This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/506db9-12aa-463c-a7ea-d3cdd5c3392c/1/U6i3vKixHSeFDpGMpZlmmIAWKSk.mft File: U6i3vKixHSeFDpGMpZlmmIAWKSk.mft (raw, json) Hash identifier: bk2b7S51SL2/76UpWoAWB4bwxu1v6yOgAUXhb72lRhA= Subject key identifier: 96:A6:3E:16:A7:32:2A:28:CE:7A:F7:03:B2:C4:FA:0A:B1:8E:79:7B Authority key identifier: 53:A8:B7:BC:A8:B1:1D:27:85:0E:91:8C:A5:99:66:98:80:16:29:29 Certificate issuer: /CN=53a8b7bca8b11d27850e918ca599669880162929 Certificate serial: 019B2F3030817E8E946459D7CE487DA04332 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6i3vKixHSeFDpGMpZlmmIAWKSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/506db9-12aa-463c-a7ea-d3cdd5c3392c/1/U6i3vKixHSeFDpGMpZlmmIAWKSk.mft Manifest number: 0391 Signing time: Thu 18 Dec 2025 02:00:45 +0000 Manifest this update: Thu 18 Dec 2025 02:00:45 +0000 Manifest next update: Fri 19 Dec 2025 02:00:45 +0000 Files and hashes: 1: U6i3vKixHSeFDpGMpZlmmIAWKSk.crl (hash: kWz+9ICj9UGe/2YpdWbxY5EbKvdkmN+lx2RDypjOmrw=) 2: qST1YzpfG0Aj9HfkTwxj9U8CUhI.roa (hash: wruCCghr0kJqtbuyZdJFoTZhRH+nhRjwzTxdaCBX4hs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/506db9-12aa-463c-a7ea-d3cdd5c3392c/1/U6i3vKixHSeFDpGMpZlmmIAWKSk.crl rsync://rpki.ripe.net/repository/DEFAULT/25/506db9-12aa-463c-a7ea-d3cdd5c3392c/1/U6i3vKixHSeFDpGMpZlmmIAWKSk.mft rsync://rpki.ripe.net/repository/DEFAULT/U6i3vKixHSeFDpGMpZlmmIAWKSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 02:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:30:30:81:7e:8e:94:64:59:d7:ce:48:7d:a0:43:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53a8b7bca8b11d27850e918ca599669880162929 Validity Not Before: Dec 18 02:00:45 2025 GMT Not After : Dec 19 02:00:45 2025 GMT Subject: CN=96a63e16a7322a28ce7af703b2c4fa0ab18e797b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:93:93:a5:49:99:5b:3a:33:81:af:4f:ba:03: eb:6d:6b:58:9e:57:3b:02:ec:64:67:f5:48:1a:aa: da:2e:2e:58:56:af:a0:9e:bc:97:b8:8f:e1:cd:2f: 90:13:1c:c8:76:76:35:89:0e:f2:cc:7b:15:3d:66: 51:39:cf:ab:00:ce:43:c4:a2:30:63:89:9b:1b:25: db:25:2b:25:f5:92:ce:60:85:a6:09:be:91:3e:e4: a7:9b:a4:17:05:97:2b:59:2e:90:98:b2:c0:29:8d: 35:81:66:be:0e:a5:fb:c8:47:c6:84:f4:56:97:0f: ae:c6:3a:ca:4e:08:36:30:3e:39:e9:2b:a5:75:b1: 67:4c:1f:74:b5:62:0f:bb:be:b8:4c:14:6e:41:a3: 51:ce:df:38:82:73:13:1b:0a:a9:9a:52:06:74:33: 77:9e:bb:6c:64:01:54:d5:d1:fd:e3:29:89:20:3a: 3b:31:ee:46:b9:06:57:56:f0:e5:5c:cb:c6:b8:7b: cf:47:0c:18:89:e1:9a:48:5a:0f:87:4b:d7:ab:7d: 01:44:8e:5f:e5:31:b7:a2:7e:96:9c:b9:91:20:ff: c1:d6:af:c0:eb:9a:87:d0:bb:65:1a:43:12:09:62: 68:8d:a2:aa:4d:27:ba:83:c0:c7:62:fc:25:f3:93: 8c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A6:3E:16:A7:32:2A:28:CE:7A:F7:03:B2:C4:FA:0A:B1:8E:79:7B X509v3 Authority Key Identifier: keyid:53:A8:B7:BC:A8:B1:1D:27:85:0E:91:8C:A5:99:66:98:80:16:29:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6i3vKixHSeFDpGMpZlmmIAWKSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/506db9-12aa-463c-a7ea-d3cdd5c3392c/1/U6i3vKixHSeFDpGMpZlmmIAWKSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/506db9-12aa-463c-a7ea-d3cdd5c3392c/1/U6i3vKixHSeFDpGMpZlmmIAWKSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:c4:9b:6b:51:64:e0:f6:5d:cd:51:75:25:f4:de:43:ae:b7: 3d:7e:7f:d7:4e:54:b5:ef:ee:7f:e2:ac:47:66:f8:1b:1b:8b: 3d:91:3b:98:7b:db:90:6d:80:bd:1a:25:e6:33:62:a8:ff:9f: 01:87:74:fc:da:c3:3e:93:b9:e0:7c:86:68:26:99:21:89:69: b4:39:a0:72:92:40:f6:ef:94:17:58:51:17:b3:31:f9:f3:76: 1b:00:c7:a8:16:b0:13:bd:12:cb:2d:f2:59:5d:65:cc:ee:15: 66:07:89:d6:7d:b4:9b:d1:2a:58:1c:ac:0c:fb:36:ac:c6:ad: 33:77:12:ff:99:96:d1:06:a9:7d:62:66:79:c2:2b:a9:9e:c2: 93:f4:8e:e4:65:fd:54:c8:d3:3e:8c:2d:5b:e3:35:03:9b:02: 11:8c:98:9a:f2:0f:ac:9a:fb:83:2e:ba:1d:74:a3:98:6d:e1: 23:e8:8d:c1:f9:37:a8:9b:2a:87:55:93:ab:81:bf:4e:af:0e: a4:58:66:b8:25:50:f7:5d:21:ef:73:27:1e:68:41:0d:d2:c1: cc:3b:b8:76:e1:a2:36:12:9a:94:61:a0:0f:04:24:1b:63:4f: e2:7c:e7:eb:cd:b2:d7:92:ed:4b:7b:a9:de:92:78:64:5c:58: 70:df:8d:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvMDCBfo6UZFnXzkh9oEMyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzYThiN2JjYThiMTFkMjc4NTBlOTE4Y2E1OTk2Njk4ODAx NjI5MjkwHhcNMjUxMjE4MDIwMDQ1WhcNMjUxMjE5MDIwMDQ1WjAzMTEwLwYDVQQD Eyg5NmE2M2UxNmE3MzIyYTI4Y2U3YWY3MDNiMmM0ZmEwYWIxOGU3OTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpOTpUmZWzozga9PugPrbWtYnlc7 AuxkZ/VIGqraLi5YVq+gnryXuI/hzS+QExzIdnY1iQ7yzHsVPWZROc+rAM5DxKIw Y4mbGyXbJSsl9ZLOYIWmCb6RPuSnm6QXBZcrWS6QmLLAKY01gWa+DqX7yEfGhPRW lw+uxjrKTgg2MD456SuldbFnTB90tWIPu764TBRuQaNRzt84gnMTGwqpmlIGdDN3 nrtsZAFU1dH94ymJIDo7Me5GuQZXVvDlXMvGuHvPRwwYieGaSFoPh0vXq30BRI5f 5TG3on6WnLmRIP/B1q/A65qH0LtlGkMSCWJojaKqTSe6g8DHYvwl85OMCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJamPhanMiooznr3A7LE+gqxjnl7MB8GA1UdIwQY MBaAFFOot7yosR0nhQ6RjKWZZpiAFikpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTZpM3ZLaXhIU2VGRHBHTXBabG1tSUFXS1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81MDZkYjktMTJhYS00NjNjLWE3ZWEt ZDNjZGQ1YzMzOTJjLzEvVTZpM3ZLaXhIU2VGRHBHTXBabG1tSUFXS1NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS81MDZkYjktMTJhYS00NjNjLWE3ZWEtZDNjZGQ1YzMzOTJj LzEvVTZpM3ZLaXhIU2VGRHBHTXBabG1tSUFXS1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD8Sba1Fk 4PZdzVF1JfTeQ663PX5/105Ute/uf+KsR2b4GxuLPZE7mHvbkG2AvRol5jNiqP+f AYd0/NrDPpO54HyGaCaZIYlptDmgcpJA9u+UF1hRF7Mx+fN2GwDHqBawE70Syy3y WV1lzO4VZgeJ1n20m9EqWBysDPs2rMatM3cS/5mW0QapfWJmecIrqZ7Ck/SO5GX9 VMjTPowtW+M1A5sCEYyYmvIPrJr7gy66HXSjmG3hI+iNwfk3qJsqh1WTq4G/Tq8O pFhmuCVQ910h73MnHmhBDdLBzDu4duGiNhKalGGgDwQkG2NP4nzn682y15LtS3up 3pJ4ZFxYcN+NHg== -----END CERTIFICATE-----Generated at Thu Dec 18 09:27:29 2025 by rpki-client