0000 Manifest this update: Sun 07 Dec 2025 00:00:48 +0000 Manifest next update: Mon 08 Dec 2025 00:00:48 +0000 Files and hashes: 1: 561vyQubUBVe_MLgzSiqqYxU6_Y.roa (hash: 6HivC1fxPXMlCdAVu0fVBq06y4Hg53XB3H7/WZM7Ul4=) 2: pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl (hash: Ug5fn4P8i4vE74VuQElNsuXZqcWQ5AvkahgGnxPGusw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:6b:61:e5:fc:c7:8a:cb:46:4b:02:2e:d5:e8:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395 Validity Not Before: Dec 7 00:00:48 2025 GMT Not After : Dec 8 00:00:48 2025 GMT Subject: CN=636468deb08debf7c14da65eb41c35dcbd9fc48b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1f:00:37:e4:30:a1:51:2f:e8:e8:2b:0b:29: 5b:27:cb:61:f0:b3:a0:86:88:1b:ea:b9:de:7c:f3: b8:2d:6a:ef:80:e9:7e:ad:e5:5a:53:2e:1d:f0:c5: da:3c:0e:4d:d0:fd:54:95:93:7b:35:60:20:16:93: 77:b0:85:ed:18:62:1d:19:33:e2:9d:e6:e4:23:79: bb:ba:55:21:bd:bf:fe:f3:5f:9a:c0:a0:d4:00:59: 61:45:40:96:f7:a4:69:76:2b:ac:cc:e8:3b:85:eb: bb:22:1c:e5:97:5a:7d:18:08:3f:4e:09:34:cd:be: 5f:8b:33:52:d3:e2:a3:ce:32:6a:51:32:15:98:ed: 30:73:5d:f4:52:90:4b:1a:2a:69:66:63:3b:c5:46: 50:51:2a:f1:5b:6c:51:1e:77:d2:7c:95:48:ae:bf: 89:9d:47:99:97:ec:81:b3:7a:0f:5c:e7:55:df:63: 3c:ba:37:c4:0c:f8:59:e5:e2:9f:05:fd:49:c7:c1: 99:3f:f5:fe:93:ef:11:b1:44:c0:4f:29:a1:90:eb: 25:5f:ca:8c:1a:90:dc:4a:24:61:e7:b0:6f:8d:8d: 62:57:5f:5e:10:95:25:6e:21:3e:cf:3a:a0:c2:3b: be:e0:e6:70:6f:b3:d5:5b:3c:7e:fd:28:32:73:bc: e4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:64:68:DE:B0:8D:EB:F7:C1:4D:A6:5E:B4:1C:35:DC:BD:9F:C4:8B X509v3 Authority Key Identifier: keyid:A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:05:51:16:eb:d9:59:b6:62:48:12:18:ce:1d:f3:40:c7:8a: 07:71:3c:cd:13:5a:78:b6:e4:5b:07:97:39:4d:52:08:f7:f4: 12:da:17:7d:66:bc:1f:a5:22:b0:37:5b:33:7c:69:e1:72:7b: 4d:40:f2:60:2e:3a:53:6b:c7:ef:ae:2d:50:80:5f:47:ef:48: 5a:5b:2e:44:78:31:26:b5:e9:b4:48:37:5d:b3:36:b2:3b:b7: 99:c4:29:18:09:eb:d5:19:73:39:87:9d:ae:92:c6:5f:36:f7: 42:b5:c5:08:d7:1e:30:2f:25:6c:10:17:b3:15:33:fc:06:86: b8:60:68:52:b7:c3:d2:d6:49:c8:06:f9:df:e5:10:89:3d:dd: 6a:df:aa:91:21:ca:30:6d:b3:a8:d8:fd:48:fe:8d:e1:e0:34: 57:fc:a4:b9:14:87:e7:f0:db:46:ac:66:23:f9:8b:ce:ad:db: 91:e9:e3:71:44:89:06:92:f7:72:91:9b:40:8d:8b:ee:ce:22: 9d:20:db:86:0b:cc:ad:30:0f:38:02:98:95:21:34:0c:5e:1f: d9:88:e4:46:3e:73:e3:75:b6:13:f4:ea:fb:b8:56:78:7a:de: 8f:a9:f0:9b:54:8e:62:77:b8:c4:61:ed:9c:50:80:90:f2:2c: 77:26:c2:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HGth5fzHistGSwIu1egcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZjUyM2Q5NDgzODdkOGM1ZmNkZjc1MmUwYTFjYzQwOGNm ZTgzOTUwHhcNMjUxMjA3MDAwMDQ4WhcNMjUxMjA4MDAwMDQ4WjAzMTEwLwYDVQQD Eyg2MzY0NjhkZWIwOGRlYmY3YzE0ZGE2NWViNDFjMzVkY2JkOWZjNDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArB8AN+QwoVEv6OgrCylbJ8th8LOg hogb6rnefPO4LWrvgOl+reVaUy4d8MXaPA5N0P1UlZN7NWAgFpN3sIXtGGIdGTPi nebkI3m7ulUhvb/+81+awKDUAFlhRUCW96RpdiuszOg7heu7Ihzll1p9GAg/Tgk0 zb5fizNS0+KjzjJqUTIVmO0wc130UpBLGippZmM7xUZQUSrxW2xRHnfSfJVIrr+J nUeZl+yBs3oPXOdV32M8ujfEDPhZ5eKfBf1Jx8GZP/X+k+8RsUTATymhkOslX8qM GpDcSiRh57BvjY1iV19eEJUlbiE+zzqgwju+4OZwb7PVWzx+/Sgyc7zktwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGNkaN6wjev3wU2mXrQcNdy9n8SLMB8GA1UdIwQY MBaAFKT1I9lIOH2MX833UuChzECM/oOVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFBVajJVZzRmWXhmemZkUzRLSE1RSXotZzVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wODVjMzUtMjhhYy00MjQxLWI5NTEt MjBhOTAwYmM3NzZhLzEvcFBVajJVZzRmWXhmemZkUzRLSE1RSXotZzVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8wODVjMzUtMjhhYy00MjQxLWI5NTEtMjBhOTAwYmM3NzZh LzEvcFBVajJVZzRmWXhmemZkUzRLSE1RSXotZzVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjAVRFuvZ WbZiSBIYzh3zQMeKB3E8zRNaeLbkWweXOU1SCPf0EtoXfWa8H6UisDdbM3xp4XJ7 TUDyYC46U2vH764tUIBfR+9IWlsuRHgxJrXptEg3XbM2sju3mcQpGAnr1RlzOYed rpLGXzb3QrXFCNceMC8lbBAXsxUz/AaGuGBoUrfD0tZJyAb53+UQiT3dat+qkSHK MG2zqNj9SP6N4eA0V/ykuRSH5/DbRqxmI/mLzq3bkenjcUSJBpL3cpGbQI2L7s4i nSDbhgvMrTAPOAKYlSE0DF4f2YjkRj5z43W2E/Tq+7hWeHrej6nwm1SOYne4xGHt nFCAkPIsdybCsA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:33:23 2025 by rpki-client