This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft File: Us7uLW16UMkkmdoaIfKrt6KndMg.mft (raw, json) Hash identifier: Snr4Yqdj3kbQLNWhRFYSfC2f4DYph0QrWo0u9RHP8n4= Subject key identifier: 43:09:F2:50:44:12:2E:AB:6F:D8:3E:06:8E:CF:2C:B4:25:EF:E7:A3 Authority key identifier: 52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8 Certificate issuer: /CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8 Certificate serial: 019B5A516B54D905581E21FEA9B32E599043 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft Manifest number: 0C35 Signing time: Fri 26 Dec 2025 11:00:43 +0000 Manifest this update: Fri 26 Dec 2025 11:00:43 +0000 Manifest next update: Sat 27 Dec 2025 11:00:43 +0000 Files and hashes: 1: HgzDmPqeZBdX21PHNQn3j0-FDSk.roa (hash: jL+abeK7Dj613IZkXcAHwX1ldRNUAWLyPE0MF0XmQTs=) 2: JmahROWNlzzWLOhj6faRjwc1jmM.roa (hash: 8En7I8LLB7AUar/hMjwx3dkXSNApjPuQ8H4paRvFqeg=) 3: Us7uLW16UMkkmdoaIfKrt6KndMg.crl (hash: s4WN0rxcRouhr95DQCBdDRUBE3jrEJlnZtx3jS2oULk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:6b:54:d9:05:58:1e:21:fe:a9:b3:2e:59:90:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8 Validity Not Before: Dec 26 11:00:43 2025 GMT Not After : Dec 27 11:00:43 2025 GMT Subject: CN=4309f25044122eab6fd83e068ecf2cb425efe7a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:18:e6:f9:a4:38:af:54:0b:42:96:82:0c:0a: a3:7f:b2:50:46:09:e9:c8:82:13:10:3c:ed:ea:ae: 15:9c:85:0d:d4:98:85:fc:a7:dd:47:9d:ca:17:21: 8a:77:e2:b7:12:58:b8:d7:62:dd:2d:50:1e:cb:16: c4:44:ff:35:6f:cf:b4:f8:23:d7:e5:8d:3d:ea:87: ff:3d:3f:c6:30:0a:73:c2:9e:c7:ee:08:4f:3b:7a: dd:4f:3a:18:cb:c6:f5:f6:59:12:a3:68:eb:be:b7: ee:de:8a:10:98:4c:84:91:c5:41:8a:d8:a7:9e:1e: 6a:50:0c:b7:e1:28:bb:34:d7:b5:ce:4e:2d:30:16: 55:1a:45:94:56:b9:e8:fd:b4:71:33:ec:b9:9d:10: 70:39:ac:b2:97:91:8b:c6:be:cb:56:75:81:ff:ca: be:56:59:59:14:1b:b1:8d:40:a9:98:78:d9:48:ae: e1:04:15:72:1e:8e:bc:ed:19:35:78:65:38:79:8d: d3:0d:7a:9f:c1:eb:81:b9:5a:06:6a:ba:d3:5b:0a: d3:1e:8c:5c:04:5d:9f:79:8b:29:90:90:f4:69:1f: 5c:11:34:8b:45:84:cc:0d:bf:42:3e:d7:33:a1:ad: 6e:d5:38:66:85:1f:7d:62:d7:c5:74:02:c7:ef:c4: ba:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:09:F2:50:44:12:2E:AB:6F:D8:3E:06:8E:CF:2C:B4:25:EF:E7:A3 X509v3 Authority Key Identifier: keyid:52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:e1:17:8d:31:da:c5:6e:bc:29:fa:54:48:f3:26:99:4f:21: d8:8c:42:c1:fa:36:b8:fa:d7:fe:7e:70:82:f7:8d:34:57:f5: 5f:8b:01:7b:36:89:8e:dd:a5:be:ca:b2:fa:46:18:96:bd:e6: 09:11:29:92:4d:52:7e:c3:e2:0e:f6:93:b7:72:46:21:98:bc: 35:3d:e2:a1:38:74:fb:6f:2c:5e:5b:a5:4e:93:d0:c6:f5:27: e6:0a:ea:6b:72:12:98:97:ac:17:25:28:70:ed:1e:4e:c2:da: fc:13:57:4f:90:36:a6:10:aa:34:b2:30:11:71:32:47:41:0e: 4a:8c:91:cc:84:66:78:0e:f5:04:5f:02:8d:e2:53:2b:aa:67: af:66:5c:a1:5a:55:35:ce:82:85:87:33:39:81:66:d1:17:22: ab:76:c4:c9:f1:fc:be:08:91:56:6b:71:b3:d6:aa:e2:9b:0e: 3c:cd:86:ab:91:0c:a0:f7:d7:e0:07:29:ac:d5:35:8f:2f:61: a4:b2:5a:01:1c:08:fe:cf:bb:20:aa:fc:11:a5:5b:7f:86:b7: c9:25:89:ae:8c:ed:56:e6:ea:96:6e:4e:fa:ce:ea:a4:8f:d4: 41:a6:39:b2:9a:9b:48:b4:b8:30:e8:68:0e:7a:c0:7c:38:80: 5c:ce:36:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUWtU2QVYHiH+qbMuWZBDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyY2VlZTJkNmQ3YTUwYzkyNDk5ZGExYTIxZjJhYmI3YTJh Nzc0YzgwHhcNMjUxMjI2MTEwMDQzWhcNMjUxMjI3MTEwMDQzWjAzMTEwLwYDVQQD Eyg0MzA5ZjI1MDQ0MTIyZWFiNmZkODNlMDY4ZWNmMmNiNDI1ZWZlN2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xjm+aQ4r1QLQpaCDAqjf7JQRgnp yIITEDzt6q4VnIUN1JiF/KfdR53KFyGKd+K3Eli412LdLVAeyxbERP81b8+0+CPX 5Y096of/PT/GMApzwp7H7ghPO3rdTzoYy8b19lkSo2jrvrfu3ooQmEyEkcVBitin nh5qUAy34Si7NNe1zk4tMBZVGkWUVrno/bRxM+y5nRBwOayyl5GLxr7LVnWB/8q+ VllZFBuxjUCpmHjZSK7hBBVyHo687Rk1eGU4eY3TDXqfweuBuVoGarrTWwrTHoxc BF2feYspkJD0aR9cETSLRYTMDb9CPtczoa1u1ThmhR99YtfFdALH78S6KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEMJ8lBEEi6rb9g+Bo7PLLQl7+ejMB8GA1UdIwQY MBaAFFLO7i1telDJJJnaGiHyq7eip3TIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXM3dUxXMTZVTWtrbWRvYUlmS3J0NktuZE1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kZWNhZWItM2Y5NS00ZjJhLWFmNjUt MGMwMjBhN2U0YTQ0LzEvVXM3dUxXMTZVTWtrbWRvYUlmS3J0NktuZE1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9kZWNhZWItM2Y5NS00ZjJhLWFmNjUtMGMwMjBhN2U0YTQ0 LzEvVXM3dUxXMTZVTWtrbWRvYUlmS3J0NktuZE1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk+EXjTHa xW68KfpUSPMmmU8h2IxCwfo2uPrX/n5wgveNNFf1X4sBezaJjt2lvsqy+kYYlr3m CREpkk1SfsPiDvaTt3JGIZi8NT3ioTh0+28sXlulTpPQxvUn5grqa3ISmJesFyUo cO0eTsLa/BNXT5A2phCqNLIwEXEyR0EOSoyRzIRmeA71BF8CjeJTK6pnr2ZcoVpV Nc6ChYczOYFm0Rciq3bEyfH8vgiRVmtxs9aq4psOPM2Gq5EMoPfX4AcprNU1jy9h pLJaARwI/s+7IKr8EaVbf4a3ySWJroztVubqlm5O+s7qpI/UQaY5spqbSLS4MOho DnrAfDiAXM425g== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:21 2025 by rpki-client