This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft File: U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft (raw, json) Hash identifier: JFDV3VZa1xtMGVP2ATJyxfad/6RaLfWykrvl0RM2Pps= Subject key identifier: 2B:AD:59:7B:74:1F:66:6B:48:73:5A:E3:79:6A:05:FD:B4:86:16:34 Authority key identifier: 53:B1:A8:EB:C3:EC:F7:F5:DB:7F:6C:AC:D0:0E:92:0A:F8:5A:E8:B4 Certificate issuer: /CN=53b1a8ebc3ecf7f5db7f6cacd00e920af85ae8b4 Certificate serial: 019B4626D1EF19ACCE0876C4910125A31EFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft Manifest number: 178F Signing time: Mon 22 Dec 2025 13:01:47 +0000 Manifest this update: Mon 22 Dec 2025 13:01:47 +0000 Manifest next update: Tue 23 Dec 2025 13:01:47 +0000 Files and hashes: 1: 7FIS9JXLBhSn9Xd80njFKcjrU5c.roa (hash: YIkfZDnE728Jfdsal+Cj/SDX4JnmcF1VCDJGwCdL40A=) 2: U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl (hash: YFBOaOOMapfmFJKp1WJXaFCttJbT3lY2hl++n9J4/58=) 3: znlbEhSL3OBIUicM0zTghSzFWq4.roa (hash: /UTNLfQ+6CNoZrCfqNv3q7AcPtlfut7ROp1orn1wCLA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 13:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:26:d1:ef:19:ac:ce:08:76:c4:91:01:25:a3:1e:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53b1a8ebc3ecf7f5db7f6cacd00e920af85ae8b4 Validity Not Before: Dec 22 13:01:47 2025 GMT Not After : Dec 23 13:01:47 2025 GMT Subject: CN=2bad597b741f666b48735ae3796a05fdb4861634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:02:99:fd:4f:cd:a9:36:6e:71:74:81:b2:90: f6:77:2e:1b:a9:53:65:c1:a9:cb:8a:3b:04:df:3d: 8f:0b:d5:3e:06:5b:68:fb:d3:e3:f1:78:bc:0d:6a: 16:56:a3:27:ef:24:bb:b5:9b:f6:a1:27:52:da:f9: 12:93:a7:2a:51:b8:85:65:ce:96:a3:4c:6f:36:ff: 28:91:d7:f0:18:05:62:dc:ae:d2:64:30:f6:fd:c4: ac:de:4a:06:7c:27:82:a2:3a:c0:15:9a:10:fe:ff: e4:31:4b:0d:79:05:3f:04:1c:26:1c:bf:20:ab:2e: e0:82:ad:25:37:05:a1:e9:b9:19:3d:e8:7d:ee:b6: 95:89:a2:c7:02:55:98:1b:7d:31:ff:55:57:de:d6: 6e:a9:3d:b5:a5:c9:12:f0:c9:d8:20:89:d5:4d:df: 60:4d:9f:ea:68:5d:92:11:e5:68:63:c8:47:3a:16: 8c:43:cc:4b:70:11:36:f8:5c:a1:78:76:0c:99:52: 89:cb:a6:c2:8d:25:5b:2f:9a:1c:7d:b5:31:c9:3e: 67:f3:98:36:6d:65:74:ad:a3:72:0f:b4:a7:db:dd: b9:ef:d6:3d:ef:e1:c1:56:d0:58:48:86:8e:68:18: 9a:1b:a2:de:6d:42:44:1a:cb:65:08:7a:4a:90:0e: 2b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:AD:59:7B:74:1F:66:6B:48:73:5A:E3:79:6A:05:FD:B4:86:16:34 X509v3 Authority Key Identifier: keyid:53:B1:A8:EB:C3:EC:F7:F5:DB:7F:6C:AC:D0:0E:92:0A:F8:5A:E8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:6d:5d:d7:e6:7d:c7:68:7a:1a:7f:61:f5:1c:d1:9d:c3:6c: 78:bb:ce:16:8d:c5:ac:d7:e6:9b:57:4f:7f:03:cb:c8:96:37: d1:84:c1:50:87:d8:51:d4:a5:60:3c:8f:fb:a1:f9:55:75:b6: 69:07:b9:4c:0f:02:72:b5:0f:50:9e:cc:42:00:b3:f8:72:eb: 6c:0c:66:35:a3:01:fe:72:5a:1a:c7:5e:cd:d4:64:3a:27:61: 5c:79:4d:3c:0c:25:6e:34:d3:74:74:50:9c:50:9c:31:ba:e7: 7f:ca:6e:8a:64:c3:b8:10:d3:cc:1e:e9:c2:89:34:bf:40:46: 8d:b7:19:ae:66:c0:32:ca:24:f3:92:bd:93:e7:f8:23:44:ee: ce:03:a2:1e:3c:d9:0c:9d:c0:f4:a2:e9:92:2e:0c:55:84:01: f5:9a:ed:56:88:ce:31:01:5c:e8:7c:aa:87:b4:e5:0b:6e:85: 48:09:68:c3:45:7b:20:42:8f:f6:b0:fa:3c:72:95:15:bc:7b: 17:a9:d4:4a:a6:d5:06:1b:1e:68:04:e9:e8:18:37:87:17:aa: 59:7c:5f:c5:28:ac:ad:db:82:91:97:29:0a:18:b8:80:60:27: 5a:cf:f0:96:79:69:63:b4:aa:c3:54:3d:ab:d4:07:b8:7b:1c: 72:71:3b:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJtHvGazOCHbEkQElox79MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzYjFhOGViYzNlY2Y3ZjVkYjdmNmNhY2QwMGU5MjBhZjg1 YWU4YjQwHhcNMjUxMjIyMTMwMTQ3WhcNMjUxMjIzMTMwMTQ3WjAzMTEwLwYDVQQD EygyYmFkNTk3Yjc0MWY2NjZiNDg3MzVhZTM3OTZhMDVmZGI0ODYxNjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQKZ/U/NqTZucXSBspD2dy4bqVNl wanLijsE3z2PC9U+Blto+9Pj8Xi8DWoWVqMn7yS7tZv2oSdS2vkSk6cqUbiFZc6W o0xvNv8okdfwGAVi3K7SZDD2/cSs3koGfCeCojrAFZoQ/v/kMUsNeQU/BBwmHL8g qy7ggq0lNwWh6bkZPeh97raViaLHAlWYG30x/1VX3tZuqT21pckS8MnYIInVTd9g TZ/qaF2SEeVoY8hHOhaMQ8xLcBE2+FyheHYMmVKJy6bCjSVbL5ocfbUxyT5n85g2 bWV0raNyD7Sn292579Y97+HBVtBYSIaOaBiaG6LebUJEGstlCHpKkA4rOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCutWXt0H2ZrSHNa43lqBf20hhY0MB8GA1UdIwQY MBaAFFOxqOvD7Pf1239srNAOkgr4Wui0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTdHbzY4UHM5X1hiZjJ5czBBNlNDdmhhNkxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wNzA2MzAtNTIzNC00OWM0LTg0ZmUt MTViZGE2Yjg2N2NiLzEvVTdHbzY4UHM5X1hiZjJ5czBBNlNDdmhhNkxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8wNzA2MzAtNTIzNC00OWM0LTg0ZmUtMTViZGE2Yjg2N2Ni LzEvVTdHbzY4UHM5X1hiZjJ5czBBNlNDdmhhNkxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvG1d1+Z9 x2h6Gn9h9RzRncNseLvOFo3FrNfmm1dPfwPLyJY30YTBUIfYUdSlYDyP+6H5VXW2 aQe5TA8CcrUPUJ7MQgCz+HLrbAxmNaMB/nJaGsdezdRkOidhXHlNPAwlbjTTdHRQ nFCcMbrnf8puimTDuBDTzB7pwok0v0BGjbcZrmbAMsok85K9k+f4I0TuzgOiHjzZ DJ3A9KLpki4MVYQB9ZrtVojOMQFc6Hyqh7TlC26FSAlow0V7IEKP9rD6PHKVFbx7 F6nUSqbVBhseaATp6Bg3hxeqWXxfxSisrduCkZcpChi4gGAnWs/wlnlpY7Sqw1Q9 q9QHuHsccnE7Cw== -----END CERTIFICATE-----Generated at Mon Dec 22 22:32:21 2025 by rpki-client