This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft File: U6EliQpK8JJFWrx7tav-SM2FLAY.mft (raw, json) Hash identifier: AHaYwMADh8ntPVIeC9lG3xlXDXELsIpSwTpxmo+7A4M= Subject key identifier: B1:27:99:D1:02:88:D0:FF:89:18:48:71:E4:96:83:39:14:53:8E:7B Authority key identifier: 53:A1:25:89:0A:4A:F0:92:45:5A:BC:7B:B5:AB:FE:48:CD:85:2C:06 Certificate issuer: /CN=53a125890a4af092455abc7bb5abfe48cd852c06 Certificate serial: 019B4ADF1E8EE4FD53547408D6F9BDC84DC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft Manifest number: 07CC Signing time: Tue 23 Dec 2025 11:01:34 +0000 Manifest this update: Tue 23 Dec 2025 11:01:34 +0000 Manifest next update: Wed 24 Dec 2025 11:01:34 +0000 Files and hashes: 1: U6EliQpK8JJFWrx7tav-SM2FLAY.crl (hash: aY5R+LBC2VGPY/pTcbj7MMPBw9//1rS90Ub8+YcQEFA=) 2: mPrAq7i6F1N2tGPKknWc6Bt67HU.roa (hash: xb6E0qAX3tyhIALebAGCZ4pPlVaSftpzNQeR/KwCvno=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 11:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:df:1e:8e:e4:fd:53:54:74:08:d6:f9:bd:c8:4d:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53a125890a4af092455abc7bb5abfe48cd852c06 Validity Not Before: Dec 23 11:01:34 2025 GMT Not After : Dec 24 11:01:34 2025 GMT Subject: CN=b12799d10288d0ff89184871e496833914538e7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:74:95:a8:6f:58:dc:6e:69:6c:2a:b3:5b:d7: 02:51:8b:90:7b:90:af:08:8c:f7:e5:36:d7:a1:fc: 60:f7:6c:f0:d3:97:00:9e:5f:ef:50:0b:e3:37:1c: fa:10:44:39:28:d2:b2:cd:a9:8d:bb:41:e4:38:39: 53:1b:5b:5e:54:62:7a:31:e2:95:21:41:8c:e9:bd: a4:43:5e:f0:c4:3c:37:c7:21:93:4c:ec:d4:32:e4: 1b:08:b4:7c:a8:4c:38:29:66:00:ed:b9:80:ec:76: de:2f:73:7c:dc:03:97:f8:1e:c9:eb:45:e0:f8:f0: 1b:32:9c:75:16:74:2b:8f:bd:8e:8d:65:c0:a4:f0: 2f:09:d3:83:5e:eb:1c:f4:6a:f2:8b:4c:29:c9:4f: b5:7c:73:fa:08:b7:78:38:55:31:54:d0:c5:37:cd: d8:ad:4b:ba:cd:a8:64:31:d1:51:52:ac:3c:8a:96: 5b:c1:ba:a2:4d:0d:14:b6:07:03:81:9a:56:ec:39: 32:1f:a4:c7:d4:16:bb:53:b7:bf:39:51:a2:22:79: a1:b4:ea:10:a9:cd:26:37:cf:a4:9d:62:6a:67:09: 46:c5:5b:80:8f:74:db:4c:76:20:90:23:2d:dc:50: a5:a1:16:48:2b:59:18:f6:a9:ed:03:9f:9f:1d:2b: 76:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:27:99:D1:02:88:D0:FF:89:18:48:71:E4:96:83:39:14:53:8E:7B X509v3 Authority Key Identifier: keyid:53:A1:25:89:0A:4A:F0:92:45:5A:BC:7B:B5:AB:FE:48:CD:85:2C:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:ce:43:d9:77:8b:64:61:3a:c2:be:32:f5:60:86:54:85:90: f2:1b:84:80:71:7c:f3:74:0f:4b:37:35:57:af:4c:c3:68:14: da:a0:04:7a:ca:1a:c0:13:54:17:d5:b1:88:c9:ea:b8:e6:9c: 2a:be:ae:c1:96:f4:d9:ba:1d:90:40:67:42:28:1a:52:2a:4b: 5e:e8:73:d2:f9:d5:14:7a:c6:42:57:dc:a0:40:88:46:dc:df: 50:c7:b3:de:a3:e9:e0:9d:4a:39:80:aa:12:8b:bb:e7:57:c8: 96:06:66:17:ac:cd:b4:25:dd:68:ca:2e:49:6e:3d:64:f0:ca: 65:86:a4:24:50:64:b2:be:1d:19:f6:e0:76:2a:27:6d:fb:82: 11:f1:cf:d5:58:57:50:81:5b:d8:58:9b:ed:1a:4c:4b:ac:4f: 16:56:23:cc:be:53:74:d2:1a:49:f1:19:1f:79:25:7f:a8:9f: 7f:dc:64:36:ec:08:d3:20:c5:2f:80:76:94:60:94:63:bd:72: 04:69:dc:c1:12:c4:2b:87:0c:22:5e:8b:55:c2:84:20:1f:32: 03:2c:b5:44:b8:c7:32:71:16:0d:ee:46:38:b2:0c:cb:f9:01: 5b:ce:a3:ee:46:ce:67:7c:bd:b0:cb:23:15:b4:2a:3a:b8:02: 3a:5e:78:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtK3x6O5P1TVHQI1vm9yE3GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzYTEyNTg5MGE0YWYwOTI0NTVhYmM3YmI1YWJmZTQ4Y2Q4 NTJjMDYwHhcNMjUxMjIzMTEwMTM0WhcNMjUxMjI0MTEwMTM0WjAzMTEwLwYDVQQD EyhiMTI3OTlkMTAyODhkMGZmODkxODQ4NzFlNDk2ODMzOTE0NTM4ZTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3SVqG9Y3G5pbCqzW9cCUYuQe5Cv CIz35TbXofxg92zw05cAnl/vUAvjNxz6EEQ5KNKyzamNu0HkODlTG1teVGJ6MeKV IUGM6b2kQ17wxDw3xyGTTOzUMuQbCLR8qEw4KWYA7bmA7HbeL3N83AOX+B7J60Xg +PAbMpx1FnQrj72OjWXApPAvCdODXusc9Gryi0wpyU+1fHP6CLd4OFUxVNDFN83Y rUu6zahkMdFRUqw8ipZbwbqiTQ0UtgcDgZpW7DkyH6TH1Ba7U7e/OVGiInmhtOoQ qc0mN8+knWJqZwlGxVuAj3TbTHYgkCMt3FCloRZIK1kY9qntA5+fHSt2XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLEnmdECiND/iRhIceSWgzkUU457MB8GA1UdIwQY MBaAFFOhJYkKSvCSRVq8e7Wr/kjNhSwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTZFbGlRcEs4SkpGV3J4N3Rhdi1TTTJGTEFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi82MmZmNzEtYzRmMi00OTI5LTg4OTkt YzM4MzMwY2JkOTY1LzEvVTZFbGlRcEs4SkpGV3J4N3Rhdi1TTTJGTEFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi82MmZmNzEtYzRmMi00OTI5LTg4OTktYzM4MzMwY2JkOTY1 LzEvVTZFbGlRcEs4SkpGV3J4N3Rhdi1TTTJGTEFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJs5D2XeL ZGE6wr4y9WCGVIWQ8huEgHF883QPSzc1V69Mw2gU2qAEesoawBNUF9WxiMnquOac Kr6uwZb02bodkEBnQigaUipLXuhz0vnVFHrGQlfcoECIRtzfUMez3qPp4J1KOYCq Eou751fIlgZmF6zNtCXdaMouSW49ZPDKZYakJFBksr4dGfbgdionbfuCEfHP1VhX UIFb2Fib7RpMS6xPFlYjzL5TdNIaSfEZH3klf6iff9xkNuwI0yDFL4B2lGCUY71y BGncwRLEK4cMIl6LVcKEIB8yAyy1RLjHMnEWDe5GOLIMy/kBW86j7kbOZ3y9sMsj FbQqOrgCOl54OA== -----END CERTIFICATE-----Generated at Tue Dec 23 20:35:01 2025 by rpki-client