This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft File: pcUihESYJRJgyNqrvCxeGp6PNf4.mft (raw, json) Hash identifier: 5C5Xo5ORPEWjY0xwpCdBaZE2pSrQ8yJQyMpVvOAA4U8= Subject key identifier: 44:17:40:73:DB:33:A9:02:70:5D:C9:B1:0A:F3:B4:80:46:91:26:1F Authority key identifier: A5:C5:22:84:44:98:25:12:60:C8:DA:AB:BC:2C:5E:1A:9E:8F:35:FE Certificate issuer: /CN=a5c522844498251260c8daabbc2c5e1a9e8f35fe Certificate serial: 019AF20936A2E566DA9EFC802FE7A0A0224D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcUihESYJRJgyNqrvCxeGp6PNf4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft Manifest number: 0E17 Signing time: Sat 06 Dec 2025 05:01:21 +0000 Manifest this update: Sat 06 Dec 2025 05:01:21 +0000 Manifest next update: Sun 07 Dec 2025 05:01:21 +0000 Files and hashes: 1: mjQr1y7CThAMWtspCv07qky-Fa8.roa (hash: 1Julh/eRIdAGf0PUhXIsjYftTFh05ZaBnAtvljFrsQs=) 2: pcUihESYJRJgyNqrvCxeGp6PNf4.crl (hash: sEUClUO9EFU7piNvpOSWSgt8PQlbA9F84vmbQjzcqnM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft rsync://rpki.ripe.net/repository/DEFAULT/pcUihESYJRJgyNqrvCxeGp6PNf4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:36:a2:e5:66:da:9e:fc:80:2f:e7:a0:a0:22:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5c522844498251260c8daabbc2c5e1a9e8f35fe Validity Not Before: Dec 6 05:01:21 2025 GMT Not After : Dec 7 05:01:21 2025 GMT Subject: CN=44174073db33a902705dc9b10af3b4804691261f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:67:61:43:51:c2:ee:8c:f5:23:cf:e4:64:d3: 4a:8c:19:5e:c9:ef:3a:e6:cb:26:d7:c9:ca:a8:bc: 85:b6:3c:af:08:69:7c:6f:9d:10:25:54:13:70:8d: 1e:12:9c:f2:0a:19:3e:c0:5c:8f:22:bf:93:38:13: 5c:a2:a8:77:15:29:89:42:8d:4a:de:bc:80:f5:f6: 00:5f:14:d5:2e:89:47:22:0f:0a:75:69:17:de:e7: bc:2d:9b:a6:d9:6b:2a:15:0b:b0:b0:f7:c1:e5:c6: 1f:3c:31:e5:95:3e:9d:ad:4a:b9:b1:6b:12:84:56: 50:36:99:e3:0b:91:d6:d7:ff:82:04:5c:46:1a:4a: 1e:b1:8c:c3:21:9c:dc:66:0c:4b:bb:68:68:26:90: 4b:fd:3c:44:7f:3e:4d:ca:11:31:95:96:bb:4f:0f: 19:aa:a0:65:19:b6:d5:f1:86:69:83:50:05:5f:04: 0a:1b:50:24:dd:dd:86:e5:26:7f:30:cd:99:ef:c5: 38:ec:7d:67:19:f3:9e:bd:e2:4e:49:5b:84:0d:3d: b0:64:be:0f:2e:ac:a1:fe:66:34:6b:67:20:50:d4: 92:f7:d2:a0:e3:a4:f3:74:1c:ac:12:29:a5:f6:fd: 4d:d3:25:92:e3:79:ee:b7:f7:11:ee:35:ff:6e:be: 6f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:17:40:73:DB:33:A9:02:70:5D:C9:B1:0A:F3:B4:80:46:91:26:1F X509v3 Authority Key Identifier: keyid:A5:C5:22:84:44:98:25:12:60:C8:DA:AB:BC:2C:5E:1A:9E:8F:35:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcUihESYJRJgyNqrvCxeGp6PNf4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:9c:83:f6:f9:30:f3:6b:55:43:48:81:8e:2a:19:cf:13:c5: 30:d6:21:c6:81:63:57:04:63:4b:a0:0d:86:69:ab:33:b1:56: 5e:a1:65:f5:66:06:d5:9d:6c:5a:7a:39:78:b4:85:a0:28:2a: 05:cf:1b:e2:04:d7:11:29:b5:78:d9:ad:87:6c:ec:0a:c5:94: 00:df:0a:ec:35:18:78:ce:d0:44:e1:db:14:aa:d4:0a:72:4f: 64:38:a6:2c:8f:b7:1f:5b:d4:2c:e4:5d:be:1e:59:fc:a5:00: 6e:7d:10:5c:cd:ce:33:87:28:00:37:44:d9:8e:8d:ca:f5:5d: 86:6f:f4:fb:07:9c:79:34:dd:ed:fa:c3:12:c3:c7:d1:bb:b9: 38:8d:3c:ba:24:63:a3:62:48:a1:d9:43:3c:8f:0d:25:93:c9: 75:46:b1:92:7d:67:2b:c3:58:54:b4:a0:7b:07:28:00:a0:11: 33:eb:ce:c7:25:56:01:c1:6e:d3:2a:d0:d4:fc:1d:8a:1d:7b: e9:14:3f:34:b6:84:96:7c:0f:3b:bd:77:6d:5d:22:68:26:9c: 30:84:de:ea:97:2a:5e:21:eb:b4:9d:ad:56:38:d1:2f:d6:88: 49:d0:09:13:5b:3c:d2:32:1d:cc:c3:e4:36:72:12:73:d0:44: 6a:32:5b:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCTai5WbanvyAL+egoCJNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YzUyMjg0NDQ5ODI1MTI2MGM4ZGFhYmJjMmM1ZTFhOWU4 ZjM1ZmUwHhcNMjUxMjA2MDUwMTIxWhcNMjUxMjA3MDUwMTIxWjAzMTEwLwYDVQQD Eyg0NDE3NDA3M2RiMzNhOTAyNzA1ZGM5YjEwYWYzYjQ4MDQ2OTEyNjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2dhQ1HC7oz1I8/kZNNKjBleye86 5ssm18nKqLyFtjyvCGl8b50QJVQTcI0eEpzyChk+wFyPIr+TOBNcoqh3FSmJQo1K 3ryA9fYAXxTVLolHIg8KdWkX3ue8LZum2WsqFQuwsPfB5cYfPDHllT6drUq5sWsS hFZQNpnjC5HW1/+CBFxGGkoesYzDIZzcZgxLu2hoJpBL/TxEfz5NyhExlZa7Tw8Z qqBlGbbV8YZpg1AFXwQKG1Ak3d2G5SZ/MM2Z78U47H1nGfOeveJOSVuEDT2wZL4P Lqyh/mY0a2cgUNSS99Kg46TzdBysEiml9v1N0yWS43nut/cR7jX/br5vsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEQXQHPbM6kCcF3JsQrztIBGkSYfMB8GA1UdIwQY MBaAFKXFIoREmCUSYMjaq7wsXhqejzX+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGNVaWhFU1lKUkpneU5xcnZDeGVHcDZQTmY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8yZWUyMjktNjhjNS00ZjhjLTgwN2Ut NTQ4ZTdmMDI0MzE0LzEvcGNVaWhFU1lKUkpneU5xcnZDeGVHcDZQTmY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8yZWUyMjktNjhjNS00ZjhjLTgwN2UtNTQ4ZTdmMDI0MzE0 LzEvcGNVaWhFU1lKUkpneU5xcnZDeGVHcDZQTmY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYZyD9vkw 82tVQ0iBjioZzxPFMNYhxoFjVwRjS6ANhmmrM7FWXqFl9WYG1Z1sWno5eLSFoCgq Bc8b4gTXESm1eNmth2zsCsWUAN8K7DUYeM7QROHbFKrUCnJPZDimLI+3H1vULORd vh5Z/KUAbn0QXM3OM4coADdE2Y6NyvVdhm/0+weceTTd7frDEsPH0bu5OI08uiRj o2JIodlDPI8NJZPJdUaxkn1nK8NYVLSgewcoAKARM+vOxyVWAcFu0yrQ1Pwdih17 6RQ/NLaElnwPO713bV0iaCacMITe6pcqXiHrtJ2tVjjRL9aISdAJE1s80jIdzMPk NnISc9BEajJbgQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:57:11 2025 by rpki-client