This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft File: U43RixaS2KPncS0-a5KLCaoK5mw.mft (raw, json) Hash identifier: KCBQr3yHZR1SbVSlXQ+xOpx90FOy+06jQQOWpU9quVA= Subject key identifier: 9C:E9:71:35:FC:83:57:03:6B:A5:2D:99:7B:0C:A6:D7:98:84:5F:0A Authority key identifier: 53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C Certificate issuer: /CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c Certificate serial: 019B5A888E7A57817EABC1532CAE345AC5B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft Manifest number: 0276 Signing time: Fri 26 Dec 2025 12:00:57 +0000 Manifest this update: Fri 26 Dec 2025 12:00:57 +0000 Manifest next update: Sat 27 Dec 2025 12:00:57 +0000 Files and hashes: 1: U43RixaS2KPncS0-a5KLCaoK5mw.crl (hash: tWbfpSxgvsAckmftIjcLgDVpkE2+G/Aom3nK5CSS5kM=) 2: us8vS6jTclCEmBfDUU3o3m6Yn-k.roa (hash: mAUclWVBVl5pM/tgk/IIx+fX18hAwqFUbm2hLAhaOL0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:8e:7a:57:81:7e:ab:c1:53:2c:ae:34:5a:c5:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c Validity Not Before: Dec 26 12:00:57 2025 GMT Not After : Dec 27 12:00:57 2025 GMT Subject: CN=9ce97135fc8357036ba52d997b0ca6d798845f0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:09:4e:30:e4:8e:6c:a5:3f:f2:c4:64:e5:d1: 01:7e:aa:2a:e1:ee:ef:ee:d3:bb:cf:b4:65:30:2c: f7:42:cb:4a:13:a2:e5:e7:2f:c2:eb:a6:d0:ab:df: d1:ec:1e:a1:31:06:9b:f4:4d:40:99:dd:61:ca:58: fc:31:39:ef:cb:86:0f:3a:53:63:fc:35:1e:a0:68: 7a:10:33:b9:67:ac:80:3b:92:f2:ed:6c:22:e1:74: 67:63:89:b0:cc:1e:22:58:80:3e:fb:c6:91:cf:f6: d8:e0:c0:7e:4c:7d:de:ea:31:a6:04:be:85:23:eb: 0a:89:ce:d0:2f:2c:12:0a:f9:08:d9:be:59:f5:93: d1:46:a9:3f:d8:d8:89:33:48:e9:ad:a2:19:ca:28: a5:64:ad:7d:a2:65:30:b5:66:05:0f:17:e8:62:cf: 2d:25:d7:b5:52:ca:9d:16:76:83:15:4b:9c:7b:08: 5d:b1:e3:f9:3a:28:34:d6:a6:9f:07:71:9f:46:ae: 6e:6e:63:35:ab:d4:d8:f5:64:40:97:48:57:4d:d0: e3:83:5e:64:c0:fa:b8:d7:b9:45:a4:aa:1b:d6:53: 89:cf:28:5f:45:cb:ba:d5:61:6d:94:62:02:cd:9e: 88:3b:91:e9:cc:f2:59:fa:b6:e8:04:cf:44:56:26: a4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E9:71:35:FC:83:57:03:6B:A5:2D:99:7B:0C:A6:D7:98:84:5F:0A X509v3 Authority Key Identifier: keyid:53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:1a:e8:da:1e:74:66:3a:78:b4:73:dc:76:3f:95:c3:83:80: d9:5b:db:82:3d:ce:61:33:48:f0:10:6e:2e:31:cf:c5:0d:a5: 4a:a0:f4:11:c2:0a:44:bc:ec:f1:5c:da:c2:f4:f7:d3:c2:97: 02:1a:e4:32:1d:3f:8c:a2:18:a8:6f:62:92:b8:d0:b9:ea:b1: ff:64:3f:cc:83:6b:a7:a3:5c:85:78:6b:29:81:ac:70:c8:ee: 9b:34:06:2f:e7:d9:30:53:7e:91:71:2e:54:12:ad:3f:9f:8e: e5:6a:c4:05:f2:34:25:37:a2:7d:d5:07:69:b1:4e:2b:21:db: 31:b6:81:cd:0a:f6:a7:3a:f1:bd:88:49:57:df:bd:f0:08:69: ad:3d:66:3a:57:5a:5b:aa:f4:1a:31:3f:cb:0b:ec:de:01:f9: ef:8f:dd:36:5c:b7:8c:83:fa:8c:e7:a0:43:91:9b:34:be:81: 76:bd:f9:55:cf:42:1a:2a:68:89:d1:71:61:f6:aa:f3:6a:16: 55:3f:60:8f:5f:75:e0:a3:a4:a2:c4:ea:6a:b3:3d:a8:e0:74: 0b:2b:34:cb:f8:b2:86:45:74:e1:b5:e3:27:3c:b1:c5:85:af: 62:fe:65:81:9b:2f:78:6c:24:23:f7:a6:f3:3f:8f:42:ca:c9: b6:da:fd:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiI56V4F+q8FTLK40WsW1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzOGRkMThiMTY5MmQ4YTNlNzcxMmQzZTZiOTI4YjA5YWEw YWU2NmMwHhcNMjUxMjI2MTIwMDU3WhcNMjUxMjI3MTIwMDU3WjAzMTEwLwYDVQQD Eyg5Y2U5NzEzNWZjODM1NzAzNmJhNTJkOTk3YjBjYTZkNzk4ODQ1ZjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAlOMOSObKU/8sRk5dEBfqoq4e7v 7tO7z7RlMCz3QstKE6Ll5y/C66bQq9/R7B6hMQab9E1Amd1hylj8MTnvy4YPOlNj /DUeoGh6EDO5Z6yAO5Ly7Wwi4XRnY4mwzB4iWIA++8aRz/bY4MB+TH3e6jGmBL6F I+sKic7QLywSCvkI2b5Z9ZPRRqk/2NiJM0jpraIZyiilZK19omUwtWYFDxfoYs8t Jde1UsqdFnaDFUucewhdseP5Oig01qafB3GfRq5ubmM1q9TY9WRAl0hXTdDjg15k wPq417lFpKob1lOJzyhfRcu61WFtlGICzZ6IO5HpzPJZ+rboBM9EViakwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJzpcTX8g1cDa6UtmXsMpteYhF8KMB8GA1UdIwQY MBaAFFON0YsWktij53EtPmuSiwmqCuZsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTQzUml4YVMyS1BuY1MwLWE1S0xDYW9LNW13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85Y2IwZTktNTM3ZC00ZjZlLWI5OGUt MmViNzBhMzYwMmU5LzEvVTQzUml4YVMyS1BuY1MwLWE1S0xDYW9LNW13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85Y2IwZTktNTM3ZC00ZjZlLWI5OGUtMmViNzBhMzYwMmU5 LzEvVTQzUml4YVMyS1BuY1MwLWE1S0xDYW9LNW13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVBro2h50 Zjp4tHPcdj+Vw4OA2Vvbgj3OYTNI8BBuLjHPxQ2lSqD0EcIKRLzs8VzawvT308KX AhrkMh0/jKIYqG9ikrjQueqx/2Q/zINrp6NchXhrKYGscMjumzQGL+fZMFN+kXEu VBKtP5+O5WrEBfI0JTeifdUHabFOKyHbMbaBzQr2pzrxvYhJV9+98AhprT1mOlda W6r0GjE/ywvs3gH574/dNly3jIP6jOegQ5GbNL6Bdr35Vc9CGipoidFxYfaq82oW VT9gj1914KOkosTqarM9qOB0Cys0y/iyhkV04bXjJzyxxYWvYv5lgZsveGwkI/em 8z+PQsrJttr9+Q== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:19 2025 by rpki-client