This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft File: U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft (raw, json) Hash identifier: AL3VqS3K7rh+Sz6xONLy6OHd1Zf52yJXhwUZE0BKLAk= Subject key identifier: 4F:63:16:37:65:B3:2A:BD:C4:B3:4B:D0:10:EC:C2:9B:AC:2E:3C:28 Authority key identifier: 53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2 Certificate issuer: /CN=535761913f575c411c992322ebb06cd2f37f02a2 Certificate serial: 019B243EDDFF57529B96C3B5226D05554FE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft Manifest number: 177D Signing time: Mon 15 Dec 2025 23:00:58 +0000 Manifest this update: Mon 15 Dec 2025 23:00:58 +0000 Manifest next update: Tue 16 Dec 2025 23:00:58 +0000 Files and hashes: 1: 9jLVpGilYmQEGxg1WpK2yNt9KVk.roa (hash: z5eyd/uvSVUU4CsN83uQVJdluniXFQjAaunOHdc2Khs=) 2: U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl (hash: F5d8GqbV8uqIoSDu6Jq7KukEd9/lSW2wt162ni/+nxY=) 3: bjlUEqaZF5EwCSDk_Sxf_mEHztc.roa (hash: RU5KJnOEEBCQibHDxtY5+aLGfLDV7MxXDGkjvgxmqg8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:3e:dd:ff:57:52:9b:96:c3:b5:22:6d:05:55:4f:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535761913f575c411c992322ebb06cd2f37f02a2 Validity Not Before: Dec 15 23:00:58 2025 GMT Not After : Dec 16 23:00:58 2025 GMT Subject: CN=4f63163765b32abdc4b34bd010ecc29bac2e3c28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:76:6e:bf:ae:8a:ea:03:92:63:1f:08:c5:9a: 22:17:42:a6:d4:5f:b2:2c:bd:33:2e:f4:9b:94:a6: 1b:b4:ac:86:54:b6:6a:fb:4c:d4:83:43:29:82:89: 86:3c:bf:96:f4:e7:8b:60:18:7e:f6:8d:ac:4f:4e: c0:bf:06:a9:8e:7d:9a:12:7b:30:51:e2:77:1f:f0: ff:df:cc:81:2f:4b:04:4f:e1:25:a6:b0:5b:59:21: 7e:4c:83:88:17:88:8f:b2:35:03:94:1c:fa:c2:7d: c5:9d:ce:d3:dc:93:71:41:f6:dd:1e:61:d6:50:ae: 9c:f8:20:16:d6:b3:ba:55:32:55:9f:d3:c5:f6:6b: f7:29:e7:55:55:03:c5:86:4f:8c:cd:81:a3:94:5c: e2:f3:68:59:9e:02:34:55:fe:88:f6:d3:fd:9b:80: 8b:1b:f2:95:1f:35:3d:ac:39:2e:9d:2b:e8:6c:b9: 6c:ea:84:3d:2c:8d:29:ec:92:c5:9f:4a:1e:7a:19: 63:a0:df:55:07:3c:83:d8:a6:15:13:54:d1:1f:71: 06:bb:44:4f:df:e2:6d:cb:48:f4:2a:72:8d:b2:3e: a5:83:b5:63:c3:00:54:24:d0:23:bf:ec:58:43:9a: fd:bb:2f:f5:30:01:81:60:6b:04:22:eb:4d:b3:fc: e7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:63:16:37:65:B3:2A:BD:C4:B3:4B:D0:10:EC:C2:9B:AC:2E:3C:28 X509v3 Authority Key Identifier: keyid:53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:3b:6b:5b:2f:bd:6f:51:75:85:69:05:9d:fb:52:63:73:27: 03:53:3d:fe:77:81:40:de:90:c1:eb:81:60:4a:de:07:b0:60: 12:6e:ea:2d:11:b7:2e:e4:82:48:6b:18:eb:84:af:ff:58:35: e1:09:f1:04:26:ce:4c:db:ed:55:ce:41:ae:29:42:71:e2:7b: e1:dc:c9:c6:e6:f1:ab:bb:2d:e9:86:ee:d2:62:a4:cc:69:57: bb:62:8e:e1:23:0e:8f:3b:76:d2:c3:28:47:8c:b4:1a:a4:05: 1d:d6:0b:1b:c9:8e:cc:8f:33:42:83:e2:5d:75:15:14:aa:ac: cd:36:29:56:9c:31:90:f7:73:ef:f3:4b:96:77:d2:27:22:7d: 4a:40:74:c0:4d:b7:11:03:16:7c:61:4c:32:7b:f9:b4:d7:a9: ca:98:86:ec:4d:cd:0d:6e:f5:3a:25:68:a6:e7:1e:6c:0c:2e: b2:a4:1b:5f:63:f1:1f:77:2a:c7:a3:8a:f3:2c:9f:29:99:2c: 5e:e9:4d:6f:d5:5e:cb:7a:84:e9:f2:b0:e0:e1:1c:c5:e5:b7: 7f:27:3d:f0:6c:c6:c7:73:6e:02:3c:96:12:d9:65:43:43:d6: bd:e1:37:14:21:40:f2:7b:76:20:87:2a:31:64:42:4e:c9:dd: 66:a1:34:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskPt3/V1KblsO1Im0FVU/mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNTc2MTkxM2Y1NzVjNDExYzk5MjMyMmViYjA2Y2QyZjM3 ZjAyYTIwHhcNMjUxMjE1MjMwMDU4WhcNMjUxMjE2MjMwMDU4WjAzMTEwLwYDVQQD Eyg0ZjYzMTYzNzY1YjMyYWJkYzRiMzRiZDAxMGVjYzI5YmFjMmUzYzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3Zuv66K6gOSYx8IxZoiF0Km1F+y LL0zLvSblKYbtKyGVLZq+0zUg0MpgomGPL+W9OeLYBh+9o2sT07Avwapjn2aEnsw UeJ3H/D/38yBL0sET+ElprBbWSF+TIOIF4iPsjUDlBz6wn3Fnc7T3JNxQfbdHmHW UK6c+CAW1rO6VTJVn9PF9mv3KedVVQPFhk+MzYGjlFzi82hZngI0Vf6I9tP9m4CL G/KVHzU9rDkunSvobLls6oQ9LI0p7JLFn0oeehljoN9VBzyD2KYVE1TRH3EGu0RP 3+Jty0j0KnKNsj6lg7VjwwBUJNAjv+xYQ5r9uy/1MAGBYGsEIutNs/znHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE9jFjdlsyq9xLNL0BDswpusLjwoMB8GA1UdIwQY MBaAFFNXYZE/V1xBHJkjIuuwbNLzfwKiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTFkaGtUOVhYRUVjbVNNaTY3QnMwdk5fQXFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS85ZjAwYTktYjYwZi00ZTMyLTkwMzct MDRkZmMzNjYzZTM1LzEvVTFkaGtUOVhYRUVjbVNNaTY3QnMwdk5fQXFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS85ZjAwYTktYjYwZi00ZTMyLTkwMzctMDRkZmMzNjYzZTM1 LzEvVTFkaGtUOVhYRUVjbVNNaTY3QnMwdk5fQXFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhztrWy+9 b1F1hWkFnftSY3MnA1M9/neBQN6QweuBYEreB7BgEm7qLRG3LuSCSGsY64Sv/1g1 4QnxBCbOTNvtVc5BrilCceJ74dzJxubxq7st6Ybu0mKkzGlXu2KO4SMOjzt20sMo R4y0GqQFHdYLG8mOzI8zQoPiXXUVFKqszTYpVpwxkPdz7/NLlnfSJyJ9SkB0wE23 EQMWfGFMMnv5tNepypiG7E3NDW71OiVopucebAwusqQbX2PxH3cqx6OK8yyfKZks XulNb9Vey3qE6fKw4OEcxeW3fyc98GzGx3NuAjyWEtllQ0PWveE3FCFA8nt2IIcq MWRCTsndZqE05g== -----END CERTIFICATE-----Generated at Tue Dec 16 01:12:01 2025 by rpki-client