This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c4fb00-39c5-48a5-903b-252fd967bfcc/1/U3XfISulmO4KW_aAsh9QxPx9aOE.mft File: U3XfISulmO4KW_aAsh9QxPx9aOE.mft (raw, json) Hash identifier: FbtMIKjCyrg1NbeHbExR2VOAydXBIAn4x4zhUws0vbc= Subject key identifier: 79:FD:91:BD:2F:26:34:72:5E:DA:B1:84:D7:77:3B:EC:8D:DB:65:99 Authority key identifier: 53:75:DF:21:2B:A5:98:EE:0A:5B:F6:80:B2:1F:50:C4:FC:7D:68:E1 Certificate issuer: /CN=5375df212ba598ee0a5bf680b21f50c4fc7d68e1 Certificate serial: 019B59E4378202E1F08EC6A53DE8FD5E9EF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3XfISulmO4KW_aAsh9QxPx9aOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c4fb00-39c5-48a5-903b-252fd967bfcc/1/U3XfISulmO4KW_aAsh9QxPx9aOE.mft Manifest number: 0F31 Signing time: Fri 26 Dec 2025 09:01:27 +0000 Manifest this update: Fri 26 Dec 2025 09:01:27 +0000 Manifest next update: Sat 27 Dec 2025 09:01:27 +0000 Files and hashes: 1: U3XfISulmO4KW_aAsh9QxPx9aOE.crl (hash: QrDWxyWZrTemRTXZrVCTw3QZja31SIc+YdbakhaFyhk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c4fb00-39c5-48a5-903b-252fd967bfcc/1/U3XfISulmO4KW_aAsh9QxPx9aOE.crl rsync://rpki.ripe.net/repository/DEFAULT/00/c4fb00-39c5-48a5-903b-252fd967bfcc/1/U3XfISulmO4KW_aAsh9QxPx9aOE.mft rsync://rpki.ripe.net/repository/DEFAULT/U3XfISulmO4KW_aAsh9QxPx9aOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:37:82:02:e1:f0:8e:c6:a5:3d:e8:fd:5e:9e:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5375df212ba598ee0a5bf680b21f50c4fc7d68e1 Validity Not Before: Dec 26 09:01:27 2025 GMT Not After : Dec 27 09:01:27 2025 GMT Subject: CN=79fd91bd2f2634725edab184d7773bec8ddb6599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d3:5e:bd:24:6e:a9:37:68:e6:c8:fc:a2:42: 66:4b:95:8e:3d:1d:53:3f:d4:f5:87:f7:9b:b5:93: 8c:cf:83:0f:fc:14:87:40:7a:bb:64:fd:f0:0a:74: 51:40:2d:92:bd:31:bd:b9:b6:f7:3c:73:19:76:bd: 92:39:4c:0e:29:3d:ae:19:2b:03:5a:6d:f6:a2:a0: 5f:97:06:73:25:2c:36:9a:5f:46:1e:3c:a5:95:0b: e8:73:48:7a:b8:a5:32:74:4d:8c:95:54:6f:64:98: 7a:2c:1b:84:14:c8:4e:13:dd:29:04:cf:c5:df:a6: 50:29:11:95:eb:63:df:36:ea:00:2e:7e:d9:f2:b8: ae:a6:59:6c:99:ce:5b:ed:9e:54:d8:ce:cf:f2:63: 90:63:53:91:0f:60:8f:56:56:1a:28:90:93:6a:f3: 05:95:4d:7c:15:0b:84:5c:02:9c:3e:f6:3e:aa:e6: 87:cd:eb:89:e3:b6:cc:f0:7c:e4:8f:5a:7b:cd:29: e5:0e:48:8f:37:50:93:33:87:47:ea:a0:dd:3b:e8: 99:e1:ad:8e:b2:58:d4:4b:19:94:d8:ca:c0:2e:f8: 77:39:da:31:f2:8f:c0:fd:2f:a7:46:a9:2d:5b:16: a4:b2:54:ea:66:49:4d:1a:c8:8d:da:3c:45:95:da: be:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:FD:91:BD:2F:26:34:72:5E:DA:B1:84:D7:77:3B:EC:8D:DB:65:99 X509v3 Authority Key Identifier: keyid:53:75:DF:21:2B:A5:98:EE:0A:5B:F6:80:B2:1F:50:C4:FC:7D:68:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3XfISulmO4KW_aAsh9QxPx9aOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c4fb00-39c5-48a5-903b-252fd967bfcc/1/U3XfISulmO4KW_aAsh9QxPx9aOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c4fb00-39c5-48a5-903b-252fd967bfcc/1/U3XfISulmO4KW_aAsh9QxPx9aOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:c7:9a:23:f9:a0:eb:3f:b5:2f:1a:0e:0d:8a:d3:94:1d:e0: 9c:ca:b5:0f:7e:b7:90:c4:18:5a:a6:ad:e1:87:45:c9:59:83: 2e:98:0e:8c:db:69:6c:1b:6e:5e:0c:ad:ac:8e:98:61:8c:30: 0c:94:9e:6c:18:f6:e6:d0:0b:95:7e:e7:10:ed:05:1a:23:00: 7b:38:74:36:dd:51:2a:80:3b:6e:80:44:a1:45:4d:ce:2c:39: 8d:a8:57:8f:fd:98:77:de:5a:40:1f:0b:fd:38:91:28:29:90: d5:4e:25:52:d0:7a:46:8e:92:ee:4f:1f:72:3f:ff:86:99:e0: 27:5a:e9:e2:56:ba:8e:f8:ff:d2:b5:f3:df:bb:60:c4:1b:b4: a3:14:56:b9:61:2b:10:86:bd:35:df:61:38:5d:f7:54:3b:29: 85:bf:a0:11:af:f6:b7:a5:9c:b6:be:b6:9b:ea:f5:1a:11:22: b9:58:b7:50:7c:da:a0:f4:62:24:5a:02:24:24:72:fd:07:5a: 35:cb:96:04:55:07:f9:39:42:6a:c2:7d:6d:05:20:03:c9:9d: 98:3f:27:40:74:d9:b1:a8:f3:d7:ff:4a:77:60:9f:2d:5b:24: 6c:d2:04:ed:3d:19:f1:46:74:e4:42:d8:7c:7e:2b:f2:4d:6a: 1a:4d:34:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5DeCAuHwjsalPej9Xp75MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNzVkZjIxMmJhNTk4ZWUwYTViZjY4MGIyMWY1MGM0ZmM3 ZDY4ZTEwHhcNMjUxMjI2MDkwMTI3WhcNMjUxMjI3MDkwMTI3WjAzMTEwLwYDVQQD Eyg3OWZkOTFiZDJmMjYzNDcyNWVkYWIxODRkNzc3M2JlYzhkZGI2NTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NNevSRuqTdo5sj8okJmS5WOPR1T P9T1h/ebtZOMz4MP/BSHQHq7ZP3wCnRRQC2SvTG9ubb3PHMZdr2SOUwOKT2uGSsD Wm32oqBflwZzJSw2ml9GHjyllQvoc0h6uKUydE2MlVRvZJh6LBuEFMhOE90pBM/F 36ZQKRGV62PfNuoALn7Z8riupllsmc5b7Z5U2M7P8mOQY1ORD2CPVlYaKJCTavMF lU18FQuEXAKcPvY+quaHzeuJ47bM8Hzkj1p7zSnlDkiPN1CTM4dH6qDdO+iZ4a2O sljUSxmU2MrALvh3Odox8o/A/S+nRqktWxakslTqZklNGsiN2jxFldq+SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHn9kb0vJjRyXtqxhNd3O+yN22WZMB8GA1UdIwQY MBaAFFN13yErpZjuClv2gLIfUMT8fWjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTNYZklTdWxtTzRLV19hQXNoOVF4UHg5YU9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jNGZiMDAtMzljNS00OGE1LTkwM2It MjUyZmQ5NjdiZmNjLzEvVTNYZklTdWxtTzRLV19hQXNoOVF4UHg5YU9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9jNGZiMDAtMzljNS00OGE1LTkwM2ItMjUyZmQ5NjdiZmNj LzEvVTNYZklTdWxtTzRLV19hQXNoOVF4UHg5YU9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbceaI/mg 6z+1LxoODYrTlB3gnMq1D363kMQYWqat4YdFyVmDLpgOjNtpbBtuXgytrI6YYYww DJSebBj25tALlX7nEO0FGiMAezh0Nt1RKoA7boBEoUVNziw5jahXj/2Yd95aQB8L /TiRKCmQ1U4lUtB6Ro6S7k8fcj//hpngJ1rp4la6jvj/0rXz37tgxBu0oxRWuWEr EIa9Nd9hOF33VDsphb+gEa/2t6Wctr62m+r1GhEiuVi3UHzaoPRiJFoCJCRy/Qda NcuWBFUH+TlCasJ9bQUgA8mdmD8nQHTZsajz1/9Kd2CfLVskbNIE7T0Z8UZ05ELY fH4r8k1qGk00Dw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:05:13 2025 by rpki-client