This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/d8771a-e753-406c-a1d8-39ab77b833ea/1/U3mVYEU9z0rzH5sqQM0ji4RXxd4.mft File: U3mVYEU9z0rzH5sqQM0ji4RXxd4.mft (raw, json) Hash identifier: aXO03VspWtckPW3pLTiYCbIlMglPcsun27S6t1SNKRE= Subject key identifier: DD:82:23:EA:DD:46:DD:FB:C5:3F:1E:95:0F:5E:BF:FA:6E:57:CC:F4 Authority key identifier: 53:79:95:60:45:3D:CF:4A:F3:1F:9B:2A:40:CD:23:8B:84:57:C5:DE Certificate issuer: /CN=53799560453dcf4af31f9b2a40cd238b8457c5de Certificate serial: 019B34C646C3DB7C85E16EA2FFBF1E3D56CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3mVYEU9z0rzH5sqQM0ji4RXxd4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/d8771a-e753-406c-a1d8-39ab77b833ea/1/U3mVYEU9z0rzH5sqQM0ji4RXxd4.mft Manifest number: 0BB8 Signing time: Fri 19 Dec 2025 04:02:48 +0000 Manifest this update: Fri 19 Dec 2025 04:02:48 +0000 Manifest next update: Sat 20 Dec 2025 04:02:48 +0000 Files and hashes: 1: GPBna_IoKKdQyaNksGJT2yWTCj4.roa (hash: TAihNlvs0SdUgl2vxovWMBnyUqa0RWqHLKo09+4ZR88=) 2: U3mVYEU9z0rzH5sqQM0ji4RXxd4.crl (hash: EdYYq2ZCq+NmuBUIuGPVM6i1+z97aMjediVPS4xmGko=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/d8771a-e753-406c-a1d8-39ab77b833ea/1/U3mVYEU9z0rzH5sqQM0ji4RXxd4.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/d8771a-e753-406c-a1d8-39ab77b833ea/1/U3mVYEU9z0rzH5sqQM0ji4RXxd4.mft rsync://rpki.ripe.net/repository/DEFAULT/U3mVYEU9z0rzH5sqQM0ji4RXxd4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:02:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c6:46:c3:db:7c:85:e1:6e:a2:ff:bf:1e:3d:56:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53799560453dcf4af31f9b2a40cd238b8457c5de Validity Not Before: Dec 19 04:02:48 2025 GMT Not After : Dec 20 04:02:48 2025 GMT Subject: CN=dd8223eadd46ddfbc53f1e950f5ebffa6e57ccf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:fa:60:4b:7f:13:40:8a:9a:00:88:63:94:f5: c1:69:ca:84:96:8a:fc:ce:38:29:76:5e:37:7b:46: bc:19:c9:2c:28:a9:3d:19:9c:30:d7:f1:68:42:0c: f7:18:e9:9b:33:16:39:cb:82:b9:b8:50:8f:f1:b9: 5e:15:fd:d6:ad:6c:35:b7:29:7e:12:db:9b:1f:48: a9:fc:3e:e0:a9:e9:e1:fc:04:b6:2f:eb:f6:83:03: a8:73:63:dd:f4:b1:8a:d6:e0:06:9b:fe:7c:96:29: 6a:54:13:c3:58:ed:7c:76:72:5f:54:80:82:c2:d9: 81:be:06:80:ef:0f:f1:a7:63:5b:3b:b5:61:07:e5: a1:91:29:38:28:3f:a7:8d:9d:77:62:18:f3:d8:03: 0f:51:21:f5:c9:81:bc:76:54:54:40:3a:f5:e2:1c: a5:52:1d:f4:cd:72:68:d8:da:7c:cf:d6:5a:da:b2: a4:a0:2e:1b:ba:3b:44:f6:93:04:a7:59:23:6c:91: 8d:fd:76:69:5f:ee:fb:d1:b4:40:8a:8c:3a:6f:ed: 1d:04:49:97:46:64:71:ac:4a:9c:38:4f:c5:8c:c9: f8:02:2b:b1:c1:ea:81:5a:23:34:a7:8b:b8:6f:79: a2:9e:0b:a8:f8:28:21:a6:5d:a3:82:d7:e0:53:04: d2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:82:23:EA:DD:46:DD:FB:C5:3F:1E:95:0F:5E:BF:FA:6E:57:CC:F4 X509v3 Authority Key Identifier: keyid:53:79:95:60:45:3D:CF:4A:F3:1F:9B:2A:40:CD:23:8B:84:57:C5:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3mVYEU9z0rzH5sqQM0ji4RXxd4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d8771a-e753-406c-a1d8-39ab77b833ea/1/U3mVYEU9z0rzH5sqQM0ji4RXxd4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d8771a-e753-406c-a1d8-39ab77b833ea/1/U3mVYEU9z0rzH5sqQM0ji4RXxd4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:cf:d6:1b:b8:6b:a2:5d:5e:52:9f:ad:ef:e2:84:8c:d5:b4: 3c:bc:ca:db:f3:4c:2e:97:54:3b:4b:3f:31:60:8d:02:68:0c: 88:0a:91:24:c8:91:13:f7:7f:58:ea:39:80:ce:f7:ad:98:ff: d0:24:2c:6b:0a:6b:0e:fc:86:71:e4:06:e2:ad:a5:50:ba:f4: 9c:86:0b:cd:b3:86:6c:4a:2d:ad:68:5a:84:1b:18:3a:bb:74: 4a:a7:27:b0:a5:e5:69:72:97:9b:cf:6d:ff:cf:85:6e:3b:a8: ea:4e:a6:bb:33:a3:4f:57:e8:fc:8c:a2:d1:96:4f:21:77:4a: 64:ab:38:e5:ef:34:8d:34:76:8d:39:35:9a:1a:95:e1:62:97: 0a:d1:70:54:e4:a1:8c:db:dc:02:78:89:5c:ec:b8:f0:a1:6f: bc:81:2e:2a:32:d0:49:77:c9:8b:08:d1:1c:38:46:04:8e:f9: 8d:10:32:d1:00:39:23:e2:53:26:ac:8e:17:13:94:a7:dc:1d: 28:9e:28:cc:35:3a:ad:71:fe:7e:4c:58:ae:bc:a4:df:a0:40: 2e:b4:a3:a6:48:10:0c:77:df:d1:15:e6:0a:7b:f6:1e:80:2a: 43:94:08:b1:c9:1c:e4:1b:a8:04:39:09:e7:8c:a2:5e:42:8f: 1f:a4:ea:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xkbD23yF4W6i/78ePVbLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNzk5NTYwNDUzZGNmNGFmMzFmOWIyYTQwY2QyMzhiODQ1 N2M1ZGUwHhcNMjUxMjE5MDQwMjQ4WhcNMjUxMjIwMDQwMjQ4WjAzMTEwLwYDVQQD EyhkZDgyMjNlYWRkNDZkZGZiYzUzZjFlOTUwZjVlYmZmYTZlNTdjY2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/pgS38TQIqaAIhjlPXBacqElor8 zjgpdl43e0a8GcksKKk9GZww1/FoQgz3GOmbMxY5y4K5uFCP8bleFf3WrWw1tyl+ EtubH0ip/D7gqenh/AS2L+v2gwOoc2Pd9LGK1uAGm/58lilqVBPDWO18dnJfVICC wtmBvgaA7w/xp2NbO7VhB+WhkSk4KD+njZ13Yhjz2AMPUSH1yYG8dlRUQDr14hyl Uh30zXJo2Np8z9Za2rKkoC4bujtE9pMEp1kjbJGN/XZpX+770bRAiow6b+0dBEmX RmRxrEqcOE/FjMn4AiuxweqBWiM0p4u4b3minguo+Cghpl2jgtfgUwTSFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN2CI+rdRt37xT8elQ9ev/puV8z0MB8GA1UdIwQY MBaAFFN5lWBFPc9K8x+bKkDNI4uEV8XeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTNtVllFVTl6MHJ6SDVzcVFNMGppNFJYeGQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9kODc3MWEtZTc1My00MDZjLWExZDgt MzlhYjc3YjgzM2VhLzEvVTNtVllFVTl6MHJ6SDVzcVFNMGppNFJYeGQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9kODc3MWEtZTc1My00MDZjLWExZDgtMzlhYjc3YjgzM2Vh LzEvVTNtVllFVTl6MHJ6SDVzcVFNMGppNFJYeGQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUs/WG7hr ol1eUp+t7+KEjNW0PLzK2/NMLpdUO0s/MWCNAmgMiAqRJMiRE/d/WOo5gM73rZj/ 0CQsawprDvyGceQG4q2lULr0nIYLzbOGbEotrWhahBsYOrt0SqcnsKXlaXKXm89t /8+Fbjuo6k6muzOjT1fo/Iyi0ZZPIXdKZKs45e80jTR2jTk1mhqV4WKXCtFwVOSh jNvcAniJXOy48KFvvIEuKjLQSXfJiwjRHDhGBI75jRAy0QA5I+JTJqyOFxOUp9wd KJ4ozDU6rXH+fkxYrryk36BALrSjpkgQDHff0RXmCnv2HoAqQ5QIsckc5BuoBDkJ 54yiXkKPH6TqmQ== -----END CERTIFICATE-----Generated at Fri Dec 19 14:35:04 2025 by rpki-client