This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft File: U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft (raw, json) Hash identifier: 9r3LW0r8UKPXApITjg1Y++JKOyCUz6j4TH009pGzryU= Subject key identifier: E5:3C:85:26:23:4B:89:77:7C:96:6E:60:41:E2:47:44:D8:7A:98:D6 Authority key identifier: 53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69 Certificate issuer: /CN=53529924b233ac563c08e0c313e29213fd969669 Certificate serial: 019B37C5F485A80A3D38B9745171641BED86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 18:01:18 +0000 Manifest this update: Fri 19 Dec 2025 18:01:18 +0000 Manifest next update: Sat 20 Dec 2025 18:01:18 +0000 Files and hashes: 1: 2ZWGjOJRjPHh5vUmuBkXmOeyAXA.roa (hash: kLXH6SccoLYnkJO+CuKpGrRpPoXv66yopZLZsS2CgSg=) 2: U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl (hash: FWDVWU8dfK+KYbcbmBKJNieN4nYeAwQHSoMuvx7MSLU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:f4:85:a8:0a:3d:38:b9:74:51:71:64:1b:ed:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53529924b233ac563c08e0c313e29213fd969669 Validity Not Before: Dec 19 18:01:18 2025 GMT Not After : Dec 20 18:01:18 2025 GMT Subject: CN=e53c8526234b89777c966e6041e24744d87a98d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1e:1e:7f:c7:c1:12:f0:62:20:b4:ac:71:b5: c6:36:6a:d1:de:96:14:b6:cc:dc:e1:0a:ff:15:b2: 0e:66:f7:5e:2b:54:9d:a9:cb:7b:57:12:db:58:2c: 39:dd:c4:0a:5f:d3:cb:94:39:6c:d6:b2:85:17:24: a5:fd:af:d6:0f:fd:a2:4c:48:ef:2e:d2:74:6a:d6: 7d:21:57:33:64:ee:e1:73:9e:c0:f0:c3:89:83:0b: 19:ab:1e:16:53:26:b2:ef:c9:6d:2c:98:a7:7d:b0: 88:aa:81:9b:1d:e6:5d:54:b7:ac:15:70:3e:4c:a8: 91:c0:a6:33:e4:d6:e5:49:6b:cc:1f:47:43:c8:44: 6d:a5:45:d9:ab:51:f7:9f:28:b5:da:1b:67:07:31: 7f:d3:0b:4e:2d:10:2e:e9:85:b5:73:43:98:1b:54: 08:46:56:f4:50:fb:c1:58:05:e8:1a:e8:85:94:c7: a2:58:57:7b:55:17:91:61:fb:85:b7:2b:be:41:30: 2f:34:e0:36:6b:34:6d:2f:35:fa:76:86:77:f1:5a: c5:be:94:dd:c1:cd:b1:f1:d3:29:87:0f:bd:e9:7b: a6:43:22:d1:bb:4b:f8:32:e8:8c:9c:d5:e5:06:23: 60:a8:f9:3c:f9:33:1e:4e:04:76:cb:6e:f3:f2:a2: f0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:3C:85:26:23:4B:89:77:7C:96:6E:60:41:E2:47:44:D8:7A:98:D6 X509v3 Authority Key Identifier: keyid:53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:18:bf:de:c8:6c:01:d0:5c:c1:25:45:50:e7:42:ca:cd:35: 83:48:4d:69:5c:de:cb:a9:be:d0:7a:b0:8b:f4:5e:f1:34:9a: 75:1f:d0:d2:3a:26:c2:e8:fe:5d:db:9d:82:5d:8b:39:df:60: 0d:98:f0:18:89:d9:7e:51:90:87:14:89:2e:c0:d7:fd:05:f4: 10:44:fa:56:9f:37:40:1d:e8:16:55:ef:66:f3:ad:98:b4:78: 3e:00:28:18:c3:a7:08:d1:d3:de:fa:0a:bb:58:0b:95:6f:ec: 9a:c2:b3:fa:02:a0:b3:0a:67:58:8f:91:3e:eb:77:f2:df:66: 2d:c1:1e:2c:d8:af:75:31:d6:49:bf:31:bb:e3:07:6d:e7:56: 31:e2:db:e1:9b:8b:01:26:0e:b3:57:4c:35:96:f4:5e:b8:d2: 24:a7:9e:bf:91:18:f7:af:f5:47:44:0d:c4:86:97:e2:3b:02: 58:69:4f:6e:07:b0:69:54:ec:df:7d:0f:ff:c3:31:32:93:8e: 1a:aa:37:2c:0e:8a:6b:65:4f:b2:80:12:c7:2f:b9:f8:44:6e: ea:64:dc:ea:d4:00:1c:90:2b:93:02:72:38:56:79:f1:62:e2: 3f:4a:f5:d0:2a:92:10:9e:52:4c:b5:f8:52:5c:3c:d9:e6:94: 53:af:06:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xfSFqAo9OLl0UXFkG+2GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNTI5OTI0YjIzM2FjNTYzYzA4ZTBjMzEzZTI5MjEzZmQ5 Njk2NjkwHhcNMjUxMjE5MTgwMTE4WhcNMjUxMjIwMTgwMTE4WjAzMTEwLwYDVQQD EyhlNTNjODUyNjIzNGI4OTc3N2M5NjZlNjA0MWUyNDc0NGQ4N2E5OGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR4ef8fBEvBiILSscbXGNmrR3pYU tszc4Qr/FbIOZvdeK1Sdqct7VxLbWCw53cQKX9PLlDls1rKFFySl/a/WD/2iTEjv LtJ0atZ9IVczZO7hc57A8MOJgwsZqx4WUyay78ltLJinfbCIqoGbHeZdVLesFXA+ TKiRwKYz5NblSWvMH0dDyERtpUXZq1H3nyi12htnBzF/0wtOLRAu6YW1c0OYG1QI Rlb0UPvBWAXoGuiFlMeiWFd7VReRYfuFtyu+QTAvNOA2azRtLzX6doZ38VrFvpTd wc2x8dMphw+96XumQyLRu0v4MuiMnNXlBiNgqPk8+TMeTgR2y27z8qLw2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOU8hSYjS4l3fJZuYEHiR0TYepjWMB8GA1UdIwQY MBaAFFNSmSSyM6xWPAjgwxPikhP9lpZpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTFLWkpMSXpyRlk4Q09EREUtS1NFXzJXbG1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8wZTI3MTQtOWRkNi00ZmU4LWFiMjQt OTQ0MTU2OTBkZGZkLzEvVTFLWkpMSXpyRlk4Q09EREUtS1NFXzJXbG1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8wZTI3MTQtOWRkNi00ZmU4LWFiMjQtOTQ0MTU2OTBkZGZk LzEvVTFLWkpMSXpyRlk4Q09EREUtS1NFXzJXbG1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASBi/3shs AdBcwSVFUOdCys01g0hNaVzey6m+0Hqwi/Re8TSadR/Q0jomwuj+Xdudgl2LOd9g DZjwGInZflGQhxSJLsDX/QX0EET6Vp83QB3oFlXvZvOtmLR4PgAoGMOnCNHT3voK u1gLlW/smsKz+gKgswpnWI+RPut38t9mLcEeLNivdTHWSb8xu+MHbedWMeLb4ZuL ASYOs1dMNZb0XrjSJKeev5EY96/1R0QNxIaX4jsCWGlPbgewaVTs330P/8MxMpOO Gqo3LA6Ka2VPsoASxy+5+ERu6mTc6tQAHJArkwJyOFZ58WLiP0r10CqSEJ5STLX4 Ulw82eaUU68GEA== -----END CERTIFICATE-----Generated at Sat Dec 20 01:48:50 2025 by rpki-client