This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft File: U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft (raw, json) Hash identifier: efR2pjQSfAOSGgUPA6bhgRQtp1s/+oRd9hx3zK8o88U= Subject key identifier: 20:5D:49:10:00:7A:DD:B4:FE:60:B7:66:1A:E1:0B:87:07:D6:55:E9 Authority key identifier: 53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE Certificate issuer: /CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde Certificate serial: 019AC009E1D1B7EEBF1EA17FBFABF889439C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft Manifest number: 0BA7 Signing time: Wed 26 Nov 2025 12:01:04 +0000 Manifest this update: Wed 26 Nov 2025 12:01:04 +0000 Manifest next update: Thu 27 Nov 2025 12:01:04 +0000 Files and hashes: 1: 1-AOVRFLZrj2nPYVaoQTOsQL1WlQ.roa (hash: o++gvFVPi/+ixRZFv2gXzhdCHbthUj+xLJ1n6s73kig=) 2: U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl (hash: 2pW26A801wWQjfpQdWIwbrSruIxNbGXPgjUZbh3eH7U=) 3: iPclpyCcjmZRUirmlpynRe1jVlQ.roa (hash: 9e/d5wv0jrIlrbYbKSFVCEW56rVM8D3l+wGRzbJ1rM0=) 4: k3_oz24o1aoYtUGxnQB-tgEqkWA.roa (hash: xn4nb296At8c6SRwQOq+N62PJ2qN+1mD+HyDa0byceo=) 5: kfd0B7YUXjP5BkiSga_I2bFGDjE.roa (hash: BHoHm0FgI/hNJZj/ps+lj0bhjSOg0FxpXV30jd+oQxk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Nov 2025 08:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c0:09:e1:d1:b7:ee:bf:1e:a1:7f:bf:ab:f8:89:43:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde Validity Not Before: Nov 26 12:01:04 2025 GMT Not After : Nov 27 12:01:04 2025 GMT Subject: CN=205d4910007addb4fe60b7661ae10b8707d655e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:df:92:db:f7:09:48:80:77:ad:89:b6:cb:5a: 82:e5:58:da:e4:40:0c:10:c5:12:2b:0c:52:fc:e3: 58:9b:27:c3:9f:97:7b:1a:f5:ba:05:91:db:fd:fe: 8a:43:a1:d5:14:02:70:05:f1:09:6c:5f:12:0d:32: 31:1c:64:b4:a6:c4:f0:fc:29:b7:7e:aa:21:65:59: 13:95:a8:e5:63:84:4e:c1:0e:f7:34:46:23:d1:7d: 4b:23:ee:c0:2c:78:d5:bd:f8:72:e8:df:ef:40:32: 9a:43:f9:bb:a2:b3:45:2a:48:c3:28:06:a2:53:e6: 1d:c2:cc:cf:34:56:e3:74:af:0c:e2:c7:51:ea:cd: 06:8f:c8:d7:fd:fd:05:f7:0f:81:c3:7b:e1:c2:77: 11:75:1a:23:b0:21:e2:06:11:ea:1a:13:3f:c8:80: 6c:e1:30:f5:00:8d:7e:bc:51:a7:43:7d:f0:03:f2: ea:1d:54:a6:ba:85:f8:ad:b2:93:11:f1:fb:db:88: b9:4f:68:de:4c:38:26:40:f2:83:65:b8:ce:f1:93: 50:a1:0d:0b:24:a4:e3:72:d0:f0:c5:9b:7f:96:1e: 42:5d:56:a3:1c:d9:0f:8e:38:ad:42:b3:c1:b6:55: 01:76:d2:b5:29:e6:ca:4f:45:01:78:72:a4:3a:77: 35:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:5D:49:10:00:7A:DD:B4:FE:60:B7:66:1A:E1:0B:87:07:D6:55:E9 X509v3 Authority Key Identifier: keyid:53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:d1:01:d2:84:cc:5c:2c:86:26:13:74:18:a8:2f:a6:fb:12: 02:16:9b:a2:4b:f3:d3:00:55:c3:f3:e6:64:d4:29:08:92:f6: df:27:5d:83:ed:af:71:82:d6:c7:a0:63:e4:52:bd:c7:ed:21: bc:a7:4b:e4:e0:83:60:da:12:12:a2:d5:4e:69:e8:8a:f9:a5: a1:81:9e:49:bb:45:4d:59:38:35:28:21:2f:15:64:63:cc:1f: 38:bf:8f:38:b5:ce:4e:97:a8:61:e2:2e:38:a7:43:83:aa:78: d6:70:ca:9a:23:30:6e:a4:50:54:78:c6:51:4e:54:75:bb:ec: 90:7d:64:b3:f3:71:77:b6:03:5b:bd:70:14:d4:c1:f4:fa:b0: 22:db:2a:48:19:d4:50:57:7b:3d:ce:4d:26:fe:b2:92:ca:87: d3:8d:a6:ff:97:73:1b:8b:a4:0f:d5:88:e6:26:45:ca:3a:50: fb:8c:fb:6a:3a:84:27:d0:27:c4:2e:ee:da:b7:b1:80:6e:a2: 3f:fe:55:97:f9:f9:e2:44:7a:09:26:c8:42:95:05:d9:dd:f8: 44:37:9a:92:aa:1d:d6:34:1a:2c:0d:c3:ec:42:c5:7d:80:b1: f8:03:2a:d0:86:9d:f7:8f:bf:88:61:27:79:80:53:b6:ea:20: 51:75:1d:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrACeHRt+6/HqF/v6v4iUOcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzYjQ2YWI3OWI5ZmM1OGY1ZGM0Y2YyOWQ3MmRjNTI2N2Vj M2VkZGUwHhcNMjUxMTI2MTIwMTA0WhcNMjUxMTI3MTIwMTA0WjAzMTEwLwYDVQQD EygyMDVkNDkxMDAwN2FkZGI0ZmU2MGI3NjYxYWUxMGI4NzA3ZDY1NWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4t+S2/cJSIB3rYm2y1qC5Vja5EAM EMUSKwxS/ONYmyfDn5d7GvW6BZHb/f6KQ6HVFAJwBfEJbF8SDTIxHGS0psTw/Cm3 fqohZVkTlajlY4ROwQ73NEYj0X1LI+7ALHjVvfhy6N/vQDKaQ/m7orNFKkjDKAai U+YdwszPNFbjdK8M4sdR6s0Gj8jX/f0F9w+Bw3vhwncRdRojsCHiBhHqGhM/yIBs 4TD1AI1+vFGnQ33wA/LqHVSmuoX4rbKTEfH724i5T2jeTDgmQPKDZbjO8ZNQoQ0L JKTjctDwxZt/lh5CXVajHNkPjjitQrPBtlUBdtK1KebKT0UBeHKkOnc1FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCBdSRAAet20/mC3ZhrhC4cH1lXpMB8GA1UdIwQY MBaAFFO0arebn8WPXcTPKdctxSZ+w+3eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTdScXQ1dWZ4WTlkeE04cDF5M0ZKbjdEN2Q0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hYzlhZjYtN2ZjMy00ZDEzLWE1OTQt MDYwYTQ3MzgwOTFkLzEvVTdScXQ1dWZ4WTlkeE04cDF5M0ZKbjdEN2Q0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9hYzlhZjYtN2ZjMy00ZDEzLWE1OTQtMDYwYTQ3MzgwOTFk LzEvVTdScXQ1dWZ4WTlkeE04cDF5M0ZKbjdEN2Q0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp9EB0oTM XCyGJhN0GKgvpvsSAhabokvz0wBVw/PmZNQpCJL23yddg+2vcYLWx6Bj5FK9x+0h vKdL5OCDYNoSEqLVTmnoivmloYGeSbtFTVk4NSghLxVkY8wfOL+POLXOTpeoYeIu OKdDg6p41nDKmiMwbqRQVHjGUU5UdbvskH1ks/Nxd7YDW71wFNTB9PqwItsqSBnU UFd7Pc5NJv6yksqH042m/5dzG4ukD9WI5iZFyjpQ+4z7ajqEJ9AnxC7u2rexgG6i P/5Vl/n54kR6CSbIQpUF2d34RDeakqod1jQaLA3D7ELFfYCx+AMq0Iad94+/iGEn eYBTtuogUXUdaQ== -----END CERTIFICATE-----Generated at Wed Nov 26 14:26:50 2025 by rpki-client