This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft File: pcUihESYJRJgyNqrvCxeGp6PNf4.mft (raw, json) Hash identifier: +iXCHC/qIYEuBSzI/4w84BIkMs9r41Vh//fEkbSNsUQ= Subject key identifier: 1D:01:AD:3C:B1:CC:DF:17:2E:C3:8C:2A:F4:41:B8:4E:7C:F1:06:2D Authority key identifier: A5:C5:22:84:44:98:25:12:60:C8:DA:AB:BC:2C:5E:1A:9E:8F:35:FE Certificate issuer: /CN=a5c522844498251260c8daabbc2c5e1a9e8f35fe Certificate serial: 019B2BF8B9D6313CDB7698E822A26757E9CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcUihESYJRJgyNqrvCxeGp6PNf4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft Manifest number: 0E35 Signing time: Wed 17 Dec 2025 11:01:19 +0000 Manifest this update: Wed 17 Dec 2025 11:01:19 +0000 Manifest next update: Thu 18 Dec 2025 11:01:19 +0000 Files and hashes: 1: mjQr1y7CThAMWtspCv07qky-Fa8.roa (hash: 1Julh/eRIdAGf0PUhXIsjYftTFh05ZaBnAtvljFrsQs=) 2: pcUihESYJRJgyNqrvCxeGp6PNf4.crl (hash: rfXtLzSJHGp6+P39TRXL2XRzdiTLf8haYbWSIy5pwjQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft rsync://rpki.ripe.net/repository/DEFAULT/pcUihESYJRJgyNqrvCxeGp6PNf4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:b9:d6:31:3c:db:76:98:e8:22:a2:67:57:e9:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5c522844498251260c8daabbc2c5e1a9e8f35fe Validity Not Before: Dec 17 11:01:19 2025 GMT Not After : Dec 18 11:01:19 2025 GMT Subject: CN=1d01ad3cb1ccdf172ec38c2af441b84e7cf1062d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1a:41:1f:70:5a:ba:e7:96:21:87:ee:4e:e2: ab:7e:c7:bb:1c:dd:de:f3:65:8d:a2:55:1e:5f:1c: 3b:f5:eb:26:cb:dc:41:aa:51:7e:f8:ed:5f:bf:56: 62:9c:9a:4b:39:1a:f0:46:fc:2e:57:5c:51:6b:79: 3e:95:1f:5f:1e:63:f0:67:f7:08:49:99:0c:79:6e: 62:10:58:1e:14:6d:7a:06:91:9a:eb:ad:73:90:cd: 00:2d:46:f7:17:1e:f9:7d:d7:33:90:78:53:d2:5e: f3:45:70:18:eb:23:ff:c8:48:fe:b3:ab:8c:32:3b: b8:1c:34:ba:ca:07:95:92:b7:bb:fc:c6:9a:22:46: 09:6a:9b:04:e6:01:f5:f7:91:1a:e4:8b:70:2d:4e: 1d:c9:21:87:66:ee:9b:a3:30:0a:a4:11:4c:aa:64: 38:f1:0d:0b:2c:91:0e:8d:ed:78:5b:eb:25:ec:f0: 83:11:b0:82:b5:e6:e1:3a:d7:54:10:43:18:62:17: 1c:cd:40:b7:e0:63:17:82:12:d0:71:2c:d4:08:81: d5:30:c6:4b:e1:79:5d:a3:ab:59:59:89:e9:d5:90: 17:e3:8c:27:5d:87:92:50:b0:cd:16:73:4b:62:a1: 0b:a6:d3:8d:f2:9f:3a:e2:14:a4:28:37:2d:16:c1: 49:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:01:AD:3C:B1:CC:DF:17:2E:C3:8C:2A:F4:41:B8:4E:7C:F1:06:2D X509v3 Authority Key Identifier: keyid:A5:C5:22:84:44:98:25:12:60:C8:DA:AB:BC:2C:5E:1A:9E:8F:35:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcUihESYJRJgyNqrvCxeGp6PNf4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:ef:03:a9:14:2b:47:33:ea:2a:c7:e7:03:48:43:50:ec:97: 01:a3:6d:66:a0:1f:ab:72:63:72:b1:ec:fc:c6:3d:38:8a:63: 1c:62:4e:b1:8a:44:e6:d3:0e:c4:d2:2c:16:ba:46:99:b3:e8: 35:cf:30:e0:da:5a:44:50:3f:ee:16:ab:47:66:91:61:2d:b4: fe:89:7c:bd:e5:b4:e7:be:cb:66:9f:e7:b2:2a:36:38:6a:35: 60:cd:30:f3:39:99:5c:2a:3b:69:76:3d:b5:c8:56:b8:ed:dc: 66:48:10:98:7d:23:65:df:97:c1:48:4d:65:2e:5c:5b:66:fd: 98:ab:d3:57:4f:1e:cf:e4:3b:92:5e:ff:b7:40:01:30:fc:34: 96:4c:2e:ce:a9:c3:12:31:34:dd:da:90:8d:2e:55:44:c1:b9: 29:e6:5d:1a:09:5d:4c:a3:4b:2d:64:26:70:2b:f1:be:ed:47: 4a:77:25:e5:50:a8:50:56:55:1a:e1:47:b4:82:83:eb:90:93: e1:0b:4f:39:ec:15:f8:53:10:a0:36:02:7b:0e:b0:f0:d3:33: 9f:38:7b:ff:04:0c:a9:42:d7:39:e3:c4:0a:00:9a:30:b7:f3: d5:ca:c0:d8:8d:90:1e:2d:35:54:b7:5e:96:97:47:20:41:7f: f5:64:13:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+LnWMTzbdpjoIqJnV+nPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YzUyMjg0NDQ5ODI1MTI2MGM4ZGFhYmJjMmM1ZTFhOWU4 ZjM1ZmUwHhcNMjUxMjE3MTEwMTE5WhcNMjUxMjE4MTEwMTE5WjAzMTEwLwYDVQQD EygxZDAxYWQzY2IxY2NkZjE3MmVjMzhjMmFmNDQxYjg0ZTdjZjEwNjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhpBH3BauueWIYfuTuKrfse7HN3e 82WNolUeXxw79esmy9xBqlF++O1fv1ZinJpLORrwRvwuV1xRa3k+lR9fHmPwZ/cI SZkMeW5iEFgeFG16BpGa661zkM0ALUb3Fx75fdczkHhT0l7zRXAY6yP/yEj+s6uM Mju4HDS6ygeVkre7/MaaIkYJapsE5gH195Ea5ItwLU4dySGHZu6bozAKpBFMqmQ4 8Q0LLJEOje14W+sl7PCDEbCCtebhOtdUEEMYYhcczUC34GMXghLQcSzUCIHVMMZL 4Xldo6tZWYnp1ZAX44wnXYeSULDNFnNLYqELptON8p864hSkKDctFsFJ+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB0BrTyxzN8XLsOMKvRBuE588QYtMB8GA1UdIwQY MBaAFKXFIoREmCUSYMjaq7wsXhqejzX+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGNVaWhFU1lKUkpneU5xcnZDeGVHcDZQTmY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8yZWUyMjktNjhjNS00ZjhjLTgwN2Ut NTQ4ZTdmMDI0MzE0LzEvcGNVaWhFU1lKUkpneU5xcnZDeGVHcDZQTmY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8yZWUyMjktNjhjNS00ZjhjLTgwN2UtNTQ4ZTdmMDI0MzE0 LzEvcGNVaWhFU1lKUkpneU5xcnZDeGVHcDZQTmY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsO8DqRQr RzPqKsfnA0hDUOyXAaNtZqAfq3JjcrHs/MY9OIpjHGJOsYpE5tMOxNIsFrpGmbPo Nc8w4NpaRFA/7harR2aRYS20/ol8veW0577LZp/nsio2OGo1YM0w8zmZXCo7aXY9 tchWuO3cZkgQmH0jZd+XwUhNZS5cW2b9mKvTV08ez+Q7kl7/t0ABMPw0lkwuzqnD EjE03dqQjS5VRMG5KeZdGgldTKNLLWQmcCvxvu1HSncl5VCoUFZVGuFHtIKD65CT 4QtPOewV+FMQoDYCew6w8NMznzh7/wQMqULXOePECgCaMLfz1crA2I2QHi01VLde lpdHIEF/9WQTzQ== -----END CERTIFICATE-----Generated at Wed Dec 17 17:54:24 2025 by rpki-client