This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft File: U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft (raw, json) Hash identifier: bJvmaCVXA5l4xRQIJvwHpa8Ui2GrZdrlsTjKuk8OI/M= Subject key identifier: 41:83:A3:AB:EB:DB:26:A6:CA:B5:0E:E1:05:49:8C:AF:01:95:E4:6E Authority key identifier: 53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8 Certificate issuer: /CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8 Certificate serial: 019B1013FBF05F36C98C3BFF0C16F8FDA848 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft Manifest number: 176E Signing time: Fri 12 Dec 2025 01:01:43 +0000 Manifest this update: Fri 12 Dec 2025 01:01:43 +0000 Manifest next update: Sat 13 Dec 2025 01:01:43 +0000 Files and hashes: 1: CMb4sSALz-KpBLSc_havR1--Rcg.roa (hash: tSEX+cRvKAqr6srk3pPXDdRAbuuNHsu00QGpp8uCSYw=) 2: Lf-7J_CEiQS4b7WeR5Eaw4iyRLQ.roa (hash: 99fN5956ngv/TFkL8FxEzwLHD53MuB+d8ra8OJh/4dM=) 3: U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl (hash: e11ylh5euZPW4eKQFRhQbbgbe6W3DrJQPrkmyjF9ONI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:fb:f0:5f:36:c9:8c:3b:ff:0c:16:f8:fd:a8:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8 Validity Not Before: Dec 12 01:01:43 2025 GMT Not After : Dec 13 01:01:43 2025 GMT Subject: CN=4183a3abebdb26a6cab50ee105498caf0195e46e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:98:bb:e4:db:f8:b0:62:e7:75:4d:c1:14:61: 0b:e5:6e:22:58:92:a6:d3:f4:f8:4e:ea:04:dd:b7: d8:f6:33:dd:bf:18:7e:bd:41:54:ac:b6:a7:2b:55: c2:3b:fd:89:7f:2e:1f:44:3f:e9:06:fd:06:17:8a: b8:9d:51:83:f3:c2:c7:7c:86:32:5a:59:b1:8b:4f: 89:d3:bc:e8:4e:1c:ed:6f:b7:20:4f:7c:aa:ab:10: cc:e4:b2:88:24:84:29:97:f0:29:ed:54:51:03:d0: 8c:d7:41:e1:0f:ef:db:2c:a1:32:9d:74:8b:9d:04: cc:5e:12:0c:8d:77:37:20:c9:ba:6d:3d:5e:cf:66: bb:b9:7b:c0:f8:42:81:c2:39:3c:ad:1d:cf:89:04: c6:cd:42:93:87:8f:5e:63:e7:1e:33:d7:c8:ec:ed: 0f:d9:20:9e:7a:f3:4c:b1:d8:5f:5a:e5:a4:e0:b9: 9a:94:f5:f7:ee:c2:4c:97:81:a6:3b:ec:c2:fe:a0: 9f:34:b5:df:d4:24:a2:80:d1:4b:62:bd:55:7a:3e: b7:eb:59:15:ef:c6:00:64:54:5e:a5:64:86:08:a5: 5f:c5:14:63:2c:1c:dc:a2:53:21:da:81:34:6d:c4: 68:6c:cf:6f:ad:eb:ce:70:f9:d2:c4:d0:6c:d2:ca: 2c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:83:A3:AB:EB:DB:26:A6:CA:B5:0E:E1:05:49:8C:AF:01:95:E4:6E X509v3 Authority Key Identifier: keyid:53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:66:94:26:f0:08:06:ad:82:1c:1b:da:7d:2c:23:97:0a:40: 48:13:67:4f:a3:14:e7:80:71:a9:43:4a:04:3a:8f:3b:05:a3: eb:2c:83:10:ab:dd:0b:1d:72:2c:e7:44:f4:be:e5:88:d8:f8: 8d:02:2a:5d:31:44:7b:8c:18:22:b2:64:10:18:11:c2:1c:a0: f9:e7:6b:0d:86:fc:6e:18:25:4a:f3:58:d9:26:ec:85:df:01: e6:54:dd:eb:1c:25:63:91:5f:c3:98:b1:79:d9:5b:14:c0:d6: 25:67:30:dc:5f:46:cf:53:98:26:78:5c:82:4c:8b:ad:ee:4e: ff:40:0b:bc:f6:d2:3f:17:52:71:be:53:13:d7:6f:cb:9e:4a: 6b:35:a7:02:7b:67:e1:62:7e:61:6b:c6:65:eb:df:9d:c8:fb: f7:3e:9f:e3:89:4d:98:d8:b9:fb:ba:84:92:09:d1:e6:6a:1b: a4:9d:e4:3b:2d:8f:bb:7c:ca:b1:95:01:85:c7:6c:ce:52:c1: cc:a3:ca:1f:8f:6a:64:b0:f2:59:68:8d:c3:62:08:ff:72:91: ac:36:f4:8b:d8:4e:95:39:70:38:48:03:d5:2a:f8:1d:66:aa: e0:2f:f0:a8:98:3b:33:2d:f8:c3:85:df:86:d8:dd:9f:68:e2: d8:de:aa:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQE/vwXzbJjDv/DBb4/ahIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzZjM5ZDJmMjBlMmQ5YjRmOTZjYmQxMzM3ZWEzMmRhNTE4 ZDhlYzgwHhcNMjUxMjEyMDEwMTQzWhcNMjUxMjEzMDEwMTQzWjAzMTEwLwYDVQQD Eyg0MTgzYTNhYmViZGIyNmE2Y2FiNTBlZTEwNTQ5OGNhZjAxOTVlNDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJi75Nv4sGLndU3BFGEL5W4iWJKm 0/T4TuoE3bfY9jPdvxh+vUFUrLanK1XCO/2Jfy4fRD/pBv0GF4q4nVGD88LHfIYy Wlmxi0+J07zoThztb7cgT3yqqxDM5LKIJIQpl/Ap7VRRA9CM10HhD+/bLKEynXSL nQTMXhIMjXc3IMm6bT1ez2a7uXvA+EKBwjk8rR3PiQTGzUKTh49eY+ceM9fI7O0P 2SCeevNMsdhfWuWk4LmalPX37sJMl4GmO+zC/qCfNLXf1CSigNFLYr1Vej6361kV 78YAZFRepWSGCKVfxRRjLBzcolMh2oE0bcRobM9vrevOcPnSxNBs0soslwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEGDo6vr2yamyrUO4QVJjK8BleRuMB8GA1UdIwQY MBaAFFPznS8g4tm0+Wy9EzfqMtpRjY7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVV9PZEx5RGkyYlQ1YkwwVE4tb3kybEdOanNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xZDhmY2EtYjQ2Mi00MzEzLWE1MjMt ZTQxMWI0M2RjNjhhLzEvVV9PZEx5RGkyYlQ1YkwwVE4tb3kybEdOanNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8xZDhmY2EtYjQ2Mi00MzEzLWE1MjMtZTQxMWI0M2RjNjhh LzEvVV9PZEx5RGkyYlQ1YkwwVE4tb3kybEdOanNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE2aUJvAI Bq2CHBvafSwjlwpASBNnT6MU54BxqUNKBDqPOwWj6yyDEKvdCx1yLOdE9L7liNj4 jQIqXTFEe4wYIrJkEBgRwhyg+edrDYb8bhglSvNY2Sbshd8B5lTd6xwlY5Ffw5ix edlbFMDWJWcw3F9Gz1OYJnhcgkyLre5O/0ALvPbSPxdScb5TE9dvy55KazWnAntn 4WJ+YWvGZevfncj79z6f44lNmNi5+7qEkgnR5mobpJ3kOy2Pu3zKsZUBhcdszlLB zKPKH49qZLDyWWiNw2II/3KRrDb0i9hOlTlwOEgD1Sr4HWaq4C/wqJg7My34w4Xf htjdn2ji2N6qqQ== -----END CERTIFICATE-----Generated at Fri Dec 12 05:17:37 2025 by rpki-client