This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft File: U5jsPBWxT9itkTy7lWV9jqgufiU.mft (raw, json) Hash identifier: ziECODKvbxLLg6Z6ukNkzi+BUKMdt6ZyrWSgjXOKFlY= Subject key identifier: 94:F0:AE:C1:30:E8:1A:A5:DB:10:27:83:FA:59:B1:0A:2F:22:46:92 Authority key identifier: 53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25 Certificate issuer: /CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25 Certificate serial: 019B34FBCC388CC3EF3C5BDCD49B1D9E51C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft Manifest number: 0468 Signing time: Fri 19 Dec 2025 05:01:15 +0000 Manifest this update: Fri 19 Dec 2025 05:01:15 +0000 Manifest next update: Sat 20 Dec 2025 05:01:15 +0000 Files and hashes: 1: LAK6jIQJ-CvGfB4yxJULpqtylrQ.roa (hash: uXlGTrWCI9dg7wgunXV3n5CZ4+wMJTA2Di51uX3OXFA=) 2: U5jsPBWxT9itkTy7lWV9jqgufiU.crl (hash: NiUcunSQdSlpiNro06j8wis8uRQfs/iHm298QLQPppw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:cc:38:8c:c3:ef:3c:5b:dc:d4:9b:1d:9e:51:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25 Validity Not Before: Dec 19 05:01:15 2025 GMT Not After : Dec 20 05:01:15 2025 GMT Subject: CN=94f0aec130e81aa5db102783fa59b10a2f224692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:be:cd:2c:af:49:6b:ba:3d:0b:67:21:93:b7: e3:25:ed:2b:12:8d:3b:e7:b8:bc:62:2c:4a:ea:8b: 1d:f2:75:ea:ac:64:41:19:b3:15:5b:ae:96:1c:40: 99:73:96:72:14:34:a1:e1:b0:26:13:27:66:75:b5: 64:21:4b:72:be:6c:07:e4:8c:71:29:8b:fa:bd:8a: 02:b1:c2:2a:37:2d:b6:6b:0b:f2:e4:f6:58:af:da: 4c:31:86:01:8d:f8:c0:d0:75:d6:e6:f7:b4:65:23: 46:24:8a:72:ce:ec:7a:cc:3d:eb:bb:a7:11:3e:0e: c4:90:21:9b:50:5a:60:bb:7c:b5:e0:7e:3b:8e:09: d5:03:92:88:67:25:8c:63:23:1a:b8:9c:fc:50:5c: c5:2d:47:dd:e6:05:9f:80:32:0d:65:d5:16:94:c7: 7e:83:d2:6e:57:a9:c1:e5:c3:a8:b9:14:2e:9d:69: 3f:62:47:7a:5a:20:0e:db:4b:cd:65:7f:ff:9e:ab: 39:14:a1:b9:61:90:a7:4c:25:d5:6e:43:86:f8:8e: a2:71:88:2a:05:68:fb:94:a2:34:90:3e:2c:ba:fa: 87:1d:fe:6c:e0:c4:17:34:2c:5f:3d:2d:23:0a:13: ce:ad:00:cf:8e:c7:96:be:cd:51:47:a6:9f:d2:cd: eb:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:F0:AE:C1:30:E8:1A:A5:DB:10:27:83:FA:59:B1:0A:2F:22:46:92 X509v3 Authority Key Identifier: keyid:53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:c4:b5:c6:e0:d6:fb:68:24:b9:2b:21:4b:eb:73:27:3f:74: c7:58:96:be:64:30:a4:ad:e1:55:a6:3a:19:ef:6d:b7:60:d4: c0:10:f6:5c:4a:36:74:fd:72:e9:9d:c9:30:c0:ee:ad:fa:d4: 2b:63:b8:6c:a8:d3:e1:f8:74:8a:8f:c6:fb:5a:35:c3:3e:b3: c0:8d:f3:00:c7:4b:7e:df:4f:3e:c3:50:bf:2c:ab:d1:f2:25: ed:15:ab:8f:ba:59:40:07:0f:e6:4f:79:05:e9:cf:46:83:0e: ea:a3:c8:0a:ca:f9:fe:4d:68:2c:8b:1d:40:e6:a0:d1:40:c0: c7:1e:0f:b6:53:d0:e7:6c:35:17:fa:eb:e4:59:a2:79:d7:2a: 99:b6:2e:03:b3:14:d1:1b:dd:2e:96:e0:bf:7a:d1:74:de:db: 5b:25:ea:17:07:bc:8d:ed:df:75:2f:06:ce:ee:15:56:8d:91: a5:16:47:f7:0a:75:d4:0e:c6:72:4f:8a:4e:29:26:dd:bc:20: 15:50:91:dc:e5:1a:91:45:a0:c1:bd:09:a7:0d:d3:b2:b4:28: 62:f1:c1:a7:ac:54:20:c6:2d:06:57:7b:21:03:6f:55:91:f4: 3a:3f:4f:40:c8:1f:02:25:61:f1:6e:b3:7d:78:a7:57:22:dd: 70:ba:30:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+8w4jMPvPFvc1JsdnlHEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzOThlYzNjMTViMTRmZDhhZDkxM2NiYjk1NjU3ZDhlYTgy ZTdlMjUwHhcNMjUxMjE5MDUwMTE1WhcNMjUxMjIwMDUwMTE1WjAzMTEwLwYDVQQD Eyg5NGYwYWVjMTMwZTgxYWE1ZGIxMDI3ODNmYTU5YjEwYTJmMjI0NjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs77NLK9Ja7o9C2chk7fjJe0rEo07 57i8YixK6osd8nXqrGRBGbMVW66WHECZc5ZyFDSh4bAmEydmdbVkIUtyvmwH5Ixx KYv6vYoCscIqNy22awvy5PZYr9pMMYYBjfjA0HXW5ve0ZSNGJIpyzux6zD3ru6cR Pg7EkCGbUFpgu3y14H47jgnVA5KIZyWMYyMauJz8UFzFLUfd5gWfgDINZdUWlMd+ g9JuV6nB5cOouRQunWk/Ykd6WiAO20vNZX//nqs5FKG5YZCnTCXVbkOG+I6icYgq BWj7lKI0kD4suvqHHf5s4MQXNCxfPS0jChPOrQDPjseWvs1RR6af0s3ryQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJTwrsEw6Bql2xAng/pZsQovIkaSMB8GA1UdIwQY MBaAFFOY7DwVsU/YrZE8u5VlfY6oLn4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTVqc1BCV3hUOWl0a1R5N2xXVjlqcWd1ZmlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi84OGU4ZjQtNzRhZi00YjcyLWJlY2Mt ZjU3NjczODE2N2UxLzEvVTVqc1BCV3hUOWl0a1R5N2xXVjlqcWd1ZmlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi84OGU4ZjQtNzRhZi00YjcyLWJlY2MtZjU3NjczODE2N2Ux LzEvVTVqc1BCV3hUOWl0a1R5N2xXVjlqcWd1ZmlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqMS1xuDW +2gkuSshS+tzJz90x1iWvmQwpK3hVaY6Ge9tt2DUwBD2XEo2dP1y6Z3JMMDurfrU K2O4bKjT4fh0io/G+1o1wz6zwI3zAMdLft9PPsNQvyyr0fIl7RWrj7pZQAcP5k95 BenPRoMO6qPICsr5/k1oLIsdQOag0UDAxx4PtlPQ52w1F/rr5FmiedcqmbYuA7MU 0RvdLpbgv3rRdN7bWyXqFwe8je3fdS8Gzu4VVo2RpRZH9wp11A7Gck+KTikm3bwg FVCR3OUakUWgwb0Jpw3TsrQoYvHBp6xUIMYtBld7IQNvVZH0Oj9PQMgfAiVh8W6z fXinVyLdcLowbQ== -----END CERTIFICATE-----Generated at Fri Dec 19 07:48:08 2025 by rpki-client