This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft File: U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft (raw, json) Hash identifier: Yrw4I7pIxPXCpd7pbFnk48D1RUvk7d0g/qHTkRS7xhw= Subject key identifier: F6:8A:35:CA:39:0A:2C:8A:9C:E4:2A:7E:5F:D3:4D:E6:1B:C3:5D:B5 Authority key identifier: 53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69 Certificate issuer: /CN=53529924b233ac563c08e0c313e29213fd969669 Certificate serial: 019B2852E26D0310C5C32E4855088687F104 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft Manifest number: 177C Signing time: Tue 16 Dec 2025 18:01:18 +0000 Manifest this update: Tue 16 Dec 2025 18:01:18 +0000 Manifest next update: Wed 17 Dec 2025 18:01:18 +0000 Files and hashes: 1: 2ZWGjOJRjPHh5vUmuBkXmOeyAXA.roa (hash: kLXH6SccoLYnkJO+CuKpGrRpPoXv66yopZLZsS2CgSg=) 2: U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl (hash: dLCESF/r2cTDHt6rfTFGzSiDtla08BjXNSwqX++3eC4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:52:e2:6d:03:10:c5:c3:2e:48:55:08:86:87:f1:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53529924b233ac563c08e0c313e29213fd969669 Validity Not Before: Dec 16 18:01:18 2025 GMT Not After : Dec 17 18:01:18 2025 GMT Subject: CN=f68a35ca390a2c8a9ce42a7e5fd34de61bc35db5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b8:68:3c:ff:69:37:18:ba:8d:d8:65:f9:4d: 4f:d5:c8:1f:af:6f:fb:67:3d:e7:c8:c6:15:f9:81: d5:4e:63:7c:62:cc:3f:4b:cf:79:ca:61:f4:46:d9: 6e:9d:4a:47:a9:4c:07:97:ee:bb:79:8e:2f:63:4f: f8:a7:85:e4:c9:c8:83:1d:c4:c2:22:c4:26:cf:c0: bf:8e:6d:27:5d:e1:8b:c8:f4:d1:2c:1f:61:7e:19: 17:76:5c:b6:2a:9c:c5:eb:f8:a5:66:c8:3e:60:d6: c4:4a:a3:9d:11:89:f3:24:bd:d4:68:d4:bf:f8:f5: e0:71:69:e9:cf:23:3e:a4:19:4a:e2:03:1b:d9:e4: 8d:8e:89:b9:cd:14:11:d6:67:97:8b:8a:8e:c8:f7: bc:15:92:57:b7:27:3f:e7:82:75:bc:ab:ae:69:32: 1c:d8:47:c9:5e:22:24:4f:47:62:f7:1b:cb:67:5f: ae:e9:74:ff:13:47:41:39:1f:62:61:04:42:c1:3c: 82:1d:7a:f7:0a:29:28:c5:64:15:22:24:4d:7f:07: 70:c7:1e:cc:77:4a:41:19:87:30:b2:a8:8b:ba:00: 3e:27:5d:1a:8e:a2:fd:84:f4:93:91:fd:fa:13:18: 28:fc:b2:12:f7:c1:04:25:12:3a:39:c9:7d:ad:62: 8e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:8A:35:CA:39:0A:2C:8A:9C:E4:2A:7E:5F:D3:4D:E6:1B:C3:5D:B5 X509v3 Authority Key Identifier: keyid:53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:4d:9f:f2:54:86:d8:41:b7:f0:3f:71:a3:f5:5f:86:07:08: 6d:0b:0f:d1:f4:bd:1a:33:87:5b:f6:02:43:a3:2f:7c:dc:e8: f3:25:15:bd:85:d4:38:0d:f8:fa:f3:15:84:24:f1:4b:4a:ce: 5e:3b:07:b2:a9:dd:31:1b:75:4c:9a:9d:59:1c:5e:4d:52:0b: 81:81:68:71:52:f3:f7:a6:30:33:a9:8b:c6:dc:bd:c4:6b:2e: ec:9b:b9:60:d2:26:b5:06:08:d1:3d:f8:b5:e2:f0:51:b7:a9: 48:fb:10:e9:53:9d:19:87:b7:d8:dd:c1:07:52:e2:be:8a:e5: 61:10:95:50:78:5d:80:42:9c:de:75:ef:30:da:b8:1e:31:95: e8:04:eb:86:75:33:bd:0f:47:69:56:30:c8:a0:49:d6:fd:4a: 39:b9:ac:18:1f:0e:de:9d:78:41:63:ba:da:ce:dc:44:57:59: f2:fc:74:dc:c3:4c:df:a6:ec:37:5b:19:16:85:b0:9f:24:f0: 71:b6:2d:31:40:c7:e6:1d:7e:0b:ae:06:93:2e:80:36:12:06: b2:90:25:e3:e4:51:9b:85:34:bc:20:c8:23:14:de:4c:25:8f: e3:43:23:b9:f0:35:0c:68:a5:51:eb:b1:06:54:ae:7c:4a:86: 18:b7:49:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoUuJtAxDFwy5IVQiGh/EEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNTI5OTI0YjIzM2FjNTYzYzA4ZTBjMzEzZTI5MjEzZmQ5 Njk2NjkwHhcNMjUxMjE2MTgwMTE4WhcNMjUxMjE3MTgwMTE4WjAzMTEwLwYDVQQD EyhmNjhhMzVjYTM5MGEyYzhhOWNlNDJhN2U1ZmQzNGRlNjFiYzM1ZGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibhoPP9pNxi6jdhl+U1P1cgfr2/7 Zz3nyMYV+YHVTmN8Ysw/S895ymH0RtlunUpHqUwHl+67eY4vY0/4p4XkyciDHcTC IsQmz8C/jm0nXeGLyPTRLB9hfhkXdly2KpzF6/ilZsg+YNbESqOdEYnzJL3UaNS/ +PXgcWnpzyM+pBlK4gMb2eSNjom5zRQR1meXi4qOyPe8FZJXtyc/54J1vKuuaTIc 2EfJXiIkT0di9xvLZ1+u6XT/E0dBOR9iYQRCwTyCHXr3CikoxWQVIiRNfwdwxx7M d0pBGYcwsqiLugA+J10ajqL9hPSTkf36Exgo/LIS98EEJRI6Ocl9rWKOLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPaKNco5CiyKnOQqfl/TTeYbw121MB8GA1UdIwQY MBaAFFNSmSSyM6xWPAjgwxPikhP9lpZpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTFLWkpMSXpyRlk4Q09EREUtS1NFXzJXbG1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8wZTI3MTQtOWRkNi00ZmU4LWFiMjQt OTQ0MTU2OTBkZGZkLzEvVTFLWkpMSXpyRlk4Q09EREUtS1NFXzJXbG1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8wZTI3MTQtOWRkNi00ZmU4LWFiMjQtOTQ0MTU2OTBkZGZk LzEvVTFLWkpMSXpyRlk4Q09EREUtS1NFXzJXbG1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmU2f8lSG 2EG38D9xo/VfhgcIbQsP0fS9GjOHW/YCQ6MvfNzo8yUVvYXUOA34+vMVhCTxS0rO XjsHsqndMRt1TJqdWRxeTVILgYFocVLz96YwM6mLxty9xGsu7Ju5YNImtQYI0T34 teLwUbepSPsQ6VOdGYe32N3BB1LivorlYRCVUHhdgEKc3nXvMNq4HjGV6ATrhnUz vQ9HaVYwyKBJ1v1KObmsGB8O3p14QWO62s7cRFdZ8vx03MNM36bsN1sZFoWwnyTw cbYtMUDH5h1+C64Gky6ANhIGspAl4+RRm4U0vCDIIxTeTCWP40MjufA1DGilUeux BlSufEqGGLdJLg== -----END CERTIFICATE-----Generated at Tue Dec 16 23:22:54 2025 by rpki-client